last executing test programs: 1m42.717062782s ago: executing program 2 (id=3): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x1, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x7, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x1, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x0, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./config\x00', &(0x7f00000005c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x2, 0x0) write(r0, &(0x7f0000000700)='8\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x2, 0x0) write(r1, &(0x7f0000000780)="05010906a101050719e029e71500250175019508810295017508810195057501", 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040}, 0x80) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r6, 0x0, 0x30, &(0x7f0000001140)=""/4091, &(0x7f0000002140)=0xffb) ptrace(0x10, r5) ptrace$setregs(0xf, r5, 0x80000000, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7], 0x18}, 0xc020) recvmmsg(r8, &(0x7f0000000540), 0x700, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r9, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r10, @ANYBLOB="00082abd7000fcdbdf253f00000014005e801000010006000000020000000700000078005e80080007001f060000080006000600000008000700340100000800090001000000080006000d0000002c00010001000000ff030000020000000100000027000000030000000800000005000007c3000000010001000800060028050000080005005801000008000900700c000008000300ff0300002c005e80080006007aea0000080006000400004008000600f7ffffff0800020003000000080002000300000024005e8008907c011739ce05b9000700dc06000008000600070000000800060040000000"], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0xc050) 1m42.566792768s ago: executing program 2 (id=5): capset(0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x41, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@empty, @empty, @mcast1, 0x9, 0x0, 0x0, 0x500, 0x0, 0x4d30356, r1}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$TUNSETIFF(r4, 0xc02063a1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/pci/devices/0000:00:01.0/d3cold_allowed\x00', 0x1, 0x0) write$P9_RSTATu(r5, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYBLOB="c9b3"], 0xa9) ioctl$PTP_SYS_OFFSET_EXTENDED(r4, 0xc4c03d09, &(0x7f0000000640)={0x10}) ioctl$DM_TABLE_CLEAR(r4, 0xc138fd0a, &(0x7f0000000b00)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x20000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '3\x00'}}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000200), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_usb_connect(0x0, 0x36, 0x0, 0x0) chdir(&(0x7f0000000280)='./bus\x00') socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = open(&(0x7f00000000c0)='./file1\x00', 0x4e77e, 0xc2) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000600)=0x20) 1m27.114188569s ago: executing program 32 (id=5): capset(0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x41, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@empty, @empty, @mcast1, 0x9, 0x0, 0x0, 0x500, 0x0, 0x4d30356, r1}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$TUNSETIFF(r4, 0xc02063a1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/pci/devices/0000:00:01.0/d3cold_allowed\x00', 0x1, 0x0) write$P9_RSTATu(r5, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYBLOB="c9b3"], 0xa9) ioctl$PTP_SYS_OFFSET_EXTENDED(r4, 0xc4c03d09, &(0x7f0000000640)={0x10}) ioctl$DM_TABLE_CLEAR(r4, 0xc138fd0a, &(0x7f0000000b00)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x20000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '3\x00'}}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000200), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_usb_connect(0x0, 0x36, 0x0, 0x0) chdir(&(0x7f0000000280)='./bus\x00') socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = open(&(0x7f00000000c0)='./file1\x00', 0x4e77e, 0xc2) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000600)=0x20) 1m26.90121278s ago: executing program 0 (id=79): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r0, 0x40047452, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000400)=ANY=[@ANYBLOB="401480000000f461371c7ce82dedc3fea394078ac731b27b44b5ef701eab2063a32be0f16dd1d6744b386b0416b4638c9ba0dd2a4a8cfd61fc6e1d7fc59ba23948bc40d3055b8b5f610225afd19de1e4fca820977019438a5022ca92a4a3d45db27002f2358091ae848d885f253645f806d262da0db4adcfb7a3d01659c302048c"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000700)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000a80)={0x14, &(0x7f0000000940)={0x20, 0x6, 0xe7, {0xe7, 0xb, "3ef4e99498ec983f0d358a24f0e80ec172553e05afabdc31434aa38508b2a6e34e41d6b3cade997a9e77f19e52c9768aed5f73a546bb892aa70794ab23e80618bebe1f85614c198be5b4d7d560e9e96b31ff11772cfbed5a6a55832ffed5834d504b25c48f979a188df7933adf6df2539441de5023234059bb0bab1d5d796e2d053ca8ab6d66136ec15e9ced4a5e55176de98311ccc3ee4509e0527fe6db9718e44af49f9709faa493e39b3e3388e74da126db7aac494c1788b4f017afa7754274084c89696e9be0b578f2289f2020e5601bdf1449a71bdccf03949df9965d6b977fe8ebea"}}, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000d80)={0x44, &(0x7f0000000ac0)={0x20, 0x16, 0xf5, "d9c066b7188446da729c4df746ab1c01919068fa4fd78a61b76d9b8f5accf9db95e1eee8e5652b8d7d293b74f0b5b327d43cb8fdeb53255d44a8af9ed322b4cd3cb1d8aabf767c9773f09862d63a523507fd3f0a32a84c86ebb05ed5110d09e413511427dee385a258b89d8a400f39d254ffdeb7e373aeedab4f09fdcf270b984c38e7b88828a7a617e6dd27209879b6bf21b97f47b3e3ad13a6be79424321c97a8d69d8d1c4af47a0bf8e785d51aa0b272b986025ebb48f3326553738419d0ed41127c5cb93dd54286d39839e4fda5885e80723c1dcc2ed73a711e278aefbf32bbe58c13ea5f419651e21845d126ce9697894c28d"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1}, &(0x7f0000000c00)={0x0, 0x8, 0x1}, &(0x7f0000000c40)={0x20, 0x80, 0x1c, {0x8000, 0x2, 0x1dcd, 0x5943, 0xc80, 0x8, 0x9, 0x4e, 0x2, 0x401, 0x6, 0x1}}, &(0x7f0000000c80)={0x20, 0x85, 0x4, 0x101}, &(0x7f0000000cc0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000d00)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000d40)={0x20, 0x89, 0x2, 0x1}}) syz_usb_ep_write(r1, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 1m23.83956743s ago: executing program 0 (id=107): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x682801, 0x0) close(r0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000500)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x3, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e03, 0x800, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x482, 0x4800, 0x4, 0x3, 0xe, 0x4623f, 0x0, 0x10001, 0x9, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da8, 0x2, 0x200, 0x5, 0x5, 0xe, 0x4, 0x2, 0x6f, 0xe, 0x7, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0xffffffff, 0x9, 0x25, 0x6, 0xfffffff9, 0x3, 0x7fff, 0x72c, 0x1c32, 0x2, 0x8, 0x10000, 0x3fe, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x8, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0xd3e, 0xfffffff9, 0xffffffff, 0xc, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xfdff, 0x2, 0x96, 0xfffffffb, 0x2, 0x0, 0x2, 0x401, 0xc, 0x2, 0xb, 0x9, 0xe, 0x5, 0x4, 0x5, 0x2, 0x1, 0x9, 0x8, 0x4, 0x1fe, 0x3], [0x401, 0x8000e584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x7dcb8224, 0x4008, 0xc, 0x7, 0x9, 0x81e86, 0x5, 0x80000001, 0x8, 0x3f92, 0x6, 0x2, 0x14, 0xfffffffe, 0xfffffff9, 0x0, 0x1000, 0xb, 0x5, 0x4, 0x5, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x9, 0x8, 0x3, 0xbf23, 0x9, 0x9, 0x956, 0x0, 0x5, 0xe, 0x6, 0x100fffd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x9, 0x401, 0x5], [0x108f, 0x50003, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x406, 0x1, 0x5, 0x4, 0x7f, 0x5, 0x3fa6, 0x2, 0x0, 0x5, 0x8000, 0x4, 0xe47, 0x4, 0x3, 0x4000004, 0x0, 0x2851, 0x3b, 0x20000001, 0x4, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8a, 0x46, 0x409, 0x8003, 0x4, 0x168, 0x800, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x7, 0xd4, 0xfffffffd, 0xa, 0xe, 0x101, 0xfff, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x1d) r2 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86\xeb[\x80[8\x05\xfe\xdc\x11\x04\xa1u\x81\xder\xc5\x9a&\x90\xd8\x82WF\xbaa4\xb5l\xdf\x94\xe6FHHG\x91\xa3|\xf9p\xfc*\xb9\xd9\x02\x04\xd1n\xff\xc8dV;\x0e\x0f2UX', 0x2) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x9}) r3 = syz_open_dev$loop(&(0x7f0000000140), 0xffff, 0x44080) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) fsetxattr$security_capability(r2, &(0x7f00000003c0), 0x0, 0x0, 0x1) r4 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x602980, 0x0) ioctl$RTC_RD_TIME(r5, 0x80247009, &(0x7f00000001c0)) ioctl$FICLONE(r1, 0x40049409, r4) flistxattr(r2, &(0x7f0000000440)=""/171, 0x14) 1m23.821700782s ago: executing program 0 (id=108): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000160904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_connect$uac3(0x0, 0xc7, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x499, 0x150a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb5, 0x3, 0x1, 0x53, 0x10, 0x7, {0x8, 0xb, 0x2, 0x0, 0x1, 0x20, 0x30, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x1, 0x7, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0x4, 0x9, {0xa, 0x25, 0x25, 0x60492d9a, 0x4, 0x8000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0xbcd, 0x4, 0x7}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xe85, 0x9, 0x9, 0x5}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xb381, 0x2, 0x4, 0xd}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x1, 0x2d, 0x9, 0xf3}, @as_header={0x17, 0x24, 0x1, 0x9b, 0x1, 0x0, 0x3, 0x0, 0x5, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xfb, 0x2, 0x4, {0xa, 0x25, 0x25, 0x9, 0x9d, 0x1}}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x5f, 0x9, 0x3, 0x10, 0x1}, 0x157, &(0x7f0000000300)={0x5, 0xf, 0x157, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "0574808a7a622d0160a8fd29d1b4cb19"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x8, 0x9, 0x7, 0x9, 0x4}, @generic={0xb1, 0x10, 0x4, "bd8caadf03cd9bcb9c50cc80825b1ea39ca100b9cc53b711741defe274b34f0d9e9c8e7f8bb1ebe840ff7b1a1fd44603f0cdea94bc8bdc07ddc16ecfca37ff9305f210656ea6a9a48e612622b35b86903783ec9433f3bde7666fec5172d38c608ad3308d3ba4e2a823601d92c1501f94a1db2499dc98641b27e5a4614c19636bffd64d77b8f95b8e917f93ac1cb14156ec497004ab5e6103f9b0c9854dc6452dd68646a0e9451f536b4c2295ff63"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "8f1db148fd710699dd0f6b64a50c5a85"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "d3559b9f9f52ca84fe0e9b050ace614f"}, @generic={0x5a, 0x10, 0xa, "2469ea752b41004ba8bca6b5e57a10291b8136e4245d326e1c5a45a1b9bd7f34a4a145c60764e92845328e27268573128ce448cba1c9e38cfedb9eb4ee720ae31b376c103f40c2b37d2ee67937045144e053bbe1571003"}]}, 0x4, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x810}}, {0x70, &(0x7f0000000540)=@string={0x70, 0x3, "5b977471f2848fb1e0e2bc954afde4ad079b03b04abf577e8a22ed59860e52bb3ad766967fc99e1b2cd4b84a5bc055abd84e27ae480189ac27f9800a184b209760144e3645af8b7ba950c551a554f438b08a82399ea1c38666a4a441aafac13bb04d70eb4b80df4b27c0f9344833"}}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000200)={0x40, 0x24, 0xbb, "050400000031d9bfa621ac49f52bfd9f0f0a1fb5b7b14674e9b3d738d5932ae4bee684a5b83f03eab298708bcc5c3b2dfe6b29b6b2a69c409812196608300a8efbb861eacbe505a4013f6f5c8faf1dddf29bdc049dcf2768978bca5ed3d182441a712dc024e1196cdbbd991a65354ad78e3932d655f2b81dfaa0526f70941bd3dae576a314b605d313fd411f7cfb1272138f73b2779add5b47dd50be85afc25d2643a8b9f8b3c66111b9596a4154d355d9aa8fcce56ce91080b4ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 1m20.809322716s ago: executing program 0 (id=130): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'vcan0\x00'}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x19) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r0, 0x8916, &(0x7f0000000040)="76657468303a30000000000000000000020000000a0000010000000000000000") mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='sys_mnt\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000400)={0x10}, 0x10) mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000200), 0x40, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_on}]}) chdir(&(0x7f0000000280)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file7\x00', 0x1c0) ioctl(r0, 0x8914, &(0x7f0000000080)="76657468303a300000000000000000000100"/32) ioctl(r0, 0x890b, &(0x7f00000000c0)="0000000000000000020000000a00000100000000000000000200000000000000000000000000000002000000ffffffff000000000000000005000000000000000000000000000000000000000000000000020000007f00"/106) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'vcan0\x00'}) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x19) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl(r0, 0x8916, &(0x7f0000000040)="76657468303a30000000000000000000020000000a0000010000000000000000") (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x1d7) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='sys_mnt\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000340)='sys_mnt\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) (async) write$FUSE_DIRENT(r1, &(0x7f0000000400)={0x10}, 0x10) (async) mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000200), 0x40, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_on}]}) (async) chdir(&(0x7f0000000280)='./bus\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file7\x00', 0x1c0) (async) ioctl(r0, 0x8914, &(0x7f0000000080)="76657468303a300000000000000000000100"/32) (async) ioctl(r0, 0x890b, &(0x7f00000000c0)="0000000000000000020000000a00000100000000000000000200000000000000000000000000000002000000ffffffff000000000000000005000000000000000000000000000000000000000000000000020000007f00"/106) (async) syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') (async) pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) (async) 1m20.793754148s ago: executing program 0 (id=131): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r0, 0x40047452, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000400)=ANY=[@ANYBLOB="401480000000f461371c7ce82dedc3fea394078ac731b27b44b5ef701eab2063a32be0f16dd1d6744b386b0416b4638c9ba0dd2a4a8cfd61fc6e1d7fc59ba23948bc40d3055b8b5f610225afd19de1e4fca820977019438a5022ca92a4a3d45db27002f2358091ae848d885f253645f806d262da0db4adcfb7a3d01659c302048c"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000700)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000a80)={0x14, &(0x7f0000000940)={0x20, 0x6, 0xe7, {0xe7, 0xb, "3ef4e99498ec983f0d358a24f0e80ec172553e05afabdc31434aa38508b2a6e34e41d6b3cade997a9e77f19e52c9768aed5f73a546bb892aa70794ab23e80618bebe1f85614c198be5b4d7d560e9e96b31ff11772cfbed5a6a55832ffed5834d504b25c48f979a188df7933adf6df2539441de5023234059bb0bab1d5d796e2d053ca8ab6d66136ec15e9ced4a5e55176de98311ccc3ee4509e0527fe6db9718e44af49f9709faa493e39b3e3388e74da126db7aac494c1788b4f017afa7754274084c89696e9be0b578f2289f2020e5601bdf1449a71bdccf03949df9965d6b977fe8ebea"}}, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000d80)={0x44, &(0x7f0000000ac0)={0x20, 0x16, 0xf5, "d9c066b7188446da729c4df746ab1c01919068fa4fd78a61b76d9b8f5accf9db95e1eee8e5652b8d7d293b74f0b5b327d43cb8fdeb53255d44a8af9ed322b4cd3cb1d8aabf767c9773f09862d63a523507fd3f0a32a84c86ebb05ed5110d09e413511427dee385a258b89d8a400f39d254ffdeb7e373aeedab4f09fdcf270b984c38e7b88828a7a617e6dd27209879b6bf21b97f47b3e3ad13a6be79424321c97a8d69d8d1c4af47a0bf8e785d51aa0b272b986025ebb48f3326553738419d0ed41127c5cb93dd54286d39839e4fda5885e80723c1dcc2ed73a711e278aefbf32bbe58c13ea5f419651e21845d126ce9697894c28d"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1}, &(0x7f0000000c00)={0x0, 0x8, 0x1}, &(0x7f0000000c40)={0x20, 0x80, 0x1c, {0x8000, 0x2, 0x1dcd, 0x5943, 0xc80, 0x8, 0x9, 0x4e, 0x2, 0x401, 0x6, 0x1}}, &(0x7f0000000c80)={0x20, 0x85, 0x4, 0x101}, &(0x7f0000000cc0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000d00)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000d40)={0x20, 0x89, 0x2, 0x1}}) syz_usb_ep_write(r1, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 1m20.696223767s ago: executing program 0 (id=132): mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x18b) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x800800, 0x0) mount$bpf(0x200000000000, &(0x7f0000000180)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000440), 0x71, 0x101341) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0xffffffff80000000) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0xa2000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000040)={@desc={0x1, 0x0, @desc1}}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) 1m20.695748677s ago: executing program 33 (id=132): mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x18b) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x800800, 0x0) mount$bpf(0x200000000000, &(0x7f0000000180)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000440), 0x71, 0x101341) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0xffffffff80000000) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0xa2000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000040)={@desc={0x1, 0x0, @desc1}}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) 40.318382717s ago: executing program 1 (id=513): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x16) ioctl$TCFLSH(r0, 0x400455c8, 0x4) r1 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}, 0x1c, 0x0}}, {{&(0x7f0000000100)={0xa, 0x0, 0x1, @private1, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000029"], 0x18}}], 0x2, 0x40000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x0, 0x20) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000280)=ANY=[]) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x6) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000180)={{0xa, 0x4e21, 0x2, @empty, 0x4}, {0xa, 0x4e20, 0x200, @empty, 0x80}, 0xffffffffffffffff, {[0x9, 0xcab, 0x5, 0x3, 0x4, 0xa4e, 0x4, 0x5]}}, 0x5c) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x30) 40.268172402s ago: executing program 1 (id=514): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0xfffffd00, &(0x7f0000002340)='}\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0xfffffffffffffdf3, &(0x7f0000002380)='/dev/uinput\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f00000023c0)='/dev/uinput\x00') r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f00000000c0)) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080180003006d040000070a000000f5ffffff0000000600ff0900a10185021901292015002501750195408102c0"], 0x130) close_range(r1, r1, 0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000002400)={0x20080522}, &(0x7f0000002440)={0x3, 0x3, 0x0, 0x4, 0x5}) getsockopt$inet6_tcp_int(r3, 0x6, 0x2a, 0x0, &(0x7f0000002480)) fcntl$setown(r1, 0x8, r2) syz_usb_connect(0x3, 0x42, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000202000040ef1761610000010203010902300001010080320904000003020200000524001001042402020705810340001007058202000200070503020002"], 0x0) r4 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000008b40464de000000ecb333170201000000040904000512036ca838ad210000400122180009058103200000150f0000"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) 39.801267469s ago: executing program 1 (id=515): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)={0x24, 0x24, 0x1, 0x0, 0xffffffff, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0x4, 0xb, 0x0, 0x0, @binary}]}, 0x7e}], 0x1}, 0x4800) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200), 0x2) r2 = memfd_create(&(0x7f0000000240)='y\x105\xfb\xf7u\x83%:Ml\x9a\x9a\xb8\xe0>(\x13A-\x9a=\xb4r\xf1\x12y\xec;\x90\x06\x7f@\xf4\xe0\xc2\xb9x\xa4\x98S7\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Q\xcdO\xe3i\xbd\x01\x85\x0e\x19\xce\x82\xd52\x9e\x95\xa7xbh\xf6\xa4c\x8a\xa5,\xdd\x81Z\x04\xf5\xf9\xa1\xe1\xad\xc2`\xf15\xf2$\xf2\x1c\xb0\x87pI\xab.}W\xd3o\xd3n\x9d\xb3>r\x1c<\x1b\xa5\xe27\x9f\x10\xe5\\\x1d\xcd\x91i\xc4\xad\xeb\xe5h[\xf6_\xbeW\b1\x06V\x89\r\x19:S\xf4\x7f8\xcf\xe6\xe1Tl\x00{Z\xb1\x92?\xb2\xd8\xc0\xaf\x96\xff\xe4v\xe8\x04<\xa2\x91Y\xee\xd8Rr\xe1\xdb!Z\xda\x06\xd6\x02\xb4\xfb4\xbb;7\x94\xb6_\xda\x108\x86\xfa\x97\xc2,\x8c\xf4\xaf\xb9\xfd\x8d\xff(\xd3\xbc\xdf}:4\xb9\xa00?\xac\x86@\x87\xb9\x81\xeak\x8d\x8b>\x89I\x0e\xfa\xa7\x1c\xe9\xf1U\xfc=pm6\x10vk90\x99\x15\x96\xa3\xb8_\n\xd1K\xf7m\x1as\xbd\xc4\x19Q\xc2Ge\x0e$\xdd\xec\f:\\g\xc3RnC\xe4\xc1!\xae\xd9h\xa5\xe4K\xcf\xf3\xf7\xe5o\xae\xfa\xa8\xd90Kj\x12\xcd@W\xe5\xfat`\x83\xac\xc8\xc8\xf0\xf1)\xf6A\t\xdc\xbfQ\xa9\xaer\x1d\xa5fY\x9d{\xa6\xeb\xc0\v\\\xb5cv i\b\xfc\xb9\xaf\x1aA~2\xe7\xedj\x89\x1a\x9d\xef5n\x80\xbfu\xdbi\xc7\x9c\x17\xa7`\xf5\x01\xe1v\xb4\xd9\rn\xe1\x86A\x9b \'u\x05\xa6a3\x84z\x8e\xf1\xcd\xce\r\xf8Y3h\xd9\xed\xe8\xb5\x00\x8eCH\xf1\x00\xcfLo\x92y\xafg\xdf\xa8\x9e\xbb\xf0I5\xfb\x03\x18\xf0:\xff\xed\x02\x17\x84WSgi\xecJ\x82\xc9\xf3k\x8d\xf8\xfcE\xa9\xca\xafq\xe9\x9d^\xf2', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000440)={r2, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000480)) getrandom(&(0x7f0000000000)=""/285, 0x11d, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 39.79160899s ago: executing program 1 (id=516): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9401"}, @global=@item_4={0x3, 0x1, 0x0, '\a\x00'}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000400), 0x15e, 0x800) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000440)={0x1, "b4be8421a3f3090ceb57129c83bb1a1562ae2050097bc3a277628b8fb36a28da220fdf81608f602bc11cfdaec03d294cfbdd855de75763122def77a5c75d51a8"}) writev(r1, &(0x7f0000001840)=[{&(0x7f0000000040)="75d842b3595fabc304e29a414abba162e1c283debcf36a32ca584ee5ba9ba124071119c915071ae83fd637f6c8ec84c9b4864138c7444cd8ed34939c73cf698378c465b3efb756399d2ec1a8e0cb2316b89a8a21cea2541bc122b86c704119814d88bf65b7d76245d38bcc7ee18fe06492779139523c277ccb9a68d13d5a6f3dc2854834fb9e46cbf2cc9cd7e31ff6af0bdc33e88532540faeaeac42c9c6e7742e16a4a650899c1c2dab7825b975852b4be0d8b6b9a592356da594d88162b6b14ce510a2108695d6aae4794dcb90508afdbd89bf2e86122e3fea2e38ccf1", 0xde}, {&(0x7f0000000140)="3586072581b96a1bd10d33ade7654db35260e78f21f415942dba0bba60075ec99ad6152ab62d3e15c8e2e604dd1aab4d03b6243e3cb096311a3c10b606028761dd076746c4e8a134a2bc803480c3880287c993500cca655793f315ca4397b82d32b0fcae8452679ec75e772e5e98c58ca9128345f4919e0e28", 0x79}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="0ff175c532bbefba198b3e48a2743c109fb22e52634a6725d2abb6317902a9a581767176233dca9e52d67e4dbc5805285accd8bfe2786e683289370b0c8f5611d117360ffd6384db47b47a088740a7ba14860e192934dc95e75d32ce85ad95d457a4135a7b4f3f674d9928e058949b7e2f096355b2c7024ec5c85075036a3e3640e8508001f1e37dc807cb3f", 0x8c}], 0x4) request_key(&(0x7f0000000000)='ceph\x00', 0x0, 0x0, 0xfffffffffffffffb) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f00000004c0)={0x0, 0x14}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000640)={0x20, 0x1, 0x7e, "d3c558c5a321788c9d5f759424c3aebbf99a02745423957dd37b5b8a9cc25d4e1e7511ce8c0b797c0663077dd10ddfd5def072c14a2727c2ce61e2bc222d6354af482f463ddd58a39a0b84c514a7ca1fe866dd592d47c9245f21903b1337d63686558b8e57774237d7df1a9969ce11c6bb80594f83906aa33458f5b47df5"}, &(0x7f0000000700)={0x20, 0x3, 0x1}}) 39.263093683s ago: executing program 1 (id=521): syz_ublk_setup_io_uring(0x1d, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x2a8}, &(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)) mkdir(&(0x7f0000000300)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys_mount\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys_mount/block/loop0/queue/rotational\x00', 0x40402, 0x0) write$rnull_attr(r0, &(0x7f0000000400)='1', 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)={0xc0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}]}]}, 0xc0}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./debug\x00', &(0x7f0000000540)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./debug/lru_gen\x00', 0x2, 0x0) write(r3, &(0x7f00000005c0)='- 1 0 0 1', 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000100)={[0x100000, 0xe000, 0xd000, 0x40000], 0x5, 0x82, 0xff5}) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x82f41, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$XFS_IOC_FSINUMBERS(r3, 0xc0205867, &(0x7f0000000f40)={&(0x7f00000000c0)=0xffffffff, 0xff26, &(0x7f0000000840)=[{}, {}, {}], &(0x7f0000000f00)}) memfd_create(&(0x7f0000000200)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000240)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) 38.421755488s ago: executing program 1 (id=527): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x136) pipe2$9p(&(0x7f0000000380), 0x80800) (async) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) dup(r3) (async) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@dfltgid}]}}) (async) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@dfltgid}]}}) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4, 0x80) openat(r5, &(0x7f0000000300)='./dev\x00', 0xa8000, 0xc6) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2f, 0x0, 0xfec5) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}, 0x1, 0x2, [{{0x2, 0x2, @remote}}, {{0x2, 0xfffd, @local}}]}, 0x190) (async) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}, 0x1, 0x2, [{{0x2, 0x2, @remote}}, {{0x2, 0xfffd, @local}}]}, 0x190) pread64(r0, &(0x7f00000000c0)=""/39, 0x27, 0x100000000) 33.434082132s ago: executing program 4 (id=543): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece) read$FUSE(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x4c, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) r5 = fsopen(&(0x7f00000003c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r7, 0x8008975) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r7, 0x0) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) ptrace(0x10, r4) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000006f40)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000006f80)='./file0\x00', &(0x7f0000006fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000007100)={{{@in=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@empty}}, &(0x7f0000007200)=0xe8) getgroups(0x2, &(0x7f0000007240)=[0xffffffffffffffff, 0xee01]) lstat(&(0x7f0000007380)='./file0\x00', &(0x7f00000073c0)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r7, &(0x7f0000007440)='./file0\x00', 0x4000, 0x98, &(0x7f0000007480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000000580)="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", 0x2000, &(0x7f00000076c0)={&(0x7f0000002580)={0x50, 0x0, 0x7, {0x7, 0x2d, 0x101, 0xffffffffa0000220, 0xc, 0x9, 0x9, 0x80, 0x0, 0x0, 0x0, 0xa}}, &(0x7f0000002600)={0x18, 0xfffffffffffffffe, 0x1, {0x9}}, &(0x7f0000002640)={0x18, 0xfffffffffffffff5, 0xfffffffffffffffe, {0x5}}, &(0x7f0000002680)={0x18, 0x0, 0x9, {0x4fd5d102}}, &(0x7f00000026c0)={0x18, 0x0, 0x8, {0x5}}, &(0x7f0000002700)={0x28, 0x0, 0x84f, {{0x5, 0x6, 0x0, r4}}}, &(0x7f0000002740)={0x60, 0x0, 0xfffffffffffffff7, {{0x2, 0xfffffffffffffff9, 0x7, 0x0, 0x6, 0x0, 0x2, 0xa771}}}, &(0x7f00000027c0)={0x18, 0xffffffffffffffda, 0x2, {0x9}}, &(0x7f0000002800)=ANY=[@ANYBLOB="120000000000000000f25e88000000000000"], &(0x7f0000002840)={0x20, 0xfffffffffffffff5, 0x200, {0x0, 0x1}}, &(0x7f00000029c0)={0x78, 0xfffffffffffffff5, 0x7, {0x681e, 0x4, 0x0, {0x0, 0x323, 0x8, 0x8, 0xd, 0x9, 0x2, 0x100, 0x2, 0x6000, 0xffff4605, 0x0, 0xee01, 0x4, 0x7}}}, &(0x7f0000006d40)={0x90, 0xfffffffffffffff5, 0x773fc911, {0x6, 0x0, 0x632, 0x1, 0x0, 0x4, {0x0, 0x3, 0x7, 0x2, 0xf2, 0xcef, 0x3, 0x1, 0x3, 0x38d71de05ddb0a13, 0x0, 0x0, 0x0, 0x7, 0xfffffff7}}}, &(0x7f0000006e00)={0x108, 0x0, 0xe9c9, [{0x0, 0x33, 0x9, 0x3, 'cpu.stat\x00'}, {0x0, 0x1, 0x5, 0x5, '\x91(\x8f\\\xed'}, {0x6, 0x1000b5, 0x2, 0x7, ',$'}, {0x4, 0xba, 0x9, 0x6, '/dev/kvm\x00'}, {0x0, 0xfffffffffffffffc, 0x0, 0xfffffff8}, {0x5, 0x7fffffffffffffff, 0xa, 0x9, '/dev/ptmx\x00'}, {0x4, 0x2, 0xa, 0x4, '/dev/ptmx\x00'}]}, &(0x7f0000000000)=ANY=[@ANYBLOB="b8000000000000000000000000003cf1ffffffffffff00000100000000000000090600000000000070000000000038000000000000000000ff05000000000000ff07000000000000170b00000000000000000800007dc2000500000006000000008000008c639bec1e615d9ec27e4db90b00"/128, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0004000007000000000000000100000000000000f5ffffffffffffff09000000060000002f6465762f6b766d0000000000000000"], &(0x7f0000007280)={0xa0, 0x0, 0x6, {{0x6, 0x2, 0xa92, 0x2, 0x8, 0x8000, {0x5, 0x5, 0x9, 0x8, 0x7, 0xfffffffffffffff9, 0x6, 0x5, 0x5, 0x6000, 0x9a, r10, r12, 0x3, 0x400}}, {0x0, 0x14}}}, &(0x7f0000007340)={0x20, 0x0, 0x9, {0x3, 0x4, 0x2, 0x1fa6}}, &(0x7f0000007580)={0x130, 0x0, 0x10000, {0x67a9, 0x4, 0x0, '\x00', {0x40, 0xe, 0xa9, 0x9, r11, r12, 0x1000, '\x00', 0x769, 0x9, 0xffffffffc298dad0, 0x0, {0x6, 0xfa6}, {0x9}, {0xffffffff, 0xf2d}, {0x80, 0x4}, 0x8, 0xc21f, 0x6}}}}) ptrace$setregs(0x1a, r4, 0xba, &(0x7f0000000040)) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x40080, 0x0) ioctl$TCSETS(r13, 0x5435, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r14, 0xae80, 0x0) 32.907934595s ago: executing program 4 (id=545): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)=0x3, 0x4) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0x2, 0xffffffff, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x2, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a6, 0x1004, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x8, 0x5, 0x1000, 0x6, 0x43, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0x1, 0x51, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0xfffffffb, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x14000, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x6, 0x1, 0xd, 0x4, 0x5, 0x7fff, 0x0, 0x1f0, 0xfffffffd, 0x6, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x808, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfb1, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x2, 0x6, 0x1c, 0x80000000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x1ff, 0xb, 0x5, 0x1, 0x6, 0x5, 0x5102fac, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x3, 0x1, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x5, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f0000000d00)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x60, 0x12, 0xe, "2048ead61cbaa4f816f326411308"}, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f00000004c0)=ANY=[@ANYBLOB="2000e8ff0000c61aed0a7d9daca1"], &(0x7f0000000500)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x6}, 0x0, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000600)={0x40, 0x13, 0x6, @local}, &(0x7f0000000640)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x19, 0x2, "2bf2"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0xa6}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x8}}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)=0x3, 0x4) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0x2, 0xffffffff, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x2, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a6, 0x1004, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x8, 0x5, 0x1000, 0x6, 0x43, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0x1, 0x51, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0xfffffffb, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x14000, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x6, 0x1, 0xd, 0x4, 0x5, 0x7fff, 0x0, 0x1f0, 0xfffffffd, 0x6, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x808, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfb1, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x2, 0x6, 0x1c, 0x80000000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x1ff, 0xb, 0x5, 0x1, 0x6, 0x5, 0x5102fac, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x3, 0x1, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x5, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) ppoll(&(0x7f0000000d00)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x60, 0x12, 0xe, "2048ead61cbaa4f816f326411308"}, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f00000004c0)=ANY=[@ANYBLOB="2000e8ff0000c61aed0a7d9daca1"], &(0x7f0000000500)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x6}, 0x0, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000600)={0x40, 0x13, 0x6, @local}, &(0x7f0000000640)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x19, 0x2, "2bf2"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0xa6}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x8}}) (async) 29.840195755s ago: executing program 4 (id=560): r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) write(r3, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f00000002c0)="c0d000b9fa020000b830d3f1a8ba000000000f307d0066b801008ee066baa10066ed0fc71b0f3566baf80cb8e6bfc08eef66bafc0c66ed0f350f01c5", 0x3c}], 0x1, 0x4, 0x0, 0x0) r4 = accept$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, &(0x7f0000000180)=0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000200)={@ipv4={'\x00', '\xff\xff', @multicast1}, @loopback, @private2, 0xbe9, 0x3ff, 0x9, 0x400, 0xdb93, 0x40010, r5}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timerfd_settime(r6, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 29.823652257s ago: executing program 4 (id=561): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x5, 0xc, 0x8}]}, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./dev\x00', &(0x7f0000000680)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./dev/sda\x00', 0x101042, 0x5) ioctl(r2, 0x2275, 0x0) (async) r3 = socket(0x80000000000000a, 0x2, 0x9) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x2f, 0x1, 0x7, 0x6, 0x30, @empty, @empty, 0x40, 0x20, 0x0, 0xa7a}}) close_range(r3, r3, 0x2) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setuid(r4) (async) ioctl(r1, 0xfffffff9, &(0x7f0000000940)="608f0c0e202da5bab44372a2c02a5e593714a6d289dcfa93b6fabfa7ad6c65edc3e840abd1011e01ff20e47f7708c6395c15542c350b07a1f2ce23d15db364507a61d5fe93fd4bfb2a4c792243b11ec544bbcfe6d7dbf04924f39c0860247150aa766452438fe0042e7329a0f79128b70a4af2b836ac06d84cfea8c0f3271f3ebf11cdb4bbd8c4c45eab24fa7dc2e13f317d1ba522a39472aff3a234e393e8a6ff0068d2cd6714641243679dc20ec041f933f4a8b32c7b94c1201d7609fe5fa5e3d1536ab149a4e61bd69e631c2c493c737ae88c5ba808a660662578ec96e6bcd1c0027a167843fda42060ff18988632dec0881501bf") getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@private2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@empty}}, &(0x7f00000004c0)=0xe8) openat(r2, &(0x7f0000000700)='./file1\x00', 0x101042, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) (async) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto(r0, &(0x7f0000000780)="00781f6c2601834335dd18d9e379811038f58c1738459c9381a5161db3ff5c6d7e575238a70ff4a6a242601e4c3037356daa90481a3dc126f51d837e9466b926600d4f2587675a418bfb4d4f87a43481ba19344b8b853d3d479322c5fa23d193b560553cd36c9d9f2ab5a50a0c2269836d65216e4a6ce50f23da8bc46480a23b5ab6d048d64679a9443fc7b9c79c6e912ed8fa11c34304fec865888ff16d7e57887ca73eb62d552597833518619f1a1f846b75d0b3fc4d4519acc99b4fdfabd44f8978215a8ad0b2bcab1bc0570f195f1086e2a457fd8366aee8618d4d0eda9726e696e4070937bd351ae7", 0xeb, 0x4015, &(0x7f0000000880)=@llc={0x1a, 0x325, 0x8, 0x2, 0x1, 0x4, @local}, 0x80) ptrace(0x10, r6) (async) ptrace$poke(0x4, r6, &(0x7f0000000740), 0x6) mount$9p_virtio(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x4000, &(0x7f0000000500)={'trans=virtio,', {[{@version_L}, {@uname={'uname', 0x3d, 'ip6gre0\x00'}}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, '-'}}, {@flag='dirsync'}, {@appraise}, {@uid_eq={'uid', 0x3d, r4}}, {@fsname={'fsname', 0x3d, '}-'}}, {@euid_eq={'euid', 0x3d, r5}}, {@fsname={'fsname', 0x3d, '\x00'}}, {@subj_type={'subj_type', 0x3d, '\x00'}}, {@uid_gt={'uid>', 0xee01}}]}}) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x7, 0xf9, 0x5, 0x12a}]}, 0x10) 29.785896781s ago: executing program 4 (id=562): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xce22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r1, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r3, 0x2) preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/244, 0xf4}, {&(0x7f0000000400)=""/101, 0x65}, {&(0x7f0000000480)=""/149, 0x95}, {&(0x7f0000000600)=""/60, 0x3c}], 0x4, 0x7, 0x20000000) r4 = gettid() capget(&(0x7f0000000580)={0x20071026, r4}, &(0x7f00000005c0)={0xee96, 0x8, 0x3, 0x8, 0x7}) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl(r5, 0x1, &(0x7f0000000080)="29738b8682fc2f37ad16c40e0e6f391b5e99326f6abe2e23c2e8b08dc3be484c003044f16a130d4551c9aaac10a819fd78367df2632270c7446b8409c7c0a622fbc58fad6c3f702582fb531919001dc926749abb9ddf742b1db2c69d6d8d76fde9695b7858dadbd39d956e14f64b18b0cde9b485ebbe5a396f5d0fef4ea2884f714575dd3699326d5e282e92275f35957731887ecbf08ac8ef944d2534e3a73e0841393f19a762f1cb8459d1f95574ee5da2d5356bff0b7f38c0d127cfa1c9a7691eca4f6912fe1871843cf286e3c9f2d5") socketpair(0x15, 0x5, 0x6, &(0x7f0000000640)) 29.540067696s ago: executing program 4 (id=567): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt\x00', 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000480)={0x1, 0x0, [{0x4d0, 0x0, 0x1}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000540)={0x10000000000000cf, 0x0, [{}]}) open$dir(&(0x7f0000000680)='./mnt\x00', 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="441f08d600270bee724ef54e91eeffbe1e68d5040d73161feeb0f24cb1", 0x1d) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x2000, 0x0, 0x118}, &(0x7f0000000080), &(0x7f00000002c0), &(0x7f00000003c0)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) r9 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = openat$cgroup_ro(r1, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$cgroup_pid(r10, &(0x7f0000000400), 0xfffffdef) syz_ublk_setup_queues(r8, r5, &(0x7f00000004c0)={0x0, 0x40000d17, 0x10, 0x1, 0x80, 0x0, r6}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe702, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x542b, 0x2, 0x4, 0x1bf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x91f9, 0x800, 0x4003bffc, 0x2b8}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x36c}}], 0x1, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000006c0)={{{@in6=@private0, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f0000000100)=0xe8) quotactl_fd$Q_SETINFO(r11, 0xffffffff80000600, r12, &(0x7f0000000800)={0x9, 0x0, 0x1, 0x1}) 29.503126769s ago: executing program 34 (id=567): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt\x00', 0x24) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000480)={0x1, 0x0, [{0x4d0, 0x0, 0x1}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000540)={0x10000000000000cf, 0x0, [{}]}) open$dir(&(0x7f0000000680)='./mnt\x00', 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="441f08d600270bee724ef54e91eeffbe1e68d5040d73161feeb0f24cb1", 0x1d) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x2000, 0x0, 0x118}, &(0x7f0000000080), &(0x7f00000002c0), &(0x7f00000003c0)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) r9 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = openat$cgroup_ro(r1, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$cgroup_pid(r10, &(0x7f0000000400), 0xfffffdef) syz_ublk_setup_queues(r8, r5, &(0x7f00000004c0)={0x0, 0x40000d17, 0x10, 0x1, 0x80, 0x0, r6}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe702, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x542b, 0x2, 0x4, 0x1bf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x91f9, 0x800, 0x4003bffc, 0x2b8}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x36c}}], 0x1, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000006c0)={{{@in6=@private0, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f0000000100)=0xe8) quotactl_fd$Q_SETINFO(r11, 0xffffffff80000600, r12, &(0x7f0000000800)={0x9, 0x0, 0x1, 0x1}) 23.325077714s ago: executing program 35 (id=527): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x136) pipe2$9p(&(0x7f0000000380), 0x80800) (async) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) dup(r3) (async) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@dfltgid}]}}) (async) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@dfltgid}]}}) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4, 0x80) openat(r5, &(0x7f0000000300)='./dev\x00', 0xa8000, 0xc6) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2f, 0x0, 0xfec5) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}, 0x1, 0x2, [{{0x2, 0x2, @remote}}, {{0x2, 0xfffd, @local}}]}, 0x190) (async) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}, 0x1, 0x2, [{{0x2, 0x2, @remote}}, {{0x2, 0xfffd, @local}}]}, 0x190) pread64(r0, &(0x7f00000000c0)=""/39, 0x27, 0x100000000) 11.919842996s ago: executing program 5 (id=654): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000080)={0x0}) ptrace$getenv(0x4201, r0, 0xff, &(0x7f00000000c0)) process_vm_readv(r0, &(0x7f0000001580)=[{&(0x7f0000000100)=""/112, 0x70}, {&(0x7f0000000180)=""/66, 0x42}, {&(0x7f0000000200)=""/14, 0xe}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000000300)=""/86, 0x56}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/32, 0x20}, {&(0x7f00000013c0)=""/133, 0x85}, {&(0x7f0000001480)=""/193, 0xc1}], 0x9, &(0x7f0000002940)=[{&(0x7f0000001640)=""/15, 0xf}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/211, 0xd3}, {&(0x7f0000002780)=""/212, 0xd4}, {&(0x7f0000002880)=""/16, 0x10}, {&(0x7f00000028c0)=""/44, 0x2c}, {&(0x7f0000002900)=""/59, 0x3b}], 0x7, 0x0) syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c17aa4600010102030109025100010100c032090400000208065000070501020002000705820200020009040001040806620007050102000324020705"], 0x0) 11.48333558s ago: executing program 7 (id=661): openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x4c00, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000340)={0x4, 0x0, 0x0, 0x210, 0x138, 0x1, 0x0, 0xab010, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, [@crypt={0x0, 0xc3deafc5d33db901, 0x0, 0xd8, 'crypt\x00', {'aes-cbc-eboiv', 0x20, @fixed='0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 0x20, '0', 0x20, {@ram={'/dev/ram', 0x0}, 0x20, '8'}, ' 1 same_cpu_crypt'}}]}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x168, 0x138, 0x1, 0x0, 0x4800, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}, [@error={0x0, 0x1000, 0x0, 0x30}]}) 11.48260453s ago: executing program 7 (id=662): pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x1000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0xe020, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000140), 0x318, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="17380000000000000109022400010000000009040000020300000009210300000122180009050e030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x7, 0x1, 0x1, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7f, 0x20, 0x5, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x81, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x3, 0x3, 0x29}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x310, 0x0, 0x7f, 0x2, 0x10, 0x1}, 0x19, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x2, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x44a}}]}) landlock_create_ruleset(&(0x7f0000000140)={0x5041, 0x4, 0x2, 0x1140, 0x2, 0x2}, 0x30, 0x3) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002218"], 0x0}, 0x0) 10.69088807s ago: executing program 5 (id=663): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x282, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x2001, 0x0) r1 = inotify_init1(0x80800) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0xe300027f) r2 = openat(0xffffffffffffffff, &(0x7f00000006c0)='./cgroup\x00', 0x201, 0x1e0) getdents64(r2, &(0x7f0000000100)=""/1000, 0x3e8) openat(r2, &(0x7f0000000143), 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_ublk_setup_io_uring(0x20, &(0x7f0000000580)={0x0, 0x0, 0x1000}, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="280000002100010002000000000000000a00000000000001016200000c0014"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 10.679846231s ago: executing program 5 (id=664): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x19}, {{0x0, 0x0, 0x0}, 0x4741}], 0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x3}, {0x60, 0x20}, {0x6}]}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./dev\x00', &(0x7f0000000a40)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./mnt\x00', 0x1ff) mount(&(0x7f0000000ac0)=@filename='./dev/sda1\x00', &(0x7f0000000b00)='./mnt\x00', &(0x7f0000000b40)='ext4\x00', 0x1008c10, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000b80)='./file0\x00') r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000c40)={0xa, 0x4e20, 0xffffefff, @mcast2, 0x4}, 0x1c) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c80)='net/udp6\x00') r3 = socket(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000cc0)={0xa, 0x4e20, 0x0, @loopback={0xff00000000000000}}, 0x59) preadv(r2, &(0x7f0000000d00)=[{&(0x7f0000000d40)=""/90, 0x5a}], 0x1, 0xa3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r4 = gettid() sigaltstack(&(0x7f0000000dc0)={0x0, 0x180000001, 0xffffffffffffff73}, 0x0) tkill(r4, 0x21) r5 = openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./file1\x00', 0x103a42, 0x0) ftruncate(r5, 0x6000000) copy_file_range(r5, 0x0, r5, &(0x7f0000000c00)=0x100, 0x9, 0x0) r6 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000340)='asymmetric\x00', 0x0, &(0x7f0000000380)="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", 0x559, r6) request_key(&(0x7f0000000900)='asymmetric\x00', &(0x7f0000000940)={'syz', 0x1, 0xc}, &(0x7f0000000980)='R\x10rust\xe3c*sgrVid:De', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioperm(0x1, 0x3, 0x163f) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 9.826320038s ago: executing program 5 (id=670): mknod$loop(&(0x7f0000000480)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000600), 0x80, &(0x7f0000000940)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000009c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1b6) creat(&(0x7f0000000140)='./file0\x00', 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r4, &(0x7f0000000280)='p:s/ ./file0:0', 0xe) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/sda\x00', 0x4d802, 0x0) mprotect(&(0x7f000065f000/0x2000)=nil, 0x2000, 0x1) setns(0xc9, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, &(0x7f00000002c0)=0x2, 0x4) bind$inet(r6, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x28040041, &(0x7f0000000340)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="1f", 0x1}], 0x1}, 0x48c0) recvmmsg(r6, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40, 0x0) socket$packet(0x11, 0x3, 0x300) read$FUSE(r5, &(0x7f0000006d40)={0x2020}, 0xffffffca) write$FUSE_INIT(r0, &(0x7f0000002a00)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002a80)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f0000004a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004b40)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004b80)="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", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006c40)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x39e6, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x1, 0x14}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) 8.963524734s ago: executing program 5 (id=673): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f00000000c0)=@x86={0x6, 0x0, 0x88, 0x0, 0x6, 0x6, 0x7, 0xb, 0x3, 0x13, 0x5, 0x70, 0x0, 0x13, 0xb, 0x0, 0x1, 0x0, 0x2, '\x00', 0x5, 0x4}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x20341, 0x0) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f00000004c0)) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000500)={0xfffffffa, 0x407, 0x8, 0x8010041, 0x80, "0baa301fa951e8a4603c811200", 0x81ed, 0xfffffff5}) writev(r4, &(0x7f0000000540)=[{&(0x7f0000000580)="d0", 0x1}], 0x1) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x812) r6 = dup(r5) read$FUSE(r6, &(0x7f00000005c0)={0x2020}, 0x2020) getsockopt$inet6_tcp_int(r0, 0x6, 0xc, 0x0, &(0x7f0000000000)) syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040490d0070010001020301090227000101008032090400000308065000070501020002000705820200020007058303fcb5"], 0x0) syz_usb_connect$cdc_ecm(0x1, 0x13f, &(0x7f0000002600)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x1, 0x8, 0x4, 0x20, 0x5}, 0x22, &(0x7f0000000200)=ANY=[@ANYBLOB="050f2200030b1f0102000004060300060710020c7305000b100108c1000cff000001"], 0x5, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc1e}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x402}}, {0xa2, &(0x7f0000000340)=ANY=[@ANYBLOB="a2039b65b3d9cbaaa79717631abe02de3d5637f9f5809e5da987ca273e41ebe9f67ff586e624fb7a440a6a95afb03aa07ea217f254096f2556a1bf217a850ff7a00ff3bfa84c323299c6c7297dbb8e19e1bfd0afdb2188ede54411fb30823382b3d1bb9931814ad5abacc66241d39628a96146a3129af77d1eb421093057d129337e7fb8d3ff7beb36b8f754b37b4a9323a99445673b4a698804a749e224"]}]}) 8.680232403s ago: executing program 5 (id=675): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x800002, 0xfffffffd, 0x7, 0x0, 0x2, 0x1}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) capget(&(0x7f00000000c0)={0x19980330, r0}, &(0x7f0000000100)={0xfffffe00, 0x9, 0x7, 0x80000001, 0xa17, 0x8}) r1 = socket(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) 8.677283903s ago: executing program 36 (id=675): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x800002, 0xfffffffd, 0x7, 0x0, 0x2, 0x1}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) capget(&(0x7f00000000c0)={0x19980330, r0}, &(0x7f0000000100)={0xfffffe00, 0x9, 0x7, 0x80000001, 0xa17, 0x8}) r1 = socket(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) 8.493843742s ago: executing program 7 (id=677): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000140)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r0, 0x26, &(0x7f00000001c0)={0x2, 0x2, 0x9, 0x401}) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket(0x10, 0x3, 0x9) socket(0xa, 0x3, 0xff) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x800, 0xfffffffffffffffd, 0x81, 0x4, 0x8, 0x4, 0x6, 0x12, 0x400, 0x2, 0xfffffffffffffffc, 0xd, 0x6, 0x7, 0x2000100000000001, 0xfffffffffffffffe], 0x8000000, 0x4fb40}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendfile(r1, r2, 0x0, 0x7fffffffffffffff) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$x86(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000180)=[@cpuid={0x64, 0x18, {0xb, 0x43}}], 0x18}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 8.470464004s ago: executing program 7 (id=678): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000200)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0xc0189436, &(0x7f0000000280)={0x20, 0x0, 0x0, 0x60, 0x3}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x1ff) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000300), 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r3) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000400)={&(0x7f0000000440)=""/8153, 0x2000, 0x1000, 0x9, 0x2}, 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f0000002440)='./proc/thread-self/fail-nth\x00', 0x8402, 0x0) write(r5, &(0x7f0000002480)='27', 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) write$binfmt_script(0xffffffffffffffff, &(0x7f0000002500)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000012540)=[{&(0x7f0000012580)=""/156, 0x9c}], 0x53, &(0x7f0000012640)=[{&(0x7f0000012680)=""/109, 0x20001c34}], 0x1, 0x0) r7 = fsopen(&(0x7f00000024c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x0) r8 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$x86(r8, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@cpuid={0x64, 0x18, {0x80000007}}], 0x18}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 8.044154647s ago: executing program 7 (id=679): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x81, 0x0) modify_ldt$read_default(0x2, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000200)={0x70003, 0x0, {[0x10, 0xfffffffd, 0x400000000001001d, 0xfffffffffffffff6, 0x7, 0xa8, 0x400, 0xffff]}}) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_DIRTY_GFN(0x0, 0x1, &(0x7f0000000040)={0x1, 0x1fd}, 0x0, 0x10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000100)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000140)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000002c0)={0x0, 0x42cf, 0x10, 0x1, 0x81}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x800, 0x0, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x4000, 0x2, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x1000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x20, 0x1, 0x230}}], 0x1, 0x0, 0x0) r6 = syz_create_resource$futex(&(0x7f0000000500)=0x2) modify_ldt$read_default(0x2, &(0x7f0000000840)=""/11, 0xb) r7 = syz_create_resource$futex(&(0x7f0000000580)=0x2) futex(r6, 0x4, 0x0, &(0x7f0000000540), r7, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000000)="26660f3881430dc4c1796f2dff0200003e0f01c4c4e2052f47150f797ceb00c4c1a51491fdfb00000f01cab8010000000f01d926d6f2ac", 0x37}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r8) set_robust_list(0x0, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010025bd7000fcdbdf250500000005000700030000000c00018008000100", @ANYRES32=r11, @ANYBLOB="2ba428bc"], 0x28}, 0x1, 0x0, 0x0, 0x20004051}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6_vti0\x00', r11, 0x0, 0x7, 0x5, 0x2, 0x39, @private0, @remote, 0x7800, 0x27, 0x9, 0x49}}) 7.92409555s ago: executing program 7 (id=681): r0 = socket$inet6(0xa, 0x6, 0xac00) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, 0x0, &(0x7f0000000080)) 7.910435561s ago: executing program 37 (id=681): r0 = socket$inet6(0xa, 0x6, 0xac00) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, 0x0, &(0x7f0000000080)) 4.706021145s ago: executing program 3 (id=689): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000007c0)='./file0\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./tracing\x00', &(0x7f0000000840)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./tracing/events/sched/filter\x00', 0x1, 0x15d) write(r1, &(0x7f00000008c0)='\f0M', 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000005c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x59, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x8, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0xc1}}}}}]}}]}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f0000000680)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./binfmt\x00', 0x1ff) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x11, 0x3, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f00003e4000/0x2000)=nil, 0x2000, 0x2) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r7, 0x0, 0x16, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCSIG(r8, 0x40045436, 0x14) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000940), 0x800, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000b80)=ANY=[@ANYBLOB="050000000000000009000000000000000800000000000000", @ANYRES32=r7, @ANYBLOB="00000000cc00"/28, @ANYRES32=r0, @ANYBLOB="000000000600"/28, @ANYRES32=r8, @ANYBLOB="00000000040c00"/28, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r5, @ANYBLOB="00000000fcffffffffffffff00000000000000000000000000000000e80715278df8b3f90a129c040d319488bbd3ff82be0026ab8265f5ffffff43504c198a360d6403bb52d13f13fbba2d747768d804d5d50d415d6152526aaa95c9dddb75203f32b740ef19890064ab8403888bb99cbd214764c5f864f3172e110768444332ccac666c4866a28ef72c963bcc4c1e1270", @ANYRES32=r0, @ANYBLOB="000000000400"/28, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28]) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'ip6gretap0\x00', 0x0}) bind$packet(r6, &(0x7f00000002c0)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)="1fff4c4b1a6ab841880c7822b1fd8230398e09573f2feb93306e7e815574bc7c989bacb914cfb4ce10e30caa5adb7863d29bd319e041d3fac450dca6d9dbeb", 0x3f}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="20000000000000000000000007000000442a99836401010280000001010000009c00000000000000000000000753e208b628004e9c0000ad14143bac1414aa000000007f00000100000000e0720001e0000001e000000244141490000000090000040100000400fffffffc830289171dac1414bb0000fe6400007f000001ac1e0001640101008603b2443437b1ac1414bb0000ed6e00000000000000090000000000000000ac1414bb00000eb6ac1e000100000200e00000020000008000000000001800000000000000000000000800", @ANYRES32=r10, @ANYRES32=r3], 0x198}, 0x4008000) mount(0x0, &(0x7f00000000c0)='./binfmt/status\x00', &(0x7f0000000980)='cgroup\x00', 0x2883008, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./binfmt/status\x00', 0x1, 0x0) write$nsim_bool(r11, &(0x7f0000000180)='0', 0xfffffd8a) 4.343811391s ago: executing program 9 (id=691): r0 = openat$kvm(0x0, &(0x7f0000000c00), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000c40)={0x0, &(0x7f0000000000)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_create_vm={0x12d, 0x18, 0x1}], 0x60}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, 0x52, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.265912309s ago: executing program 9 (id=692): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000240), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000300), 0xffffff6a) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/27, 0x1b}, {&(0x7f0000000100)=""/170, 0xaa}], 0x2) sendfile(r0, r1, 0x0, 0xffffffff004) 4.168198539s ago: executing program 9 (id=693): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/irq/default_smp_affinity\x00', 0x1, 0x0) openat$make_it_fail(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') readv(r1, &(0x7f0000000240)=[{&(0x7f0000000280)=""/147, 0x93}], 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x1, @loopback, 0x7}, 0x1c) listen(r0, 0x45) accept4$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000001c0)=0x1c, 0x80800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24040004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0x7f}, 0x1c) 3.928016103s ago: executing program 9 (id=695): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x2, 0x401, 0xffeffffffffffffe}, {0x0, 0x2000000000000}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x32}, 0x0, @in6=@mcast2, 0x10001, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f00000001c0), 0x800001d, 0x1c) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 3.752062131s ago: executing program 9 (id=696): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x38, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'macvtap0\x00'}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x44f, 0xb304, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x24, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x42, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xfc, 0x4, 0x7}}}}}]}}]}}, 0x0) r3 = syz_clone(0x4000400, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000bc0)=0x9) ptrace(0x10, r3) ptrace$poke(0x5, r3, &(0x7f00000004c0), 0xfffffffefffffffd) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf0}}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000c40)={{r1, &(0x7f0000000140)='ns/net\x00', 0x101102, 0x0, 0x5a6, 0x0, 0x0}, 0x0, 0x0}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), r5) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x80000000000001, 0x20, 0x2, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x2000008, 0x8, 0x4, 0x0, 0x8000], 0x7000, 0x3c4210}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_control_io(r2, &(0x7f0000000680)={0x2c, &(0x7f0000000500)={0x20, 0xd, 0x52, {0x52, 0xb, "cc425891eccf6684c33f709281994a331ffdb641e444c8448a2d03a57a91bda0e6fa89f2b84cdcf7ddaf8271085fb9844a3003500cbe70b988013922a5c936fe59e9e4fba197460741bce7d374915368"}}, &(0x7f0000000580)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc07}}, &(0x7f00000005c0)={0x0, 0xf, 0x23, {0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x3, 0x8, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0xf7, "221e5b7e67930ccdc27a5bdc02987a28"}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x60, 0x2c, 0x0, "7c6c924b", "66e9091f"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x9, 0x0, 0x81, 0x3bd, 0x25}}}, &(0x7f0000000b00)={0x84, &(0x7f00000006c0)={0x40, 0x14, 0x43, "567139dc8ffd1b49cba0cd1df45fc09caebaaca05671b52100f411c5b03cc946eb34bc267367f6547a41dd8358324aa68a14f68200af24fdf680a1ba15742b732e6e84"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00\x00\x00'], &(0x7f0000000840)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0xdf}, &(0x7f00000008c0)={0x40, 0xb, 0x2, "65f7"}, &(0x7f0000000900)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000980)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000009c0)={0x40, 0x19, 0x2, "b465"}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000a40)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000a80)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000ac0)={0x40, 0x21, 0x1, 0x3}}) 3.561199811s ago: executing program 3 (id=697): openat2(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x40242, 0x0, 0x12}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$rfkill(r1, 0x0, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 3.553363641s ago: executing program 3 (id=698): r0 = socket(0x2a, 0x800, 0x81) setsockopt$MRT6_ASSERT(r0, 0x29, 0xcf, &(0x7f0000000000)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0x8, {"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", 0x1000}}, 0x1006) 3.484516888s ago: executing program 3 (id=699): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x11, &(0x7f0000000240)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000001880)={&(0x7f0000000280)={0x2, 0x4e22, @empty}, 0x10, &(0x7f00000017c0)=[{&(0x7f00000002c0)="d45271a052471eb5937295699ad305c4bba8705f744e78948ed5aa7e5b697b17dc99592eca28c8cbce31b14704601cbeb37a633371e1833b24855033e43355bd083be73d", 0x44}, {&(0x7f00000013c0)="e7fa23a2e9aa1dab05e62c0727cb3a2db172bfc86085c8", 0x17}, {&(0x7f0000001400)="425b155574432187011837620a89401df5ad449a8245ba80ea78a8c408f48bef5360cea52601461bfa9c35d0eb49485387512246614bf9ccd57617dae1bcbae004ade9e0c9e9446aa8f3d805363797046146096c3ff949182da92064e9bbf349537b0d62aed32172958bcd5e6609aef413f557bdf11d", 0x76}, {&(0x7f0000001480)="ce25bf80c0f98cd92ffa4342150458509d83a8278980d2", 0x17}, {&(0x7f00000014c0)="622d273376ebaebf7dd04825a66f3233a27bda1f3365c71636de5a4c1752444256ccd9fb7291a20ad87bc47188f4314b91ede7ba7c2848d88206c5c0bda8f5e6b69db1f0d4dff8df08fe91ac714e797605370ed1634a2e6ff1fdf7b0379dda9cb5097e05e2f99c0e7f9e4eb4aeff929bc3599669dd23364f2fc7c8244af3cd2d9fd4e13495a34b6e97f029d039f9f5a7febc88b9c6c2957212cb8b7402f0d41a7fd9183c1b94cb014952215d2c42fcdd24a05b5bc5cbf5aa8c645690fd15fb2000e6dd39a69b40da", 0xc8}, {&(0x7f00000015c0)="186b8a5f5b0ddb28a49267bf95e9080c8df7c3e7bd0bba6d802fc8ae79c3310695ef7284f94ef242532f22149fbb10912c51e8e09fa99effb96523f86d6921049ba9f1715c7db070b54eaa172d69f4b75ca1e19523998c1bf6852994b264b77a73769be003e584f4e5d5e44c4065712acb3f989c6b5b33f8ec66622f507838e7a678a34d3d2b40aed93fca5ea54c50830797802652cccbef174fdc2488243242cb02a83e2de4d3be1178786337e285630a5c1f5f07e93bee253f87a291b8abdea5bda3219755679faf6646ea50ceb3aedc4b9c2c67", 0xd5}, {&(0x7f00000016c0)="ad3e17f57aa6688994b0e92dea4f96c11360be7e761ef558078a3469c8175152cd1b8d2c7b73df55ccd2582a51944408653abed3a3e59bacf20d18cff9dd5396a98e0b0f839edd93fbe058918ce40d00897accfd7f640d7a591d4195cb5a99eb0e28a539ef8177ca7231fed2c16993e2696158fbfea3a0b908fdeffbdd9b76fa88e3f8cb7c1624e800b01ceef7d26cae8e8b10f7f2186d666f876cf29ef4037f7ffda4090bc1256ab6a56e92e0ad7138503d03e6d87701b8b909876bb06a527425c4ee8adc7695762976c9b3c8cda6eb227c16f25b677f7f5a1e46eb94f9bdcf31a21a833bb2a6f7ebff8e6af1f4d1f56a4d886024977e", 0xf7}], 0x7, &(0x7f0000001840)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xb}}], 0x18}, 0x4048900) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl(r0, 0x0, &(0x7f00000001c0)="b978d680d01765f4bd9928ae674b2c04706d224151e69b0495b48ee1c69811bcae50d0722373891587e0744db61c3ae58655b4eaaa790aa49d82742203e83dcece4fc64bf162e8f7bacfc7bc61b782b43bf0453ee43b3e9ac03812ef55700dbc") r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup(r3) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)="290000002000190f00003fffffffda060200000001e80001dd0000040d000600ea11004a35f4667d41", 0x29}], 0x1) mprotect(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1cb2d89bab22982) r5 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001980)='./file0\x00', 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000019c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x11, r5, 0x66d3c000) lsetxattr$system_posix_acl(&(0x7f0000001a00)='./file0\x00', &(0x7f0000001a40)='system.posix_acl_default\x00', &(0x7f0000001a80)=ANY=[@ANYRES8=r5], 0x24, 0x1) rmdir(&(0x7f0000001ac0)='./file0\x00') syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0}) r7 = syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000001b40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r7, 0x0, 0x0) syz_usb_control_io$rtl8150(r7, 0x0, &(0x7f0000001b80)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)={0x40, 0x5, 0x1, "ef"}}) syz_usb_control_io(r7, 0x0, 0x0) r8 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000001c00)={0x0, 0x8000000, 0x0, 0x0, 0x2a8}, &(0x7f00000000c0)=0x0, &(0x7f0000001cc0)=0x0, &(0x7f0000001d00)=0x0) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000001d40)={0x2e, 0x64, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001dc0)=@any_dev={0x4, 0xf7f, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x20}}}, &(0x7f0000001e00)) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r12) 3.008735466s ago: executing program 6 (id=702): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa0402, 0x0) (async) io_setup(0x4, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x8}]) r2 = dup3(r0, r0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) capset(&(0x7f0000000380)={0x20071026}, &(0x7f00000003c0)={0x2, 0x6, 0xc0f, 0x83, 0xffffffff}) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f000001a6c0)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async) sendto$inet6(r5, 0x0, 0x0, 0x20008044, &(0x7f000001a700)={0xa, 0x2, 0x7, @loopback, 0xfc47}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f000001a740)='veth0_to_bond\x00', 0x10) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000400)='pagemap\x00') pread64(r6, &(0x7f00000016c0)=""/102400, 0x19000, 0xffffffff8) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) (async) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x22, &(0x7f0000000580)=0x9eb9, 0x4) (async) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r4, 0x301, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4850}, 0x50) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000001600010000000000000000000a"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f000001a780)={0x0, 0x0, &(0x7f000001a7c0)=[{&(0x7f000001a800)=ANY=[@ANYBLOB="1c0000001900150000000000fcffffff0a00000000090002"], 0x1c}], 0x1}, 0x0) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) (async) fcntl$setlease(r0, 0x400, 0x1) sendmsg$NL80211_CMD_GET_MPP(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x1c, r12, 0x301, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4850}, 0x50) (async) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000001680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001640)={&(0x7f0000000600)={0x102c, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x5, 0x13}}}}, [@NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}]}, 0x102c}, 0x1, 0x0, 0x0, 0x810}, 0x4) (async) r14 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r14, 0x0, 0x0, 0x200007fd, &(0x7f0000000500)={0x2, 0x4e23, @local}, 0x10) 2.947647062s ago: executing program 6 (id=703): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x2c, 0x0, &(0x7f0000000000)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004400)={&(0x7f0000002600)=@kern={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x4040}, 0x20000041) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0xa241, 0x0) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0xfffffff9, 0x161, 0x17, "00020000f7fd00"}) r2 = syz_open_pts(r1, 0x200) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000480)) 2.273886641s ago: executing program 9 (id=704): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) openat(0xffffffffffffffff, 0x0, 0x1, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$uac3(0x0, 0x0, 0x0, &(0x7f0000000540)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x341, 0x40, 0x0, 0x8, 0x40, 0x6}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x872f39d3755cb74c}}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x5001}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) write$tun(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="03031b003000320006006300000000443aff00000000000000000000ffffac141419ff02000000000000000000000000000191"], 0xfdef) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 2.064224682s ago: executing program 6 (id=705): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002400), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r1, 0x4068aea3, &(0x7f0000002440)={0xdb, 0x0, 0x2}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@rdmsr={0x66, 0x18, {0xc0010140}}], 0x18}) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f00000000c0)={0x1, 0x0, [{0x80000001, 0x0, 0x3, 0x7, 0xfffffff9, 0xffffff27, 0x8}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000100)="66b89c008ec0b958090000b800980000ba000000000f30db8200000000c4e2699cfc66baf80cb8ebd27f8eef66bafc0cec0f06ea5c000000f100b805000000b9f3ffffff0f01c1b8010000000f01d9640fc75847", 0x54}], 0x1, 0xe, &(0x7f00000001c0), 0x0) 1.97793394s ago: executing program 6 (id=706): r0 = openat(0xffffffffffffff9c, &(0x7f0000000cc0)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000d00)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {}, [{0x2, 0x5}], {0x4, 0x7}, [], {0x10, 0x3}, {0x20, 0x4}}, 0x2c, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000200)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb2, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x10000000, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x2, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x4, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x240, 0xa4, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x4067af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x7, 0x9, 0x6, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x6, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x3, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0x200, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x8, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xbffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x24, 0x4000009, 0x81, 0xa, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r1 = creat(&(0x7f0000000680)='./file0\x00', 0x78) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000006c0)=@x86={0x0, 0x7, 0x81, 0x0, 0x430ef222, 0x1, 0x5, 0x41, 0x58, 0x1, 0xd7, 0x2f, 0x0, 0x1, 0x400, 0x3, 0x8b, 0x4, 0x7, '\x00', 0x7, 0xfffffffffffffffc}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000007c0)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000880)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f0000000000)={0xfffffffffffffcd0, r6, 'id0\x00'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000010101020000000000000000000000000c0012"], 0x30}}, 0x0) r8 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000980)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f00000009c0)=[@text32={0x20, &(0x7f0000000a00)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000a40)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) setreuid(0xffffffffffffffff, 0xee01) ioctl$KVM_CAP_HYPERV_SYNIC(r1, 0x4068aea3, &(0x7f0000000a80)) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000140)=@x86={0x0, 0x9, 0x0, 0x0, 0x7, 0x6, 0x5, 0x0, 0x5e, 0x1, 0x4, 0xb1, 0x0, 0x9, 0x0, 0x4, 0x6b, 0x5c, 0xd, '\x00', 0x4, 0x8}) fchmodat(0xffffffffffffff9c, &(0x7f0000000d80)='.\x00', 0xfffffffb) 1.889916519s ago: executing program 3 (id=707): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000012c0)=[@text32={0x20, 0x0}], 0x1, 0x2, 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe6042, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) (async) r6 = open(&(0x7f0000000080)='./mnt/../file0\x00', 0x14927e, 0x11) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r6, 0x0) fallocate(r6, 0x0, 0x0, 0x1000f4) (async) ioctl$KVM_GET_PIT2(r6, 0x8070ae9f, &(0x7f0000000140)) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x6) (async) mount(&(0x7f0000000380)=@sr0, &(0x7f00000003c0)='./mnt/../file0\x00', &(0x7f0000000400)='devpts\x00', 0x420, &(0x7f0000000440)='&\x00') (async) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x52, &(0x7f0000000100)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) (async) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000480)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x4}, 0x1c) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'veth0_macvtap\x00', 0x0}) bind$packet(r7, &(0x7f0000000500)={0x11, 0x0, r8, 0x1, 0x6, 0x6, @remote}, 0x14) sendmmsg$sock(r7, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@mark={{0x14, 0x1, 0x24, 0x9}}], 0x18}}], 0x2, 0x20000040) (async) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r7, 0x4002f516, &(0x7f0000000600)={0x9, 0xf9}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x120, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x5}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x92}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x67}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x80000000}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x3}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xb}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, @IPSET_ATTR_PROTO={0x5}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfff}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x120}, 0x1, 0x0, 0x0, 0x2004c040}, 0x20000000) 1.78006475s ago: executing program 3 (id=708): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) openat$kvm(0xffffff9c, &(0x7f0000000080), 0x8800, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xa3) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000001c0)={0x10004, 0x2, 0x2000, 0x1000, &(0x7f00000b6000/0x1000)=nil}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfe}}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @rand_addr=0x1}, 0x2, 0x4}}, 0x26) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000200)={[{0x5a, 0x8, 0xc2, 0x4f, 0x0, 0x1, 0x80, 0x1, 0x7f, 0x44, 0x8, 0x0, 0x9}, {0xb, 0xa7f2, 0x6, 0x8, 0x9, 0xff, 0x5, 0x3, 0xa, 0x15, 0x22, 0x6, 0x1}, {0x1ff, 0x7, 0xd, 0x0, 0x0, 0x9, 0x0, 0xfb, 0x4, 0x15, 0x0, 0x6a, 0x4}], 0x9}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000280)={r5, 0x0, {0x2a12, 0x80010000, 0x0, 0x80000001, 0x100004, 0x0, 0x0, 0xe, 0x5, "fee8a2ab78fc179fd1f809000100aca7ca44c6a4b3e00d9683dda1af01000000c0ff12001000000000000000000300", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102006000000e444000017123c00", [0xe0, 0x40000001]}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000107c0)={[0xfffffffffffffffe, 0x5, 0xfffffffffffffffd, 0x0, 0x2, 0xfffffffffffffffd, 0x4002004c4, 0x1003, 0x0, 0x1, 0x10, 0xffffffffffffffff, 0x401, 0x10, 0x2, 0xffffffffffffffff], 0xeeef0000, 0x2010d1}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_usb_connect(0x0, 0x2e, &(0x7f0000000400)=ANY=[@ANYRESOCT=r4], 0x0) getrandom(&(0x7f0000000480)=""/286, 0xffffff9a, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/mem_sleep', 0x400, 0x80) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x402) mlock(&(0x7f000037a000/0x3000)=nil, 0x3000) r7 = creat(&(0x7f00000005c0)='./bus\x00', 0x181) write$cgroup_int(r7, &(0x7f0000000600), 0xfffffdd8) madvise(&(0x7f000003a000/0x2000)=nil, 0x2000, 0x3) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r8 = inotify_init1(0x800) sync_file_range(r8, 0xfffffffffffff800, 0x10004, 0x5) 1.566077482s ago: executing program 8 (id=710): syz_io_uring_setup(0x626f, &(0x7f0000000600)={0x0, 0x3b40, 0x8, 0xffffffff, 0x2b7}, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000840)={'team_slave_0\x00', &(0x7f0000000880)=@ethtool_sset_info={0x1e, 0x0, 0x101}}) r2 = socket$inet(0x2, 0x801, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000140)={0x2, 0x4e23, @empty}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000180)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x400, @loopback}}}, 0x108) sendto$inet(r2, &(0x7f00000002c0)="ee", 0x1, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00000004c0)="f7dd2d1b6669366fc07f5db14899a7f871adf8a722e0f91b47fc600ab556d28c0479aae71d67d211f238b6ef552935f81dbb77dc066dcd4f72ce1d5a1578657a67b4b6b6bb029fefe7e0c0ced952e565b3947e4374ebbaba04", 0x59, 0x4, &(0x7f0000000540)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtaction={0x44, 0x32, 0xc20bc6c7745b97d7, 0x70bd29, 0x25dfdbfc, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x3, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x0, 0x3, 0x101}, @TCA_IPT_TARG={0x0, 0x6, {0xba15, 'security\x00', 0xdb, 0x4, "7235abc3ea74ebfe13207f3546e4fab4397e89d456e50ff5de907536ebdc"}}, @TCA_IPT_TABLE={0x0, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x0, 0x3, 0x2}, @TCA_IPT_TABLE={0x0, 0x1, 'filter\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x6400c041}, 0x9080) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x4) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000040)=@arm64={0x3, 0x0, 0x5, '\x00', 0x8}) r7 = syz_open_procfs$userns(0x0, &(0x7f0000000300)) ioctl$NS_GET_NSTYPE(r7, 0xb703, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./dev\x00', &(0x7f00000007c0)='devtmpfs\x00', 0x0, 0x0) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, r8, 0x3000008, 0x10, r6, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/sda\x00', 0x2, 0x0) ioctl$IOC_PR_CLEAR(r9, 0x401070cd, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r10, 0x29, 0x41, &(0x7f0000000580)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$KVM_SET_GUEST_DEBUG_x86(r6, 0x4048ae9b, &(0x7f0000000080)={0x1c0000, 0x0, {[0x2, 0x7, 0x4, 0x5, 0x5, 0x7ff, 0xfffffffffffffff8, 0x8000000cbe8]}}) 1.39207623s ago: executing program 8 (id=711): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000080)=0x20800001, 0x4) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f00000000c0)=0x1, 0x4) (async) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x87, @private2, 0x8000}, 0x1c) (async) r4 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0xc, 0x0, 0xfec00000}) syz_kvm_add_vcpu$x86(r4, &(0x7f0000000200)={0x0, &(0x7f0000000240)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x29, {0x0, "48b80000c0fe00000000488b18488b18f4"}}, @nested_vmlaunch={0x12f, 0x18}], 0x71}) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0xa27}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) r7 = socket$inet_tcp(0x2, 0x1, 0x6) r8 = socket$inet_tcp(0x2, 0x1, 0x6) (async, rerun: 64) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000380)=0x800, 0x4) (rerun: 64) bind$inet(r7, &(0x7f00000003c0)={0x2, 0x4e24, @loopback}, 0x10) (async) listen(r7, 0x5) (async) connect$inet(r8, &(0x7f0000000400)={0x2, 0x4e24, @loopback}, 0x10) (async) accept$inet(r7, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000440), 0x4) 1.281767181s ago: executing program 8 (id=712): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0x4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x200000, 0x1, 0x0, 0xb, 0x7, 0x4f2}, 0x20) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x30, r1, 0x1, 0x70bd26, 0x25dfdc00, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x234e}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) 1.260873933s ago: executing program 8 (id=713): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, 0x0, &(0x7f0000000000)=0x28) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) io_setup(0x8, &(0x7f0000000040)=0x0) io_submit(r1, 0x0, 0x0) (async) r2 = openat$binfmt_register(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r2, &(0x7f00000000c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x7, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '', 0x3a, './file0'}, 0x12f) openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r4 = openat$kvm(0xffffff9c, &(0x7f0000000280), 0x8000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x380}) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) (async) mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x1000004, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000400)='100', 0x3) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000740)=[{&(0x7f0000000480)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f003f0041010000aa11f6bbf44d00000000008984", 0x39}], 0x1) 1.204089058s ago: executing program 8 (id=714): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) socket$inet(0x2, 0xa, 0x1) (async) prlimit64(0x0, 0xb, &(0x7f0000000040), 0x0) (async) r0 = gettid() rt_sigqueueinfo(r0, 0x21, &(0x7f0000000100)={0x41, 0x2df9, 0x8}) (async) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000000540)={0x2020}, 0x2020) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000025c0)={0x2, &(0x7f0000002580)=[{0x140, 0x3, 0x40, 0xffffffff}, {0x40, 0x40, 0x2, 0xb}]}, 0x10) (async) socket(0x1e, 0x805, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="d36f69163199bac8000000", @ANYRES16=0x0, @ANYBLOB="00002dbd7000fcdbdf2541000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000"], 0xc8}, 0x1, 0x0, 0x0, 0x24000840}, 0x4844) (async) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r3, 0x1}, 0x1c}}, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x3) (async) r4 = socket$netlink(0x10, 0x3, 0x4) (async) r5 = socket$netlink(0x10, 0x3, 0x0) fcntl$getown(r5, 0x9) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab00070000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd0000000c0001000a0c100000000000224e0000", 0x58}], 0x1) 1.202212319s ago: executing program 8 (id=715): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x3, 0x0, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002c80)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000002d00)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000002d40)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000002d80)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000002e00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x204}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdf0b, 0x2, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2ba}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r3, 0x10000000005, 0x0) r4 = syz_usb_connect$midi(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201500200000020cd0cb100400001020301090212000101a70000090400000001030003"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r4, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0003ff2d260329b71af2c7af2fcc13e84a1d6c03070000"]}, 0x0) syz_usb_control_io$uac3(r4, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, r5, 0x28f43000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps_rollup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000002ac0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = epoll_create1(0x0) epoll_wait(r7, &(0x7f0000002b00)=[{}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r6, &(0x7f0000000a80)={0x2020}, 0x2020) pipe(&(0x7f0000002b40)={0xffffffffffffffff}) fchmod(r8, 0x2) r9 = syz_open_procfs(0x0, &(0x7f0000002b80)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000002bc0)='.\x00', &(0x7f0000002c00), 0x0, &(0x7f0000002c40)={'trans=fd,', {'rfdno', 0x3d, r9}}) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)={0x20, 0x9, 0xc6, "8742266c31a4170936c13a3af0a61026d9d8dc6bcb89fa80b9f94b30774be9cd479dfde55bc6eeec9232684444f2683f20e3615287284d88f4cfdb0b19153d1f3086ec5aa2f814af636909cef5d81a46cb4faf8cc7714ddb3bb0ce0fee53569a381431ce8d27ce99b04c5ef64b989151817e8143e7c88f63513156bb8e51327c64badac8894b1e411bb59ca9b807af020138fc49300ecb1259239a4c90cb4a597183aab6d33a71343f98ce4defe38b3dd060f927ea65e5e07a08f2f1259063c47c36c50e810c"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x2a}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000880)={0x20, 0x80, 0x1c, {0xa, 0x6368, 0x0, 0x7fff, 0x8, 0x6, 0x1af, 0x2, 0x3, 0x9, 0xf000, 0xf26}}, &(0x7f00000008c0)={0x20, 0x85, 0x4, 0xb}, &(0x7f0000000900)={0x20, 0x83, 0x2}, &(0x7f0000000940)={0x20, 0x87, 0x2, 0x40}, &(0x7f0000000980)={0x20, 0x89, 0x2}}) 987.85413ms ago: executing program 6 (id=716): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000700)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='oom_score_adj\x00') write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000c80)={0x30, 0x5, 0x0, {0x0, 0x2, 0x5, 0x6}}, 0x30) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000cc0)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000dc0)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000e00)=[@text32={0x20, &(0x7f0000000e40)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000e80)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = getpid() r11 = syz_pidfd_open(r10, 0x0) setns(r11, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x9000, &(0x7f0000000040)={0x0, 0x87, 0x100000}, 0x20) ioctl$KVM_CAP_SPLIT_IRQCHIP(r9, 0x4068aea3, &(0x7f0000000300)={0x79, 0x0, 0x78b}) r12 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r12, 0xc008aec1, &(0x7f0000000540)={0xa, 0x0, [{0x8000000e, 0x0, 0x1, 0x7, 0x200, 0x8, 0x3}, {0x4000001a, 0x0, 0x5, 0x4, 0x3, 0xcf16, 0x1}, {0xa, 0x306758ba, 0x0, 0x2d, 0x2, 0x332, 0x3}, {0x80000008, 0x3, 0x0, 0x80000000, 0x9, 0xffffffbc, 0x1}, {0x4, 0x8, 0x7, 0x1, 0xff, 0x7, 0x3}, {0x1, 0x8000000, 0x4, 0x0, 0x46f3cfb8, 0xc32, 0x8}, {0x80000007, 0x4, 0x7, 0x9, 0x8, 0x0, 0x200}, {0x40000001, 0x0, 0x1, 0xa0000000, 0x1, 0x3, 0x6}, {0x2, 0x101, 0xa, 0x7, 0x1000, 0x6, 0xc}, {0xc0000000, 0xffff, 0x6, 0x767c, 0x9bfc, 0x2f67, 0xf9b}]}) 0s ago: executing program 6 (id=717): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000200)={0x0, 0x0, 0x10001, 0x5}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x20) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000280)="baa000ec6666f20f3066b9f508000066b8536bac1766badac1fc4a0f300f01c83e660f4c8f5f866626660f7ffb653e0f0133660f38815e0d67260fc77801baf80c66b84cbf5a8666efbafc0c66ed", 0x4e}], 0x1, 0x49, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000300)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, 0x0, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x28040041, &(0x7f0000000380)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="17", 0x1d}], 0x1}, 0x8c0) recvmmsg(r3, &(0x7f0000000480), 0x40000000000026c, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f00000004c0)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e20, 0x100bf28, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0xfffff805}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x3d, 0x4088010, 0x0, 0x0) unshare(0xfe060000) r4 = add_key(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r5 = add_key(&(0x7f0000000600)='asymmetric\x00', 0x0, &(0x7f0000000640)="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", 0x559, r4) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000bc0)={r5}, &(0x7f0000000c00)=ANY=[@ANYBLOB='enc=pkcs1 hash=md5)\x00'/50], 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x22, &(0x7f0000000000), 0x4) setsockopt$sock_int(r6, 0x1, 0x31, &(0x7f0000000180), 0x4) bind$inet6(r6, &(0x7f00000001c0)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) kernel console output (not intermixed with test programs): 11723.450:901): avc: denied { create } for pid=1950 comm="syz.3.449" name="mnt" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 77.098781][ T36] audit: type=1400 audit(1794311723.450:902): avc: denied { associate } for pid=1950 comm="syz.3.449" name="mnt" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 77.190534][ T36] audit: type=1400 audit(1794311723.450:903): avc: denied { write } for pid=1950 comm="syz.3.449" name="mnt" dev="tmpfs" ino=492 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 77.202740][ T458] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 77.282354][ T36] audit: type=1400 audit(1794311723.450:904): avc: denied { add_name } for pid=1950 comm="syz.3.449" name="proc_dir" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 77.375810][ T458] usb 5-1: USB disconnect, device number 20 [ 77.383525][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 77.499784][ T36] audit: type=1400 audit(1794311723.450:905): avc: denied { mounton } for pid=1950 comm="syz.3.449" path="/81/mnt/proc_dir" dev="tmpfs" ino=493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 77.500110][ T36] audit: type=1400 audit(1794311723.630:906): avc: denied { remove_name } for pid=297 comm="syz-executor" name="proc_dir" dev="tmpfs" ino=493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 77.608965][ T10] usb 6-1: USB disconnect, device number 13 [ 77.621063][ T36] audit: type=1400 audit(1794311723.630:907): avc: denied { rmdir } for pid=297 comm="syz-executor" name="proc_dir" dev="tmpfs" ino=493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 77.709455][ T1959] 9pnet_fd: Insufficient options for proto=fd [ 78.204521][ T458] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 78.264368][ T854] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 78.374504][ T340] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 78.414346][ T854] usb 6-1: Using ep0 maxpacket: 32 [ 78.420595][ T854] usb 6-1: config 6 has an invalid interface number: 251 but max is 1 [ 78.428980][ T854] usb 6-1: config 6 has an invalid interface number: 9 but max is 1 [ 78.437079][ T854] usb 6-1: config 6 has no interface number 0 [ 78.443166][ T854] usb 6-1: config 6 has no interface number 1 [ 78.449405][ T854] usb 6-1: config 6 interface 251 has no altsetting 0 [ 78.456292][ T854] usb 6-1: config 6 interface 9 has no altsetting 0 [ 78.464205][ T854] usb 6-1: New USB device found, idVendor=05ac, idProduct=1402, bcdDevice=e9.d2 [ 78.473289][ T854] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.481355][ T854] usb 6-1: Product: syz [ 78.485598][ T854] usb 6-1: Manufacturer: syz [ 78.490201][ T854] usb 6-1: SerialNumber: syz [ 78.514380][ T340] usb 5-1: device descriptor read/64, error -71 [ 78.696532][ T1978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.705099][ T1978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.754380][ T340] usb 5-1: device descriptor read/64, error -71 [ 78.885509][ T1989] ./dev/sda1: Can't lookup blockdev [ 78.916203][ T854] asix 6-1:6.251: probe with driver asix failed with error -22 [ 78.926638][ T854] asix 6-1:6.9: probe with driver asix failed with error -22 [ 78.935548][ T854] usb 6-1: USB disconnect, device number 14 [ 78.994406][ T340] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 79.124354][ T340] usb 5-1: device descriptor read/64, error -71 [ 79.364398][ T340] usb 5-1: device descriptor read/64, error -71 [ 79.410977][ T1995] netlink: 'syz.1.463': attribute type 4 has an invalid length. [ 79.418747][ T1995] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.463'. [ 79.474554][ T340] usb usb5-port1: attempt power cycle [ 79.544809][ T36] audit: type=1400 audit(1794311725.990:908): avc: denied { ioctl } for pid=1979 comm="syz.4.458" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.569673][ T36] audit: type=1400 audit(1794311725.990:909): avc: denied { read write } for pid=2001 comm="syz.5.466" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.784367][ T1816] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 79.814362][ T340] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 79.835295][ T340] usb 5-1: device descriptor read/8, error -71 [ 79.914385][ T1816] usb 6-1: device descriptor read/64, error -71 [ 79.965456][ T340] usb 5-1: device descriptor read/8, error -71 [ 80.154558][ T1816] usb 6-1: device descriptor read/64, error -71 [ 80.214339][ T340] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 80.235320][ T340] usb 5-1: device descriptor read/8, error -71 [ 80.365281][ T340] usb 5-1: device descriptor read/8, error -71 [ 80.394351][ T1816] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 80.474439][ T340] usb usb5-port1: unable to enumerate USB device [ 80.524362][ T1816] usb 6-1: device descriptor read/64, error -71 [ 80.764392][ T1816] usb 6-1: device descriptor read/64, error -71 [ 80.885733][ T1816] usb usb6-port1: attempt power cycle [ 81.132849][ T2035] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 81.141109][ T2035] rust_binder: Read failure Err(EFAULT) in pid:210 [ 81.148331][ T2035] rust_binder: Write failure EFAULT in pid:210 [ 81.234355][ T1816] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 81.256250][ T1816] usb 6-1: device descriptor read/8, error -71 [ 81.385366][ T1816] usb 6-1: device descriptor read/8, error -71 [ 81.504461][ T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 81.624362][ T1816] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 81.645434][ T1816] usb 6-1: device descriptor read/8, error -71 [ 81.654450][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 81.660625][ T10] usb 5-1: config 0 has an invalid interface number: 98 but max is 0 [ 81.668942][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.679297][ T10] usb 5-1: config 0 has no interface number 0 [ 81.685472][ T10] usb 5-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 81.695317][ T10] usb 5-1: config 0 interface 98 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 81.708232][ T10] usb 5-1: config 0 interface 98 has no altsetting 0 [ 81.716316][ T10] usb 5-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 81.725388][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.733383][ T10] usb 5-1: Product: syz [ 81.737579][ T10] usb 5-1: Manufacturer: syz [ 81.742166][ T10] usb 5-1: SerialNumber: syz [ 81.747338][ T10] usb 5-1: config 0 descriptor?? [ 81.753382][ T2047] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 81.761153][ T10] asix 5-1:0.98: probe with driver asix failed with error -22 [ 81.775363][ T1816] usb 6-1: device descriptor read/8, error -71 [ 81.792864][ T340] rust_binder: 2017: undelivered TRANSACTION_COMPLETE [ 81.800226][ T10] rust_binder: 2017: undelivered transaction 9, process died [ 81.884444][ T1816] usb usb6-port1: unable to enumerate USB device [ 81.914532][ T2052] ip6_vti0: left promiscuous mode [ 81.919726][ T2052] ip6_vti0: left allmulticast mode [ 82.005174][ T2060] netlink: 'syz.1.483': attribute type 12 has an invalid length. [ 82.884369][ T458] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 82.944372][ T1816] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 83.035382][ T458] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.046516][ T458] usb 4-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.059532][ T458] usb 4-1: config 0 interface 0 has no altsetting 0 [ 83.066806][ T458] usb 4-1: New USB device found, idVendor=056a, idProduct=0069, bcdDevice= 0.00 [ 83.075897][ T458] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 83.083892][ T458] usb 4-1: Product: syz [ 83.088672][ T458] usb 4-1: config 0 descriptor?? [ 83.095529][ T1816] usb 6-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.106635][ T1816] usb 6-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.119639][ T1816] usb 6-1: config 0 interface 0 has no altsetting 0 [ 83.126261][ T1816] usb 6-1: New USB device found, idVendor=056a, idProduct=0069, bcdDevice= 0.00 [ 83.135324][ T1816] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.143862][ T1816] usb 6-1: config 0 descriptor?? [ 83.501208][ T458] usbhid 4-1:0.0: can't add hid device: -71 [ 83.507249][ T458] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 83.516055][ T458] usb 4-1: USB disconnect, device number 29 [ 83.552141][ T1816] wacom 0003:056A:0069.0006: unknown main item tag 0x0 [ 83.559137][ T1816] wacom 0003:056A:0069.0006: unknown main item tag 0x0 [ 83.566410][ T1816] wacom 0003:056A:0069.0006: Unknown device_type for 'HID 056a:0069'. Assuming pen. [ 83.576357][ T1816] wacom 0003:056A:0069.0006: hidraw0: USB HID v0.00 Device [HID 056a:0069] on usb-dummy_hcd.5-1/input0 [ 83.588753][ T1816] input: Wacom Bamboo1 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:0069.0006/input/input10 [ 83.754113][ T458] usb 6-1: USB disconnect, device number 19 [ 83.808368][ T2088] overlayfs: failed to clone upperpath [ 83.816608][ T2093] overlayfs: failed to resolve './file0': -2 [ 84.326198][ T36] kauditd_printk_skb: 99 callbacks suppressed [ 84.326216][ T36] audit: type=1400 audit(1794311730.770:1009): avc: denied { read write } for pid=2113 comm="syz.5.497" name="file1" dev="tmpfs" ino=367 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 84.355334][ T36] audit: type=1400 audit(1794311730.770:1010): avc: denied { open } for pid=2113 comm="syz.5.497" path="/62/file1" dev="tmpfs" ino=367 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 84.390223][ T1816] usb 5-1: USB disconnect, device number 25 [ 84.423395][ T2125] tmpfs: Unsupported parameter 'mpol' [ 84.684400][ T458] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 84.834383][ T458] usb 6-1: Using ep0 maxpacket: 16 [ 84.840670][ T458] usb 6-1: config 0 has an invalid interface number: 98 but max is 0 [ 84.848797][ T458] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.858891][ T458] usb 6-1: config 0 has no interface number 0 [ 84.865009][ T458] usb 6-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 84.874842][ T458] usb 6-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 84.884761][ T458] usb 6-1: config 0 interface 98 has no altsetting 0 [ 84.892786][ T458] usb 6-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 84.901893][ T458] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.909902][ T458] usb 6-1: Product: syz [ 84.914045][ T458] usb 6-1: Manufacturer: syz [ 84.918642][ T458] usb 6-1: SerialNumber: syz [ 84.923720][ T458] usb 6-1: config 0 descriptor?? [ 84.928992][ T2127] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 84.936385][ T2127] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 84.974968][ T36] audit: type=1400 audit(1794311731.420:1011): avc: denied { write } for pid=2139 comm="syz.4.507" name="igmp" dev="proc" ino=4026532850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 85.024417][ T504] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 85.032049][ T36] audit: type=1326 audit(1794311731.460:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2141 comm="syz.4.508" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffadffa8f19 code=0x0 [ 85.056731][ T36] audit: type=1326 audit(1794311731.460:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2141 comm="syz.4.508" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffadffa8f19 code=0x0 [ 85.083699][ T2144] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 85.097883][ T2144] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 85.112005][ T2144] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 85.144458][ T2127] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 85.151645][ T2127] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 85.204581][ T504] usb 4-1: Using ep0 maxpacket: 8 [ 85.210739][ T504] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.221065][ T504] usb 4-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 85.230141][ T504] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.238795][ T504] usb 4-1: config 0 descriptor?? [ 85.245254][ T504] usb 4-1: bad CDC descriptors [ 85.334358][ T1816] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 85.446515][ T504] usb 4-1: USB disconnect, device number 30 [ 85.484355][ T1816] usb 5-1: Invalid ep0 maxpacket: 64 [ 85.614397][ T1816] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 85.764356][ T1816] usb 5-1: Invalid ep0 maxpacket: 64 [ 85.769891][ T1816] usb usb5-port1: attempt power cycle [ 85.956862][ T36] audit: type=1326 audit(1794311732.400:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2147 comm="syz.3.509" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8513da8f19 code=0x0 [ 85.984903][ T2127] fuse: Unknown parameter 'roo' [ 85.990845][ T458] asix 6-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 86.001003][ T458] asix 6-1:0.98 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 86.012015][ T458] asix 6-1:0.98: probe with driver asix failed with error -71 [ 86.021934][ T458] usb 6-1: USB disconnect, device number 20 [ 86.114394][ T1816] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 86.134748][ T1816] usb 5-1: Invalid ep0 maxpacket: 64 [ 86.264376][ T1816] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 86.284747][ T1816] usb 5-1: Invalid ep0 maxpacket: 64 [ 86.290779][ T1816] usb usb5-port1: unable to enumerate USB device [ 86.520315][ T2151] netlink: 'syz.5.510': attribute type 4 has an invalid length. [ 86.528007][ T2151] netlink: 'syz.5.510': attribute type 5 has an invalid length. [ 86.535812][ T2151] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.510'. [ 86.884384][ T1816] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 87.044393][ T1816] usb 6-1: Using ep0 maxpacket: 16 [ 87.050643][ T1816] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.060755][ T1816] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 87.070968][ T1816] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 87.080060][ T1816] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.088055][ T1816] usb 6-1: Product: syz [ 87.092217][ T1816] usb 6-1: Manufacturer: syz [ 87.096823][ T1816] usb 6-1: SerialNumber: syz [ 87.304919][ T1816] usb 6-1: 0:2 : does not exist [ 87.311715][ T1816] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 87.322159][ T1816] usb 6-1: USB disconnect, device number 21 [ 87.734392][ T1816] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 87.853606][ T2181] netlink: 'syz.5.519': attribute type 12 has an invalid length. [ 87.886781][ T1816] usb 4-1: Using ep0 maxpacket: 16 [ 87.893120][ T1816] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 87.901280][ T1816] usb 4-1: config 0 has no interface number 0 [ 87.907580][ T1816] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 87.917871][ T1816] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 87.929158][ T1816] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 87.938228][ T1816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.946376][ T1816] usb 4-1: Product: syz [ 87.950541][ T1816] usb 4-1: Manufacturer: syz [ 87.955365][ T1816] usb 4-1: SerialNumber: syz [ 87.960946][ T1816] usb 4-1: config 0 descriptor?? [ 87.966431][ T2179] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 87.973616][ T2179] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 88.130869][ T65] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 88.145604][ T2200] overlay: ./bus is not a directory [ 88.151343][ T2200] incfs: Error accessing: ./bus. [ 88.156627][ T2200] incfs: mount failed -20 [ 88.181773][ T2179] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 88.189173][ T2179] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 88.284366][ T65] usb 6-1: Using ep0 maxpacket: 32 [ 88.295042][ T65] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 88.303263][ T65] usb 6-1: config 0 has no interface number 0 [ 88.309536][ T65] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 88.319753][ T65] usb 6-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 88.329852][ T65] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 88.339956][ T65] usb 6-1: config 0 interface 196 has no altsetting 0 [ 88.348370][ T65] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 88.357673][ T65] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.365907][ T65] usb 6-1: Product: syz [ 88.370172][ T65] usb 6-1: Manufacturer: syz [ 88.375026][ T65] usb 6-1: SerialNumber: syz [ 88.380697][ T65] usb 6-1: config 0 descriptor?? [ 88.386251][ T2183] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 88.404371][ T1816] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 88.424355][ T45] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 88.424412][ T1816] asix 4-1:0.34: probe with driver asix failed with error -61 [ 88.575456][ T45] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 88.586523][ T45] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 88.597405][ T45] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 88.608335][ T45] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 88.620446][ T45] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 88.629803][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.637838][ T45] usb 5-1: Product: syz [ 88.642000][ T45] usb 5-1: Manufacturer: syz [ 88.646608][ T45] usb 5-1: SerialNumber: syz [ 88.652194][ T2202] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 88.659952][ T45] cdc_mbim 5-1:1.0: skipping garbage [ 88.756828][ T2213] overlayfs: failed to clone lowerpath [ 88.756986][ T2214] overlayfs: failed to clone lowerpath [ 88.828071][ T2183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.836636][ T2183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.860756][ T2202] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 88.868153][ T2202] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 89.124798][ T65] ipheth 6-1:0.196: ipheth_get_macaddr: usb_control_msg: -110 [ 89.132385][ T65] ipheth 6-1:0.196: probe with driver ipheth failed with error -110 [ 89.476364][ T2202] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 89.483608][ T2202] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 89.491017][ T45] cdc_mbim 5-1:1.0: setting tx_max = 184 [ 89.497260][ T45] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 89.504065][ T45] wwan wwan0: port wwan0mbim0 attached [ 89.511058][ T45] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 6e:89:2f:c9:99:ee [ 89.611920][ T150] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 89.693751][ T2202] netlink: 24 bytes leftover after parsing attributes in process `syz.4.526'. [ 89.703532][ T2202] 9pnet_fd: p9_fd_create_tcp (2202): problem connecting socket to 127.0.0.1 [ 89.712937][ T2202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.721441][ T2202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.730155][ T36] audit: type=1400 audit(1794311736.180:1015): avc: denied { read write } for pid=2201 comm="syz.4.526" name="cdc-wdm0" dev="devtmpfs" ino=605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 89.730412][ C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 89.754448][ T36] audit: type=1400 audit(1794311736.180:1016): avc: denied { open } for pid=2201 comm="syz.4.526" path="/dev/cdc-wdm0" dev="devtmpfs" ino=605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 89.760557][ C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 89.760609][ C1] cdc_mbim 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 89.799943][ T1816] usb 5-1: USB disconnect, device number 30 [ 89.806254][ T1816] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 89.815772][ T1816] cdc_mbim 5-1:1.0 wwan0: failed to kill vid 0081/0 [ 89.852325][ T1816] wwan wwan0: port wwan0mbim0 disconnected [ 90.393366][ T2265] x_tables: unsorted underflow at hook 2 [ 90.504479][ T1816] usb 4-1: USB disconnect, device number 31 [ 90.644363][ T458] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 90.795433][ T458] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.805621][ T458] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.817976][ T458] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 90.827063][ T458] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.835069][ T458] usb 5-1: Product: syz [ 90.839291][ T458] usb 5-1: Manufacturer: syz [ 90.843870][ T458] usb 5-1: SerialNumber: syz [ 90.850363][ T458] usb 5-1: selecting invalid altsetting 1 [ 90.889917][ T45] usb 6-1: USB disconnect, device number 22 [ 91.251190][ T458] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 91.257809][ T458] cdc_ncm 5-1:1.0: bind() failure [ 91.282996][ T2265] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=34144515 (68289030 ns) > initial count (548 ns). Using initial count to start timer. [ 91.300947][ T2265] FAULT_INJECTION: forcing a failure. [ 91.300947][ T2265] name failslab, interval 1, probability 0, space 0, times 0 [ 91.313676][ T2265] CPU: 1 UID: 0 PID: 2265 Comm: syz.4.529 Not tainted syzkaller #0 ba02342e74ad0b66e51a5e2165c9258878cd70c0 [ 91.313703][ T2265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 91.313715][ T2265] Call Trace: [ 91.313722][ T2265] [ 91.313729][ T2265] __dump_stack+0x21/0x30 [ 91.313751][ T2265] dump_stack_lvl+0x140/0x1c0 [ 91.313771][ T2265] ? __cfi_dump_stack_lvl+0x10/0x10 [ 91.313790][ T2265] ? update_entity_lag+0x334/0x370 [ 91.313813][ T2265] dump_stack+0x19/0x20 [ 91.313829][ T2265] should_fail_ex+0x3c2/0x510 [ 91.313846][ T2265] ? sock_kmalloc+0xde/0x1e0 [ 91.313869][ T2265] should_failslab+0xac/0x100 [ 91.313889][ T2265] __kmalloc_noprof+0x69/0x510 [ 91.313914][ T2265] ? sock_kmalloc+0xde/0x1e0 [ 91.313938][ T2265] sock_kmalloc+0xde/0x1e0 [ 91.313960][ T2265] __ipv6_sock_mc_join+0x2fe/0x610 [ 91.313985][ T2265] ipv6_sock_mc_join_ssm+0x2f/0x40 [ 91.314006][ T2265] do_ipv6_mcast_group_source+0x3e0/0x4d0 [ 91.314027][ T2265] ? ipv6_mcast_join_leave+0x250/0x250 [ 91.314050][ T2265] ? __switch_to+0xc6b/0x1320 [ 91.314070][ T2265] ? __perf_event_task_sched_out+0x1d9/0xba0 [ 91.314089][ T2265] ? __cfi___perf_event_task_sched_in+0x10/0x10 [ 91.314108][ T2265] ? __cfi___switch_to+0x10/0x10 [ 91.314126][ T2265] ? __cfi___perf_event_task_sched_out+0x10/0x10 [ 91.314147][ T2265] ? __kasan_check_write+0x18/0x20 [ 91.314170][ T2265] ? _raw_spin_lock_bh+0x96/0x130 [ 91.314193][ T2265] do_ipv6_setsockopt+0x181f/0x3350 [ 91.314238][ T2265] ? __cfi_do_ipv6_setsockopt+0x10/0x10 [ 91.314264][ T2265] ? avc_has_perm_noaudit+0x26b/0x360 [ 91.314289][ T2265] ? __asan_memcpy+0x5a/0x80 [ 91.314315][ T2265] ? avc_has_perm_noaudit+0x289/0x360 [ 91.314337][ T2265] ? avc_has_perm+0x155/0x240 [ 91.314357][ T2265] ? __cfi_avc_has_perm+0x10/0x10 [ 91.314376][ T2265] ? futex_wake+0x666/0x950 [ 91.314402][ T2265] ? selinux_socket_setsockopt+0x324/0x3d0 [ 91.314425][ T2265] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 91.314448][ T2265] ipv6_setsockopt+0x5d/0x170 [ 91.314471][ T2265] udpv6_setsockopt+0xa3/0xc0 [ 91.314490][ T2265] sock_common_setsockopt+0xb8/0xd0 [ 91.314508][ T2265] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 91.314527][ T2265] do_sock_setsockopt+0x27c/0x410 [ 91.314550][ T2265] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 91.314573][ T2265] ? __fget_files+0x2bc/0x330 [ 91.314593][ T2265] __x64_sys_setsockopt+0x18c/0x220 [ 91.314616][ T2265] x64_sys_call+0x2adc/0x2ee0 [ 91.314634][ T2265] do_syscall_64+0x57/0xf0 [ 91.314651][ T2265] ? clear_bhb_loop+0x50/0xa0 [ 91.314674][ T2265] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 91.314697][ T2265] RIP: 0033:0x7ffadffa8f19 [ 91.314713][ T2265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.314729][ T2265] RSP: 002b:00007ffae0ec9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 91.314748][ T2265] RAX: ffffffffffffffda RBX: 00007ffae0225fa0 RCX: 00007ffadffa8f19 [ 91.314762][ T2265] RDX: 000000000000002e RSI: 0000000000000029 RDI: 000000000000000b [ 91.314773][ T2265] RBP: 00007ffae0037f6d R08: 0000000000000108 R09: 0000000000000000 [ 91.314785][ T2265] R10: 0000200000000c00 R11: 0000000000000246 R12: 0000000000000000 [ 91.314797][ T2265] R13: 00007ffae0226038 R14: 00007ffae0225fa0 R15: 00007ffe70c83c08 [ 91.314813][ T2265] [ 91.641765][ T45] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 91.677257][ T458] usb 5-1: USB disconnect, device number 31 [ 91.774391][ T45] usb 6-1: device descriptor read/64, error -71 [ 91.964398][ T65] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 92.014378][ T45] usb 6-1: device descriptor read/64, error -71 [ 92.114389][ T65] usb 4-1: Using ep0 maxpacket: 8 [ 92.120814][ T65] usb 4-1: unable to get BOS descriptor or descriptor too short [ 92.129371][ T65] usb 4-1: config 8 has an invalid interface number: 65 but max is 0 [ 92.137519][ T65] usb 4-1: config 8 has no interface number 0 [ 92.143637][ T65] usb 4-1: config 8 interface 65 has no altsetting 0 [ 92.151705][ T65] usb 4-1: New USB device found, idVendor=046d, idProduct=092c, bcdDevice=c0.86 [ 92.160812][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.168817][ T65] usb 4-1: Product: syz [ 92.172968][ T65] usb 4-1: Manufacturer: syz [ 92.177607][ T65] usb 4-1: SerialNumber: syz [ 92.202726][ T36] audit: type=1326 audit(1794311738.640:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2291 comm="syz.4.538" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffadffa8f19 code=0x0 [ 92.264585][ T45] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 92.386483][ T65] usb 4-1: USB disconnect, device number 32 [ 92.404563][ T45] usb 6-1: device descriptor read/64, error -71 [ 92.534403][ T458] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 92.644370][ T45] usb 6-1: device descriptor read/64, error -71 [ 92.685425][ T458] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 92.695134][ T458] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 92.706299][ T458] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 92.715397][ T458] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.723372][ T458] usb 5-1: Product: syz [ 92.727545][ T458] usb 5-1: Manufacturer: syz [ 92.732147][ T458] usb 5-1: SerialNumber: syz [ 92.754486][ T45] usb usb6-port1: attempt power cycle [ 92.939149][ T458] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 32 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 93.094368][ T45] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 93.115368][ T45] usb 6-1: device descriptor read/8, error -71 [ 93.140243][ T36] audit: type=1400 audit(1794311739.580:1018): avc: denied { read write } for pid=2296 comm="syz.4.540" name="lp0" dev="devtmpfs" ino=616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 93.141058][ T2297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.163781][ T36] audit: type=1400 audit(1794311739.580:1019): avc: denied { open } for pid=2296 comm="syz.4.540" path="/dev/usb/lp0" dev="devtmpfs" ino=616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 93.195926][ T65] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 93.203726][ T2297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.216993][ T458] usb 5-1: USB disconnect, device number 32 [ 93.223792][ T458] usblp0: removed [ 93.245349][ T45] usb 6-1: device descriptor read/8, error -71 [ 93.334387][ T65] usb 4-1: device descriptor read/64, error -71 [ 93.484394][ T45] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 93.505392][ T45] usb 6-1: device descriptor read/8, error -71 [ 93.574369][ T65] usb 4-1: device descriptor read/64, error -71 [ 93.635348][ T45] usb 6-1: device descriptor read/8, error -71 [ 93.744443][ T45] usb usb6-port1: unable to enumerate USB device [ 93.814357][ T65] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 93.944371][ T65] usb 4-1: device descriptor read/64, error -71 [ 94.204385][ T65] usb 4-1: device descriptor read/64, error -71 [ 94.314452][ T65] usb usb4-port1: attempt power cycle [ 94.554382][ T31] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 94.654374][ T65] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 94.675443][ T65] usb 4-1: device descriptor read/8, error -71 [ 94.705460][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.716458][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.726238][ T31] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 94.735418][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.743918][ T31] usb 5-1: config 0 descriptor?? [ 94.805393][ T65] usb 4-1: device descriptor read/8, error -71 [ 95.044359][ T65] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 95.065364][ T65] usb 4-1: device descriptor read/8, error -71 [ 95.094330][ T458] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 95.151261][ T31] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 95.158317][ T31] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 95.165401][ T31] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 95.172357][ T31] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 95.179427][ T31] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 95.186411][ T31] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 95.193368][ T31] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 95.200969][ T31] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 95.213022][ T65] usb 4-1: device descriptor read/8, error -71 [ 95.259567][ T458] usb 6-1: unable to get BOS descriptor or descriptor too short [ 95.268363][ T458] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 95.275991][ T458] usb 6-1: can't read configurations, error -71 [ 95.324494][ T65] usb usb4-port1: unable to enumerate USB device [ 95.350742][ T2310] random: crng reseeded on system resumption [ 95.416812][ T31] cp2112 0003:10C4:EA90.0007: error requesting version [ 95.424247][ T31] cp2112 0003:10C4:EA90.0007: probe with driver cp2112 failed with error -32 [ 95.768768][ T2310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.778292][ T2310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.954794][ T2334] tipc: Started in network mode [ 95.959904][ T2334] tipc: Node identity , cluster identity 4711 [ 95.966205][ T2334] tipc: Failed to set node id, please configure manually [ 95.973299][ T2334] tipc: Enabling of bearer rejected, failed to enable media [ 96.025635][ T36] audit: type=1326 audit(1794311742.470:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2333 comm="syz.3.550" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8513da8f19 code=0x0 [ 96.134387][ T458] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 96.285429][ T458] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.295654][ T458] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 96.305526][ T458] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.319784][ T458] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 96.328878][ T458] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.336883][ T458] usb 6-1: Product: syz [ 96.341024][ T458] usb 6-1: Manufacturer: syz [ 96.345644][ T458] usb 6-1: SerialNumber: syz [ 96.351276][ T2332] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 96.359075][ T458] usbserial_generic 6-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 96.370303][ T458] usbserial_generic 6-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 96.381045][ T458] usbserial_generic 6-1:1.0: generic converter detected [ 96.388778][ T458] usb 6-1: generic converter now attached to ttyUSB0 [ 96.563426][ T10] usb 6-1: USB disconnect, device number 28 [ 96.570345][ T10] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 96.578528][ T10] usbserial_generic 6-1:1.0: device disconnected [ 96.760445][ T36] audit: type=1400 audit(1794311743.200:1021): avc: denied { execute } for pid=2336 comm="syz.3.551" path="/104/mnt/bus" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 96.803624][ T36] audit: type=1400 audit(1794311743.240:1022): avc: denied { read } for pid=2340 comm="syz.3.553" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 96.826350][ T36] audit: type=1400 audit(1794311743.240:1023): avc: denied { open } for pid=2340 comm="syz.3.553" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 97.130060][ T36] audit: type=1400 audit(1794311743.570:1024): avc: denied { sqpoll } for pid=2344 comm="syz.5.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 97.155231][ T36] audit: type=1400 audit(1794311743.600:1025): avc: denied { execute } for pid=2344 comm="syz.5.554" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 97.238936][ T36] audit: type=1400 audit(1794311743.680:1026): avc: denied { accept } for pid=2357 comm="syz.5.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 97.264737][ T2360] netlink: 'syz.5.559': attribute type 4 has an invalid length. [ 97.272433][ T2360] netlink: 3581 bytes leftover after parsing attributes in process `syz.5.559'. [ 97.275843][ T10] usb 5-1: USB disconnect, device number 33 [ 97.356030][ T36] audit: type=1400 audit(1794311743.800:1027): avc: denied { unlink } for pid=659 comm="syz-executor" name="ublkc0" dev="devtmpfs" ino=578 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 97.434345][ T458] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 97.453759][ T2373] vlan0: entered allmulticast mode [ 97.464341][ T2373] veth0_vlan: entered allmulticast mode [ 97.475720][ T36] audit: type=1400 audit(1794311743.910:1028): avc: denied { write } for pid=2372 comm="syz.5.564" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 97.527718][ T2377] input: syz1 as /devices/virtual/input/input13 [ 97.540580][ T2377] netlink: 4 bytes leftover after parsing attributes in process `syz.5.566'. [ 97.587280][ T883] bridge_slave_1: left allmulticast mode [ 97.592964][ T883] bridge_slave_1: left promiscuous mode [ 97.598830][ T883] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.606616][ T883] bridge_slave_0: left allmulticast mode [ 97.612275][ T883] bridge_slave_0: left promiscuous mode [ 97.614347][ T458] usb 4-1: Using ep0 maxpacket: 16 [ 97.618233][ T883] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.631305][ T458] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.644495][ T458] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 97.657977][ T458] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 97.668198][ T458] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.676985][ T458] usb 4-1: Product: syz [ 97.681356][ T458] usb 4-1: Manufacturer: syz [ 97.686102][ T458] usb 4-1: SerialNumber: syz [ 97.736948][ T883] veth1_macvtap: left promiscuous mode [ 97.784369][ T10] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 97.815535][ T2379] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.822598][ T2379] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.829844][ T2379] bridge_slave_0: entered allmulticast mode [ 97.836194][ T2379] bridge_slave_0: entered promiscuous mode [ 97.844407][ T2379] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.851459][ T2379] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.858545][ T2379] bridge_slave_1: entered allmulticast mode [ 97.864773][ T2379] bridge_slave_1: entered promiscuous mode [ 97.893924][ T458] usb 4-1: 0:2 : does not exist [ 97.903420][ T458] usb 4-1: USB disconnect, device number 37 [ 97.916462][ T2379] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.921936][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 97.923536][ T2379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.946597][ T2379] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.953606][ T2379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.960992][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 97.973976][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 97.982186][ T1422] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.982838][ T10] usb 6-1: config index 0 descriptor too short (expected 575, got 63) [ 97.997663][ T10] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 98.005809][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.015935][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 98.025502][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 98.038868][ T1422] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.039856][ T10] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 98.045953][ T1422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.062406][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.070655][ T10] usb 6-1: Product: syz [ 98.076570][ T10] usb 6-1: Manufacturer: syz [ 98.078276][ T2379] veth0_vlan: entered promiscuous mode [ 98.084345][ T10] usb 6-1: SerialNumber: syz [ 98.095264][ T2379] veth1_macvtap: entered promiscuous mode [ 98.104559][ T10] usb 6-1: config 0 descriptor?? [ 98.123382][ T10] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 98.133217][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 98.316385][ T10] usb 6-1: USB disconnect, device number 29 [ 98.664433][ T31] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 98.744377][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 98.825551][ T31] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1601, setting to 1024 [ 98.838905][ T31] usb 4-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 98.848180][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.856210][ T31] usb 4-1: Product: syz [ 98.860473][ T31] usb 4-1: Manufacturer: syz [ 98.865423][ T31] usb 4-1: SerialNumber: syz [ 98.875474][ T36] audit: type=1400 audit(1794311745.320:1029): avc: denied { getopt } for pid=2406 comm="syz.5.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 98.875750][ T2407] FAULT_INJECTION: forcing a failure. [ 98.875750][ T2407] name failslab, interval 1, probability 0, space 0, times 0 [ 98.907546][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 98.907674][ T2407] CPU: 1 UID: 0 PID: 2407 Comm: syz.5.575 Not tainted syzkaller #0 ba02342e74ad0b66e51a5e2165c9258878cd70c0 [ 98.907700][ T2407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 98.907714][ T2407] Call Trace: [ 98.907721][ T2407] [ 98.907728][ T2407] __dump_stack+0x21/0x30 [ 98.907750][ T2407] dump_stack_lvl+0x140/0x1c0 [ 98.907768][ T2407] ? __cfi_dump_stack_lvl+0x10/0x10 [ 98.907785][ T2407] ? avc_has_perm_noaudit+0x289/0x360 [ 98.907807][ T2407] dump_stack+0x19/0x20 [ 98.907823][ T2407] should_fail_ex+0x3c2/0x510 [ 98.907841][ T2407] should_failslab+0xac/0x100 [ 98.907860][ T2407] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 98.907886][ T2407] ? sock_alloc_inode+0x48/0x150 [ 98.907905][ T2407] sock_alloc_inode+0x48/0x150 [ 98.907922][ T2407] ? __cfi_sock_alloc_inode+0x10/0x10 [ 98.907940][ T2407] alloc_inode+0x7d/0x270 [ 98.907960][ T2407] ? bpf_lsm_socket_create+0xd/0x20 [ 98.907992][ T2407] new_inode_pseudo+0x19/0x40 [ 98.908011][ T2407] __sock_create+0x130/0x810 [ 98.908031][ T2407] __sys_socket+0xe1/0x1c0 [ 98.908050][ T2407] __x64_sys_socket+0x7e/0x90 [ 98.908069][ T2407] x64_sys_call+0x2608/0x2ee0 [ 98.908088][ T2407] do_syscall_64+0x57/0xf0 [ 98.908107][ T2407] ? clear_bhb_loop+0x50/0xa0 [ 98.908131][ T2407] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 98.908155][ T2407] RIP: 0033:0x7f6d5dfa8f19 [ 98.908171][ T2407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.908186][ T2407] RSP: 002b:00007f6d5ee99028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 98.908206][ T2407] RAX: ffffffffffffffda RBX: 00007f6d5e225fa0 RCX: 00007f6d5dfa8f19 [ 98.908220][ T2407] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 98.908232][ T2407] RBP: 00007f6d5e037f6d R08: 0000000000000000 R09: 0000000000000000 [ 98.908244][ T2407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.908256][ T2407] R13: 00007f6d5e226038 R14: 00007f6d5e225fa0 R15: 00007ffc44f32b88 [ 98.908271][ T2407] [ 98.908292][ T2407] socket: no more sockets [ 98.914786][ T10] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 251, changing to 7 [ 99.075417][ T31] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 99.094552][ T10] usb 7-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 99.098713][ T31] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 99.123016][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.133831][ T31] usb 4-1: unit 3 not found! [ 99.149193][ T10] usb 7-1: Product: ãˆê·é¼ºê±§éŽ’ᨽ鷣䮨䯭ܘ꜃⸑ã¬á›†å”㮇짳ä¬ãŒŒíŸŸë£¹âž’塨濰燡㚱䫔ì—誉ߗ䰞齃廕ꆞ귥用岠ᱸૠî æˆ®ç°€éŠŒá‘‚矚⠣詃꣥穡㢒췧꼉⊬篽謌 [ 99.164933][ T31] usb 4-1: 6:0: failed to get current value for ch 0 (-71) [ 99.169132][ T10] usb 7-1: Manufacturer: င [ 99.200152][ T10] usb 7-1: SerialNumber: syz [ 99.205564][ T31] usb 4-1: USB disconnect, device number 38 [ 99.216987][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 99.610609][ T10] usb 7-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 99.617911][ T10] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 99.635507][ T10] usb 7-1: USB disconnect, device number 2 [ 99.645624][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 99.864428][ T45] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 100.014373][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 100.020709][ T45] usb 4-1: config 0 has an invalid interface number: 98 but max is 0 [ 100.028902][ T45] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.039059][ T45] usb 4-1: config 0 has no interface number 0 [ 100.045402][ T45] usb 4-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 100.055284][ T45] usb 4-1: config 0 interface 98 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 100.066222][ T45] usb 4-1: config 0 interface 98 has no altsetting 0 [ 100.074393][ T45] usb 4-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 100.083714][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.091747][ T45] usb 4-1: Product: syz [ 100.095937][ T45] usb 4-1: Manufacturer: syz [ 100.100965][ T45] usb 4-1: SerialNumber: syz [ 100.106503][ T45] usb 4-1: config 0 descriptor?? [ 100.112227][ T2416] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 100.120061][ T45] asix 4-1:0.98: probe with driver asix failed with error -22 [ 101.224362][ T10] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 101.232316][ T2437] syz.6.584 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 101.326850][ T2437] binder: Unknown parameter 'contextÌàHÇÂh' [ 101.374382][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 101.385052][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.396221][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.406316][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 101.419170][ T10] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 101.428282][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.443286][ T10] usb 6-1: config 0 descriptor?? [ 101.453007][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 101.453025][ T36] audit: type=1400 audit(1794311747.900:1031): avc: denied { accept } for pid=2440 comm="syz.6.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.652795][ T10] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max [ 101.661399][ T10] microsoft 0003:045E:07DA.0008: unsupported Resolution Multiplier 0 [ 101.670511][ T10] microsoft 0003:045E:07DA.0008: implement() called with n (152) > 32! (kworker/0:1) [ 101.680370][ T10] microsoft 0003:045E:07DA.0008: unsupported Resolution Multiplier 0 [ 101.688751][ T10] microsoft 0003:045E:07DA.0008: No inputs registered, leaving [ 101.696833][ T10] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 101.708262][ T10] microsoft 0003:045E:07DA.0008: no inputs found [ 101.714626][ T10] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway [ 102.286639][ T36] audit: type=1400 audit(1794311748.730:1032): avc: denied { setopt } for pid=2450 comm="syz.6.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 102.307404][ T36] audit: type=1400 audit(1794311748.730:1033): avc: denied { setattr } for pid=2450 comm="syz.6.586" name="NETLINK" dev="sockfs" ino=261687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 102.331515][ T36] audit: type=1400 audit(1794311748.760:1034): avc: granted { setsecparam } for pid=2452 comm="syz.6.587" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 102.350792][ T36] audit: type=1400 audit(1794311748.760:1035): avc: denied { read write } for pid=2454 comm="syz.6.588" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 102.375403][ T36] audit: type=1400 audit(1794311748.760:1036): avc: denied { open } for pid=2454 comm="syz.6.588" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 102.402265][ T36] audit: type=1400 audit(1794311748.760:1037): avc: denied { setattr } for pid=2454 comm="syz.6.588" name="/" dev="configfs" ino=2501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 102.737762][ T10] usb 4-1: USB disconnect, device number 39 [ 103.074365][ T10] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 103.094376][ T45] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 103.224405][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 103.231120][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 103.239574][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 38, changing to 7 [ 103.251827][ T10] usb 4-1: New USB device found, idVendor=0499, idProduct=1509, bcdDevice= 0.40 [ 103.254336][ T45] usb 7-1: Using ep0 maxpacket: 32 [ 103.260911][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.267598][ T45] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.274487][ T10] usb 4-1: Product: syz [ 103.285310][ T45] usb 7-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 103.289345][ T10] usb 4-1: Manufacturer: syz [ 103.302381][ T45] usb 7-1: config 0 interface 0 has no altsetting 0 [ 103.306843][ T10] usb 4-1: SerialNumber: syz [ 103.313563][ T45] usb 7-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 103.327043][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.335651][ T45] usb 7-1: config 0 descriptor?? [ 103.523834][ T2471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.532900][ T2471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.546008][ T10] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 103.560326][ T10] usb 4-1: USB disconnect, device number 40 [ 103.572253][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 103.921200][ T2475] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.929510][ T2475] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.936676][ T2475] bridge_slave_0: entered allmulticast mode [ 103.942842][ T2475] bridge_slave_0: entered promiscuous mode [ 103.949641][ T2475] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.957269][ T2475] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.961897][ T10] usb 7-1: USB disconnect, device number 3 [ 103.964443][ T2475] bridge_slave_1: entered allmulticast mode [ 103.976781][ T2475] bridge_slave_1: entered promiscuous mode [ 103.996290][ T1816] usb 6-1: USB disconnect, device number 30 [ 104.027495][ T2475] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.034589][ T2475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.041856][ T2475] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.048933][ T2475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.072618][ T883] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.080092][ T883] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.089797][ T1422] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.096884][ T1422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.106380][ T883] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.113426][ T883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.170234][ T2475] veth0_vlan: entered promiscuous mode [ 104.184420][ T2475] veth1_macvtap: entered promiscuous mode [ 104.344352][ T1816] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 104.494524][ T1816] usb 6-1: Using ep0 maxpacket: 32 [ 104.500937][ T1816] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 104.509193][ T1816] usb 6-1: config 0 has no interface number 0 [ 104.515425][ T1816] usb 6-1: config 0 interface 184 has no altsetting 0 [ 104.524094][ T1816] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 104.533214][ T1816] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.542096][ T1816] usb 6-1: Product: syz [ 104.546860][ T1816] usb 6-1: Manufacturer: syz [ 104.555504][ T1816] usb 6-1: SerialNumber: syz [ 104.560782][ T1816] usb 6-1: config 0 descriptor?? [ 104.570747][ T1816] smsc75xx v1.0.0 [ 104.784488][ T45] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 104.804346][ T31] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 104.935443][ T45] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 104.943559][ T45] usb 7-1: config 0 has no interface number 0 [ 104.950030][ T45] usb 7-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 104.960814][ T45] usb 7-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 104.972196][ T31] usb 8-1: Using ep0 maxpacket: 32 [ 104.977538][ T45] usb 7-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 104.988395][ T45] usb 7-1: config 0 interface 2 has no altsetting 0 [ 104.995945][ T31] usb 8-1: too many endpoints for config 243 interface 0 altsetting 5: 146, using maximum allowed: 30 [ 105.007047][ T31] usb 8-1: config 243 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.018638][ T45] usb 7-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 105.034326][ T31] usb 8-1: config 243 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 146 [ 105.047548][ T45] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.057757][ T45] usb 7-1: Product: syz [ 105.061942][ T45] usb 7-1: Manufacturer: syz [ 105.066612][ T31] usb 8-1: config 243 interface 0 has no altsetting 0 [ 105.073395][ T31] usb 8-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 105.082450][ T45] usb 7-1: SerialNumber: syz [ 105.087373][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.095613][ T45] usb 7-1: config 0 descriptor?? [ 105.100860][ T2493] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 105.108900][ T2493] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 105.173129][ T1816] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 105.184021][ T1816] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 105.194337][ T854] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 105.333904][ T45] usb 7-1: USB disconnect, device number 4 [ 105.355078][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 105.372116][ T854] usb 4-1: Using ep0 maxpacket: 16 [ 105.378465][ T854] usb 4-1: config 0 has an invalid interface number: 98 but max is 0 [ 105.387119][ T854] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.399186][ T854] usb 4-1: config 0 has no interface number 0 [ 105.405491][ T854] usb 4-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 105.415417][ T854] usb 4-1: config 0 interface 98 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 105.426299][ T854] usb 4-1: config 0 interface 98 has no altsetting 0 [ 105.433800][ T31] usb 8-1: string descriptor 0 read error: -71 [ 105.442432][ T854] usb 4-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 105.452011][ T31] usb 8-1: USB disconnect, device number 2 [ 105.458579][ T854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.467455][ T854] usb 4-1: Product: syz [ 105.471797][ T854] usb 4-1: Manufacturer: syz [ 105.476426][ T854] usb 4-1: SerialNumber: syz [ 105.481634][ T854] usb 4-1: config 0 descriptor?? [ 105.486904][ T2500] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 105.494797][ T854] asix 4-1:0.98: probe with driver asix failed with error -22 [ 105.865495][ T36] audit: type=1326 audit(1794311752.310:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2503 comm="syz.6.603" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1bc0fa8f19 code=0x0 [ 106.124180][ T2512] netlink: 'syz.7.606': attribute type 12 has an invalid length. [ 106.132222][ T2513] vcan0: MTU too low for tipc bearer [ 106.137585][ T2513] tipc: Enabling of bearer rejected, failed to enable media [ 106.564336][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 106.725373][ T10] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 106.735292][ T10] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 106.745075][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 106.755987][ T10] usb 8-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 106.765076][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.773836][ T2522] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 106.781076][ T2522] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 106.788878][ T10] pl2303 8-1:1.0: pl2303 converter detected [ 106.795707][ T10] usb 8-1: pl2303 converter now attached to ttyUSB0 [ 108.118150][ T10] usb 4-1: USB disconnect, device number 41 [ 108.184968][ T36] audit: type=1400 audit(1794311754.630:1039): avc: denied { map } for pid=2529 comm="syz.3.612" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 108.271978][ T2535] FAULT_INJECTION: forcing a failure. [ 108.271978][ T2535] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 108.288111][ T2535] CPU: 0 UID: 0 PID: 2535 Comm: syz.3.613 Not tainted syzkaller #0 ba02342e74ad0b66e51a5e2165c9258878cd70c0 [ 108.288137][ T2535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 108.288149][ T2535] Call Trace: [ 108.288155][ T2535] [ 108.288162][ T2535] __dump_stack+0x21/0x30 [ 108.288186][ T2535] dump_stack_lvl+0x140/0x1c0 [ 108.288203][ T2535] ? __cfi_dump_stack_lvl+0x10/0x10 [ 108.288221][ T2535] dump_stack+0x19/0x20 [ 108.288237][ T2535] should_fail_ex+0x3c2/0x510 [ 108.288255][ T2535] should_fail+0xf/0x20 [ 108.288271][ T2535] should_fail_usercopy+0x1e/0x30 [ 108.288288][ T2535] _copy_from_user+0x20/0xa0 [ 108.288308][ T2535] _RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0xef2/0x4200 [ 108.288339][ T2535] ? __asan_set_shadow_00+0x12/0x20 [ 108.288361][ T2535] ? do_vfs_ioctl+0x1824/0x2010 [ 108.288381][ T2535] ? __ia32_compat_sys_ioctl+0x980/0x980 [ 108.288400][ T2535] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 108.288428][ T2535] ? schedule+0xc1/0x170 [ 108.288447][ T2535] ? futex_unqueue+0x136/0x160 [ 108.288469][ T2535] ? ioctl_has_perm+0x39a/0x500 [ 108.288484][ T2535] ? __kasan_check_read+0x15/0x20 [ 108.288507][ T2535] ? has_cap_mac_admin+0xd0/0xd0 [ 108.288524][ T2535] ? futex_wait+0x2b8/0x7c0 [ 108.288545][ T2535] ? __cfi_futex_wait+0x10/0x10 [ 108.288565][ T2535] ? selinux_file_ioctl+0x732/0x1480 [ 108.288590][ T2535] ? vfs_write+0xbd2/0xfd0 [ 108.288613][ T2535] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 108.288637][ T2535] ? hook_file_ioctl+0x1ef/0x590 [ 108.288660][ T2535] ? __cfi_hook_file_ioctl+0x10/0x10 [ 108.288682][ T2535] ? __cfi_do_futex+0x10/0x10 [ 108.288699][ T2535] ? mutex_unlock+0x90/0x240 [ 108.288722][ T2535] ? __fget_files+0x2bc/0x330 [ 108.288741][ T2535] ? bpf_lsm_file_ioctl+0xd/0x20 [ 108.288760][ T2535] ? security_file_ioctl+0x3e/0x110 [ 108.288783][ T2535] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 108.288812][ T2535] __se_sys_ioctl+0x126/0x1b0 [ 108.288831][ T2535] __x64_sys_ioctl+0x7f/0xa0 [ 108.288849][ T2535] x64_sys_call+0x1878/0x2ee0 [ 108.288867][ T2535] do_syscall_64+0x57/0xf0 [ 108.288884][ T2535] ? clear_bhb_loop+0x50/0xa0 [ 108.288907][ T2535] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 108.288930][ T2535] RIP: 0033:0x7f8513da8f19 [ 108.288951][ T2535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.288965][ T2535] RSP: 002b:00007f8514c69028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.288985][ T2535] RAX: ffffffffffffffda RBX: 00007f8514026180 RCX: 00007f8513da8f19 [ 108.288999][ T2535] RDX: 0000000000000000 RSI: 00000000c0306201 RDI: 0000000000000008 [ 108.289011][ T2535] RBP: 00007f8513e37f6d R08: 0000000000000000 R09: 0000000000000000 [ 108.289023][ T2535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.289035][ T2535] R13: 00007f8514026218 R14: 00007f8514026180 R15: 00007fffda019208 [ 108.289051][ T2535] [ 108.585000][ T1816] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000003c: -71 [ 108.595913][ T1816] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write BULK_IN_DLY: -71 [ 108.606099][ T1816] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 108.615554][ T1816] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 108.625365][ T1816] usb 6-1: USB disconnect, device number 31 [ 108.923292][ T2540] pim6reg1: entered promiscuous mode [ 108.928633][ T2540] pim6reg1: entered allmulticast mode [ 109.194397][ T854] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 109.232592][ T45] usb 8-1: USB disconnect, device number 3 [ 109.243143][ T45] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 109.252785][ T45] pl2303 8-1:1.0: device disconnected [ 109.274536][ T31] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 109.354412][ T854] usb 7-1: Using ep0 maxpacket: 32 [ 109.360649][ T854] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.372167][ T854] usb 7-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 109.381293][ T854] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.389422][ T854] usb 7-1: Product: syz [ 109.393776][ T854] usb 7-1: Manufacturer: syz [ 109.398395][ T854] usb 7-1: SerialNumber: syz [ 109.403526][ T854] usb 7-1: config 0 descriptor?? [ 109.409575][ T854] usb 7-1: bad CDC descriptors [ 109.414868][ T854] usb 7-1: unsupported MDLM descriptors [ 109.437726][ T31] usb 6-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=29.00 [ 109.446816][ T31] usb 6-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 109.454921][ T31] usb 6-1: Product: syz [ 109.461349][ T31] ftdi_sio 6-1:5.0: FTDI USB Serial Device converter detected [ 109.469220][ T31] usb 6-1: Detected FT4233HP [ 109.574414][ T45] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 109.676424][ T2544] kvm: pic: non byte write [ 109.681269][ T31] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 109.689375][ T31] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 109.698624][ T31] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 109.706725][ T45] usb 8-1: device descriptor read/64, error -71 [ 109.714264][ T31] usb 6-1: USB disconnect, device number 32 [ 109.721574][ T31] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 109.731154][ T31] ftdi_sio 6-1:5.0: device disconnected [ 109.944367][ T45] usb 8-1: device descriptor read/64, error -71 [ 110.034372][ T854] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 110.115584][ T31] usb 7-1: USB disconnect, device number 5 [ 110.184361][ T45] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 110.191976][ T854] usb 4-1: Using ep0 maxpacket: 16 [ 110.198259][ T854] usb 4-1: config 0 has an invalid interface number: 98 but max is 0 [ 110.206523][ T854] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.216672][ T854] usb 4-1: config 0 has no interface number 0 [ 110.222750][ T854] usb 4-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 110.232838][ T854] usb 4-1: config 0 interface 98 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 110.243663][ T854] usb 4-1: config 0 interface 98 has no altsetting 0 [ 110.252303][ T854] usb 4-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 110.261428][ T854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.269443][ T854] usb 4-1: Product: syz [ 110.273591][ T854] usb 4-1: Manufacturer: syz [ 110.278372][ T854] usb 4-1: SerialNumber: syz [ 110.283511][ T854] usb 4-1: config 0 descriptor?? [ 110.289026][ T2551] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 110.296709][ T854] asix 4-1:0.98: probe with driver asix failed with error -22 [ 110.334389][ T45] usb 8-1: device descriptor read/64, error -71 [ 110.494353][ T10] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 110.584376][ T45] usb 8-1: device descriptor read/64, error -71 [ 110.634352][ T10] usb 6-1: device descriptor read/64, error -71 [ 110.694444][ T45] usb usb8-port1: attempt power cycle [ 110.874390][ T10] usb 6-1: device descriptor read/64, error -71 [ 111.034406][ T45] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 111.055452][ T45] usb 8-1: device descriptor read/8, error -71 [ 111.114353][ T10] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 111.132565][ T2562] FAULT_INJECTION: forcing a failure. [ 111.132565][ T2562] name failslab, interval 1, probability 0, space 0, times 0 [ 111.145408][ T2562] CPU: 0 UID: 0 PID: 2562 Comm: syz.6.624 Not tainted syzkaller #0 ba02342e74ad0b66e51a5e2165c9258878cd70c0 [ 111.145441][ T2562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 111.145453][ T2562] Call Trace: [ 111.145460][ T2562] [ 111.145468][ T2562] __dump_stack+0x21/0x30 [ 111.145491][ T2562] dump_stack_lvl+0x140/0x1c0 [ 111.145507][ T2562] ? __cfi_dump_stack_lvl+0x10/0x10 [ 111.145527][ T2562] dump_stack+0x19/0x20 [ 111.145541][ T2562] should_fail_ex+0x3c2/0x510 [ 111.145557][ T2562] should_failslab+0xac/0x100 [ 111.145577][ T2562] kmem_cache_alloc_noprof+0x42/0x410 [ 111.145600][ T2562] ? security_file_alloc+0x49/0x220 [ 111.145621][ T2562] ? kasan_save_alloc_info+0x3a/0x50 [ 111.145641][ T2562] security_file_alloc+0x49/0x220 [ 111.145662][ T2562] init_file+0x9e/0x210 [ 111.145681][ T2562] alloc_empty_file+0xd9/0x270 [ 111.145701][ T2562] path_openat+0xf4/0x35a0 [ 111.145721][ T2562] ? stack_depot_save_flags+0x38/0x800 [ 111.145742][ T2562] ? kasan_save_track+0x4f/0x80 [ 111.145758][ T2562] ? kasan_save_track+0x3e/0x80 [ 111.145772][ T2562] ? kasan_save_alloc_info+0x3a/0x50 [ 111.145793][ T2562] ? __kasan_slab_alloc+0x73/0x90 [ 111.145810][ T2562] ? getname+0x1b/0x30 [ 111.145825][ T2562] ? do_sys_openat2+0xda/0x1d0 [ 111.145845][ T2562] ? __x64_sys_openat+0x13a/0x170 [ 111.145866][ T2562] ? x64_sys_call+0xe69/0x2ee0 [ 111.145885][ T2562] ? do_syscall_64+0x57/0xf0 [ 111.145904][ T2562] ? do_filp_open+0x440/0x440 [ 111.145916][ T2562] do_filp_open+0x1f2/0x440 [ 111.145928][ T2562] ? __cfi_do_filp_open+0x10/0x10 [ 111.145940][ T2562] ? alloc_fd+0x4c1/0x570 [ 111.145951][ T2562] do_sys_openat2+0x134/0x1d0 [ 111.145963][ T2562] ? fput+0x1a4/0x230 [ 111.145973][ T2562] ? do_sys_open+0x100/0x100 [ 111.145986][ T2562] ? __cfi_ksys_write+0x10/0x10 [ 111.145995][ T2562] __x64_sys_openat+0x13a/0x170 [ 111.146009][ T2562] x64_sys_call+0xe69/0x2ee0 [ 111.146020][ T2562] do_syscall_64+0x57/0xf0 [ 111.146030][ T2562] ? clear_bhb_loop+0x50/0xa0 [ 111.146044][ T2562] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 111.146057][ T2562] RIP: 0033:0x7f1bc0fa8f19 [ 111.146068][ T2562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.146077][ T2562] RSP: 002b:00007f1bbf9c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 111.146089][ T2562] RAX: ffffffffffffffda RBX: 00007f1bc1226090 RCX: 00007f1bc0fa8f19 [ 111.146097][ T2562] RDX: 0000000000000000 RSI: 0000200000000580 RDI: ffffffffffffff9c [ 111.146104][ T2562] RBP: 00007f1bc1037f6d R08: 0000000000000000 R09: 0000000000000000 [ 111.146111][ T2562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.146117][ T2562] R13: 00007f1bc1226128 R14: 00007f1bc1226090 R15: 00007ffe5075e428 [ 111.146126][ T2562] [ 111.185456][ T45] usb 8-1: device descriptor read/8, error -71 [ 111.253988][ T2565] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2565 comm=syz.6.624 [ 111.447087][ T10] usb 6-1: device descriptor read/64, error -71 [ 111.447177][ T36] audit: type=1400 audit(1794311757.890:1040): avc: denied { audit_write } for pid=2560 comm="syz.6.624" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 111.484412][ T45] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 111.505599][ T45] usb 8-1: device descriptor read/8, error -71 [ 111.635381][ T45] usb 8-1: device descriptor read/8, error -71 [ 111.684357][ T10] usb 6-1: device descriptor read/64, error -71 [ 111.744759][ T45] usb usb8-port1: unable to enumerate USB device [ 111.794443][ T10] usb usb6-port1: attempt power cycle [ 111.924114][ T36] audit: type=1400 audit(1794311758.360:1041): avc: denied { ioctl } for pid=2569 comm="syz.6.625" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x6f05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 111.950029][ T36] audit: type=1400 audit(1794311758.360:1042): avc: denied { lock } for pid=2569 comm="syz.6.625" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 112.134348][ T10] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 112.155414][ T10] usb 6-1: device descriptor read/8, error -71 [ 112.285393][ T10] usb 6-1: device descriptor read/8, error -71 [ 112.396533][ T2596] syzkaller1: entered promiscuous mode [ 112.402072][ T2596] syzkaller1: entered allmulticast mode [ 112.458428][ T2600] FAULT_INJECTION: forcing a failure. [ 112.458428][ T2600] name failslab, interval 1, probability 0, space 0, times 0 [ 112.471131][ T2600] CPU: 1 UID: 0 PID: 2600 Comm: syz.7.633 Not tainted syzkaller #0 ba02342e74ad0b66e51a5e2165c9258878cd70c0 [ 112.471161][ T2600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 112.471172][ T2600] Call Trace: [ 112.471178][ T2600] [ 112.471186][ T2600] __dump_stack+0x21/0x30 [ 112.471209][ T2600] dump_stack_lvl+0x140/0x1c0 [ 112.471227][ T2600] ? __cfi_dump_stack_lvl+0x10/0x10 [ 112.471247][ T2600] dump_stack+0x19/0x20 [ 112.471263][ T2600] should_fail_ex+0x3c2/0x510 [ 112.471280][ T2600] should_failslab+0xac/0x100 [ 112.471300][ T2600] __kmalloc_cache_noprof+0x41/0x470 [ 112.471327][ T2600] ? kasan_save_alloc_info+0x3a/0x50 [ 112.471342][ T2600] ? vhost_iotlb_add_range_ctx+0x1b7/0x800 [ 112.471353][ T2600] ? __kasan_kmalloc+0x96/0xb0 [ 112.471364][ T2600] vhost_iotlb_add_range_ctx+0x1b7/0x800 [ 112.471374][ T2600] vhost_iotlb_add_range_ctx+0x68f/0x800 [ 112.471388][ T2600] vhost_iotlb_add_range+0x3c/0x50 [ 112.471399][ T2600] vhost_dev_ioctl+0xd79/0x11b0 [ 112.471413][ T2600] ? selinux_file_ioctl+0x732/0x1480 [ 112.471429][ T2600] ? __cfi_vhost_dev_ioctl+0x10/0x10 [ 112.471443][ T2600] ? mutex_lock+0x97/0x1d0 [ 112.471464][ T2600] ? __cfi_mutex_lock+0x10/0x10 [ 112.471477][ T2600] ? __cfi_hook_file_ioctl+0x10/0x10 [ 112.471491][ T2600] vhost_vsock_dev_ioctl+0x239/0xdc0 [ 112.471518][ T2600] ? __cfi_vhost_vsock_dev_ioctl+0x10/0x10 [ 112.471530][ T2600] ? __fget_files+0x2bc/0x330 [ 112.471542][ T2600] ? bpf_lsm_file_ioctl+0xd/0x20 [ 112.471553][ T2600] ? security_file_ioctl+0x3e/0x110 [ 112.471569][ T2600] ? __cfi_vhost_vsock_dev_ioctl+0x10/0x10 [ 112.471581][ T2600] __se_sys_ioctl+0x126/0x1b0 [ 112.471592][ T2600] __x64_sys_ioctl+0x7f/0xa0 [ 112.471603][ T2600] x64_sys_call+0x1878/0x2ee0 [ 112.471617][ T2600] do_syscall_64+0x57/0xf0 [ 112.471627][ T2600] ? clear_bhb_loop+0x50/0xa0 [ 112.471641][ T2600] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 112.471654][ T2600] RIP: 0033:0x7f97211a8f19 [ 112.471664][ T2600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.471673][ T2600] RSP: 002b:00007f9722103028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.471685][ T2600] RAX: ffffffffffffffda RBX: 00007f9721425fa0 RCX: 00007f97211a8f19 [ 112.471693][ T2600] RDX: 0000200000000180 RSI: 000000004008af03 RDI: 0000000000000009 [ 112.471701][ T2600] RBP: 00007f9721237f6d R08: 0000000000000000 R09: 0000000000000000 [ 112.471707][ T2600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.471713][ T2600] R13: 00007f9721426038 R14: 00007f9721425fa0 R15: 00007ffd47978428 [ 112.471722][ T2600] [ 112.524344][ T10] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 112.755442][ T10] usb 6-1: device descriptor read/8, error -71 [ 112.886558][ T10] usb 6-1: device descriptor read/8, error -71 [ 112.920017][ T31] usb 4-1: USB disconnect, device number 42 [ 112.932186][ T36] audit: type=1401 audit(1794311759.370:1043): op=setxattr invalid_context="" [ 112.994448][ T10] usb usb6-port1: unable to enumerate USB device [ 113.034923][ T36] audit: type=1400 audit(1794311759.480:1044): avc: denied { map } for pid=2617 comm="syz.7.638" path="/18/dev/sda" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 113.190883][ T2624] FAULT_INJECTION: forcing a failure. [ 113.190883][ T2624] name failslab, interval 1, probability 0, space 0, times 0 [ 113.203671][ T2624] CPU: 1 UID: 0 PID: 2624 Comm: syz.7.640 Not tainted syzkaller #0 ba02342e74ad0b66e51a5e2165c9258878cd70c0 [ 113.203703][ T2624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 113.203716][ T2624] Call Trace: [ 113.203721][ T2624] [ 113.203728][ T2624] __dump_stack+0x21/0x30 [ 113.203745][ T2624] dump_stack_lvl+0x140/0x1c0 [ 113.203755][ T2624] ? __cfi_dump_stack_lvl+0x10/0x10 [ 113.203766][ T2624] dump_stack+0x19/0x20 [ 113.203775][ T2624] should_fail_ex+0x3c2/0x510 [ 113.203786][ T2624] ? __register_sysctl_table+0x7c/0x1440 [ 113.203799][ T2624] should_failslab+0xac/0x100 [ 113.203811][ T2624] __kmalloc_noprof+0x69/0x510 [ 113.203826][ T2624] ? __register_sysctl_table+0x7c/0x1440 [ 113.203840][ T2624] __register_sysctl_table+0x7c/0x1440 [ 113.203853][ T2624] ? snprintf+0xe9/0x140 [ 113.203862][ T2624] ? kasan_save_alloc_info+0x3a/0x50 [ 113.203876][ T2624] register_net_sysctl_sz+0x245/0x260 [ 113.203890][ T2624] __addrconf_sysctl_register+0x36f/0x5a0 [ 113.203905][ T2624] ? addrconf_verify_work+0x50/0x50 [ 113.203915][ T2624] ? __asan_memcpy+0x5a/0x80 [ 113.203928][ T2624] addrconf_init_net+0x496/0x8b0 [ 113.203939][ T2624] ops_init+0x302/0x5d0 [ 113.203948][ T2624] ? __kasan_check_write+0x18/0x20 [ 113.203961][ T2624] ? rwsem_read_trylock+0x275/0x5a0 [ 113.203975][ T2624] setup_net+0x227/0x9b0 [ 113.203984][ T2624] ? copy_net_ns+0xa20/0xa20 [ 113.203998][ T2624] ? down_read_killable+0x7f/0x100 [ 113.204012][ T2624] ? __cfi_down_read_killable+0x10/0x10 [ 113.204027][ T2624] copy_net_ns+0x4fc/0xa20 [ 113.204041][ T2624] create_new_namespaces+0x390/0x6f0 [ 113.204052][ T2624] unshare_nsproxy_namespaces+0x124/0x180 [ 113.204063][ T2624] ksys_unshare+0x4f9/0x920 [ 113.204072][ T2624] ? fput+0x1a4/0x230 [ 113.204083][ T2624] ? __cfi_ksys_unshare+0x10/0x10 [ 113.204092][ T2624] ? __kasan_check_write+0x18/0x20 [ 113.204106][ T2624] __x64_sys_unshare+0x3c/0x50 [ 113.204116][ T2624] x64_sys_call+0x2998/0x2ee0 [ 113.204126][ T2624] do_syscall_64+0x57/0xf0 [ 113.204137][ T2624] ? clear_bhb_loop+0x50/0xa0 [ 113.204150][ T2624] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 113.204163][ T2624] RIP: 0033:0x7f97211a8f19 [ 113.204174][ T2624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.204183][ T2624] RSP: 002b:00007f9722103028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 113.204195][ T2624] RAX: ffffffffffffffda RBX: 00007f9721425fa0 RCX: 00007f97211a8f19 [ 113.204203][ T2624] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 113.204210][ T2624] RBP: 00007f9721237f6d R08: 0000000000000000 R09: 0000000000000000 [ 113.204216][ T2624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.204223][ T2624] R13: 00007f9721426038 R14: 00007f9721425fa0 R15: 00007ffd47978428 [ 113.204231][ T2624] [ 113.534363][ T31] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 113.685349][ T31] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.695120][ T31] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 113.707910][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 113.715179][ T31] usb 4-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 113.724213][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=202 [ 113.732379][ T31] usb 4-1: SerialNumber: syz [ 113.737697][ T31] usb 4-1: config 0 descriptor?? [ 113.824419][ T10] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 113.904337][ T65] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 113.945986][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 113.951985][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 113.960863][ T31] usb 4-1: USB disconnect, device number 43 [ 113.975415][ T10] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 113.983568][ T10] usb 8-1: config 0 has no interface number 0 [ 113.989946][ T10] usb 8-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 114.001167][ T504] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 114.008689][ T10] usb 8-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.018675][ T10] usb 8-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.031688][ T10] usb 8-1: config 0 interface 1 has no altsetting 0 [ 114.038541][ T10] usb 8-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 114.047660][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.056133][ T10] usb 8-1: config 0 descriptor?? [ 114.065545][ T65] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.075991][ T65] usb 6-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 114.091215][ T65] usb 6-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 114.100390][ T65] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.108611][ T65] usb 6-1: Product: syz [ 114.112787][ T65] usb 6-1: Manufacturer: syz [ 114.117429][ T65] usb 6-1: SerialNumber: syz [ 114.123860][ T65] usb-storage 6-1:1.0: USB Mass Storage device detected [ 114.131673][ T65] usb-storage 6-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 114.139751][ T65] scsi host1: usb-storage 6-1:1.0 [ 114.184344][ T504] usb 7-1: Using ep0 maxpacket: 16 [ 114.190497][ T504] usb 7-1: config 0 has an invalid interface number: 98 but max is 0 [ 114.198623][ T504] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.208745][ T504] usb 7-1: config 0 has no interface number 0 [ 114.214866][ T504] usb 7-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 114.224746][ T504] usb 7-1: config 0 interface 98 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 114.234608][ T504] usb 7-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 114.244459][ T504] usb 7-1: config 0 interface 98 has no altsetting 0 [ 114.252449][ T504] usb 7-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 114.261542][ T504] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.269613][ T504] usb 7-1: Product: syz [ 114.273787][ T504] usb 7-1: Manufacturer: syz [ 114.278460][ T504] usb 7-1: SerialNumber: syz [ 114.283659][ T504] usb 7-1: config 0 descriptor?? [ 114.289226][ T2638] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 114.296963][ T504] asix 7-1:0.98: probe with driver asix failed with error -22 [ 114.326189][ T2636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.334776][ T2636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.344063][ T504] usb 6-1: USB disconnect, device number 37 [ 114.671161][ T10] input: HID 145f:0212 Pen as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.1/0003:145F:0212.000A/input/input14 [ 114.686081][ T10] input: HID 145f:0212 Pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.1/0003:145F:0212.000A/input/input15 [ 114.699812][ T10] uclogic 0003:145F:0212.000A: input,hidraw0: USB HID v4.06 Keypad [HID 145f:0212] on usb-dummy_hcd.7-1/input1 [ 114.872368][ T10] usb 8-1: USB disconnect, device number 8 [ 114.952987][ T2667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2667 comm=syz.5.652 [ 114.967629][ T2667] FAULT_INJECTION: forcing a failure. [ 114.967629][ T2667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.980899][ T2667] CPU: 1 UID: 0 PID: 2667 Comm: syz.5.652 Not tainted syzkaller #0 ba02342e74ad0b66e51a5e2165c9258878cd70c0 [ 114.980925][ T2667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 114.980936][ T2667] Call Trace: [ 114.980942][ T2667] [ 114.980947][ T2667] __dump_stack+0x21/0x30 [ 114.980967][ T2667] dump_stack_lvl+0x140/0x1c0 [ 114.980982][ T2667] ? __cfi_dump_stack_lvl+0x10/0x10 [ 114.980998][ T2667] dump_stack+0x19/0x20 [ 114.981013][ T2667] should_fail_ex+0x3c2/0x510 [ 114.981030][ T2667] should_fail+0xf/0x20 [ 114.981043][ T2667] should_fail_usercopy+0x1e/0x30 [ 114.981061][ T2667] strncpy_from_user+0x29/0x280 [ 114.981079][ T2667] getname_flags+0x106/0x6b0 [ 114.981098][ T2667] getname+0x1b/0x30 [ 114.981134][ T2667] do_sys_openat2+0xda/0x1d0 [ 114.981156][ T2667] ? do_sys_open+0x100/0x100 [ 114.981178][ T2667] ? __cfi_blkcg_maybe_throttle_current+0x10/0x10 [ 114.981202][ T2667] ? __kasan_check_write+0x18/0x20 [ 114.981227][ T2667] __x64_sys_open+0x120/0x150 [ 114.981248][ T2667] x64_sys_call+0x131a/0x2ee0 [ 114.981267][ T2667] do_syscall_64+0x57/0xf0 [ 114.981286][ T2667] ? clear_bhb_loop+0x50/0xa0 [ 114.981308][ T2667] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 114.981329][ T2667] RIP: 0033:0x7f6d5dfa8f19 [ 114.981344][ T2667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.981358][ T2667] RSP: 002b:00007f6d5ee99028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 114.981377][ T2667] RAX: ffffffffffffffda RBX: 00007f6d5e225fa0 RCX: 00007f6d5dfa8f19 [ 114.981391][ T2667] RDX: 00000000000001d2 RSI: 0000000000060840 RDI: 0000200000000000 [ 114.981402][ T2667] RBP: 00007f6d5e037f6d R08: 0000000000000000 R09: 0000000000000000 [ 114.981414][ T2667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.981425][ T2667] R13: 00007f6d5e226038 R14: 00007f6d5e225fa0 R15: 00007ffc44f32b88 [ 114.981441][ T2667] [ 115.223961][ T2672] sd 0:0:1:0: PR command failed: 1026 [ 115.229463][ T2672] sd 0:0:1:0: Sense Key : 0x5 [current] [ 115.235343][ T2672] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 115.454550][ T36] audit: type=1400 audit(1794311761.900:1045): avc: denied { nlmsg_read } for pid=2677 comm="syz.3.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 115.480851][ T36] audit: type=1400 audit(1794311761.920:1046): avc: denied { write } for pid=2679 comm="syz.3.656" name="proc" dev="binder" ino=1048621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.494444][ T2680] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=2680 comm=syz.3.656 [ 115.503839][ T10] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 115.685428][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.695789][ T10] usb 6-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 768 [ 115.706137][ T10] usb 6-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 115.720784][ T10] usb 6-1: New USB device found, idVendor=174c, idProduct=46aa, bcdDevice= 1.00 [ 115.729892][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.737909][ T10] usb 6-1: Product: syz [ 115.742049][ T10] usb 6-1: Manufacturer: syz [ 115.746671][ T10] usb 6-1: SerialNumber: syz [ 115.752722][ T10] usb-storage 6-1:1.0: USB Mass Storage device detected [ 115.760546][ T10] scsi host1: usb-storage 6-1:1.0 [ 115.764355][ T854] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 115.925382][ T854] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 115.935068][ T854] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 115.946221][ T854] usb 4-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 115.955429][ T854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.959587][ T10] usb 6-1: USB disconnect, device number 38 [ 115.963416][ T854] usb 4-1: Product: syz [ 115.969804][ T504] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 115.975513][ T854] usb 4-1: Manufacturer: syz [ 115.986015][ T854] usb 4-1: SerialNumber: syz [ 115.993001][ T854] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 116.000734][ T854] ums-sddr09 4-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 116.000734][ T854] Please send a copy of this message to and [ 116.114346][ T504] usb 8-1: device descriptor read/64, error -71 [ 116.354354][ T504] usb 8-1: device descriptor read/64, error -71 [ 116.542965][ T36] audit: type=1326 audit(1794311762.980:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2707 comm="syz.5.664" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d5dfa8f19 code=0x0 [ 116.594358][ T504] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 116.724340][ T504] usb 8-1: device descriptor read/64, error -71 [ 116.819895][ T2680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.828453][ T2680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.930479][ T10] usb 7-1: USB disconnect, device number 7 [ 116.984396][ T504] usb 8-1: device descriptor read/64, error -71 [ 116.994315][ T36] audit: type=1400 audit(1794311763.430:1048): avc: denied { wake_alarm } for pid=2721 comm="syz.6.667" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 117.014464][ T2722] 0N: renamed from veth0 (while UP) [ 117.104506][ T504] usb usb8-port1: attempt power cycle [ 117.343392][ T854] scsi host2: usb-storage 4-1:1.0 [ 117.353276][ T854] usb 4-1: USB disconnect, device number 44 [ 117.404342][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 117.444404][ T504] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 117.465439][ T504] usb 8-1: device descriptor read/8, error -71 [ 117.534342][ T10] usb 7-1: device descriptor read/64, error -71 [ 117.595466][ T504] usb 8-1: device descriptor read/8, error -71 [ 117.784360][ T10] usb 7-1: device descriptor read/64, error -71 [ 117.834353][ T504] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 117.855423][ T504] usb 8-1: device descriptor read/8, error -71 [ 117.985489][ T504] usb 8-1: device descriptor read/8, error -71 [ 118.024347][ T10] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 118.094493][ T504] usb usb8-port1: unable to enumerate USB device [ 118.154362][ T10] usb 7-1: device descriptor read/64, error -71 [ 118.234871][ T2744] FAULT_INJECTION: forcing a failure. [ 118.234871][ T2744] name failslab, interval 1, probability 0, space 0, times 0 [ 118.247648][ T2744] CPU: 1 UID: 0 PID: 2744 Comm: syz.3.674 Not tainted syzkaller #0 ba02342e74ad0b66e51a5e2165c9258878cd70c0 [ 118.247676][ T2744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 118.247687][ T2744] Call Trace: [ 118.247693][ T2744] [ 118.247700][ T2744] __dump_stack+0x21/0x30 [ 118.247720][ T2744] dump_stack_lvl+0x140/0x1c0 [ 118.247736][ T2744] ? __cfi_dump_stack_lvl+0x10/0x10 [ 118.247763][ T2744] dump_stack+0x19/0x20 [ 118.247778][ T2744] should_fail_ex+0x3c2/0x510 [ 118.247795][ T2744] should_failslab+0xac/0x100 [ 118.247812][ T2744] kmem_cache_alloc_noprof+0x42/0x410 [ 118.247835][ T2744] ? kmem_cache_free+0x1bd/0x4f0 [ 118.247858][ T2744] ? __se_sys_getcwd+0x6c/0x440 [ 118.247880][ T2744] ? __se_sys_getcwd+0x2fa/0x440 [ 118.247903][ T2744] __se_sys_getcwd+0x6c/0x440 [ 118.247924][ T2744] ? __kasan_check_read+0x15/0x20 [ 118.247947][ T2744] __x64_sys_getcwd+0x5f/0x80 [ 118.247968][ T2744] x64_sys_call+0x1c71/0x2ee0 [ 118.247986][ T2744] do_syscall_64+0x57/0xf0 [ 118.248004][ T2744] ? clear_bhb_loop+0x50/0xa0 [ 118.248026][ T2744] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 118.248048][ T2744] RIP: 0033:0x7f8513da8f19 [ 118.248063][ T2744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.248076][ T2744] RSP: 002b:00007f8514c8a028 EFLAGS: 00000246 ORIG_RAX: 000000000000004f [ 118.248096][ T2744] RAX: ffffffffffffffda RBX: 00007f8514026090 RCX: 00007f8513da8f19 [ 118.248109][ T2744] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 118.248119][ T2744] RBP: 00007f8513e37f6d R08: 0000000000000000 R09: 0000000000000000 [ 118.248131][ T2744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.248142][ T2744] R13: 00007f8514026128 R14: 00007f8514026090 R15: 00007fffda019208 [ 118.248158][ T2744] [ 118.445130][ T62] bridge_slave_1: left allmulticast mode [ 118.451311][ T62] bridge_slave_1: left promiscuous mode [ 118.457223][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.504341][ T10] usb 7-1: device descriptor read/64, error -71 [ 118.562689][ T2747] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.570301][ T2747] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.570327][ T854] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 118.577641][ T2747] bridge_slave_0: entered allmulticast mode [ 118.593320][ T2747] bridge_slave_0: entered promiscuous mode [ 118.600523][ T62] veth1_macvtap: left promiscuous mode [ 118.606053][ T62] veth0_vlan: left promiscuous mode [ 118.624765][ T10] usb usb7-port1: attempt power cycle [ 118.638482][ T2747] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.645560][ T2747] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.653225][ T2747] bridge_slave_1: entered allmulticast mode [ 118.659580][ T2747] bridge_slave_1: entered promiscuous mode [ 118.709197][ T2754] FAULT_INJECTION: forcing a failure. [ 118.709197][ T2754] name failslab, interval 1, probability 0, space 0, times 0 [ 118.720364][ T2747] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.724449][ T2754] CPU: 1 UID: 0 PID: 2754 Comm: syz.7.678 Not tainted syzkaller #0 ba02342e74ad0b66e51a5e2165c9258878cd70c0 [ 118.724479][ T2754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 118.724491][ T2754] Call Trace: [ 118.724497][ T2754] [ 118.724508][ T2754] __dump_stack+0x21/0x30 [ 118.724529][ T2754] dump_stack_lvl+0x140/0x1c0 [ 118.724547][ T2754] ? __cfi_dump_stack_lvl+0x10/0x10 [ 118.724566][ T2754] dump_stack+0x19/0x20 [ 118.724582][ T2754] should_fail_ex+0x3c2/0x510 [ 118.724600][ T2754] should_failslab+0xac/0x100 [ 118.724619][ T2754] __kmalloc_node_noprof+0x69/0x500 [ 118.724643][ T2754] ? __kvmalloc_node_noprof+0x128/0x300 [ 118.724667][ T2754] __kvmalloc_node_noprof+0x128/0x300 [ 118.724689][ T2754] ? __kasan_kmalloc+0x96/0xb0 [ 118.724709][ T2754] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 118.724731][ T2754] ? __kmalloc_cache_noprof+0x23c/0x470 [ 118.724755][ T2754] ? alloc_fdtable+0xa0/0x4f0 [ 118.724773][ T2754] alloc_fdtable+0x18d/0x4f0 [ 118.724799][ T2754] dup_fd+0x6af/0x9c0 [ 118.724816][ T2754] copy_files+0xb7/0x130 [ 118.724841][ T2754] copy_process+0x1221/0x33a0 [ 118.724868][ T2754] ? __cfi_copy_process+0x10/0x10 [ 118.724894][ T2754] kernel_clone+0x233/0x810 [ 118.724918][ T2754] ? __cfi_kernel_clone+0x10/0x10 [ 118.724943][ T2754] ? do_futex+0x32a/0x510 [ 118.724962][ T2754] __x64_sys_clone+0x1b7/0x230 [ 118.724986][ T2754] ? __cfi___x64_sys_clone+0x10/0x10 [ 118.725012][ T2754] ? __kasan_check_write+0x18/0x20 [ 118.725034][ T2754] ? fpregs_restore_userregs+0x11c/0x260 [ 118.725058][ T2754] ? switch_fpu_return+0x12/0x20 [ 118.725081][ T2754] x64_sys_call+0x2b3c/0x2ee0 [ 118.725100][ T2754] do_syscall_64+0x57/0xf0 [ 118.725118][ T2754] ? clear_bhb_loop+0x50/0xa0 [ 118.725140][ T2754] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 118.725163][ T2754] RIP: 0033:0x7f97211a8f19 [ 118.725178][ T2754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.725192][ T2754] RSP: 002b:00007f9722102fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 118.725212][ T2754] RAX: ffffffffffffffda RBX: 00007f9721425fa0 RCX: 00007f97211a8f19 [ 118.725225][ T2754] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 118.725236][ T2754] RBP: 00007f9721237f6d R08: 0000000000000000 R09: 0000000000000000 [ 118.725248][ T2754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.725259][ T2754] R13: 00007f9721426038 R14: 00007f9721425fa0 R15: 00007ffd47978428 [ 118.725274][ T2754] [ 118.744379][ T854] usb 4-1: Using ep0 maxpacket: 16 [ 118.750355][ T2747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.755331][ T854] usb 4-1: unable to get BOS descriptor or descriptor too short [ 118.756748][ T2747] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.761710][ T854] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 36, changing to 7 [ 118.765658][ T2747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.974371][ T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 118.980723][ T854] usb 4-1: New USB device found, idVendor=1235, idProduct=8211, bcdDevice= 0.40 [ 119.005417][ T10] usb 7-1: device descriptor read/8, error -71 [ 119.009716][ T854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.058079][ T854] usb 4-1: Product: syz [ 119.062261][ T854] usb 4-1: Manufacturer: syz [ 119.066912][ T854] usb 4-1: SerialNumber: syz [ 119.092850][ T2747] veth0_vlan: entered promiscuous mode [ 119.105455][ T2747] veth1_macvtap: entered promiscuous mode [ 119.143706][ T2759] input: syz0 as /devices/virtual/input/input16 [ 119.158011][ T10] usb 7-1: device descriptor read/8, error -71 [ 119.262351][ T36] audit: type=1400 audit(1794311766.707:1049): avc: denied { setopt } for pid=2758 comm="syz.8.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.283864][ T2745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.294511][ T2745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.302741][ T2745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.311836][ T62] bridge_slave_1: left allmulticast mode [ 119.312889][ T2745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.317961][ T62] bridge_slave_1: left promiscuous mode [ 119.326579][ T2745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.331474][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.341118][ T2745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.355341][ T62] bridge_slave_0: left allmulticast mode [ 119.355803][ T2745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.361103][ T62] bridge_slave_0: left promiscuous mode [ 119.370135][ T2745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.375858][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.384190][ T2745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.398671][ T2745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.413024][ T854] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 119.420082][ T854] usb 4-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8211); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 119.424371][ T10] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 119.435911][ T854] usb 4-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 119.453482][ T854] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 119.465355][ T10] usb 7-1: device descriptor read/8, error -71 [ 119.469669][ T854] usb 4-1: USB disconnect, device number 45 [ 119.480946][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 119.523878][ T2765] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.531034][ T2765] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.538292][ T2765] bridge_slave_0: entered allmulticast mode [ 119.544566][ T2765] bridge_slave_0: entered promiscuous mode [ 119.551057][ T2765] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.558465][ T2765] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.565811][ T2765] bridge_slave_1: entered allmulticast mode [ 119.571987][ T2765] bridge_slave_1: entered promiscuous mode [ 119.584590][ T62] veth1_macvtap: left promiscuous mode [ 119.590175][ T62] veth0_vlan: left promiscuous mode [ 119.596486][ T10] usb 7-1: device descriptor read/8, error -71 [ 119.659430][ T2765] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.666569][ T2765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.673918][ T2765] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.680971][ T2765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.702360][ T1421] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.709867][ T1421] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.717975][ T10] usb usb7-port1: unable to enumerate USB device [ 119.726815][ T1422] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.733945][ T1422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.744844][ T1422] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.751924][ T1422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.774098][ T2765] veth0_vlan: entered promiscuous mode [ 119.785104][ T2765] veth1_macvtap: entered promiscuous mode [ 119.925762][ T2772] FAULT_INJECTION: forcing a failure. [ 119.925762][ T2772] name failslab, interval 1, probability 0, space 0, times 0 [ 119.938603][ T2772] CPU: 0 UID: 0 PID: 2772 Comm: syz.3.683 Not tainted syzkaller #0 ba02342e74ad0b66e51a5e2165c9258878cd70c0 [ 119.938628][ T2772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 119.938636][ T2772] Call Trace: [ 119.938640][ T2772] [ 119.938646][ T2772] __dump_stack+0x21/0x30 [ 119.938661][ T2772] dump_stack_lvl+0x140/0x1c0 [ 119.938672][ T2772] ? __cfi_dump_stack_lvl+0x10/0x10 [ 119.938682][ T2772] ? xas_find_marked+0xc97/0xda0 [ 119.938696][ T2772] ? xas_nomem+0x71/0x2c0 [ 119.938711][ T2772] dump_stack+0x19/0x20 [ 119.938720][ T2772] should_fail_ex+0x3c2/0x510 [ 119.938731][ T2772] should_failslab+0xac/0x100 [ 119.938742][ T2772] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 119.938758][ T2772] ? kstrdup_const+0x45/0x60 [ 119.938771][ T2772] kstrdup+0x4d/0x130 [ 119.938783][ T2772] ? kstrdup_const+0x3a/0x60 [ 119.938796][ T2772] kstrdup_const+0x45/0x60 [ 119.938808][ T2772] alloc_vfsmnt+0xed/0x610 [ 119.938821][ T2772] clone_mnt+0x6e/0xbe0 [ 119.938833][ T2772] copy_tree+0x43d/0xcb0 [ 119.938846][ T2772] copy_mnt_ns+0x186/0x8f0 [ 119.938860][ T2772] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 119.938874][ T2772] ? create_new_namespaces+0x48/0x6f0 [ 119.938885][ T2772] create_new_namespaces+0xd9/0x6f0 [ 119.938895][ T2772] unshare_nsproxy_namespaces+0x124/0x180 [ 119.938906][ T2772] ksys_unshare+0x4f9/0x920 [ 119.938915][ T2772] ? fput+0x1a4/0x230 [ 119.938926][ T2772] ? __cfi_ksys_unshare+0x10/0x10 [ 119.938935][ T2772] ? __kasan_check_write+0x18/0x20 [ 119.938961][ T2772] __x64_sys_unshare+0x3c/0x50 [ 119.938970][ T2772] x64_sys_call+0x2998/0x2ee0 [ 119.938981][ T2772] do_syscall_64+0x57/0xf0 [ 119.938993][ T2772] ? clear_bhb_loop+0x50/0xa0 [ 119.939008][ T2772] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 119.939022][ T2772] RIP: 0033:0x7f8513da8f19 [ 119.939033][ T2772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.939041][ T2772] RSP: 002b:00007f8514cab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 119.939053][ T2772] RAX: ffffffffffffffda RBX: 00007f8514025fa0 RCX: 00007f8513da8f19 [ 119.939061][ T2772] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600 [ 119.939068][ T2772] RBP: 00007f8513e37f6d R08: 0000000000000000 R09: 0000000000000000 [ 119.939074][ T2772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.939081][ T2772] R13: 00007f8514026038 R14: 00007f8514025fa0 R15: 00007fffda019208 [ 119.939089][ T2772] [ 120.244399][ T10] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 120.273902][ T62] Bluetooth: hci0: Frame reassembly failed (-84) [ 120.395727][ T10] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 120.407015][ T10] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 59136, setting to 1024 [ 120.418257][ T10] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.431142][ T10] usb 10-1: config 0 interface 0 has no altsetting 0 [ 120.437859][ T10] usb 10-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 120.447000][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.455858][ T10] usb 10-1: config 0 descriptor?? [ 120.461179][ T2770] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 120.872178][ T10] hid-multitouch 0003:0EEF:72C4.000B: ignoring exceeding usage max [ 120.881319][ T10] hid-multitouch 0003:0EEF:72C4.000B: unknown main item tag 0x0 [ 120.889096][ T10] hid-multitouch 0003:0EEF:72C4.000B: unknown main item tag 0x0 [ 120.896855][ T10] hid-multitouch 0003:0EEF:72C4.000B: unknown main item tag 0x0 [ 120.904681][ T10] hid-multitouch 0003:0EEF:72C4.000B: unknown main item tag 0x0 [ 120.912331][ T10] hid-multitouch 0003:0EEF:72C4.000B: unknown main item tag 0x0 [ 120.919990][ T10] hid-multitouch 0003:0EEF:72C4.000B: unknown main item tag 0x0 [ 120.927671][ T10] hid-multitouch 0003:0EEF:72C4.000B: unknown main item tag 0x0 [ 120.935356][ T10] hid-multitouch 0003:0EEF:72C4.000B: unknown main item tag 0x0 [ 120.942997][ T10] hid-multitouch 0003:0EEF:72C4.000B: unknown main item tag 0x0 [ 120.952018][ T10] hid-multitouch 0003:0EEF:72C4.000B: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.9-1/input0 [ 121.070981][ T36] audit: type=1400 audit(1794311768.517:1050): avc: denied { ioctl } for pid=2769 comm="syz.9.682" path="/0/tracing/events/irq_vectors/vector_setup/id" dev="tracefs" ino=19680823 ioctlcmd=0xaee2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 121.071325][ T2770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.107241][ T2770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.684388][ T854] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 121.845381][ T854] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.856314][ T854] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.869109][ T854] usb 7-1: config 0 interface 0 has no altsetting 0 [ 121.875729][ T854] usb 7-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 121.885003][ T854] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.893470][ T854] usb 7-1: config 0 descriptor?? [ 122.173744][ T2790] FAULT_INJECTION: forcing a failure. [ 122.173744][ T2790] name failslab, interval 1, probability 0, space 0, times 0 [ 122.186485][ T2790] CPU: 0 UID: 0 PID: 2790 Comm: syz.8.687 Not tainted syzkaller #0 ba02342e74ad0b66e51a5e2165c9258878cd70c0 [ 122.186518][ T2790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 122.186529][ T2790] Call Trace: [ 122.186536][ T2790] [ 122.186542][ T2790] __dump_stack+0x21/0x30 [ 122.186564][ T2790] dump_stack_lvl+0x140/0x1c0 [ 122.186580][ T2790] ? __cfi_dump_stack_lvl+0x10/0x10 [ 122.186598][ T2790] dump_stack+0x19/0x20 [ 122.186613][ T2790] should_fail_ex+0x3c2/0x510 [ 122.186630][ T2790] should_failslab+0xac/0x100 [ 122.186647][ T2790] kmem_cache_alloc_noprof+0x42/0x410 [ 122.186673][ T2790] ? prepare_creds+0x47/0x6b0 [ 122.186693][ T2790] ? __cfi_make_kuid+0x10/0x10 [ 122.186716][ T2790] prepare_creds+0x47/0x6b0 [ 122.186737][ T2790] do_faccessat+0x315/0xd00 [ 122.186761][ T2790] ? fsnotify_parent+0x220/0x220 [ 122.186780][ T2790] ? __kasan_check_write+0x18/0x20 [ 122.186801][ T2790] ? fpregs_restore_userregs+0x11c/0x260 [ 122.186823][ T2790] __x64_sys_faccessat2+0x9e/0xb0 [ 122.186842][ T2790] x64_sys_call+0x2854/0x2ee0 [ 122.186862][ T2790] do_syscall_64+0x57/0xf0 [ 122.186881][ T2790] ? clear_bhb_loop+0x50/0xa0 [ 122.186904][ T2790] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 122.186923][ T2790] RIP: 0033:0x7fdb6cfa8f19 [ 122.186942][ T2790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.186951][ T2790] RSP: 002b:00007fdb6de59028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b7 [ 122.186964][ T2790] RAX: ffffffffffffffda RBX: 00007fdb6d225fa0 RCX: 00007fdb6cfa8f19 [ 122.186975][ T2790] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 122.186987][ T2790] RBP: 00007fdb6d037f6d R08: 0000000000000000 R09: 0000000000000000 [ 122.187000][ T2790] R10: 0000000000001100 R11: 0000000000000246 R12: 0000000000000000 [ 122.187012][ T2790] R13: 00007fdb6d226038 R14: 00007fdb6d225fa0 R15: 00007fff4fc50ef8 [ 122.187028][ T2790] [ 122.389147][ T964] Bluetooth: hci0: command 0x1003 tx timeout [ 122.391120][ T854] hid-multitouch 0003:0EEF:72C4.000C: unbalanced delimiter at end of report description [ 122.395193][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 122.405304][ T854] hid-multitouch 0003:0EEF:72C4.000C: probe with driver hid-multitouch failed with error -22 [ 122.439007][ T2792] netlink: 'syz.3.688': attribute type 20 has an invalid length. [ 122.447621][ T2795] netlink: 'syz.3.688': attribute type 20 has an invalid length. [ 122.593717][ T36] audit: type=1400 audit(1794311770.037:1051): avc: denied { mounton } for pid=2787 comm="syz.6.686" path="/syzcgroup/cpu/syz6/memory.force_empty" dev="cgroup" ino=556 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 122.594070][ T10] usb 7-1: USB disconnect, device number 12 [ 122.704415][ T65] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 122.744355][ T854] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 122.815862][ T10] usb 10-1: USB disconnect, device number 2 [ 122.854373][ T65] usb 4-1: Using ep0 maxpacket: 16 [ 122.860651][ T65] usb 4-1: config 0 interface 0 has no altsetting 0 [ 122.867669][ T65] usb 4-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 122.876845][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.884356][ T854] usb 9-1: device descriptor read/64, error -71 [ 122.888610][ T65] usb 4-1: config 0 descriptor?? [ 123.100897][ T65] usbhid 4-1:0.0: can't add hid device: -71 [ 123.107483][ T65] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 123.116252][ T65] usb 4-1: USB disconnect, device number 46 [ 123.134346][ T854] usb 9-1: device descriptor read/64, error -71 [ 123.143853][ T36] audit: type=1400 audit(1794311770.587:1052): avc: denied { mounton } for pid=2808 comm="syz.6.694" path="/40/file0" dev="tmpfs" ino=234 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 123.293028][ T36] audit: type=1400 audit(1794311770.737:1053): avc: denied { bind } for pid=2812 comm="syz.9.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 123.384352][ T854] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 123.524454][ T854] usb 9-1: device descriptor read/64, error -71 [ 123.617229][ T36] audit: type=1400 audit(1794311771.067:1054): avc: denied { create } for pid=2819 comm="syz.3.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 123.638412][ T10] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 123.648104][ T2823] netlink: 'syz.3.699': attribute type 6 has an invalid length. [ 123.658561][ T36] audit: type=1400 audit(1794311771.107:1055): avc: denied { map } for pid=2822 comm="syz.3.699" path="socket:[267564]" dev="sockfs" ino=267564 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 123.774520][ T854] usb 9-1: device descriptor read/64, error -71 [ 123.794367][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 123.800766][ T10] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 123.812088][ T10] usb 10-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.825077][ T10] usb 10-1: config 0 interface 0 has no altsetting 0 [ 123.831974][ T10] usb 10-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 123.841143][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.849772][ T10] usb 10-1: config 0 descriptor?? [ 123.884472][ T854] usb usb9-port1: attempt power cycle [ 123.904576][ T311] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 123.995269][ T2828] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2828 comm=syz.6.701 [ 124.008204][ T36] audit: type=1400 audit(1794311771.457:1056): avc: denied { bind } for pid=2827 comm="syz.6.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 124.058588][ T311] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 124.063587][ T2828] netlink: 48 bytes leftover after parsing attributes in process `syz.6.701'. [ 124.068023][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.084874][ T311] usb 4-1: Product: syz [ 124.089045][ T311] usb 4-1: Manufacturer: syz [ 124.093638][ T311] usb 4-1: SerialNumber: syz [ 124.098726][ T65] rust_binder: 2827: undelivered TRANSACTION_COMPLETE [ 124.116228][ T36] audit: type=1400 audit(1794311771.567:1057): avc: denied { name_bind } for pid=2832 comm="syz.6.702" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 124.137436][ T36] audit: type=1400 audit(1794311771.567:1058): avc: denied { sys_module } for pid=2832 comm="syz.6.702" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 124.160457][ T2833] netlink: 12 bytes leftover after parsing attributes in process `syz.6.702'. [ 124.224372][ T854] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 124.245344][ T854] usb 9-1: device descriptor read/8, error -71 [ 124.316657][ T10] usbhid 10-1:0.0: can't add hid device: -71 [ 124.322787][ T10] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 124.331904][ T10] usb 10-1: USB disconnect, device number 3 [ 124.395622][ T854] usb 9-1: device descriptor read/8, error -71 [ 124.644361][ T854] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 124.665357][ T854] usb 9-1: device descriptor read/8, error -71 [ 124.701045][ T311] (unnamed net_device) (uninitialized): Assigned a random MAC address: 4e:76:b8:e5:35:cb [ 124.713548][ T311] rtl8150 4-1:1.0: eth1: rtl8150 is detected [ 124.721625][ T311] usb 4-1: USB disconnect, device number 47 [ 124.795455][ T854] usb 9-1: device descriptor read/8, error -71 [ 124.904502][ T854] usb usb9-port1: unable to enumerate USB device [ 125.134358][ T31] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 125.204509][ T2873] netlink: 'syz.6.706': attribute type 18 has an invalid length. [ 125.212257][ T2873] netlink: 16 bytes leftover after parsing attributes in process `syz.6.706'. [ 125.305489][ T31] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.317203][ T31] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 125.326555][ T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.346027][ T31] usb 10-1: config 0 descriptor?? [ 125.559402][ T31] usbhid 10-1:0.0: can't add hid device: -71 [ 125.566669][ T31] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 125.583628][ T31] usb 10-1: USB disconnect, device number 4 [ 125.604349][ T311] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 125.624574][ T2887] netlink: 32 bytes leftover after parsing attributes in process `syz.8.710'. [ 125.744528][ T311] usb 4-1: device descriptor read/64, error -71 [ 125.892384][ T2893] wireguard: wg0: Could not create IPv4 socket [ 126.004386][ T311] usb 4-1: device descriptor read/64, error -71 [ 126.104404][ T31] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 126.254540][ T311] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 126.265496][ T31] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.280899][ T31] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 126.290330][ T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.302910][ T31] usb 10-1: config 0 descriptor?? [ 126.314329][ T458] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 126.384361][ T311] usb 4-1: device descriptor read/64, error -71 [ 126.464349][ T458] usb 9-1: Using ep0 maxpacket: 32 [ 126.471135][ T458] usb 9-1: unable to get BOS descriptor or descriptor too short [ 126.481473][ T458] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 126.490941][ T458] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.499717][ T458] usb 9-1: Product: syz [ 126.504521][ T458] usb 9-1: Manufacturer: syz [ 126.509347][ T458] usb 9-1: SerialNumber: syz [ 126.654342][ T311] usb 4-1: device descriptor read/64, error -71 [ 126.764555][ T311] usb usb4-port1: attempt power cycle [ 127.124487][ T311] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 127.132477][ T31] aiptek 10-1:0.0: Aiptek using 400 ms programming speed [ 127.141265][ T31] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input17 [ 127.169678][ T311] usb 4-1: device descriptor read/8, error -71 [ 127.178545][ C1] ------------[ cut here ]------------ [ 127.184043][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 127.192648][ C1] index 25343 is out of range for type 'const int[34]' [ 127.199503][ C1] CPU: 1 UID: 0 PID: 316 Comm: udevd Not tainted syzkaller #0 ba02342e74ad0b66e51a5e2165c9258878cd70c0 [ 127.199538][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 127.199552][ C1] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 127.199558][ C1] [ 127.199567][ C1] __dump_stack+0x21/0x30 [ 127.199593][ C1] dump_stack_lvl+0x140/0x1c0 [ 127.199613][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 127.199634][ C1] dump_stack+0x19/0x20 [ 127.199651][ C1] ubsan_epilogue+0xe/0x40 [ 127.199673][ C1] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 127.199699][ C1] aiptek_irq+0x208d/0x2a00 [ 127.199722][ C1] ? _raw_spin_unlock+0x45/0x60 [ 127.199744][ C1] ? kcov_remote_start+0x1d2/0x3c0 [ 127.199772][ C1] __usb_hcd_giveback_urb+0x371/0x530 [ 127.199820][ C1] usb_hcd_giveback_urb+0x12b/0x400 [ 127.199847][ C1] dummy_timer+0xa3f/0x4900 [ 127.199882][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 127.199909][ C1] ? timerqueue_del+0xd7/0x130 [ 127.199926][ C1] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 127.199950][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 127.199976][ C1] __hrtimer_run_queues+0x3ab/0x8e0 [ 127.200002][ C1] ? hrtimer_interrupt+0xf30/0xf30 [ 127.200024][ C1] ? read_tsc+0xd/0x20 [ 127.200042][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 127.200072][ C1] hrtimer_run_softirq+0x159/0x560 [ 127.200097][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 127.200117][ C1] handle_softirqs+0x1b0/0x5b0 [ 127.200141][ C1] __irq_exit_rcu+0x47/0xb0 [ 127.200162][ C1] irq_exit_rcu+0xd/0x30 [ 127.200183][ C1] sysvec_apic_timer_interrupt+0x44/0x90 [ 127.200209][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 127.200236][ C1] RIP: 0033:0x7fad94d11b18 [ 127.200254][ C1] Code: ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 3d 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 <48> 8b 15 b9 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 [ 127.200271][ C1] RSP: 002b:00007fff599cd918 EFLAGS: 00000202 [ 127.200290][ C1] RAX: fffffffffffffffe RBX: 000055f0b0df5b40 RCX: 00007fad94d11b0a [ 127.200305][ C1] RDX: 00007fff599cd920 RSI: 00007fff599cd9b0 RDI: 00000000ffffff9c [ 127.200320][ C1] RBP: 000055f0b0de2a60 R08: 000055f0b0df5b40 R09: 0000000000000000 [ 127.200335][ C1] R10: 0000000000000100 R11: 0000000000000202 R12: 000055f0b0de2b50 [ 127.200349][ C1] R13: 00007fff599cd9b0 R14: 000055f090637ca4 R15: 000055f090637bcc [ 127.200392][ C1] [ 127.200400][ C1] ---[ end trace ]--- [ 127.259455][ T36] audit: type=1400 audit(1794311774.677:1059): avc: denied { write } for pid=287 comm="syz-executor" path="pipe:[1473]" dev="pipefs" ino=1473 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 127.260661][ C1] ================================================================== [ 127.470259][ C1] BUG: KASAN: global-out-of-bounds in aiptek_irq+0x20ab/0x2a00 [ 127.477798][ C1] Read of size 4 at addr ffffffff8672497c by task udevd/316 [ 127.485064][ C1] [ 127.487385][ C1] CPU: 1 UID: 0 PID: 316 Comm: udevd Not tainted syzkaller #0 ba02342e74ad0b66e51a5e2165c9258878cd70c0 [ 127.487400][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 127.487408][ C1] Call Trace: [ 127.487413][ C1] [ 127.487420][ C1] __dump_stack+0x21/0x30 [ 127.487433][ C1] dump_stack_lvl+0x140/0x1c0 [ 127.487443][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 127.487453][ C1] ? __cfi__printk+0x10/0x10 [ 127.487468][ C1] print_address_description+0x71/0x210 [ 127.487479][ C1] print_report+0x4a/0x70 [ 127.487488][ C1] kasan_report+0x162/0x1a0 [ 127.487501][ C1] ? aiptek_irq+0x20ab/0x2a00 [ 127.487515][ C1] ? aiptek_irq+0x20ab/0x2a00 [ 127.487526][ C1] __asan_report_load4_noabort+0x18/0x20 [ 127.487541][ C1] aiptek_irq+0x20ab/0x2a00 [ 127.487553][ C1] ? _raw_spin_unlock+0x45/0x60 [ 127.487566][ C1] ? kcov_remote_start+0x1d2/0x3c0 [ 127.487582][ C1] __usb_hcd_giveback_urb+0x371/0x530 [ 127.487597][ C1] usb_hcd_giveback_urb+0x12b/0x400 [ 127.487611][ C1] dummy_timer+0xa3f/0x4900 [ 127.487630][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 127.487645][ C1] ? timerqueue_del+0xd7/0x130 [ 127.487655][ C1] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 127.487668][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 127.487682][ C1] __hrtimer_run_queues+0x3ab/0x8e0 [ 127.487696][ C1] ? hrtimer_interrupt+0xf30/0xf30 [ 127.487708][ C1] ? read_tsc+0xd/0x20 [ 127.487717][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 127.487734][ C1] hrtimer_run_softirq+0x159/0x560 [ 127.487747][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 127.487758][ C1] handle_softirqs+0x1b0/0x5b0 [ 127.487771][ C1] __irq_exit_rcu+0x47/0xb0 [ 127.487782][ C1] irq_exit_rcu+0xd/0x30 [ 127.487793][ C1] sysvec_apic_timer_interrupt+0x44/0x90 [ 127.487808][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 127.487823][ C1] RIP: 0033:0x7fad94d11b18 [ 127.487834][ C1] Code: ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 3d 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 <48> 8b 15 b9 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 [ 127.487843][ C1] RSP: 002b:00007fff599cd918 EFLAGS: 00000202 [ 127.487854][ C1] RAX: fffffffffffffffe RBX: 000055f0b0df5b40 RCX: 00007fad94d11b0a [ 127.487862][ C1] RDX: 00007fff599cd920 RSI: 00007fff599cd9b0 RDI: 00000000ffffff9c [ 127.487869][ C1] RBP: 000055f0b0de2a60 R08: 000055f0b0df5b40 R09: 0000000000000000 [ 127.487877][ C1] R10: 0000000000000100 R11: 0000000000000202 R12: 000055f0b0de2b50 [ 127.487884][ C1] R13: 00007fff599cd9b0 R14: 000055f090637ca4 R15: 000055f090637bcc [ 127.487893][ C1] [ 127.487897][ C1] [ 127.742443][ C1] The buggy address belongs to the variable: [ 127.748395][ C1] .str.163+0x1c/0x40 [ 127.752358][ C1] [ 127.754655][ C1] The buggy address belongs to the physical page: [ 127.761055][ C1] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6724 [ 127.769707][ C1] flags: 0x4000(reserved|zone=0) [ 127.774640][ C1] raw: 0000000000004000 ffffea000019c908 ffffea000019c908 0000000000000000 [ 127.783213][ C1] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 127.791795][ C1] page dumped because: kasan: bad access detected [ 127.798221][ C1] page_owner info is not present (never set?) [ 127.804259][ C1] [ 127.806572][ C1] Memory state around the buggy address: [ 127.812188][ C1] ffffffff86724800: 00 00 00 00 00 00 00 00 00 00 00 05 f9 f9 f9 f9 [ 127.820238][ C1] ffffffff86724880: 00 00 f9 f9 00 00 06 f9 f9 f9 f9 f9 00 00 04 f9 [ 127.828286][ C1] >ffffffff86724900: f9 f9 f9 f9 00 00 04 f9 f9 f9 f9 f9 00 00 04 f9 [ 127.836331][ C1] ^ [ 127.844291][ C1] ffffffff86724980: f9 f9 f9 f9 00 00 04 f9 f9 f9 f9 f9 00 00 04 f9 [ 127.852327][ C1] ffffffff86724a00: f9 f9 f9 f9 00 00 04 f9 f9 f9 f9 f9 00 00 04 f9 [ 127.860362][ C1] ================================================================== [ 127.868397][ C1] Disabling lock debugging due to kernel taint [ 127.874525][ C1] ------------[ cut here ]------------ [ 127.880389][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30 [ 127.889310][ C1] index 25344 is out of range for type 'const int[34]' [ 127.896134][ C1] CPU: 1 UID: 0 PID: 316 Comm: udevd Tainted: G B syzkaller #0 ba02342e74ad0b66e51a5e2165c9258878cd70c0 [ 127.896152][ C1] Tainted: [B]=BAD_PAGE [ 127.896156][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 127.896163][ C1] Call Trace: [ 127.896168][ C1] [ 127.896174][ C1] __dump_stack+0x21/0x30 [ 127.896189][ C1] dump_stack_lvl+0x140/0x1c0 [ 127.896199][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 127.896209][ C1] ? input_event_dispose+0x2f5/0x6d0 [ 127.896224][ C1] dump_stack+0x19/0x20 [ 127.896234][ C1] ubsan_epilogue+0xe/0x40 [ 127.896245][ C1] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 127.896259][ C1] aiptek_irq+0x1f3c/0x2a00 [ 127.896273][ C1] ? kcov_remote_start+0x1d2/0x3c0 [ 127.896288][ C1] __usb_hcd_giveback_urb+0x371/0x530 [ 127.896303][ C1] usb_hcd_giveback_urb+0x12b/0x400 [ 127.896317][ C1] dummy_timer+0xa3f/0x4900 [ 127.896336][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 127.896351][ C1] ? timerqueue_del+0xd7/0x130 [ 127.896361][ C1] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 127.896375][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 127.896388][ C1] __hrtimer_run_queues+0x3ab/0x8e0 [ 127.896401][ C1] ? hrtimer_interrupt+0xf30/0xf30 [ 127.896413][ C1] ? read_tsc+0xd/0x20 [ 127.896423][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 127.896439][ C1] hrtimer_run_softirq+0x159/0x560 [ 127.896452][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 127.896463][ C1] handle_softirqs+0x1b0/0x5b0 [ 127.896476][ C1] __irq_exit_rcu+0x47/0xb0 [ 127.896487][ C1] irq_exit_rcu+0xd/0x30 [ 127.896499][ C1] sysvec_apic_timer_interrupt+0x44/0x90 [ 127.896514][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 127.896529][ C1] RIP: 0033:0x7fad94d11b18 [ 127.896539][ C1] Code: ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 3d 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 <48> 8b 15 b9 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 [ 127.896548][ C1] RSP: 002b:00007fff599cd918 EFLAGS: 00000202 [ 127.896558][ C1] RAX: fffffffffffffffe RBX: 000055f0b0df5b40 RCX: 00007fad94d11b0a [ 127.896566][ C1] RDX: 00007fff599cd920 RSI: 00007fff599cd9b0 RDI: 00000000ffffff9c [ 127.896574][ C1] RBP: 000055f0b0de2a60 R08: 000055f0b0df5b40 R09: 0000000000000000 [ 127.896582][ C1] R10: 0000000000000100 R11: 0000000000000202 R12: 000055f0b0de2b50 [ 127.896589][ C1] R13: 00007fff599cd9b0 R14: 000055f090637ca4 R15: 000055f090637bcc [ 127.896597][ C1] [ 127.896601][ C1] ---[ end trace ]--- [ 128.148274][ T36] audit: type=1400 audit(1794311775.587:1060): avc: denied { read } for pid=93 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 128.175993][ T36] audit: type=1400 audit(1794311775.587:1061): avc: denied { search } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.197495][ T36] audit: type=1400 audit(1794311775.587:1062): avc: denied { write } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.218872][ T36] audit: type=1400 audit(1794311775.587:1063): avc: denied { add_name } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.239947][ T36] audit: type=1400 audit(1794311775.587:1064): avc: denied { create } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 128.260640][ T36] audit: type=1400 audit(1794311775.587:1065): avc: denied { append open } for pid=93 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 128.283708][ T36] audit: type=1400 audit(1794311775.587:1066): avc: denied { getattr } for pid=93 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 128.306709][ T311] usb 4-1: device descriptor read/8, error -71 [ 128.387352][ T1422] bridge_slave_1: left allmulticast mode [ 128.393021][ T1422] bridge_slave_1: left promiscuous mode [ 128.398892][ T1422] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.407218][ T1422] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.446063][ T458] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 128.461789][ T458] usb 9-1: USB disconnect, device number 6 [ 128.567046][ T1422] veth1_macvtap: left promiscuous mode [ 128.572623][ T1422] veth0_vlan: left promiscuous mode [ 128.619738][ T10] usb 10-1: USB disconnect, device number 5 [ 128.619818][ C1] aiptek 10-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 128.838242][ T1422] bridge_slave_1: left allmulticast mode [ 128.843937][ T1422] bridge_slave_1: left promiscuous mode [ 128.849801][ T1422] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.857460][ T1422] bridge_slave_0: left allmulticast mode [ 128.863136][ T1422] bridge_slave_0: left promiscuous mode [ 128.868879][ T1422] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.876805][ T1422] bridge_slave_1: left allmulticast mode [ 128.882461][ T1422] bridge_slave_1: left promiscuous mode [ 128.888154][ T1422] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.895812][ T1422] bridge_slave_0: left allmulticast mode [ 128.901471][ T1422] bridge_slave_0: left promiscuous mode [ 128.907216][ T1422] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.077429][ T1422] veth1_macvtap: left promiscuous mode [ 129.082961][ T1422] veth0_vlan: left promiscuous mode [ 129.088513][ T1422] veth1_macvtap: left promiscuous mode [ 129.094000][ T1422] veth0_vlan: left promiscuous mode