last executing test programs: 5m47.101250186s ago: executing program 4 (id=3671): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x7a, &(0x7f0000001400)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "f6ff01", 0x44, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, {}, {0xdd86, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x7b43}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x5, 0xec, 0x0, 0xd, 0x0, 0x1, 0x1, 0x1, 0x1}}}}}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r1 = getpid() pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffeff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) rt_tgsigqueueinfo(r1, r1, 0x1d, &(0x7f0000000040)={0x1f, 0x4, 0xfff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400ffffff7f000000000000c3e134eb3ee320d910e62a469d5480000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mkdir(&(0x7f0000000480)='./file0\x00', 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) preadv(r7, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0xfffffe01}], 0x1, 0x8000, 0x0) 5m45.829835694s ago: executing program 4 (id=3674): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000000000)=""/5, 0x0, 0x1000, 0xffff}, 0x20) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000200)={[{0x1, 0x1, 0x48, 0xfb, 0x7, 0x4, 0x8, 0x3, 0xd, 0xd, 0xa, 0x7, 0x9}, {0x3e, 0x1, 0x3, 0x81, 0x1, 0x2, 0x4, 0x3, 0x8, 0x8, 0x3c, 0x80, 0x80}, {0x8, 0x8, 0x4, 0x7, 0x2, 0x5, 0x20, 0x6, 0x0, 0x9, 0x8, 0x0, 0x7175}], 0xaed3}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) userfaultfd(0x1) getrlimit(0x9, &(0x7f0000000040)) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x200000, 0xfffffffffffffd63) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r7 = accept4(r6, 0x0, 0x0, 0x0) recvmsg$kcm(r7, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40000000) connect$pppoe(r7, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'syzkaller1\x00'}}, 0x1e) 5m44.882143877s ago: executing program 4 (id=3678): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x76, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x0, 0x0, @broadcast=0x1000000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x0, @broadcast, @empty, {[@timestamp_addr={0x44, 0x4}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}}}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x4, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil, 0x3000}) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0d, &(0x7f0000000040)) 5m42.430274156s ago: executing program 4 (id=3688): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000000000)=""/5, 0x0, 0x1000, 0xffff}, 0x20) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000200)={[{0x1, 0x1, 0x48, 0xfb, 0x7, 0x4, 0x8, 0x3, 0xd, 0xd, 0xa, 0x7, 0x9}, {0x3e, 0x1, 0x3, 0x81, 0x1, 0x2, 0x4, 0x3, 0x8, 0x8, 0x3c, 0x80, 0x80}, {0x8, 0x8, 0x4, 0x7, 0x2, 0x5, 0x20, 0x6, 0x0, 0x9, 0x8, 0x0, 0x7175}], 0xaed3}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) userfaultfd(0x1) getrlimit(0x9, &(0x7f0000000040)) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x200000, 0xfffffffffffffd63) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r7 = accept4(r6, 0x0, 0x0, 0x0) recvmsg$kcm(r7, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40000000) connect$pppoe(r7, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'syzkaller1\x00'}}, 0x1e) 5m41.409512061s ago: executing program 4 (id=3694): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r4, 0x0) mount$fuseblk(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x400, &(0x7f0000000200)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x5}}, {@allow_other}, {@blksize}, {@blksize={'blksize', 0x3d, 0xa00}}, {@default_permissions}]}}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000180)=0x5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0x4, 0x100000000], 0x3000, 0x280384}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r5, 0x40086602, &(0x7f0000000000)) r6 = socket(0x1, 0x3, 0x0) bind$unix(r6, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) r7 = semget$private(0x0, 0x7, 0x180) semtimedop(r7, &(0x7f0000000080)=[{0x0, 0x7fff, 0x400}, {0x3, 0x86ac, 0x1000}], 0x2, 0x0) semctl$SETVAL(r7, 0x0, 0x10, &(0x7f0000000040)) ioctl$KVM_RUN(r3, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x19) ioctl$KVM_CAP_PMU_CAPABILITY(r8, 0x4068aea3, &(0x7f0000000400)={0xd4, 0x0, 0x5fa}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x2, 0x2, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 5m37.523645852s ago: executing program 4 (id=3701): r0 = socket(0x40000000015, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20040884}, 0x48010) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000240)='cgroup.controllers\x00', 0x275a, 0x0) preadv(r2, &(0x7f0000000100), 0xa, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_io_uring_setup(0x49e, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x3, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r10 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r7, 0x4, &(0x7f0000000300)=r10, 0x1) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r7, 0x1, 0x0, 0x0, 0x2}) io_uring_enter(r7, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r12, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x30, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f00000004c0)={@nfc_llcp={0x27, 0x0, 0x1, 0x6, 0x7f, 0x4, "ecc89d1e0e6e798c603c4c4571e596f4c3443b32c8d21fab7be2c3a6df51c3f4bc0a33cd90a526aa2515e5ddc3de0a586f94828143b4b5c797f4d91ec75f1f", 0xf}, {0x0}, 0x0, 0x40}, 0xa0) syz_open_dev$video4linux(&(0x7f0000000500), 0x5, 0x8080) 5m22.173134109s ago: executing program 32 (id=3701): r0 = socket(0x40000000015, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20040884}, 0x48010) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000240)='cgroup.controllers\x00', 0x275a, 0x0) preadv(r2, &(0x7f0000000100), 0xa, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_io_uring_setup(0x49e, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x3, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r10 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r7, 0x4, &(0x7f0000000300)=r10, 0x1) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r7, 0x1, 0x0, 0x0, 0x2}) io_uring_enter(r7, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r12, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x30, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f00000004c0)={@nfc_llcp={0x27, 0x0, 0x1, 0x6, 0x7f, 0x4, "ecc89d1e0e6e798c603c4c4571e596f4c3443b32c8d21fab7be2c3a6df51c3f4bc0a33cd90a526aa2515e5ddc3de0a586f94828143b4b5c797f4d91ec75f1f", 0xf}, {0x0}, 0x0, 0x40}, 0xa0) syz_open_dev$video4linux(&(0x7f0000000500), 0x5, 0x8080) 4m57.302154043s ago: executing program 1 (id=3838): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x0, 0x0, @broadcast=0x1000000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x0, @broadcast, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@private, 0x1}]}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}}}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x4, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil, 0x3000}) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0d, 0x0) 4m55.833723618s ago: executing program 1 (id=3844): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x6}, 0x94) syz_clone3(&(0x7f0000000500)={0x900, &(0x7f0000000000), &(0x7f00000002c0)=0x0, &(0x7f0000000300), {0x1b}, &(0x7f0000000340)=""/64, 0x40, &(0x7f00000010c0)=""/4096, &(0x7f00000003c0)=[r0, r0, r0, r0, r0, r0, r0], 0x7, {r3}}, 0x58) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r5, &(0x7f0000000400), 0x4001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) rt_sigqueueinfo(r0, 0xb, &(0x7f0000000180)={0x2b, 0x6, 0x6}) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000002ff69000000000001000000c000000006000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00094461", 0x4000, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="796100000000fcdbdf257e0037d1e075df5f94e75765dbfdcc16ce0000"], 0x14}}, 0x4000054) 4m54.873689477s ago: executing program 1 (id=3848): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x7a, &(0x7f0000001400)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "f6ff01", 0x44, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, {}, {0xdd86, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x7b43}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x5, 0xec, 0x0, 0xd, 0x0, 0x1, 0x1, 0x1, 0x1}}}}}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r1 = getpid() pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffeff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40) rt_tgsigqueueinfo(r1, r1, 0x1d, &(0x7f0000000040)={0x1f, 0x4, 0xfff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400ffffff7f000000000000c3e134eb3ee320d910e62a469d5480000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mkdir(&(0x7f0000000480)='./file0\x00', 0x8) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0xfffffe01}], 0x1, 0x8000, 0x0) 4m54.386118082s ago: executing program 1 (id=3850): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x17d) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)={0xe886c5ffc5249171, 0x4, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x199dc05, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002540)={0x2020}, 0x2020) 4m54.321841996s ago: executing program 1 (id=3851): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe, &(0x7f00000006c0)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, &(0x7f0000000000)) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x0, 0x0, @broadcast=0x1000000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x0, @broadcast, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@private, 0x1}]}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r3, 0x400, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r4, 0x400, 0x0) pread64(r4, &(0x7f0000001440)=""/126, 0x7e, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x4, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil, 0x3000}) syz_emit_ethernet(0x0, 0x0, 0x0) ppoll(&(0x7f00000007c0)=[{r5, 0x4040}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0d, &(0x7f0000000040)) 4m53.979785199s ago: executing program 1 (id=3852): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x2000402) lseek(r4, 0x0, 0x3) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0d022b00000000dbdf2501000000050005000400000008000400ffff000008000300060000000500060002000020"], 0x34}}, 0x4000) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r6, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x80) rmdir(0x0) chroot(&(0x7f0000000000)='./bus\x00') mq_notify(r4, &(0x7f0000000180)={0x0, 0xe, 0x0, @thr={&(0x7f0000000440)="f10ca34f75d54037dc61ffa18f6dcb7f6275aa3a9f79cc3977025d908b33fc27efabb9742ecaee71ea6112030a30e92116f8ca1dc1fc7cbcf5de597498d2984aed2d13a0a16683ee74800823dc8544cba0975c07a9489c3b25e0eb8640854cce68d380883bd86a59497cd52d1e82fb31f3b43b75fb10e572527438c3d8e1f3767404a82842ecb4ee0d890994b955dde8736a373a006bd3ad19a96ed1cf118cebfc6ba53af4bf02e0f936bb72162bbdd187bddb018f71f60c57c7b99e2757397a3e9c683c696393b681e7910e1cd91af67076208cd064dfc17e16dd3cca6863", &(0x7f0000000540)="b8f4c5d70804b0f9cc8bfc2e4547d323552b9b68ba36c2fd8b292cc81b984b1f03e8f49323e83f31c804feb8490816c868a9a085d02eec3bc7c22673ae0d72d71f85954c1b428e2becdb4b7b99043846829d1c79f508fce2beddc7b79599fc4081dbca9abe3f0ce273fba41959ce21800a58913cc87cac3ee47f0f22d498365cc8a4e536b9975103b7522a428fe8705e5a3a58db439f"}}) 4m53.37087661s ago: executing program 33 (id=3852): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x2000402) lseek(r4, 0x0, 0x3) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0d022b00000000dbdf2501000000050005000400000008000400ffff000008000300060000000500060002000020"], 0x34}}, 0x4000) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r6, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x80) rmdir(0x0) chroot(&(0x7f0000000000)='./bus\x00') mq_notify(r4, &(0x7f0000000180)={0x0, 0xe, 0x0, @thr={&(0x7f0000000440)="f10ca34f75d54037dc61ffa18f6dcb7f6275aa3a9f79cc3977025d908b33fc27efabb9742ecaee71ea6112030a30e92116f8ca1dc1fc7cbcf5de597498d2984aed2d13a0a16683ee74800823dc8544cba0975c07a9489c3b25e0eb8640854cce68d380883bd86a59497cd52d1e82fb31f3b43b75fb10e572527438c3d8e1f3767404a82842ecb4ee0d890994b955dde8736a373a006bd3ad19a96ed1cf118cebfc6ba53af4bf02e0f936bb72162bbdd187bddb018f71f60c57c7b99e2757397a3e9c683c696393b681e7910e1cd91af67076208cd064dfc17e16dd3cca6863", &(0x7f0000000540)="b8f4c5d70804b0f9cc8bfc2e4547d323552b9b68ba36c2fd8b292cc81b984b1f03e8f49323e83f31c804feb8490816c868a9a085d02eec3bc7c22673ae0d72d71f85954c1b428e2becdb4b7b99043846829d1c79f508fce2beddc7b79599fc4081dbca9abe3f0ce273fba41959ce21800a58913cc87cac3ee47f0f22d498365cc8a4e536b9975103b7522a428fe8705e5a3a58db439f"}}) 13.179840851s ago: executing program 6 (id=4896): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000004, 0x810, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{0x0, 0x1e, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0x1}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0xfffffd57}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140), 0x1}, {&(0x7f0000000340)="e4", 0xfffffec2}], 0x2, 0x0, 0xffffff84}}], 0x5f, 0x4000000) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004c00)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000880) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xd) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 10.711493446s ago: executing program 6 (id=4904): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x7a, &(0x7f0000001400)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "f6ff01", 0x44, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, {}, {0xdd86, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x7b43}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x5, 0xec, 0x0, 0xd, 0x0, 0x1, 0x1, 0x1, 0x1}}}}}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r1 = getpid() pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, 0x0, 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffeff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) rt_tgsigqueueinfo(r1, r1, 0x1d, &(0x7f0000000040)={0x1f, 0x4, 0xfff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400ffffff7f000000000000c3e134eb3ee320d910e62a469d5480000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mkdir(&(0x7f0000000480)='./file0\x00', 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) preadv(r6, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0xfffffe01}], 0x1, 0x8000, 0x0) 10.266351801s ago: executing program 6 (id=4905): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x0) ioctl$CEC_DQEVENT(r2, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r2, 0xc0506107, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x1ef7, &(0x7f0000000380)={0x0, 0x20be, 0x1000, 0x0, 0x114}, &(0x7f0000000100), 0x0) prlimit64(r0, 0x8, &(0x7f0000000140)={0x8, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x40000001, 0x100000, 0x6, 0x2}) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0xc0400, 0x0) sendmsg$rds(r6, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x3}, {0x0}, &(0x7f0000000180)=[{&(0x7f0000001a00)=""/4096, 0x1000}], 0x1, 0x60, 0x4}}], 0x48, 0x8004}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r7}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) 9.103774153s ago: executing program 6 (id=4910): r0 = socket(0x2a, 0x2, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="7f454c4604070003040000000000000002000300030000000903000038000000ce0000000e0000000b00200001000500050000000000000003"], 0x258) close(r1) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) lseek(r1, 0x6, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x3, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000008c0)=""/132, 0x84}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000006, 0x10, 0xffffffffffffffff, 0xcf032000) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0xfffffffffffffe7e) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x16, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) setsockopt$sock_int(r5, 0x1, 0x9, &(0x7f0000000300)=0xa, 0x4) getdents64(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) 6.658913529s ago: executing program 2 (id=4923): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x1, 0x2) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000)=0xfffffe00) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8000) ioctl$EVIOCREVOKE(r6, 0x40044591, 0x0) 6.470842674s ago: executing program 6 (id=4924): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={&(0x7f0000000300)="f0049919f60a246fe964a3f238cbf3dbd7d5c5ccc0d65423e7523de634aaf197104d23827529024d0d503441d961d55afc635f404b03afa10cb13b2c16d547f2844bde7506294df85e3115662bb4f8c2514cca4e87dac3caba605a20a1124571a226b7505ec7ded68486134e98d5cbfff834a7cdf28c5c3ed0d1c33b54caec47dfe2a2a4942a924f98ddcec5949a6ef8885c9aa398bfc6c6fb4fc07d8e09f7403b754f11fdf7a42abbb5421f81529c0c81f7e101cdbe8f1bb0bd4f6e81ed4b350d460d9b3bbd6810285b3e3d76049c095ab1d0b9d19d6013141a79230f4fd12afc1ef6bf2da0ba2d5a0c1d2772fb2e01faab", &(0x7f0000000400)=""/231, &(0x7f0000000500)="e58018825aa5dedc9e74e40ec11b4b8ab20ae48150ef33989b79d2450efebab9ee97358810a6e5e560f4197adb6cf8e1cbcc83b83828b19598d538b177e026f55a56b7ac77fa7a51c966812e91a9ec3427737bcb287463e0d85f6ccf6fff59b2c34fd1e7cf3cc47d36c5be87cbce7e34854b4a056bdbe36d43e9a135031e2a84d4b55c73fe6b7fe2fab615224ab8d3fb60cebf3cc6e12f06a3351214a6ef1a095de96cc05d150311925576a903b5116e2aed59cb3ce5d10c1a9b25a60422ed5aa8b4959a4daea85d06dd", &(0x7f0000000040)="0fbc7e68e411f00f0ab080bf0217aebb8e10f7b97c9aaabe0277e5c21b672bccfbcecc1f4b888d8ec0f889bdb07adb9205367c50967ec3d52f59", 0x8, r0}, 0x38) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d00090509"], 0x0) r3 = syz_open_procfs(r1, &(0x7f0000000240)='oom_score\x00') readv(r3, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/85, 0x55}], 0x1) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x6]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffb}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/asound/card1/oss_mixer\x00', 0x242, 0x0) writev(r7, &(0x7f0000000240)=[{&(0x7f0000000a80)="a080203e3f764f8a9aefd39cafdb26bffadae8105afd9db7fb281c375787c7506703ffe54f53e430e0d2af6e9f88a1d5d2fdad902cf70b315dce0d0c54c3d41e7907479bef309cd6705a1a41c2b5dbdbd66493db2006692ebf42f2520d453545ab0a176692d1553d", 0x68}, {&(0x7f0000000b00)="3bcab867990dafd48a38aa5c3e5078b40f6939f90b68fb7ea320958d4d64836e07", 0x21}, {&(0x7f0000000b40)="7ea229968456cc1d273939b7eaaaf05b3e95c220a05dfec9deedcff57f4337977785bc5532e5d07a8ccd0bbe9ca7c342b821efd28821b4b3993cc7a9cfa514552e371060b3c74d9ad72ddd7c8d0a2ad86262c6582d5da2894f9cbeef46b8a4017be35490301c70b310c1fa63a9c4770e7ce7163b13f9cdd81ae4009a071d0209e3a41890d2943d15ad4a8fefc21f74de71773a", 0x93}, {&(0x7f0000000c00)="c45d5115e5374f6fef7f2f36aa65c7d43d1a282d095234e7c7387a3fa4a89cf1ee7228bb05d139383ce8a2197e705c9fb3cbbe69978007e76b108b6833b9cb03672f82956f192da9f131d69c127412277674ff4b96ddc3e62b1da4558352a61e636903a6d5c779c89f12b18a0ebec4bb4fcba25ba5f39e411b76c23f2f1ab9f7ca0c38a061b69e5a170a679b49d3d2029a1ebcf22212cd34a8d72d5a149b0955f354a9a9218d4ed1e3fdf02ed0d4f965f3d4a3fcc8a40bc604", 0xb9}, {&(0x7f0000000cc0)="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", 0x1000}, {&(0x7f0000001cc0)="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", 0x1000}, {&(0x7f0000002cc0)="b7d77122ff0e4e10075f1aea20a1dd71fd9685bfad6d382d971ef3d62a2a012f7d06f00576a349d7f5e806512101a1ab500915f3f907550ba9d8071279004ff65644851c526604972b086716368cd6cf777c582bc523f87ee79f9ba6b58d65d1eb742691c9a11d2523141a94b874f6f178d76742b442232d1fd588c4a67c143b7d7120884217465d7d0662c65e21b2359a9170e32921892046124cb01b710352c20a09e5a3d1a5cfc0b6", 0xaa}, {&(0x7f0000002d80)="ae7699a27663725e496a1d4477a33f7192b4f8e619e529bd414590fedcedebd3a74ae4f3ecb6aa6866c924ab79cfdf3e941ed1ddfdcd66fda02c78f37d6d9b719769616417f76edd2db964ff309cd95275033746f1120afcb4230f790de61e7713e1181c041cebdcdc8fd423a2e88d598e714e94c8a03438fad42ffecf0b8438fcdbdf2621f8fd9fd57ea9971c4e0b099bd2f5e1f5b7f7a716f59d33ac5c4af92c6e84694ffeb550ec8708c4c12638776c342bc5ab188a", 0xb7}, {&(0x7f0000002e40)="681e388480ae1de8bb3858bed89384e10b6c181e12775f4be4156a56d13d439dbca05257d413af77d56992e79a18ca4d1f1aad78b6237a831e29e3e86eb81ace7e8805801498aa5c9319e4c61b260c0bbfe9b4840d5d3f319d5ba138acbfea81715c2e62b0ae4c215b489a7a4c56a6dd38e756b8ec3b6ac3aa91e41e52ead07e1c8f46f6f0f19787597192acd73fd42a546c36f1036e90b9ecf5f112a5144e68fae8dea8aaa3f4961a956a4c3a952149f2dd5e6758550474f97f2654302dbcc014de79489e969652ae177316e5837d090f88d60f401c6f00198933477149f49a417161ff3fa85366a4d5921749286b6e62681ad9d0e766d6255cda72fdc39ffd8f67deab46d955de32c14a6bc5f71e7b2a87110eafabaf4d66c1295e347cdd5bd6f4726a3f13190a9bee2b5d4fd8934f4794a765d0d463a6cd1aefaf39011d62782781c4ae43fa49fa9a810fae91b199b61e24ac36a2fe7c48073f7690bc44322ed303493d825330aa75c3e4edeee318a146e4f3082cc2879ecd6922bd649c045a3e4a1d170deda05e3c02c7477474f1c42fdbf71262f4e949637a7850a8e4a3eb0a5ffca8b2e52a5b62596371ee7e6cac728b1e193c57ed7c337a940a7bdbb148ceca4a3a00a0e867e636d1bc97f7e06c8dae588632b46730abe5da1486b0f6fd8df57281d885d1643180a1249f025899720e3b51b5ac8bad96e89c13fe4c7ae8704f3850e4c87ef32a79c54eda527321314f6b04d54ba372fa617fa3c0cc4e79f9929647ab868f7488ba26fe0afa86f2f3427d73dbe60eeb91a5220566ce3083f4f1f25efc43e70f1c18a4ff26892526394dba3b1a77260ea5b20bf5fc2419b7eea2a55a548abab5a0c61709149e509e47f116c09ccd384614cb9421318ca0b8f39db906b8a498f131b4043b88b1bb1e08b6004191900bc9422470806142f279cab0ef8fbdbe88022e2a959f5db3a38d9f8f6c59e8e48286fd9b06225b70f0c9dbd43ccc665db33517aec7eab15914999e86b785a5c34a7a4c0488bb8d15136fb2839f4a1eba0ed8c258bc19e9b00463337ef9e1129172c7554326b57307fc41771bb8de454bc72118e3223234473e5846d7a88e5559c2fe197ea9f30a9b67529a79ed019b27f9bbe611470321c9dbd65009d3b2b7aba018a7cf2b6ff2a43cf854f28226c7428be47ea8ee4b70d431999ecdc1d9c5d36843e98e16689e23188c05e5949391f9a9e75910780213774ea1c9fd51500aa1f17bdffefb94e76f754411b1312adaa6692671721a6db580d3345f586e8d6a5e71b2e0e0ee0558ea29e29fcc65433cdb8ba54a51d30231fbf9109e76e6918e39079041a4ba52e38fe27791e9ccefad188ef749e188f406731136aecedd698feefc809f3a6b2c87b5b353e3bc9ec5724522877d134cfc2f7fd9434aa996013f070371533ba965fe8d9c0fc23027abc63dedd420b9b41534dfb46ecc9535f53632c8fa9caded9e0ee68f0c229012a82e3ec0a934ea3b40eaea07f400f20020b60357a5a0c026cdb317c669cbc28bab388810d19848f4cb714b3eaf068f4337d352ef22cc1bbced97ebbca1e9d71da5a243c692bcafddf1bb12444adc71ea6adf346ca449d9b438ce61f148335f45fdd79915793505fd058e6d6168878f250d11e992fbcb9478803be504c72552b76bd0526e8ecb85df148e7e1163305a0880ba62ea30585646cf274bb2e8b343d13a1c48efa75659aecef1342e2968a7a968bde65fa3c3de03ba81a62b05d467d5960d27df2d34a376f3dd43d3bc0ae4fe2f557e0e64abee93ad3f22f9a4f43a3953c0c709329ce9da0618a21a3b9e2f8a0f8f49c3ea7026dc0f8524a9904308629b52e968e0a964979ff7237f2e93d916b76c79b90daebda6c956fe5aba789f3d1edac4dc1afe5dd90f7eb87bfae7c4a39e3daa4f6614bffe68d36e8cb6cabf6e89829a740805ee4df134d6430378916573fe6542e01166a3e88c2265dec4ca728591d9f052b591dcd502aa3741520711fca977b1bd496175efaaca65b65b09b6ec4f9ccd10a3badfe9556c7fa295e72c7c3e3995581ce1ee7e37a70b1648c5ee9979644a4341d1595a4776ec7ce60593dcdc0ec3cea651ee953d66783fdb9ad1840f260cd016dd4bb83b54db8b5d43f53ff47ed9c00d22a8cfde072573896f283a0be12459b57ff0c5a93833971bdaccc78dc7574bd7563cbe96fb19ab256b1f38281e410dcbf91be283975b575e2171f1894e69071a14901f54ab7663eb319e89fd8e003620fab9d6482f42a5640ea07c26de363055a8c2d89c1ac83e2a0f706adb2a7e701fc8d4324887dd594cffb4a4bc4b9510b5f38d5cd7c4e265948b3994b1bf0e76cb4da78ed3941765d1c5eb2989e87e9112db5f90ecc9140303deb24a84b9484a063e2de73be87a6c469f40893f3fbe992b60a777d4110e697ab28ccec005cc5207fad2a9917cf2e787332fcdcee508941df50a28bb38bf20db2b026b75f288f9d4a4567c039fcfffce00a8e26da221d7658e5e869e3f1c01dd14aec591630ca445ed37374def6a56cd91efe39df5117caffc4e18115b21e6dbec15e8107c6fada585242df2c4248252ced4dc1e87c104ebcfb39c88af9c30be33b77f18697c9eab91086d6228678148ea61f4070bf3ac24b4a8f9f841d336df9e6161432f11d21930afda7ab756666db41effb39f14ef97fbd85a57f1182061ae9b078e252b3e754d92857f57f3763faa42a60d6accbd347116fd8c2d4f8f050ee4c6ee65037deeecebdd4968c4fcc8a77ceff4d4205c0904a60056c79e442cb428c324b447c4887951dc4d171587fadf268b3302e6deb9abe25fccf65bb6b2fab8c0a6bf38bd25f9ca0dd2f3791127ed27abe227afd15b4a93004768562a0984edf77f3ab3c5914477b4f31de2b1e80a90edff27bb2986336c6fdf5805b31bbb2b6947e739534e0857958efed807eb6ec9f2f7d44b16ff931b62936b04ff1d2453e4022a58d8e23787eef1643bfa73b373acfef22989c15360e675889bf1f070246cd52b65a82b157a51322bd9ef11ac66ef289a7be82855ee45d594627bd28cec461ef4ace0e8b2dd5cf1b2487642d39f2556f72d4653056ce730f6badfa7de333f340da0edb7ed475f2dced3b49ea68b0aa525955825b0c587f811a6ee0b3912571a73453f25de37ee883320eb44e059e50fbac5fcb715d629a1307da9123474d74a4279b12b6039b5f3e35c2c7c9d2442a925504b99848ab7d6e6f77cefda37ac652a72b60f8932cfe9c1d59cca490e2d373ed3df2639bc4bc602865c6474d850f2cb7ac22459ddfdebd1408de64a89fa4e4f7c5648583013cd4d1eb333eed93fe47fcd1fba55101e02636ad200c507c0862402bd6641be252d0e65180e2179040f0b976f76f88badd5dfde6982e053c261e7a814a5792d8bad5312b4dc2694766b9748206e4d82e10afa16b54aa6690acedff998b09b4f660b8ee307aaf953b78ed296d8d75b73ce0f987802c908d33b4b27bac5a260e73fa10104b2520007ce3ab6f7af88d48b3f3f4f7814a32938c6f72f62dc3afe388edfa0548299dfe8e70a3af83a494a9b558094a6bd5454da814117ffad22425ec5e34373623b606312a8aca23e388462d31f9ae2c0246bca2c8185877cbab689889688060150f20d32e17e035c5977150a63db89813c8aff0c53d9aa336e06b8a9f44687f2889f0b2fb9870da15013660306475f45a15b9abc67945029694e565887588e7357edbc87fa39ea9302def5b14310c04d229f0f782cca341da3e2676a06db92fa25ae499baa9b3af61dfc0fbc89855bfe23a5198c4ab7ae47b48aaf164c0ef933da9d8a6b3526b8dbcf378941cb468956bb1da651aab85b572b3742e857ab896873ee75a866b0d0e5da1cb1196b7af0155fb8ef3069b59f2004771a61d3a1ca4aa0907057bba30f4a8f185b2a412817965638053edf37814c40b632cb4c3b734d9b87940f8fe204b79b6aa28c94b6f71108c66b08383e05c8eefd0c5ae5c589eef936c3e49fc7c5ad5af2a412bcb7734ae2a9d81ceca67bbb722fa1b63ae1849bb6b0624a4fcc8ad694a7bcab8d5073048face1b55509d2a626daca3ceafec44e20d90800e6d94a60b29c1d3f195cf458bd651af3c5ce1910cdbe2abbb4ca6c25c2fbef0144a68d597680e0533b46697944aea898ea26f1834f4d0fdd0aa8398eecfde4fe0b18d6689dc4a8b179b7e0f9f8e15e119037e31f1c8d5db750305f97783521b55c4127d250b7e518c835140c49c7b0d6900ec5765f07a85f6d7e2ecc3cf32f5bc8b1d60e6e8759245bea5715f00a9b3f36b43cc0e6df7f67b9242fc190a9f09410750f58a8b4854164c43e3d566ec2e03749a7a61782aa438d996949111095a5bf30ed8e9d793d4ba95dd92d1832fcba1302a3ffac928084b210390c29ca91e257e5e1c4050d85214be19ed8f09031a4614f7aad18f36da0ee00b3ae64f3bf8a61f7480a2b88aeead7cdbfe8baea0589856e5505173c24b3c81f5e454bca98fc72c82b7287e2c98e973d4ba9afc20843daeed9fb602e2ad599c338f11850de621ff7c74196b651162469eedbe986b94b925c4240b6f31c300a082b38e7b569594a7acbe5fd11", 0xccb}], 0x9) 6.017296923s ago: executing program 5 (id=4925): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(0x0, 0x47b, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000703000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000)=0x3ff, 0xfffffffffffffffd, 0x3) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) openat$snapshot(0xffffffffffffff9c, 0x0, 0x2501, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) syz_usb_connect(0x0, 0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 4.940025941s ago: executing program 0 (id=4927): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='befs\x00', 0x8000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) (async) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) (async) listen(r6, 0x50) (async) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) (async) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @empty, 0x4}, 0x1c) (async) listen(r7, 0x50) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000000c0)={[0x5, 0x4, 0x20000080003, 0xe691, 0x0, 0x8000000000000002, 0x2, 0x100000001, 0xfffffffffffffffb, 0x0, 0x7ff, 0xffffffffffffffff, 0x6, 0x4, 0xfffffffffffffffd], 0x2000, 0x6f84}) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x7, 0x100001, 0x1, 0x4, 0x9, 0xa6, 0xffb, 0x7, 0xb69, 0xc1, 0x0, 0x1, 0x8, 0x5, 0x101, 0xfffffff3, 0xc, 0x3, 0x3, 0x1, 0xfffffffa, 0x1000401, 0x2006, 0x9, 0x81, 0x7, 0x8, 0x100002, 0xa, 0x3, 0x429f, 0x5, 0x2b12, 0x2005, 0x6, 0x1c00, 0xa, 0x40, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x1000, 0x8, 0x5, 0x7, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x102, 0xd7, 0x1fa0860a, 0x4, 0xaa, 0xfffffffc, 0x2, 0xd6f, 0x9, 0x8c, 0x37, 0x2af, 0xf7, 0x5, 0x1, 0x5, 0x6, 0x4, 0x7, 0x4009, 0x800000, 0x204, 0x1, 0x8, 0x8000, 0x400000, 0x3, 0x0, 0x10001, 0x696, 0xffffffff, 0x6, 0x1, 0x9, 0xd4f9, 0xfdffffff, 0x2, 0x3, 0x84, 0x100, 0x5, 0xfffffffe, 0xb661, 0x33b, 0x7ff, 0x7, 0x5, 0xffffffff, 0x6, 0x2, 0xd9a, 0xd, 0x6679, 0xfffffffd, 0x3, 0x2, 0x2, 0x8, 0x0, 0x2000008, 0x2, 0x40, 0x5, 0x1, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x6, 0xc5c, 0xffffffff]}}) (async) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r4, 0x4068aea3, &(0x7f0000000040)={0xa4, 0x0, 0x1}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 4.939244128s ago: executing program 2 (id=4928): rt_sigprocmask(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x0, 0x3}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000140)="4bf3cee5b1f43fb2dacd8e", 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) rt_sigsuspend(&(0x7f0000000240)={[0x10]}, 0x8) 4.870842012s ago: executing program 5 (id=4929): syz_usb_connect(0x3, 0x4f, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xfffff000) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x51) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 4.86937646s ago: executing program 3 (id=4930): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xe2ca6, &(0x7f0000000200)=ANY=[@ANYBLOB='max']) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f00000000c0)={0x0, 0x800}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f00000002c0)={0x28, 0x1, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f00000001c0)}) 4.345945798s ago: executing program 3 (id=4931): r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0x7) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000080)={0x1, 0x3, 0x0, 0x8, 0x8000, 0x0, 0xfffffffffffffffd, 0x20000000, 0xfffffffffffffffc, 0x1, 0xfffffffe, 0x2}) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000200)={r0}, &(0x7f0000000240)={'enc=', 'pkcs1', ' hash=', {'ghash\x00'}}, 0x0, 0x0) 4.34582055s ago: executing program 0 (id=4932): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0x3ff, 0x80, 0x800, 0x40}, 0x8) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r3, 0x112, 0x13, 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, r2, 0x7}, 0x14}}, 0x0) 4.283449989s ago: executing program 3 (id=4933): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x8, 0x4, 0x21, 0xc1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000340), 0xb47, r1}, 0x38) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x7, 0x8, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000100)={r1, &(0x7f00000000c0), 0x20000000}, 0x20) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000080)=@v={0x93, 0x0, 0xa0, 0x16, @generic=0x4, 0x6}) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x801) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "6123e82018fa4f3b", "cbcd11096286f418138bbd3c31a5bff9e12c3ab56634c5d47893797da1797b25", "ff170a57", "3a8b43699328b4e6"}, 0x38) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e26, 0x49, @empty, 0x4}}, 0x0, 0x1f4, 0x8002, 0x0, 0x1b2, 0x0, 0x9}, 0x9c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000010640)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000140)=@ethtool_eeprom={0xb, 0x9, 0x3, 0x60, "879184e99c4185787723654bf46400ef38ac992954c81967a853d33945f1c2fc963080c2a6f619e896d4c8d22358ed3daf3623bd10eaf10069ce16f431bb2db15d373bc3910b4b119ef8f4fac1be949bd80f0a2f8276bb82600ec85dfb161aba"}}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000100", 0x8) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000000)={r7}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={r7, @in={{0x2, 0x4e20, @rand_addr=0x64010102}}, 0x752, 0x862, 0xc, 0x5, 0x10, 0x9c, 0x3}, 0x9c) setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) 4.283180753s ago: executing program 0 (id=4934): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe, &(0x7f00000006c0)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e00100905"], 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, &(0x7f0000000000)) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x0, 0x0, @broadcast=0x1000000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x0, @broadcast, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@private, 0x1}]}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r3, 0x400, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r4, 0x400, 0x0) pread64(r4, &(0x7f0000001440)=""/126, 0x7e, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x4, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil, 0x3000}) syz_emit_ethernet(0x0, 0x0, 0x0) ppoll(&(0x7f00000007c0)=[{r5, 0x4040}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0d, &(0x7f0000000040)) 4.23986805s ago: executing program 3 (id=4935): r0 = syz_open_dev$audion(&(0x7f0000000000), 0x5, 0x4c0200) close(r0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r1, &(0x7f0000000d40)=ANY=[@ANYBLOB='\"'], 0x33) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xc8}}, 0x0) 4.209997481s ago: executing program 3 (id=4936): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000040)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) truncate(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x8007fffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000005, 0x10012, r4, 0xc76a9000) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) r6 = syz_usb_connect(0x2, 0x4a, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x1220a880, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) r7 = gettid() process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x38, 0x2, 0x1, 0x409, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 4.003432364s ago: executing program 2 (id=4937): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000004, 0x810, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{0x0, 0x1e, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0x1}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0xfffffd57}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140), 0x1}, {&(0x7f0000000340)="e4", 0xfffffec2}], 0x2, 0x0, 0xffffff84}}], 0x5f, 0x4000000) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004c00)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000880) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xd) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3.094916469s ago: executing program 2 (id=4938): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) capset(&(0x7f0000000040)={0x20080522}, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x331600, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETVNETBE(r1, 0x800454df, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast1}}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10002, 0x0) recvmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000740)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto$packet(r5, &(0x7f0000000380)="48357e0287af48ffa745b497a54e0eec1bf2c69011f35b48339d15afaef1bd7efe072567826dfa5cbc6f979b050015bde8c4441cd0fa6be03213181b0000000015ec12ced8b1aa8f44e5c30afac6f9fd2ab1303be0d1b2c02533bcc97cce7da9b507b053b11821323590d379e9e350a3291fbedb6382de878b7a56e4e38c7f746d0424029f5d49b04600"/153, 0x99, 0x4000084, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) 2.775313598s ago: executing program 6 (id=4939): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(0x0, 0x47b, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000703000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000)=0x3ff, 0xfffffffffffffffd, 0x3) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) openat$snapshot(0xffffffffffffff9c, 0x0, 0x2501, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) syz_usb_connect(0x0, 0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 2.228943546s ago: executing program 2 (id=4940): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000002700)=0x23, 0x1c) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) fremovexattr(0xffffffffffffffff, &(0x7f0000000180)=@known='system.posix_acl_access\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) fsopen(&(0x7f0000000040)='afs\x00', 0x0) r6 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r7 = socket(0x1e, 0xa, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0), 0x0, 0x9200000000000080) unshare(0x64000600) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="400104"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.578231935s ago: executing program 5 (id=4941): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140)) (fail_nth: 2) 1.259882714s ago: executing program 5 (id=4942): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) (async) r2 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) fsmount(r0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x2000, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) r4 = socket(0x28, 0x80000, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) (async) r7 = socket(0x1e, 0x4, 0x0) (async) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000002ff69fe0000000001000000c000000002000200861fa72e5b0150", 0x22, 0xffffffffffffffff) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000100)=@req={0x5, 0x1, 0x3, 0x80}, 0x10) (async) r8 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0xfffffffc, @local, 0xe79}, 0x1b) (async) r9 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00'}) socket$unix(0x1, 0x1, 0x0) (async) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x10) 1.218034831s ago: executing program 0 (id=4943): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x3}, {0x0}, &(0x7f0000000180)=[{&(0x7f0000001a00)=""/4096, 0x1000}], 0x1, 0x60, 0x4}}], 0x48, 0x8004}, 0x0) (fail_nth: 1) 1.165610702s ago: executing program 5 (id=4944): r0 = socket$rds(0x15, 0x5, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f00000001c0)={'\x00', 0x3, 0x1, 0x9}) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x3}, {0x0}, &(0x7f0000000180)=[{&(0x7f0000001a00)=""/4096, 0x1000}], 0x1, 0x60, 0x4}}], 0x48, 0x8004}, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file0\x00') setxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@ng={0x4, 0xf, "91"}, 0x3, 0x2) 936.014847ms ago: executing program 0 (id=4945): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r3, 0xee01) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="40a84fce8f579658415b59c4e72dcde87c90ccb9370e743b495d6f2478a154cf392dbc44eb2e4e01de2ce2d101631acaddf14da66c", @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x34, 0x0) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r4}, &(0x7f0000000780)=0x7d8, &(0x7f0000000180)='%pK \x00'}, 0x20) signalfd(r1, &(0x7f00000001c0)={[0x901]}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = open(&(0x7f0000000040)='./file1\x00', 0x0, 0x345) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r7, &(0x7f0000003480)={0x2020}, 0x2020) 935.716976ms ago: executing program 3 (id=4946): mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x800, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0xff59}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) keyctl$KEYCTL_WATCH_KEY(0xc, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {0x0, 0x1, 0x3}, 0xfd}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xff}, 0x2}, 0x18) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 930.120168ms ago: executing program 5 (id=4947): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz0\x00', {0x7fff, 0xd6, 0x3, 0xfdc5}, 0x52, [0xb79, 0xffdfffff, 0x4, 0x3, 0x9, 0x8, 0x4, 0x9, 0x4c5c, 0xe, 0xf, 0x3270, 0x8000, 0x8, 0x2, 0xffff, 0xd3f, 0xb88c, 0x4, 0x3, 0x0, 0x4, 0x0, 0x100000, 0x1000, 0xe3, 0x6, 0x3, 0x13ac, 0x2, 0x0, 0xd, 0x8, 0x0, 0x4, 0x3ef94b6e, 0x1, 0x10, 0x400, 0x0, 0x9, 0x2, 0x0, 0xf22, 0x9, 0x9, 0x7, 0x4, 0x2, 0x9, 0xfffffffd, 0x2, 0x72, 0x9, 0xf, 0xe, 0x4, 0x7, 0x2, 0x1, 0x1, 0x7, 0x2, 0xbe55], [0x10, 0x2, 0x0, 0xfffff391, 0xffffffff, 0x9, 0x7, 0x7fff, 0xac, 0x5, 0x4, 0xb3, 0xda0, 0xa3, 0x3ff, 0x2, 0x7, 0x8, 0x1c4309d6, 0xffffffff, 0x103ff, 0x0, 0x0, 0x200000, 0x5, 0xd38e, 0x3, 0x7fffffff, 0x200, 0x1, 0x3, 0x3, 0xffff0001, 0x4, 0x1, 0x4925, 0xabb6, 0x7, 0xc1, 0x6, 0x7, 0x2, 0x7f, 0x7, 0x8000, 0x7, 0x8001, 0x62b8, 0x8000, 0xca49, 0x5, 0xd131, 0x4, 0x4c03f81, 0xfd6, 0x2, 0x10001, 0xff, 0x8, 0xfffffffd, 0x1, 0x1, 0x49, 0x200], [0x33, 0x5, 0x594, 0xfffffffe, 0x3, 0xff5b, 0x4, 0x80000000, 0x9, 0x9, 0x4, 0x7ff, 0x781, 0x2042e, 0x1, 0x2, 0xb88, 0x9, 0x800, 0x20005, 0xfffffff8, 0x29, 0x8, 0xa0, 0x5f1afd78, 0x8dc2, 0x0, 0xfffffffe, 0x5, 0xb, 0x1, 0x7, 0x7, 0x7, 0xfffffd81, 0x40, 0x9, 0xfffffe01, 0x7, 0x4, 0x2, 0x1ff, 0x10, 0x10001, 0x7fffffff, 0x7, 0x8000, 0x14, 0x3, 0x28, 0x800c, 0x4, 0x0, 0x4, 0x7, 0x4, 0xffff8001, 0xe, 0x1, 0x7fff, 0x5, 0xe, 0x62e], [0x66e, 0xea, 0xf47, 0xfffffff4, 0x9, 0x2, 0x4007, 0x8, 0x4, 0x8, 0x0, 0xfffffb2b, 0x7, 0xc, 0x2, 0x9, 0x0, 0x0, 0x4, 0x2, 0x7, 0xf931, 0x3, 0xfffffffd, 0x1, 0x7, 0xffffa75a, 0xff, 0xffff, 0x34, 0xfff, 0x7f, 0x3, 0x0, 0x9, 0x1b2, 0x81, 0x1b, 0x8, 0x4000, 0x5, 0x8, 0x5, 0x4, 0x1, 0x0, 0xffffffc7, 0xffffffff, 0x4, 0x9, 0xd66c58e8, 0x6, 0x10, 0x7fff, 0x5220, 0x7f, 0x9002, 0x100, 0x3, 0x6b5007be, 0xffff, 0x4, 0x3, 0x1]}, 0x45c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYRES16=r0], 0x68}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.controllers\x00', 0x0, 0x0) close(r2) r3 = memfd_create(&(0x7f0000000800)='\xff\x00l\x1e\xa00xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) fcntl$setpipe(r1, 0x407, 0x401) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40) r4 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x5, 0x3, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x800) sendmsg$NL802154_CMD_NEW_SEC_DEV(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r8, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) (fail_nth: 1) 0s ago: executing program 0 (id=4949): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xca, 0x0, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x7f}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x12, 0x40, 0x1, 0x2, 0x7, 0x3}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0x4000) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffc3, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB='p\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32, @ANYBLOB="08001f0005000000050011000100000008001f"], 0x70}}, 0x0) kernel console output (not intermixed with test programs): 1249.947315][ T30] audit: type=1326 audit(1761081734.913:2732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23842 comm="syz.3.4469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7efdb5d8efc9 code=0x7ffc0000 [ 1250.039348][ T30] audit: type=1326 audit(1761081734.913:2733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23842 comm="syz.3.4469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb5d8efc9 code=0x7ffc0000 [ 1250.093484][ T30] audit: type=1326 audit(1761081734.923:2734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23842 comm="syz.3.4469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb5d8efc9 code=0x7ffc0000 [ 1250.147733][ T30] audit: type=1326 audit(1761081734.923:2735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23842 comm="syz.3.4469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7efdb5d8efc9 code=0x7ffc0000 [ 1250.177103][T12379] usb 1-1: device descriptor read/64, error -71 [ 1250.209525][ T30] audit: type=1326 audit(1761081734.923:2736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23842 comm="syz.3.4469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb5d8efc9 code=0x7ffc0000 [ 1250.424259][T12379] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1250.724232][T12379] usb 1-1: Using ep0 maxpacket: 8 [ 1250.760192][T12379] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1250.771456][T12379] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1250.791481][T12379] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1250.828244][T12379] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1250.858690][T12379] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1250.888733][T12379] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.900771][T23869] lo speed is unknown, defaulting to 1000 [ 1250.905942][T23872] overlayfs: missing 'lowerdir' [ 1251.159893][T12379] usb 1-1: usb_control_msg returned -32 [ 1251.166375][T12379] usbtmc 1-1:16.0: can't read capabilities [ 1251.328203][T23888] 9pnet_fd: Insufficient options for proto=fd [ 1251.977710][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1252.993290][T23937] overlayfs: failed to resolve './file0': -2 [ 1253.038006][T12379] usb 1-1: USB disconnect, device number 41 [ 1253.414630][T12379] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 1253.554314][T12379] usb 1-1: device descriptor read/64, error -71 [ 1253.864500][T12379] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 1254.155914][T12379] usb 1-1: device descriptor read/64, error -71 [ 1254.275791][T12379] usb usb1-port1: attempt power cycle [ 1254.654698][T12379] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 1254.744826][T12379] usb 1-1: device descriptor read/8, error -71 [ 1255.137626][T12379] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 1255.203416][T23974] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4503'. [ 1255.214739][T12379] usb 1-1: device descriptor read/8, error -71 [ 1255.335695][T12379] usb usb1-port1: unable to enumerate USB device [ 1255.564865][T19652] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 1255.575387][ T30] kauditd_printk_skb: 79 callbacks suppressed [ 1255.575402][ T30] audit: type=1326 audit(1761081740.983:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23986 comm="syz.5.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e4b8efc9 code=0x7ffc0000 [ 1255.618950][ T30] audit: type=1326 audit(1761081741.013:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23986 comm="syz.5.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e4b8efc9 code=0x7ffc0000 [ 1255.643896][ T30] audit: type=1326 audit(1761081741.013:2818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23986 comm="syz.5.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fd6e4b8efc9 code=0x7ffc0000 [ 1255.671262][ T30] audit: type=1326 audit(1761081741.013:2819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23986 comm="syz.5.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e4b8efc9 code=0x7ffc0000 [ 1255.697567][ T30] audit: type=1326 audit(1761081741.013:2820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23986 comm="syz.5.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e4b8efc9 code=0x7ffc0000 [ 1255.721616][ T30] audit: type=1326 audit(1761081741.013:2821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23986 comm="syz.5.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fd6e4b8efc9 code=0x7ffc0000 [ 1255.745995][ T30] audit: type=1326 audit(1761081741.013:2822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23986 comm="syz.5.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e4b8efc9 code=0x7ffc0000 [ 1255.770068][ T30] audit: type=1326 audit(1761081741.013:2823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23986 comm="syz.5.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e4b8efc9 code=0x7ffc0000 [ 1255.794966][ T30] audit: type=1326 audit(1761081741.013:2824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23986 comm="syz.5.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fd6e4b8efc9 code=0x7ffc0000 [ 1255.796199][T19652] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1255.819604][ T30] audit: type=1326 audit(1761081741.013:2825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23986 comm="syz.5.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e4b8efc9 code=0x7ffc0000 [ 1255.901873][T19652] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.948455][T19652] usb 3-1: config 0 descriptor?? [ 1256.458925][T24000] overlayfs: failed to resolve './file0': -2 [ 1256.988123][ T977] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1257.054417][T12379] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1257.214882][ T977] usb 6-1: Using ep0 maxpacket: 16 [ 1257.221880][ T977] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1257.232135][ T977] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1257.248515][ T977] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1257.259774][ T977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.270919][ T977] usb 6-1: Product: syz [ 1257.275732][ T977] usb 6-1: Manufacturer: syz [ 1257.280368][ T977] usb 6-1: SerialNumber: syz [ 1257.286812][T12379] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1257.295991][ T977] usb 6-1: config 0 descriptor?? [ 1257.301260][T12379] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1257.317856][T12379] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1257.327141][T12379] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1257.335733][T12379] usb 1-1: Manufacturer: syz [ 1257.342071][T12379] usb 1-1: config 0 descriptor?? [ 1257.394918][T12379] rc_core: IR keymap rc-hauppauge not found [ 1257.400865][T12379] Registered IR keymap rc-empty [ 1257.407763][T12379] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1257.419346][T12379] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input70 [ 1257.558736][T12386] usb 1-1: USB disconnect, device number 46 [ 1257.788613][T19652] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1257.798710][T19652] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 1257.810266][T19652] asix 3-1:0.0: probe with driver asix failed with error -71 [ 1257.821316][T19652] usb 3-1: USB disconnect, device number 3 [ 1258.092919][T24026] netlink: 'syz.3.4517': attribute type 21 has an invalid length. [ 1258.103006][T24026] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4517'. [ 1258.198457][T24026] netlink: 'syz.3.4517': attribute type 5 has an invalid length. [ 1258.208307][T24026] netlink: 'syz.3.4517': attribute type 6 has an invalid length. [ 1258.217757][T24026] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4517'. [ 1259.747843][T24050] Invalid ELF header magic: != ELF [ 1260.549949][ T977] usb 6-1: USB disconnect, device number 26 [ 1260.620169][T24066] random: crng reseeded on system resumption [ 1260.834937][T12385] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 1260.874612][T12386] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1260.996166][T12385] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 1261.005134][T12385] usb 3-1: config 0 has no interface number 0 [ 1261.011367][T12385] usb 3-1: config 0 interface 29 has no altsetting 0 [ 1261.020815][T12385] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1261.029976][T12386] usb 1-1: Using ep0 maxpacket: 32 [ 1261.129657][T12386] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 1261.138117][T12385] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.148539][T12386] usb 1-1: config 0 has no interface number 0 [ 1261.155172][T12385] usb 3-1: Product: syz [ 1261.164607][T12385] usb 3-1: Manufacturer: syz [ 1261.169843][T12386] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1261.180972][T12385] usb 3-1: SerialNumber: syz [ 1261.188026][T12386] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1261.258478][T24077] FAULT_INJECTION: forcing a failure. [ 1261.258478][T24077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1261.271838][T24077] CPU: 0 UID: 0 PID: 24077 Comm: syz.5.4529 Not tainted syzkaller #0 PREEMPT(full) [ 1261.271863][T24077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1261.271874][T24077] Call Trace: [ 1261.271881][T24077] [ 1261.271888][T24077] dump_stack_lvl+0x16c/0x1f0 [ 1261.271921][T24077] should_fail_ex+0x512/0x640 [ 1261.271949][T24077] _copy_to_user+0x32/0xd0 [ 1261.271976][T24077] simple_read_from_buffer+0xcb/0x170 [ 1261.272000][T24077] proc_fail_nth_read+0x197/0x240 [ 1261.272028][T24077] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1261.272058][T24077] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1261.272084][T24077] vfs_read+0x1e4/0xcf0 [ 1261.272111][T24077] ? __pfx___mutex_lock+0x10/0x10 [ 1261.272130][T24077] ? __pfx_vfs_read+0x10/0x10 [ 1261.272159][T24077] ? __fget_files+0x20e/0x3c0 [ 1261.272191][T24077] ksys_read+0x12a/0x250 [ 1261.272213][T24077] ? __pfx_ksys_read+0x10/0x10 [ 1261.272248][T24077] do_syscall_64+0xcd/0xfa0 [ 1261.272268][T24077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.272286][T24077] RIP: 0033:0x7fd6e4b8d9dc [ 1261.272301][T24077] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1261.272319][T24077] RSP: 002b:00007fd6e5a08030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1261.272336][T24077] RAX: ffffffffffffffda RBX: 00007fd6e4de6180 RCX: 00007fd6e4b8d9dc [ 1261.272348][T24077] RDX: 000000000000000f RSI: 00007fd6e5a080a0 RDI: 0000000000000008 [ 1261.272359][T24077] RBP: 00007fd6e5a08090 R08: 0000000000000000 R09: 0000000000000000 [ 1261.272369][T24077] R10: 0000000000000099 R11: 0000000000000246 R12: 0000000000000001 [ 1261.272379][T24077] R13: 00007fd6e4de6218 R14: 00007fd6e4de6180 R15: 00007ffff21dcf58 [ 1261.272406][T24077] [ 1261.488784][T12385] usb 3-1: config 0 descriptor?? [ 1261.501182][T12386] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1261.512942][T12386] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1261.535337][T12386] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1261.547645][T12386] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1261.557608][T12386] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1261.567565][T12386] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1261.578020][T12386] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1261.594672][T12386] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1261.606881][T12386] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.748662][T12386] usb 1-1: Product: syz [ 1261.752839][T12386] usb 1-1: Manufacturer: syz [ 1261.758264][T12386] usb 1-1: SerialNumber: syz [ 1261.773958][T12386] usb 1-1: config 0 descriptor?? [ 1261.788201][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 1261.788215][ T30] audit: type=1326 audit(1761081747.193:2877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24062 comm="syz.2.4525" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f5718efc9 code=0x0 [ 1261.795710][T24066] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1262.338131][T12386] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 1262.359288][T12386] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 1262.427548][T12385] peak_usb 3-1:0.29: PEAK-System PCAN-USB X6 v18 fw v236.0.0 (2 channels) [ 1262.561451][T12386] usb 1-1: USB disconnect, device number 47 [ 1262.637636][T24087] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4532'. [ 1262.700317][ T30] audit: type=1400 audit(1761081748.103:2878): avc: denied { map } for pid=24088 comm="syz.5.4533" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1262.931079][T24100] netlink: 277 bytes leftover after parsing attributes in process `syz.5.4535'. [ 1263.120204][ T30] audit: type=1400 audit(1761081748.523:2879): avc: denied { read } for pid=24101 comm="syz.0.4538" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1263.172819][ T30] audit: type=1400 audit(1761081748.523:2880): avc: denied { open } for pid=24101 comm="syz.0.4538" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1263.208059][ T30] audit: type=1400 audit(1761081748.553:2881): avc: denied { ioctl } for pid=24101 comm="syz.0.4538" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1263.756564][T24114] bridge0: port 3(team0) entered disabled state [ 1263.763686][T24114] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.771288][T24114] bridge0: port 1(bridge_slave_0) entered disabled state [ 1264.846447][T12385] peak_usb 3-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 1264.879306][T12385] peak_usb 3-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 1264.935697][T24118] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4542'. [ 1265.654663][T12385] peak_usb 3-1:0.29: probe with driver peak_usb failed with error -71 [ 1265.680608][T12385] usb 3-1: USB disconnect, device number 4 [ 1265.691416][T24135] overlayfs: failed to resolve './file0': -2 [ 1266.704375][T12385] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1266.848749][ T30] audit: type=1400 audit(1761081752.253:2882): avc: denied { connect } for pid=24154 comm="syz.5.4551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1266.885415][T12385] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1266.900489][T12385] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1266.934455][T12385] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1266.948178][ T30] audit: type=1400 audit(1761081752.323:2883): avc: denied { read } for pid=24154 comm="syz.5.4551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1266.989925][T12385] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1267.003217][T12385] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.035245][T24155] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4551'. [ 1267.139105][T12385] usb 3-1: Product: syz [ 1267.144640][T12385] usb 3-1: Manufacturer: syz [ 1267.155105][T12385] usb 3-1: SerialNumber: syz [ 1267.169158][T12385] usb 3-1: config 0 descriptor?? [ 1267.584825][T12386] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 1267.769480][T12386] usb 6-1: config 0 has an invalid interface number: 29 but max is 0 [ 1267.796014][T12386] usb 6-1: config 0 has no interface number 0 [ 1267.816172][T12386] usb 6-1: config 0 interface 29 has no altsetting 0 [ 1267.862178][T12386] usb 6-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1267.892761][T12386] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.922127][T12386] usb 6-1: Product: syz [ 1267.933231][T12386] usb 6-1: Manufacturer: syz [ 1267.950398][T12386] usb 6-1: SerialNumber: syz [ 1267.986400][T12386] usb 6-1: config 0 descriptor?? [ 1268.326945][ T30] audit: type=1326 audit(1761081753.723:2884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24163 comm="syz.5.4553" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6e4b8efc9 code=0x0 [ 1268.380199][T24156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4550'. [ 1268.520851][T24165] ALSA: mixer_oss: invalid OSS volume '' [ 1268.526578][T24165] ALSA: mixer_oss: invalid OSS volume '›î+]OØ“OG”§eÐÔc¦Íï¯9bx'Ä®Cú' [ 1268.535529][T24165] ALSA: mixer_oss: invalid OSS volume '_ü¨²å*[bYcqî~l¬r‹=V' [ 1268.653319][T24165] ALSA: mixer_oss: invalid OSS volume '+ˆ®ê×Í¿èºê‰…nU<$³È^EKʘürÈ+' [ 1268.662194][T24165] ALSA: mixer_oss: invalid OSS volume '+8çµiYJzËåý' [ 1268.941801][T12386] peak_usb 6-1:0.29: PEAK-System PCAN-USB X6 v18 fw v236.0.0 (2 channels) [ 1269.223382][T12385] usb 3-1: USB disconnect, device number 5 [ 1269.380894][ T6535] udevd[6535]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1269.620171][T24166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4552'. [ 1269.672286][ T30] audit: type=1326 audit(1761081755.043:2885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24174 comm="syz.6.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7338b8efc9 code=0x7ffc0000 [ 1269.794372][ T30] audit: type=1326 audit(1761081755.043:2886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24174 comm="syz.6.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7338b8efc9 code=0x7ffc0000 [ 1269.861320][ T30] audit: type=1326 audit(1761081755.043:2887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24174 comm="syz.6.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f7338b8efc9 code=0x7ffc0000 [ 1269.949833][ T30] audit: type=1326 audit(1761081755.043:2888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24174 comm="syz.6.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7338b8efc9 code=0x7ffc0000 [ 1270.030549][ T30] audit: type=1326 audit(1761081755.053:2889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24174 comm="syz.6.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7338b8efc9 code=0x7ffc0000 [ 1270.255187][ T30] audit: type=1326 audit(1761081755.053:2890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24174 comm="syz.6.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f7338b8efc9 code=0x7ffc0000 [ 1270.320511][T12386] peak_usb 6-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 1270.339305][T12386] peak_usb 6-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 1270.385062][ T30] audit: type=1326 audit(1761081755.053:2891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24174 comm="syz.6.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7338b8efc9 code=0x7ffc0000 [ 1270.556265][T12386] peak_usb 6-1:0.29: probe with driver peak_usb failed with error -71 [ 1270.614223][T12386] usb 6-1: USB disconnect, device number 27 [ 1270.730296][T24196] overlayfs: failed to resolve './file0': -2 [ 1271.194986][T24205] sctp: [Deprecated]: syz.6.4564 (pid 24205) Use of int in max_burst socket option. [ 1271.194986][T24205] Use struct sctp_assoc_value instead [ 1271.549378][T24209] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4566'. [ 1271.599645][T24209] openvswitch: netlink: Tunnel attr 15060 out of range max 16 [ 1272.234533][T24228] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1272.537831][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 1272.537848][ T30] audit: type=1326 audit(1761081757.943:2917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24236 comm="syz.0.4574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e658efc9 code=0x7ffc0000 [ 1272.595686][ T30] audit: type=1326 audit(1761081757.973:2918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24236 comm="syz.0.4574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e658efc9 code=0x7ffc0000 [ 1272.633898][ T30] audit: type=1326 audit(1761081757.973:2919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24236 comm="syz.0.4574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f05e658efc9 code=0x7ffc0000 [ 1272.660940][ T30] audit: type=1326 audit(1761081757.973:2920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24236 comm="syz.0.4574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e658efc9 code=0x7ffc0000 [ 1272.687944][ T30] audit: type=1326 audit(1761081757.973:2921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24236 comm="syz.0.4574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e658efc9 code=0x7ffc0000 [ 1272.997409][ T30] audit: type=1326 audit(1761081757.983:2922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24236 comm="syz.0.4574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f05e658efc9 code=0x7ffc0000 [ 1273.025192][ T30] audit: type=1326 audit(1761081757.983:2923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24236 comm="syz.0.4574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e658efc9 code=0x7ffc0000 [ 1273.058045][ T30] audit: type=1326 audit(1761081757.983:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24236 comm="syz.0.4574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e658efc9 code=0x7ffc0000 [ 1273.106422][ T30] audit: type=1326 audit(1761081757.983:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24236 comm="syz.0.4574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f05e658efc9 code=0x7ffc0000 [ 1273.138072][ T30] audit: type=1326 audit(1761081757.983:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24236 comm="syz.0.4574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e658efc9 code=0x7ffc0000 [ 1273.364625][ T977] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1273.514896][ T977] usb 6-1: device descriptor read/64, error -71 [ 1273.774661][ T977] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1273.904890][ T977] usb 6-1: device descriptor read/64, error -71 [ 1274.014456][ T977] usb usb6-port1: attempt power cycle [ 1274.269465][T24250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4578'. [ 1274.287236][T24250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4578'. [ 1274.356002][ T977] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1274.444708][ T977] usb 6-1: device descriptor read/8, error -71 [ 1274.688771][ T977] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1274.716817][ T977] usb 6-1: device descriptor read/8, error -71 [ 1274.725276][T24255] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1274.825367][ T977] usb usb6-port1: unable to enumerate USB device [ 1274.938000][T24264] xt_nat: multiple ranges no longer supported [ 1274.958512][T24269] program syz.2.4583 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1276.067527][T24278] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4584'. [ 1278.256669][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 1278.256685][ T30] audit: type=1326 audit(1761081763.663:2993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24297 comm="syz.3.4590" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efdb5d8efc9 code=0x0 [ 1278.477042][T24305] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4592'. [ 1278.774276][T18230] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1278.941193][T18230] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1278.951790][T18230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1278.961525][T18230] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1278.980028][T18230] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1278.989278][T18230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.997371][T18230] usb 3-1: Product: syz [ 1279.001590][T18230] usb 3-1: Manufacturer: syz [ 1279.006816][T18230] usb 3-1: SerialNumber: syz [ 1279.013086][T18230] usb 3-1: config 0 descriptor?? [ 1279.269098][ T30] audit: type=1400 audit(1761081764.673:2994): avc: denied { create } for pid=24313 comm="syz.5.4595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1279.644011][T17755] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1279.797783][T17755] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1279.808420][T17755] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1279.818175][T17755] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1279.833161][T17755] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1279.842760][T17755] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.850804][T17755] usb 1-1: Product: syz [ 1279.855147][T17755] usb 1-1: Manufacturer: syz [ 1279.859743][T17755] usb 1-1: SerialNumber: syz [ 1279.866641][T17755] usb 1-1: config 0 descriptor?? [ 1280.082092][T24301] ALSA: mixer_oss: invalid OSS volume '' [ 1280.087880][T24301] ALSA: mixer_oss: invalid OSS volume '›î+]OØ“OG”§eÐÔc¦Íï¯9bx'Ä®Cú' [ 1280.096343][T24301] ALSA: mixer_oss: invalid OSS volume '_ü¨²å*[bYcqî~l¬r‹=V' [ 1280.222664][T24301] ALSA: mixer_oss: invalid OSS volume '+ˆ®ê×Í¿èºê‰…nU<$³È^EKʘürÈ+' [ 1280.231700][T24301] ALSA: mixer_oss: invalid OSS volume '+8çµiYJzËåý' [ 1280.324295][T12386] usb 6-1: device descriptor read/64, error -71 [ 1280.594643][T12386] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1280.734387][T12386] usb 6-1: device descriptor read/64, error -71 [ 1280.844643][T12386] usb usb6-port1: attempt power cycle [ 1281.364985][T24316] ALSA: mixer_oss: invalid OSS volume '' [ 1281.370633][T24316] ALSA: mixer_oss: invalid OSS volume '›î+]OØ“OG”§eÐÔc¦Íï¯9bx'Ä®Cú' [ 1281.379438][T24316] ALSA: mixer_oss: invalid OSS volume '_ü¨²å*[bYcqî~l¬r‹=V' [ 1281.497024][T24316] ALSA: mixer_oss: invalid OSS volume '+ˆ®ê×Í¿èºê‰…nU<$³È^EKʘürÈ+' [ 1281.505364][T24316] ALSA: mixer_oss: invalid OSS volume '+8çµiYJzËåý' [ 1281.557603][T18230] usb 3-1: USB disconnect, device number 6 [ 1281.587784][T17755] usb 1-1: USB disconnect, device number 48 [ 1281.615523][T12386] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1281.637674][ T6535] udevd[6535]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1281.752197][T12386] usb 6-1: device descriptor read/8, error -71 [ 1281.787496][T24338] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4603'. [ 1281.948647][T24342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4605'. [ 1282.037100][T12386] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1282.095179][T12386] usb 6-1: device descriptor read/8, error -71 [ 1282.207922][T12386] usb usb6-port1: unable to enumerate USB device [ 1282.509535][ T30] audit: type=1326 audit(1761081767.913:2995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24362 comm="syz.3.4611" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efdb5d8efc9 code=0x0 [ 1282.634228][T18230] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1282.719828][T12386] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1282.764255][T18230] usb 3-1: device descriptor read/64, error -71 [ 1282.884438][T12386] usb 1-1: Using ep0 maxpacket: 32 [ 1282.901190][T12386] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 1282.985755][T12386] usb 1-1: config 0 has no interface number 0 [ 1283.017621][T12386] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1283.042205][T12386] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 1283.055206][T12386] usb 1-1: config 0 interface 126 has no altsetting 0 [ 1283.071731][T12386] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 1283.081464][T12386] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.084240][T18230] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1283.102016][T12386] usb 1-1: Product: syz [ 1283.131746][T12386] usb 1-1: Manufacturer: syz [ 1283.150484][T12386] usb 1-1: SerialNumber: syz [ 1283.169933][T12386] usb 1-1: config 0 descriptor?? [ 1283.185410][T24361] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1283.192651][T24361] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1283.285139][T18230] usb 3-1: device descriptor read/64, error -71 [ 1283.396475][T18230] usb usb3-port1: attempt power cycle [ 1283.630624][T12386] ir_usb 1-1:0.126: IR Dongle converter detected [ 1283.734786][T12381] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 1283.744322][T18230] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1283.774773][T18230] usb 3-1: device descriptor read/8, error -71 [ 1283.830295][T12386] usb 1-1: IRDA class descriptor not found, device not bound [ 1283.884623][T12381] usb 6-1: device descriptor read/64, error -71 [ 1284.014226][T18230] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1284.035526][T18230] usb 3-1: device descriptor read/8, error -71 [ 1284.043555][T12386] usb 1-1: USB disconnect, device number 49 [ 1284.125007][T12381] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 1284.147983][T18230] usb usb3-port1: unable to enumerate USB device [ 1284.200684][T24380] netlink: 'syz.6.4616': attribute type 1 has an invalid length. [ 1284.208558][T24380] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4616'. [ 1284.284274][T12381] usb 6-1: device descriptor read/64, error -71 [ 1284.397671][T12381] usb usb6-port1: attempt power cycle [ 1284.744250][T12381] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 1284.789249][T24382] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4617'. [ 1284.826695][T12381] usb 6-1: device descriptor read/8, error -71 [ 1285.096898][T12381] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 1285.704980][T24397] input: syz0 as /devices/virtual/input/input71 [ 1285.819483][T24400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65532 sclass=netlink_route_socket pid=24400 comm=syz.0.4621 [ 1286.022866][T12381] usb 6-1: device descriptor read/8, error -71 [ 1286.029387][T24395] 9pnet_fd: Insufficient options for proto=fd [ 1286.150594][T12381] usb usb6-port1: unable to enumerate USB device [ 1286.191139][ T30] audit: type=1326 audit(1761081771.593:2996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24402 comm="syz.3.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efdb5d85e67 code=0x7ffc0000 [ 1286.254200][ T30] audit: type=1326 audit(1761081771.593:2997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24402 comm="syz.3.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efdb5d2b099 code=0x7ffc0000 [ 1286.280442][ T30] audit: type=1326 audit(1761081771.593:2998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24402 comm="syz.3.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efdb5d85e67 code=0x7ffc0000 [ 1286.307542][ T30] audit: type=1326 audit(1761081771.593:2999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24402 comm="syz.3.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efdb5d2b099 code=0x7ffc0000 [ 1286.335802][ T30] audit: type=1326 audit(1761081771.593:3000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24402 comm="syz.3.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb5d8efc9 code=0x7ffc0000 [ 1286.388956][T12379] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1286.398625][ T30] audit: type=1326 audit(1761081771.593:3001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24402 comm="syz.3.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb5d8efc9 code=0x7ffc0000 [ 1286.426231][ T30] audit: type=1326 audit(1761081771.603:3002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24402 comm="syz.3.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7efdb5d8efc9 code=0x7ffc0000 [ 1286.450607][ T30] audit: type=1326 audit(1761081771.603:3003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24402 comm="syz.3.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb5d8efc9 code=0x7ffc0000 [ 1286.475120][ T30] audit: type=1326 audit(1761081771.603:3004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24402 comm="syz.3.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb5d8efc9 code=0x7ffc0000 [ 1286.505603][ T30] audit: type=1326 audit(1761081771.603:3005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24402 comm="syz.3.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7efdb5d8efc9 code=0x7ffc0000 [ 1286.559490][T12379] usb 1-1: device descriptor read/64, error -71 [ 1286.587662][T24413] netlink: 136 bytes leftover after parsing attributes in process `syz.5.4625'. [ 1286.601862][T24413] FAULT_INJECTION: forcing a failure. [ 1286.601862][T24413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1286.615393][T24413] CPU: 0 UID: 0 PID: 24413 Comm: syz.5.4625 Not tainted syzkaller #0 PREEMPT(full) [ 1286.615417][T24413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1286.615427][T24413] Call Trace: [ 1286.615434][T24413] [ 1286.615440][T24413] dump_stack_lvl+0x16c/0x1f0 [ 1286.615471][T24413] should_fail_ex+0x512/0x640 [ 1286.615496][T24413] _copy_from_iter+0x29f/0x1720 [ 1286.615521][T24413] ? __alloc_skb+0x200/0x380 [ 1286.615549][T24413] ? __pfx__copy_from_iter+0x10/0x10 [ 1286.615577][T24413] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 1286.615600][T24413] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 1286.615634][T24413] netlink_sendmsg+0x820/0xdd0 [ 1286.615663][T24413] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1286.615699][T24413] ____sys_sendmsg+0xa98/0xc70 [ 1286.615718][T24413] ? copy_msghdr_from_user+0x10a/0x160 [ 1286.615741][T24413] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1286.615768][T24413] ___sys_sendmsg+0x134/0x1d0 [ 1286.615793][T24413] ? __pfx____sys_sendmsg+0x10/0x10 [ 1286.615813][T24413] ? __lock_acquire+0x622/0x1c90 [ 1286.615860][T24413] __sys_sendmsg+0x16d/0x220 [ 1286.615881][T24413] ? __pfx___sys_sendmsg+0x10/0x10 [ 1286.615920][T24413] do_syscall_64+0xcd/0xfa0 [ 1286.615938][T24413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.615955][T24413] RIP: 0033:0x7fd6e4b8efc9 [ 1286.615968][T24413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1286.615984][T24413] RSP: 002b:00007fd6e5a4a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1286.616000][T24413] RAX: ffffffffffffffda RBX: 00007fd6e4de5fa0 RCX: 00007fd6e4b8efc9 [ 1286.616012][T24413] RDX: 0000000000040040 RSI: 0000200000000300 RDI: 0000000000000005 [ 1286.616023][T24413] RBP: 00007fd6e5a4a090 R08: 0000000000000000 R09: 0000000000000000 [ 1286.616032][T24413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1286.616042][T24413] R13: 00007fd6e4de6038 R14: 00007fd6e4de5fa0 R15: 00007ffff21dcf58 [ 1286.616065][T24413] [ 1286.964563][T12379] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1287.954822][T12379] usb 1-1: device descriptor read/64, error -71 [ 1288.018790][T24418] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4628'. [ 1288.064656][T12379] usb usb1-port1: attempt power cycle [ 1288.709389][ T52] Bluetooth: hci3: ACL packet too small [ 1288.744307][T12379] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1288.768675][T12379] usb 1-1: device descriptor read/8, error -71 [ 1288.940809][T24436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4634'. [ 1288.959606][T24436] FAULT_INJECTION: forcing a failure. [ 1288.959606][T24436] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1288.973155][T24436] CPU: 0 UID: 0 PID: 24436 Comm: syz.2.4634 Not tainted syzkaller #0 PREEMPT(full) [ 1288.973170][T24436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1288.973176][T24436] Call Trace: [ 1288.973180][T24436] [ 1288.973184][T24436] dump_stack_lvl+0x16c/0x1f0 [ 1288.973204][T24436] should_fail_ex+0x512/0x640 [ 1288.973220][T24436] _copy_from_user+0x2e/0xd0 [ 1288.973234][T24436] copy_msghdr_from_user+0x98/0x160 [ 1288.973250][T24436] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1288.973271][T24436] ___sys_sendmsg+0xfe/0x1d0 [ 1288.973287][T24436] ? __pfx____sys_sendmsg+0x10/0x10 [ 1288.973300][T24436] ? __lock_acquire+0x622/0x1c90 [ 1288.973329][T24436] __sys_sendmsg+0x16d/0x220 [ 1288.973344][T24436] ? __pfx___sys_sendmsg+0x10/0x10 [ 1288.973367][T24436] do_syscall_64+0xcd/0xfa0 [ 1288.973378][T24436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1288.973389][T24436] RIP: 0033:0x7f6f5718efc9 [ 1288.973397][T24436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1288.973408][T24436] RSP: 002b:00007f6f58058038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1288.973418][T24436] RAX: ffffffffffffffda RBX: 00007f6f573e5fa0 RCX: 00007f6f5718efc9 [ 1288.973425][T24436] RDX: 0000000000000800 RSI: 0000200000000240 RDI: 0000000000000008 [ 1288.973431][T24436] RBP: 00007f6f58058090 R08: 0000000000000000 R09: 0000000000000000 [ 1288.973438][T24436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1288.973444][T24436] R13: 00007f6f573e6038 R14: 00007f6f573e5fa0 R15: 00007ffd8e826f68 [ 1288.973457][T24436] [ 1289.139298][T12379] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1289.166069][T12379] usb 1-1: device descriptor read/8, error -71 [ 1289.196587][T12381] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1289.219990][T24439] overlayfs: failed to resolve './file0': -2 [ 1289.275060][T12379] usb usb1-port1: unable to enumerate USB device [ 1289.364209][T12381] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1289.409925][T12381] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1289.450380][T12381] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1289.475405][T12381] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1289.500426][T12381] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.530912][T12381] usb 6-1: Product: syz [ 1289.555161][T12381] usb 6-1: Manufacturer: syz [ 1289.576384][T12381] usb 6-1: SerialNumber: syz [ 1289.605637][T24432] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1289.612997][T24432] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1290.539882][T24452] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1291.531867][T12381] rtl8150 6-1:1.0: couldn't reset the device [ 1291.538278][T12381] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 1291.812073][T24467] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1291.873333][T12381] usb 6-1: USB disconnect, device number 40 [ 1291.879675][T24467] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1292.229907][T24480] FAULT_INJECTION: forcing a failure. [ 1292.229907][T24480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1292.244059][T24480] CPU: 1 UID: 0 PID: 24480 Comm: syz.0.4648 Not tainted syzkaller #0 PREEMPT(full) [ 1292.244083][T24480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1292.244094][T24480] Call Trace: [ 1292.244100][T24480] [ 1292.244107][T24480] dump_stack_lvl+0x16c/0x1f0 [ 1292.244143][T24480] should_fail_ex+0x512/0x640 [ 1292.244168][T24480] _copy_from_user+0x2e/0xd0 [ 1292.244191][T24480] ucma_write+0x128/0x330 [ 1292.244222][T24480] ? __pfx_ucma_write+0x10/0x10 [ 1292.244242][T24480] ? bpf_lsm_file_permission+0x9/0x10 [ 1292.244265][T24480] ? security_file_permission+0x71/0x210 [ 1292.244291][T24480] ? rw_verify_area+0xcf/0x6c0 [ 1292.244313][T24480] ? __pfx_ucma_write+0x10/0x10 [ 1292.244333][T24480] vfs_write+0x2a0/0x11d0 [ 1292.244362][T24480] ? __pfx_vfs_write+0x10/0x10 [ 1292.244382][T24480] ? find_held_lock+0x2b/0x80 [ 1292.244400][T24480] ? __fget_files+0x204/0x3c0 [ 1292.244427][T24480] ? __fget_files+0x20e/0x3c0 [ 1292.244457][T24480] ksys_write+0x1f8/0x250 [ 1292.244479][T24480] ? __pfx_ksys_write+0x10/0x10 [ 1292.244507][T24480] do_syscall_64+0xcd/0xfa0 [ 1292.244527][T24480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1292.244545][T24480] RIP: 0033:0x7f05e658efc9 [ 1292.244560][T24480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1292.244577][T24480] RSP: 002b:00007f05e73fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1292.244594][T24480] RAX: ffffffffffffffda RBX: 00007f05e67e5fa0 RCX: 00007f05e658efc9 [ 1292.244606][T24480] RDX: 0000000000000048 RSI: 0000200000000180 RDI: 0000000000000004 [ 1292.244616][T24480] RBP: 00007f05e73fa090 R08: 0000000000000000 R09: 0000000000000000 [ 1292.244627][T24480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1292.244637][T24480] R13: 00007f05e67e6038 R14: 00007f05e67e5fa0 R15: 00007ffe92d22718 [ 1292.244662][T24480] [ 1293.788329][T24506] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4653'. [ 1294.304908][T12379] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 1294.457168][T12379] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 1294.465407][T12379] usb 1-1: config 0 has no interface number 0 [ 1294.471606][T12379] usb 1-1: config 0 interface 29 has no altsetting 0 [ 1294.480789][T12379] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1294.490668][T12379] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.498896][T12379] usb 1-1: Product: syz [ 1294.503056][T12379] usb 1-1: Manufacturer: syz [ 1294.507661][T12379] usb 1-1: SerialNumber: syz [ 1294.513764][T12379] usb 1-1: config 0 descriptor?? [ 1294.678321][T24523] overlayfs: failed to resolve './file0': -2 [ 1294.733668][T24525] overlayfs: failed to resolve './file0': -2 [ 1294.742804][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 1294.742815][ T30] audit: type=1326 audit(1761081780.143:3024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24515 comm="syz.0.4655" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f05e658efc9 code=0x0 [ 1295.206146][ T30] audit: type=1326 audit(1761081780.613:3025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24528 comm="syz.3.4659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb5d8efc9 code=0x7ffc0000 [ 1295.277867][ T30] audit: type=1326 audit(1761081780.613:3026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24528 comm="syz.3.4659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb5d8efc9 code=0x7ffc0000 [ 1295.306672][ T30] audit: type=1326 audit(1761081780.613:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24528 comm="syz.3.4659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7efdb5d8efc9 code=0x7ffc0000 [ 1295.450249][ T30] audit: type=1326 audit(1761081780.613:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24528 comm="syz.3.4659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb5d8efc9 code=0x7ffc0000 [ 1295.477337][T12379] peak_usb 1-1:0.29: PEAK-System PCAN-USB X6 v18 fw v236.0.0 (2 channels) [ 1295.491961][ T30] audit: type=1326 audit(1761081780.613:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24528 comm="syz.3.4659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb5d8efc9 code=0x7ffc0000 [ 1295.518226][ T30] audit: type=1326 audit(1761081780.613:3030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24528 comm="syz.3.4659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efdb5d8d810 code=0x7ffc0000 [ 1295.580808][ T30] audit: type=1326 audit(1761081780.613:3031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24528 comm="syz.3.4659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb5d8efc9 code=0x7ffc0000 [ 1295.663992][ T30] audit: type=1326 audit(1761081780.613:3032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24528 comm="syz.3.4659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7efdb5d8efc9 code=0x7ffc0000 [ 1295.754204][ T30] audit: type=1326 audit(1761081780.613:3033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24528 comm="syz.3.4659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb5d8efc9 code=0x7ffc0000 [ 1296.064257][T18230] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1296.273251][T18230] usb 6-1: Using ep0 maxpacket: 8 [ 1296.286906][T18230] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1296.324111][T18230] usb 6-1: config 4 interface 0 has no altsetting 0 [ 1296.348463][T18230] usb 6-1: string descriptor 0 read error: -22 [ 1296.355006][T18230] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1296.374783][T18230] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.487229][T18230] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1296.516815][T18230] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1296.555961][T18230] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1296.789701][T24544] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4662'. [ 1297.084681][T18230] usb 6-1: media controller created [ 1297.097541][T12379] peak_usb 1-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 1297.114318][T12379] peak_usb 1-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 1297.139101][T18230] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1297.245967][T12379] peak_usb 1-1:0.29: probe with driver peak_usb failed with error -71 [ 1297.269698][T18230] zl10353_read_register: readreg error (reg=127, ret==0) [ 1297.286577][T12379] usb 1-1: USB disconnect, device number 54 [ 1297.598968][T18230] usb 6-1: USB disconnect, device number 41 [ 1297.736249][T24561] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1298.125063][T19652] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1298.518279][T19652] usb 6-1: Using ep0 maxpacket: 16 [ 1298.549313][T19652] usb 6-1: config 254 has an invalid interface number: 235 but max is 0 [ 1298.567961][T19652] usb 6-1: config 254 has no interface number 0 [ 1298.579985][T19652] usb 6-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 1299.521390][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.629209][T19652] usb 6-1: config 254 interface 235 has no altsetting 0 [ 1299.675342][T19652] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1300.043898][T19652] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.064070][T19652] usb 6-1: Product: syz [ 1300.112185][T19652] usb 6-1: Manufacturer: syz [ 1300.122223][T19652] usb 6-1: SerialNumber: syz [ 1300.133574][T24570] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1300.241523][T24593] overlayfs: missing 'lowerdir' [ 1300.359247][T24563] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1300.369641][T19652] usbtest 6-1:254.235: Linux gadget zero [ 1300.376110][T19652] usbtest 6-1:254.235: high-speed {control in/out bulk-in bulk-out} tests (+alt) [ 1300.434813][T12379] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 1300.574068][T19652] usb 6-1: USB disconnect, device number 42 [ 1300.585737][T12379] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 1300.595302][T12379] usb 1-1: config 0 has no interface number 0 [ 1300.601404][T12379] usb 1-1: config 0 interface 29 has no altsetting 0 [ 1300.619905][T12379] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1300.629759][T12379] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.638009][T12379] usb 1-1: Product: syz [ 1300.642164][T12379] usb 1-1: Manufacturer: syz [ 1300.647228][T12379] usb 1-1: SerialNumber: syz [ 1300.658375][T12379] usb 1-1: config 0 descriptor?? [ 1300.885715][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 1300.885730][ T30] audit: type=1326 audit(1761081786.293:3053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24589 comm="syz.0.4674" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f05e658efc9 code=0x0 [ 1300.916416][ T30] audit: type=1400 audit(1761081786.293:3054): avc: denied { setattr } for pid=24598 comm="syz.3.4679" name="RAWv6" dev="sockfs" ino=93282 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1301.611076][T12379] peak_usb 1-1:0.29: PEAK-System PCAN-USB X6 v18 fw v236.0.0 (2 channels) [ 1303.010244][ T977] kernel write not supported for file /sequencer (pid: 977 comm: kworker/0:2) [ 1303.021954][T24634] Invalid logical block size (6) [ 1304.304856][ T30] audit: type=1400 audit(1761081788.513:3055): avc: denied { module_load } for pid=24638 comm="syz.2.4690" path="/sys/power/wakeup_count" dev="sysfs" ino=1413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 1304.351331][T12379] peak_usb 1-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 1304.372203][T12379] peak_usb 1-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 1304.495873][T12379] peak_usb 1-1:0.29: probe with driver peak_usb failed with error -71 [ 1304.524053][T12379] usb 1-1: USB disconnect, device number 55 [ 1304.796018][T24654] bridge0: port 3(team0) entered blocking state [ 1304.802372][T24654] bridge0: port 3(team0) entered listening state [ 1304.808944][T24654] bridge0: port 2(bridge_slave_1) entered blocking state [ 1304.816060][T24654] bridge0: port 2(bridge_slave_1) entered listening state [ 1304.823346][T24654] bridge0: port 1(bridge_slave_0) entered blocking state [ 1304.830491][T24654] bridge0: port 1(bridge_slave_0) entered listening state [ 1305.024302][T12385] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 1305.059039][T24654] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1305.266574][T12385] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1305.276983][T12385] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1305.371910][T12385] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 1305.463505][T24663] netlink: 'syz.3.4696': attribute type 2 has an invalid length. [ 1305.892270][T12385] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1305.920255][T24651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4691'. [ 1305.934994][T12385] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.060823][T24653] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1306.091119][T12385] hub 3-1:1.0: bad descriptor, ignoring hub [ 1306.100078][T12385] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1306.107998][T12385] cdc_wdm 3-1:1.0: skipping garbage [ 1306.113277][T12385] cdc_wdm 3-1:1.0: skipping garbage [ 1306.119405][T12385] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1306.125808][T12385] cdc_wdm 3-1:1.0: Unknown control protocol [ 1306.411236][T12385] usb 3-1: USB disconnect, device number 11 [ 1306.413393][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1306.423958][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1306.430025][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1306.441447][ T30] audit: type=1400 audit(1761081791.703:3056): avc: denied { read write } for pid=24648 comm="syz.2.4693" name="cdc-wdm0" dev="devtmpfs" ino=5203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1306.442693][T24673] sctp: [Deprecated]: syz.5.4699 (pid 24673) Use of int in maxseg socket option. [ 1306.442693][T24673] Use struct sctp_assoc_value instead [ 1306.613336][ T30] audit: type=1400 audit(1761081791.703:3057): avc: denied { open } for pid=24648 comm="syz.2.4693" path="/dev/cdc-wdm0" dev="devtmpfs" ino=5203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1306.768114][ T30] audit: type=1400 audit(1761081792.173:3058): avc: denied { watch_reads } for pid=24683 comm="syz.5.4702" path="/163" dev="tmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1306.828416][T24684] sp0: Synchronizing with TNC [ 1307.254529][T19652] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1307.424655][T19652] usb 1-1: Using ep0 maxpacket: 8 [ 1307.434701][T19652] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1307.445975][T19652] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1307.459538][T19652] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1307.483068][T19652] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1307.515033][T19652] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1307.534861][T19652] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.796557][T19652] usb 1-1: GET_CAPABILITIES returned 0 [ 1307.802050][T19652] usbtmc 1-1:16.0: can't read capabilities [ 1307.823704][T24702] netlink: 'syz.2.4706': attribute type 21 has an invalid length. [ 1307.831875][T24702] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4706'. [ 1307.840949][T24702] netlink: 'syz.2.4706': attribute type 5 has an invalid length. [ 1307.849007][T24702] netlink: 'syz.2.4706': attribute type 6 has an invalid length. [ 1307.856762][T24702] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4706'. [ 1307.929562][T24701] lo speed is unknown, defaulting to 1000 [ 1309.322458][ T30] audit: type=1400 audit(1761081794.723:3059): avc: denied { write } for pid=24730 comm="syz.5.4714" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1310.036681][T12381] usb 1-1: USB disconnect, device number 56 [ 1310.167459][ T30] audit: type=1326 audit(1761081795.573:3060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24739 comm="syz.0.4716" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f05e658efc9 code=0x0 [ 1310.883911][T24737] bridge0: port 3(team0) entered disabled state [ 1310.890288][T24737] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.897434][T24737] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.402320][T24760] kAFS: unparsable volume name [ 1311.412461][T24760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4721'. [ 1311.713378][ T30] audit: type=1400 audit(1761081797.113:3061): avc: denied { watch watch_reads } for pid=24761 comm="syz.5.4722" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1311.981662][T24751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4719'. [ 1312.599638][T24737] veth1_vlan: left allmulticast mode [ 1312.646675][T24770] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1312.677662][T24770] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.703356][T24786] overlayfs: failed to resolve './file0': -2 [ 1312.709636][T24770] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1312.725782][T24770] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.735494][T24770] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1312.745175][T24770] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.774617][T24770] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1312.842323][T24770] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.645913][ T30] audit: type=1400 audit(1761081798.583:3062): avc: denied { name_bind } for pid=24794 comm="syz.0.4728" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1314.045429][T24803] overlay: Unknown parameter 'obj_user' [ 1315.221932][T24773] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1316.120415][T24773] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1316.168043][T24773] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.185273][T24773] usb 3-1: Product: syz [ 1316.189570][T24773] usb 3-1: Manufacturer: syz [ 1316.195246][T24773] usb 3-1: SerialNumber: syz [ 1316.217475][T24773] usb 3-1: config 0 descriptor?? [ 1316.544347][T19652] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1316.908772][T24773] usb 3-1: Firmware: major: 0, minor: 13, hardware type: ATUSB (0) [ 1316.939671][T19652] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1316.959519][T19652] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1316.970792][T19652] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.983375][T19652] usb 6-1: config 0 descriptor?? [ 1317.006857][T19652] pwc: Askey VC010 type 2 USB webcam detected. [ 1317.111824][T24773] usb 3-1: failed to fetch extended address, random address set [ 1317.115560][T24846] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.4743'. [ 1317.156384][T24850] overlayfs: failed to resolve './file0': -2 [ 1317.251899][T24773] usb 3-1: USB disconnect, device number 12 [ 1317.740329][T19652] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1317.827521][T19652] pwc: recv_control_msg error -32 req 02 val 2700 [ 1317.864994][T19652] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1317.915397][T19652] pwc: recv_control_msg error -32 req 04 val 1000 [ 1317.949131][T19652] pwc: recv_control_msg error -32 req 04 val 1300 [ 1318.004470][T19652] pwc: recv_control_msg error -32 req 04 val 1400 [ 1318.029756][T19652] pwc: recv_control_msg error -32 req 02 val 2000 [ 1318.060065][T19652] pwc: recv_control_msg error -32 req 02 val 2100 [ 1318.076795][ T30] audit: type=1326 audit(1761081803.473:3063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24862 comm="syz.0.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e658efc9 code=0x7ffc0000 [ 1318.077362][T19652] pwc: recv_control_msg error -32 req 04 val 1500 [ 1318.125136][ T30] audit: type=1326 audit(1761081803.483:3064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24862 comm="syz.0.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e658efc9 code=0x7ffc0000 [ 1318.151143][ T30] audit: type=1326 audit(1761081803.483:3065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24862 comm="syz.0.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f05e658efc9 code=0x7ffc0000 [ 1318.177035][T19652] pwc: recv_control_msg error -32 req 02 val 2500 [ 1318.194876][T19652] pwc: recv_control_msg error -32 req 02 val 2400 [ 1318.207913][ T30] audit: type=1326 audit(1761081803.483:3066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24862 comm="syz.0.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e658efc9 code=0x7ffc0000 [ 1318.234842][ T30] audit: type=1326 audit(1761081803.483:3067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24862 comm="syz.0.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e658efc9 code=0x7ffc0000 [ 1318.274457][ T30] audit: type=1326 audit(1761081803.483:3068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24862 comm="syz.0.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f05e658efc9 code=0x7ffc0000 [ 1318.302250][ T30] audit: type=1326 audit(1761081803.483:3069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24862 comm="syz.0.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e658efc9 code=0x7ffc0000 [ 1318.330397][ T30] audit: type=1326 audit(1761081803.483:3070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24862 comm="syz.0.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e658efc9 code=0x7ffc0000 [ 1318.465387][ T30] audit: type=1326 audit(1761081803.483:3071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24862 comm="syz.0.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f05e658efc9 code=0x7ffc0000 [ 1318.490079][ T30] audit: type=1326 audit(1761081803.483:3072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24862 comm="syz.0.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e658efc9 code=0x7ffc0000 [ 1319.252781][T24894] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 1319.253351][T24892] syz.6.4755: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1319.286055][T24892] CPU: 0 UID: 0 PID: 24892 Comm: syz.6.4755 Not tainted syzkaller #0 PREEMPT(full) [ 1319.286079][T24892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1319.286089][T24892] Call Trace: [ 1319.286095][T24892] [ 1319.286101][T24892] dump_stack_lvl+0x16c/0x1f0 [ 1319.286136][T24892] warn_alloc+0x248/0x3a0 [ 1319.286158][T24892] ? __pfx_warn_alloc+0x10/0x10 [ 1319.286188][T24892] ? hash_ipport_create+0x843/0x1a20 [ 1319.286215][T24892] ? __vmalloc_node_noprof+0xad/0xf0 [ 1319.286246][T24892] __vmalloc_node_range_noprof+0xfe2/0x1480 [ 1319.286270][T24892] ? __kasan_kmalloc+0xaa/0xb0 [ 1319.286290][T24892] ? hash_ipport_create+0x7c1/0x1a20 [ 1319.286310][T24892] ? hash_ipport_create+0x843/0x1a20 [ 1319.286333][T24892] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1319.286363][T24892] ? ___kmalloc_large_node+0xed/0x160 [ 1319.286394][T24892] __kvmalloc_node_noprof+0x431/0x9c0 [ 1319.286415][T24892] ? hash_ipport_create+0x843/0x1a20 [ 1319.286440][T24892] ? hash_ipport_create+0x843/0x1a20 [ 1319.286460][T24892] ? hash_ipport_create+0x843/0x1a20 [ 1319.286475][T24892] hash_ipport_create+0x843/0x1a20 [ 1319.286503][T24892] ? __print_lock_name+0x60/0xe0 [ 1319.286521][T24892] ? __pfx_hash_ipport_create+0x10/0x10 [ 1319.286549][T24892] ? __nla_parse+0x40/0x60 [ 1319.286567][T24892] ? __pfx_hash_ipport_create+0x10/0x10 [ 1319.286584][T24892] ? ip_set_create+0x7e4/0x14d0 [ 1319.286597][T24892] ip_set_create+0x7e4/0x14d0 [ 1319.286613][T24892] ? __pfx_ip_set_create+0x10/0x10 [ 1319.286647][T24892] ? find_held_lock+0x2b/0x80 [ 1319.286669][T24892] nfnetlink_rcv_msg+0x9fc/0x1200 [ 1319.286696][T24892] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1319.286712][T24892] ? __lock_acquire+0x622/0x1c90 [ 1319.286737][T24892] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1319.286753][T24892] netlink_rcv_skb+0x158/0x420 [ 1319.286771][T24892] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1319.286793][T24892] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1319.286828][T24892] ? ns_capable+0xd7/0x110 [ 1319.286851][T24892] nfnetlink_rcv+0x1b3/0x430 [ 1319.286863][T24892] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1319.286875][T24892] ? netlink_deliver_tap+0x1ae/0xd30 [ 1319.286893][T24892] netlink_unicast+0x5aa/0x870 [ 1319.286913][T24892] ? __pfx_netlink_unicast+0x10/0x10 [ 1319.286947][T24892] netlink_sendmsg+0x8c8/0xdd0 [ 1319.286975][T24892] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1319.287001][T24892] ____sys_sendmsg+0xa98/0xc70 [ 1319.287013][T24892] ? copy_msghdr_from_user+0x10a/0x160 [ 1319.287027][T24892] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1319.287041][T24892] ? __pfx_futex_wake_mark+0x10/0x10 [ 1319.287064][T24892] ___sys_sendmsg+0x134/0x1d0 [ 1319.287085][T24892] ? futex_private_hash_put+0x176/0x300 [ 1319.287105][T24892] ? __pfx____sys_sendmsg+0x10/0x10 [ 1319.287130][T24892] ? __lock_acquire+0x622/0x1c90 [ 1319.287160][T24892] __sys_sendmsg+0x16d/0x220 [ 1319.287178][T24892] ? __pfx___sys_sendmsg+0x10/0x10 [ 1319.287200][T24892] ? __x64_sys_futex+0x1e0/0x4c0 [ 1319.287237][T24892] do_syscall_64+0xcd/0xfa0 [ 1319.287254][T24892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1319.287270][T24892] RIP: 0033:0x7f7338b8efc9 [ 1319.287285][T24892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1319.287301][T24892] RSP: 002b:00007f7336df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1319.287317][T24892] RAX: ffffffffffffffda RBX: 00007f7338de5fa0 RCX: 00007f7338b8efc9 [ 1319.287327][T24892] RDX: 0000000020004000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1319.287337][T24892] RBP: 00007f7338c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1319.287347][T24892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1319.287357][T24892] R13: 00007f7338de6038 R14: 00007f7338de5fa0 R15: 00007ffd2c3505a8 [ 1319.287381][T24892] [ 1319.287428][T24892] Mem-Info: [ 1319.309703][T19652] pwc: recv_control_msg error -71 req 02 val 2600 [ 1319.667437][T12385] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1319.689921][T24892] active_anon:55310 inactive_anon:0 isolated_anon:0 [ 1319.689921][T24892] active_file:22200 inactive_file:41554 isolated_file:0 [ 1319.689921][T24892] unevictable:773 dirty:351 writeback:0 [ 1319.689921][T24892] slab_reclaimable:7886 slab_unreclaimable:103382 [ 1319.689921][T24892] mapped:37045 shmem:42519 pagetables:1693 [ 1319.689921][T24892] sec_pagetables:0 bounce:0 [ 1319.689921][T24892] kernel_misc_reclaimable:0 [ 1319.689921][T24892] free:1227760 free_pcp:18944 free_cma:0 [ 1319.700071][T19652] pwc: recv_control_msg error -71 req 02 val 2900 [ 1319.743462][T24892] Node 0 active_anon:221240kB inactive_anon:0kB active_file:88796kB inactive_file:166016kB unevictable:1556kB isolated(anon):0kB isolated(file):0kB mapped:148176kB dirty:1404kB writeback:0kB shmem:168540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13632kB pagetables:6644kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1319.743857][T19652] pwc: recv_control_msg error -71 req 02 val 2800 [ 1319.787765][T24892] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1319.819710][T24892] Node 0 DMA free:15344kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 1319.820408][T19652] pwc: recv_control_msg error -71 req 04 val 1100 [ 1319.863493][T24892] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 1319.865744][T19652] pwc: recv_control_msg error -71 req 04 val 1200 [ 1319.876833][T12385] usb 3-1: Using ep0 maxpacket: 16 [ 1319.883668][T12385] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1319.893578][T24897] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4756'. [ 1319.895659][T12385] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1319.914105][T19652] pwc: Registered as video103. [ 1319.919062][T12385] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.939065][T24899] syzkaller1: entered promiscuous mode [ 1319.943098][T19652] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input73 [ 1319.944661][T24899] syzkaller1: entered allmulticast mode [ 1319.961115][T12385] usb 3-1: Product: syz [ 1319.970317][T24892] Node 0 DMA32 free:1023932kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB free_highatomic:0KB active_anon:221440kB inactive_anon:0kB active_file:88796kB inactive_file:166016kB unevictable:1556kB writepending:1204kB zspages:12kB present:3129332kB managed:2541228kB mlocked:20kB bounce:0kB free_pcp:36564kB local_pcp:11848kB free_cma:0kB [ 1319.973184][T12385] usb 3-1: Manufacturer: syz [ 1320.013536][T24892] lowmem_reserve[]: 0 0 1 1 1 [ 1320.039295][T19652] usb 6-1: USB disconnect, device number 43 [ 1320.046429][T24892] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1320.074148][T12385] usb 3-1: SerialNumber: syz [ 1320.092210][T24892] lowmem_reserve[]: 0 0 0 0 0 [ 1320.105334][T12385] usb 3-1: config 0 descriptor?? [ 1320.124438][T24892] Node 1 Normal free:3871564kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:38944kB local_pcp:27296kB free_cma:0kB [ 1320.127914][T12385] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1320.178371][T24892] lowmem_reserve[]: 0 0 0 0 0 [ 1320.188983][T24892] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 1320.208747][T12385] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1320.215294][T24892] Node 0 DMA32: 609*4kB (UME) 1156*8kB (UME) 698*16kB (UME) 770*32kB (UME) 700*64kB (UME) 199*128kB (UME) 116*256kB (UME) 45*512kB (UME) 62*1024kB (UME) 13*2048kB (UME) 187*4096kB (UM) = 1026564kB [ 1320.235971][T24892] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1320.248612][T24892] Node 1 Normal: 197*4kB (UM) 63*8kB (UME) 70*16kB (UME) 179*32kB (UME) 60*64kB (UME) 11*128kB (UME) 5*256kB (ME) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (ME) 939*4096kB (M) = 3871564kB [ 1320.267781][T24892] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1320.279939][T24892] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1320.289377][T24892] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1320.299113][T24892] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1320.308986][T24892] 106270 total pagecache pages [ 1320.313809][T24892] 0 pages in swap cache [ 1320.318679][T24892] Free swap = 124996kB [ 1320.322930][T24892] Total swap = 124996kB [ 1320.327359][T24892] 2097051 pages RAM [ 1320.331693][T24892] 0 pages HighMem/MovableOnly [ 1320.337011][T24892] 429718 pages reserved [ 1320.341235][T24892] 0 pages cma reserved [ 1320.877615][T12385] em28xx 3-1:0.0: chip ID is em2874 [ 1321.115145][T12381] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1321.149241][T12385] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1321.158138][T12385] em28xx 3-1:0.0: board has no eeprom [ 1321.172063][T24910] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4760'. [ 1321.181628][T24910] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4760'. [ 1321.199418][T24910] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4760'. [ 1321.652270][T12385] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1321.681091][T12381] usb 6-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 1321.695179][T12381] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.712575][T12381] usb 6-1: Product: syz [ 1321.722895][T12381] usb 6-1: Manufacturer: syz [ 1321.737321][T12385] em28xx 3-1:0.0: dvb set to bulk mode. [ 1321.737995][T12381] usb 6-1: SerialNumber: syz [ 1321.749450][T19652] em28xx 3-1:0.0: Binding DVB extension [ 1321.750281][T24910] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4760'. [ 1321.773417][T12381] usb 6-1: config 0 descriptor?? [ 1321.781550][T12385] usb 3-1: USB disconnect, device number 13 [ 1321.801627][T12385] em28xx 3-1:0.0: Disconnecting em28xx [ 1321.831758][T19652] em28xx 3-1:0.0: Registering input extension [ 1321.850127][T24910] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4760'. [ 1321.872979][T24910] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4760'. [ 1321.921476][ T52] Bluetooth: hci5: urb ffff88805bc8a700 submission failed (2) [ 1321.993494][T24910] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4760'. [ 1322.002910][T24910] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4760'. [ 1322.011146][T19652] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 1322.060514][T19652] Registered IR keymap rc-empty [ 1322.135724][T12381] usb 6-1: USB disconnect, device number 44 [ 1322.168807][T19652] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1322.259059][T19652] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input74 [ 1322.392342][T19652] em28xx 3-1:0.0: Input extension successfully initialized [ 1322.400104][T12385] em28xx 3-1:0.0: Closing input extension [ 1322.500054][T12385] em28xx 3-1:0.0: Freeing device [ 1322.769128][T24947] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1323.491298][T24957] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1323.751458][T24961] __nla_validate_parse: 1 callbacks suppressed [ 1323.751475][T24961] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4770'. [ 1323.858247][T24961] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4770'. [ 1324.570066][T24962] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4770'. [ 1324.590608][T24962] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4770'. [ 1324.592105][T24975] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4771'. [ 1324.608926][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 1324.608942][ T30] audit: type=1400 audit(1761081809.989:3115): avc: denied { map } for pid=24964 comm="syz.0.4771" path="socket:[93043]" dev="sockfs" ino=93043 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1324.851432][T24983] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4775'. [ 1325.206686][T19652] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1325.353144][T24957] cramfs: wrong magic [ 1325.364225][T19652] usb 6-1: Using ep0 maxpacket: 32 [ 1325.394823][T19652] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 1325.403013][T19652] usb 6-1: config 0 has no interface number 0 [ 1325.539555][T19652] usb 6-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1325.555128][T19652] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1325.567587][T19652] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1325.583865][T19652] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1325.602861][T19652] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1325.615678][T19652] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1325.628289][T19652] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1325.643636][T19652] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1325.656517][T19652] usb 6-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1325.722248][T19652] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1325.756109][T24997] kAFS: unparsable volume name [ 1325.772094][T24997] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4779'. [ 1325.773376][T19652] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.800098][T19652] usb 6-1: Product: syz [ 1325.808369][T19652] usb 6-1: Manufacturer: syz [ 1325.813400][T19652] usb 6-1: SerialNumber: syz [ 1325.871462][T19652] usb 6-1: config 0 descriptor?? [ 1325.889645][T24980] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1325.939019][T19652] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 1325.949065][T19652] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 1326.165082][T24771] usb 6-1: USB disconnect, device number 45 [ 1326.207456][ T30] audit: type=1400 audit(1761081811.609:3116): avc: denied { ioctl } for pid=25000 comm="syz.2.4783" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1326.392455][ T30] audit: type=1400 audit(1761081811.789:3117): avc: denied { bind } for pid=25002 comm="syz.6.4784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1326.544307][T21893] Bluetooth: hci0: command 0x0c1a tx timeout [ 1327.084212][T12382] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1327.239927][T12382] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1327.264563][T12382] usb 6-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 1327.275444][T12382] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.291634][T12382] usb 6-1: config 0 descriptor?? [ 1327.688416][T25028] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1327.694964][T25028] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1327.731163][T25028] vhci_hcd vhci_hcd.0: Device attached [ 1327.943209][T25036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1327.958398][T25036] 8021q: adding VLAN 0 to HW filter on device team0 [ 1328.025348][T25036] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1328.125146][ T30] audit: type=1400 audit(1761081813.509:3118): avc: denied { mount } for pid=25017 comm="syz.5.4789" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 1328.195413][T12382] usbhid 6-1:0.0: can't add hid device: -71 [ 1328.211741][T12382] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1328.234255][T12381] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1328.243540][T12382] usb 6-1: USB disconnect, device number 46 [ 1328.314851][T24771] usb 38-1: SetAddress Request (2) to port 0 [ 1328.324256][T24771] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1328.433955][T25030] vhci_hcd: cannot find a urb of seqnum 8 max seqnum 1 [ 1328.447753][ T50] vhci_hcd: stop threads [ 1328.456515][ T50] vhci_hcd: release socket [ 1328.476606][ T50] vhci_hcd: disconnect device [ 1328.532753][T25029] syzkaller0: entered promiscuous mode [ 1328.552548][T25029] syzkaller0: entered allmulticast mode [ 1328.560821][T25028] tipc: Started in network mode [ 1328.574794][T25028] tipc: Node identity 86794d25873, cluster identity 4711 [ 1328.706231][T25028] tipc: Enabled bearer , priority 0 [ 1328.907473][T25043] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4794'. [ 1328.975281][T25028] tipc: Resetting bearer [ 1328.985865][T12381] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1329.035820][T12381] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1329.047045][T12381] usb 3-1: can't read configurations, error -71 [ 1329.053653][T25025] tipc: Resetting bearer [ 1329.097815][T25025] tipc: Disabling bearer [ 1329.111531][ T30] audit: type=1400 audit(1761081814.509:3119): avc: denied { bind } for pid=25053 comm="syz.0.4797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1329.247857][ T30] audit: type=1400 audit(1761081814.649:3120): avc: denied { mounton } for pid=25060 comm="syz.0.4800" path="/" dev="hugetlbfs" ino=94068 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 1329.275275][T19652] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1329.292109][ T30] audit: type=1400 audit(1761081814.689:3121): avc: denied { unmount } for pid=18336 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1329.438070][T19652] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1329.447356][T19652] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.457045][T19652] usb 6-1: Product: syz [ 1329.461400][T19652] usb 6-1: Manufacturer: syz [ 1329.471497][T19652] usb 6-1: SerialNumber: syz [ 1329.998355][T19652] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1330.069147][T19652] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1330.097754][T19652] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1330.119101][T19652] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1330.141263][T25082] syzkaller1: entered promiscuous mode [ 1330.148179][T25082] syzkaller1: entered allmulticast mode [ 1330.198427][T19652] usb 6-1: USB disconnect, device number 47 [ 1330.474881][T12385] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 1330.624852][T12385] usb 3-1: device descriptor read/64, error -71 [ 1330.874303][T12385] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 1331.014206][T12385] usb 3-1: device descriptor read/64, error -71 [ 1331.124877][T12385] usb usb3-port1: attempt power cycle [ 1331.194225][T12381] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1331.344376][T12381] usb 6-1: Using ep0 maxpacket: 8 [ 1331.352657][T12381] usb 6-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 1331.362427][T12381] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.370516][T12381] usb 6-1: Product: syz [ 1331.374749][T12381] usb 6-1: Manufacturer: syz [ 1331.379350][T12381] usb 6-1: SerialNumber: syz [ 1331.387651][T12381] usb 6-1: config 0 descriptor?? [ 1331.394044][T12381] cdc_ether 6-1:0.0: skipping garbage [ 1331.399817][T12381] cdc_ether 6-1:0.0: skipping garbage [ 1331.405238][T12381] cdc_ether 6-1:0.0: skipping garbage [ 1331.410605][T12381] usb 6-1: bad CDC descriptors [ 1331.416814][T12381] usb 6-1: unsupported MDLM descriptors [ 1331.422734][T12381] cdc_acm 6-1:0.0: skipping garbage [ 1331.428020][T12381] cdc_acm 6-1:0.0: skipping garbage [ 1331.433210][T12381] cdc_acm 6-1:0.0: skipping garbage [ 1331.494772][T12385] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 1331.515626][T12385] usb 3-1: device descriptor read/8, error -71 [ 1331.777372][T12385] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 1331.807345][T12385] usb 3-1: device descriptor read/8, error -71 [ 1331.860978][T25094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1331.902029][T25094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1331.922880][T25094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1331.932371][T25094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1331.985218][T12385] usb usb3-port1: unable to enumerate USB device [ 1332.230937][T25097] kAFS: unparsable volume name [ 1332.275375][T25097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4810'. [ 1332.419908][ T30] audit: type=1400 audit(1761081817.809:3122): avc: denied { ioctl } for pid=25100 comm="syz.6.4811" path="socket:[94118]" dev="sockfs" ino=94118 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1333.425337][T24771] usb 38-1: device descriptor read/8, error -110 [ 1333.745677][ T30] audit: type=1326 audit(1761081819.149:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25124 comm="syz.3.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb5d8efc9 code=0x7ffc0000 [ 1333.825057][T24771] usb usb38-port1: attempt power cycle [ 1333.841815][ T30] audit: type=1326 audit(1761081819.149:3124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25124 comm="syz.3.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7efdb5d8efc9 code=0x7ffc0000 [ 1333.892722][ T30] audit: type=1326 audit(1761081819.149:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25124 comm="syz.3.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb5d8efc9 code=0x7ffc0000 [ 1333.918278][ T30] audit: type=1326 audit(1761081819.149:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25124 comm="syz.3.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb5d8efc9 code=0x7ffc0000 [ 1333.943902][ T30] audit: type=1326 audit(1761081819.149:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25124 comm="syz.3.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7efdb5d8efc9 code=0x7ffc0000 [ 1333.968830][ T30] audit: type=1326 audit(1761081819.149:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25124 comm="syz.3.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb5d8efc9 code=0x7ffc0000 [ 1333.996363][ T30] audit: type=1326 audit(1761081819.149:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25124 comm="syz.3.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb5d8efc9 code=0x7ffc0000 [ 1334.041247][ T30] audit: type=1326 audit(1761081819.149:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25124 comm="syz.3.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7efdb5d8efc9 code=0x7ffc0000 [ 1334.077711][T12385] usb 6-1: USB disconnect, device number 48 [ 1334.110789][ T30] audit: type=1326 audit(1761081819.149:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25124 comm="syz.3.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb5d8efc9 code=0x7ffc0000 [ 1334.482940][T24771] usb usb38-port1: unable to enumerate USB device [ 1335.649011][T12385] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1335.854279][T12385] usb 3-1: Using ep0 maxpacket: 8 [ 1335.897629][T25151] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4823'. [ 1335.906730][T25151] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4823'. [ 1336.208149][T12385] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1336.236370][T12385] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1336.246591][T12385] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1336.256514][T12385] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.267341][T12385] usb 3-1: config 0 descriptor?? [ 1336.280096][T12385] hso 3-1:0.0: Can't find BULK IN endpoint [ 1337.198034][T25167] 9pnet_fd: Insufficient options for proto=fd [ 1337.515936][T25173] tipc: Started in network mode [ 1337.520985][T25173] tipc: Node identity ac14140f, cluster identity 4711 [ 1337.534918][T25173] tipc: New replicast peer: 255.255.255.255 [ 1337.545350][T25173] tipc: Enabled bearer , priority 10 [ 1338.502408][T12382] usb 3-1: USB disconnect, device number 20 [ 1338.654473][T24771] tipc: Node number set to 2886997007 [ 1338.819464][T25179] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4831'. [ 1338.922570][T25190] bridge0: port 2(bridge_slave_1) entered disabled state [ 1338.988925][T25199] netlink: 'syz.0.4836': attribute type 21 has an invalid length. [ 1339.003029][T25199] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4836'. [ 1339.355745][T25199] netlink: 'syz.0.4836': attribute type 5 has an invalid length. [ 1339.379518][T25199] netlink: 'syz.0.4836': attribute type 6 has an invalid length. [ 1339.387795][T25199] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4836'. [ 1339.785381][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 1339.785397][ T30] audit: type=1400 audit(1761081834.189:3167): avc: denied { append } for pid=25208 comm="syz.5.4839" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1339.896139][T25209] lo speed is unknown, defaulting to 1000 [ 1340.326584][T19686] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x1e [ 1340.959189][T25237] kAFS: unparsable volume name [ 1340.970558][T25237] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4844'. [ 1341.298597][T25239] FAULT_INJECTION: forcing a failure. [ 1341.298597][T25239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1341.328905][T25239] CPU: 0 UID: 0 PID: 25239 Comm: syz.5.4845 Not tainted syzkaller #0 PREEMPT(full) [ 1341.328930][T25239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1341.328941][T25239] Call Trace: [ 1341.328946][T25239] [ 1341.328952][T25239] dump_stack_lvl+0x16c/0x1f0 [ 1341.328983][T25239] should_fail_ex+0x512/0x640 [ 1341.329008][T25239] _copy_to_iter+0x29f/0x1710 [ 1341.329033][T25239] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 1341.329058][T25239] ? avc_has_perm_noaudit+0x117/0x3b0 [ 1341.329077][T25239] ? __pfx__copy_to_iter+0x10/0x10 [ 1341.329103][T25239] ? __skb_recv_datagram+0x1b2/0x220 [ 1341.329125][T25239] ? __pfx___skb_recv_datagram+0x10/0x10 [ 1341.329148][T25239] simple_copy_to_iter+0x46/0x90 [ 1341.329166][T25239] __skb_datagram_iter+0x129/0x900 [ 1341.329184][T25239] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1341.329206][T25239] ? skb_recv_datagram+0x88/0xc0 [ 1341.329230][T25239] skb_copy_datagram_iter+0x40/0x50 [ 1341.329252][T25239] netlink_recvmsg+0x27e/0xa90 [ 1341.329279][T25239] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1341.329304][T25239] ? __fget_files+0x204/0x3c0 [ 1341.329336][T25239] sock_recvmsg+0x1f9/0x250 [ 1341.329357][T25239] __sys_recvfrom+0x203/0x310 [ 1341.329381][T25239] ? __pfx___sys_recvfrom+0x10/0x10 [ 1341.329412][T25239] ? find_held_lock+0x2b/0x80 [ 1341.329447][T25239] __x64_sys_recvfrom+0xe0/0x1c0 [ 1341.329469][T25239] ? do_syscall_64+0x91/0xfa0 [ 1341.329486][T25239] ? lockdep_hardirqs_on+0x7c/0x110 [ 1341.329503][T25239] do_syscall_64+0xcd/0xfa0 [ 1341.329521][T25239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.329539][T25239] RIP: 0033:0x7fd6e4b90d94 [ 1341.329554][T25239] Code: 89 4c 24 1c e8 ed 5f 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 60 02 00 48 8b 04 [ 1341.329571][T25239] RSP: 002b:00007fd6e5a48ed0 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 1341.329589][T25239] RAX: ffffffffffffffda RBX: 00007fd6e5a48fc0 RCX: 00007fd6e4b90d94 [ 1341.329601][T25239] RDX: 0000000000001000 RSI: 00007fd6e5a49010 RDI: 0000000000000003 [ 1341.329611][T25239] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1341.329622][T25239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1341.329632][T25239] R13: 00007fd6e5a48f68 R14: 00007fd6e5a49010 R15: 0000000000000000 [ 1341.329656][T25239] [ 1341.654488][T25241] FAULT_INJECTION: forcing a failure. [ 1341.654488][T25241] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1341.680496][T25241] CPU: 0 UID: 0 PID: 25241 Comm: syz.5.4846 Not tainted syzkaller #0 PREEMPT(full) [ 1341.680523][T25241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1341.680533][T25241] Call Trace: [ 1341.680539][T25241] [ 1341.680545][T25241] dump_stack_lvl+0x16c/0x1f0 [ 1341.680573][T25241] should_fail_ex+0x512/0x640 [ 1341.680596][T25241] should_fail_alloc_page+0xe7/0x130 [ 1341.680622][T25241] prepare_alloc_pages+0x3c2/0x610 [ 1341.680647][T25241] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 1341.680672][T25241] ? rcu_is_watching+0x12/0xc0 [ 1341.680690][T25241] ? trace_mm_page_alloc+0x11f/0x1a0 [ 1341.680714][T25241] ? __alloc_frozen_pages_noprof+0x292/0x2470 [ 1341.680754][T25241] ? __lock_acquire+0xb8a/0x1c90 [ 1341.680778][T25241] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1341.680798][T25241] ? __lock_acquire+0x622/0x1c90 [ 1341.680825][T25241] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1341.680849][T25241] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1341.680875][T25241] ? policy_nodemask+0xea/0x4e0 [ 1341.680901][T25241] alloc_pages_mpol+0x1fb/0x550 [ 1341.680925][T25241] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1341.680956][T25241] ___kmalloc_large_node+0xed/0x160 [ 1341.680980][T25241] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1341.681005][T25241] __kmalloc_large_node_noprof+0x1c/0x70 [ 1341.681034][T25241] __kmalloc_noprof.cold+0xc/0x62 [ 1341.681060][T25241] ? vhost_dev_set_owner+0x191/0xa50 [ 1341.681090][T25241] ? vhost_dev_set_owner+0x191/0xa50 [ 1341.681114][T25241] vhost_dev_set_owner+0x191/0xa50 [ 1341.681146][T25241] vhost_dev_ioctl+0x2eb/0xe20 [ 1341.681170][T25241] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1341.681201][T25241] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 1341.681229][T25241] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1341.681262][T25241] vhost_vsock_dev_ioctl+0x3a5/0xb30 [ 1341.681286][T25241] ? hook_file_ioctl_common+0x145/0x410 [ 1341.681305][T25241] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 1341.681335][T25241] ? selinux_file_ioctl+0xb4/0x270 [ 1341.681361][T25241] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 1341.681388][T25241] __x64_sys_ioctl+0x18e/0x210 [ 1341.681409][T25241] do_syscall_64+0xcd/0xfa0 [ 1341.681427][T25241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.681443][T25241] RIP: 0033:0x7fd6e4b8efc9 [ 1341.681458][T25241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1341.681475][T25241] RSP: 002b:00007fd6e5a4a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1341.681492][T25241] RAX: ffffffffffffffda RBX: 00007fd6e4de5fa0 RCX: 00007fd6e4b8efc9 [ 1341.681502][T25241] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000003 [ 1341.681511][T25241] RBP: 00007fd6e5a4a090 R08: 0000000000000000 R09: 0000000000000000 [ 1341.681519][T25241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1341.681529][T25241] R13: 00007fd6e4de6038 R14: 00007fd6e4de5fa0 R15: 00007ffff21dcf58 [ 1341.681553][T25241] [ 1343.062795][ T30] audit: type=1326 audit(1761081837.459:3168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25254 comm="syz.3.4852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb5d8efc9 code=0x7ffc0000 [ 1343.094804][T25258] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1343.094808][T25259] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1343.104035][ T30] audit: type=1326 audit(1761081837.459:3169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25254 comm="syz.3.4852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7efdb5d8efc9 code=0x7ffc0000 [ 1343.141046][ T30] audit: type=1326 audit(1761081837.459:3170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25254 comm="syz.3.4852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb5d8efc9 code=0x7ffc0000 [ 1343.225088][T24771] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1343.288347][ T30] audit: type=1326 audit(1761081837.459:3171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25254 comm="syz.3.4852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb5d8efc9 code=0x7ffc0000 [ 1343.312846][ T30] audit: type=1326 audit(1761081837.459:3172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25254 comm="syz.3.4852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=313 compat=0 ip=0x7efdb5d8efc9 code=0x7ffc0000 [ 1343.337168][ T30] audit: type=1326 audit(1761081837.459:3173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25254 comm="syz.3.4852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb5d8efc9 code=0x7ffc0000 [ 1343.361025][ T30] audit: type=1326 audit(1761081837.459:3174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25254 comm="syz.3.4852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb5d8efc9 code=0x7ffc0000 [ 1343.411118][ T30] audit: type=1326 audit(1761081837.459:3175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25254 comm="syz.3.4852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7efdb5d8efc9 code=0x7ffc0000 [ 1343.434951][T24771] usb 3-1: Using ep0 maxpacket: 16 [ 1343.436453][T24771] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1343.474831][ T30] audit: type=1326 audit(1761081837.459:3176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25254 comm="syz.3.4852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb5d8efc9 code=0x7ffc0000 [ 1343.508473][T24771] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1343.541240][T24771] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1343.551495][T24771] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.572989][T24771] usb 3-1: Product: syz [ 1343.577600][T24771] usb 3-1: Manufacturer: syz [ 1343.583372][T24771] usb 3-1: SerialNumber: syz [ 1343.615460][T24771] usb 3-1: config 0 descriptor?? [ 1343.638062][T24771] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1343.702939][T24771] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1343.740228][T25271] netlink: 'syz.6.4858': attribute type 2 has an invalid length. [ 1343.752873][T25271] netlink: 119 bytes leftover after parsing attributes in process `syz.6.4858'. [ 1343.794201][T24773] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1343.974358][T24773] usb 1-1: Using ep0 maxpacket: 8 [ 1344.283691][T24773] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1344.292513][T24773] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1344.315113][T24773] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1344.335714][T24773] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.469500][T24771] em28xx 3-1:0.0: unknown em28xx chip ID (206) [ 1344.681300][T24771] em28xx 3-1:0.0: Config register raw data: 0x22 [ 1344.715820][T24771] em28xx 3-1:0.0: I2S Audio (3 sample rate(s)) [ 1344.722004][T24771] em28xx 3-1:0.0: No AC97 audio processor [ 1344.803797][T25291] netlink: 'syz.5.4864': attribute type 1 has an invalid length. [ 1344.857679][T25291] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1344.997532][T25296] bond2: (slave veth3): Enslaving as an active interface with a down link [ 1345.023773][T24771] usb 3-1: USB disconnect, device number 21 [ 1345.053396][T25291] bond2: (slave dummy0): making interface the new active one [ 1345.066603][T25291] dummy0: entered promiscuous mode [ 1345.072228][T25291] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 1345.315595][T25300] ip6t_srh: unknown srh invflags 7F00 [ 1345.423895][ T30] kauditd_printk_skb: 116 callbacks suppressed [ 1345.423911][ T30] audit: type=1400 audit(1761081839.819:3293): avc: denied { execute } for pid=25303 comm="syz.5.4866" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=94813 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1345.471218][T25304] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4866'. [ 1345.611990][T25306] loop8: detected capacity change from 0 to 7 [ 1345.622585][ T6963] Dev loop8: unable to read RDB block 7 [ 1345.643371][ T6963] loop8: unable to read partition table [ 1345.649355][ T6963] loop8: partition table beyond EOD, truncated [ 1345.662532][T25306] Dev loop8: unable to read RDB block 7 [ 1345.679733][T25306] loop8: unable to read partition table [ 1345.694879][T25306] loop8: partition table beyond EOD, truncated [ 1345.710990][T25306] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1345.926556][ T30] audit: type=1400 audit(1761081840.329:3294): avc: denied { ioctl } for pid=25309 comm="syz.5.4868" path="socket:[94907]" dev="sockfs" ino=94907 ioctlcmd=0x5616 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1345.949066][T25313] lo speed is unknown, defaulting to 1000 [ 1346.008882][ T30] audit: type=1400 audit(1761081840.369:3295): avc: denied { watch } for pid=25309 comm="syz.5.4868" path="/204/file0" dev="tmpfs" ino=1153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1346.058141][ T30] audit: type=1400 audit(1761081840.369:3296): avc: denied { watch_sb } for pid=25309 comm="syz.5.4868" path="/204/file0" dev="tmpfs" ino=1153 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1346.593124][T25326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4871'. [ 1346.658657][T25326] netlink: 'syz.2.4871': attribute type 9 has an invalid length. [ 1346.896118][T24773] usb 1-1: USB disconnect, device number 57 [ 1347.126007][T25334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4873'. [ 1347.334359][T24773] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1347.784308][T24773] usb 3-1: device descriptor read/64, error -71 [ 1348.564201][T24773] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1348.741524][T24773] usb 3-1: device descriptor read/64, error -71 [ 1348.879429][T24773] usb usb3-port1: attempt power cycle [ 1349.276764][ T30] audit: type=1326 audit(1761081843.579:3297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25350 comm="syz.6.4878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7338b8efc9 code=0x7ffc0000 [ 1349.304204][T24773] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1349.320717][ T30] audit: type=1326 audit(1761081843.579:3298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25350 comm="syz.6.4878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7338b8efc9 code=0x7ffc0000 [ 1349.345605][T24773] usb 3-1: device descriptor read/8, error -71 [ 1349.363412][ T30] audit: type=1326 audit(1761081843.699:3299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25350 comm="syz.6.4878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f7338b8efc9 code=0x7ffc0000 [ 1349.392410][ T30] audit: type=1326 audit(1761081843.699:3300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25350 comm="syz.6.4878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7338b8efc9 code=0x7ffc0000 [ 1349.596374][ T30] audit: type=1326 audit(1761081843.699:3301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25350 comm="syz.6.4878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7338b8efc9 code=0x7ffc0000 [ 1349.625633][ T30] audit: type=1326 audit(1761081843.699:3302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25350 comm="syz.6.4878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f7338b8efc9 code=0x7ffc0000 [ 1349.712903][T24773] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1349.767510][T24773] usb 3-1: device descriptor read/8, error -71 [ 1349.874511][T24773] usb usb3-port1: unable to enumerate USB device [ 1349.952807][T25324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4870'. [ 1350.434430][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 1350.434445][ T30] audit: type=1326 audit(1761081844.839:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25358 comm="syz.2.4881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5718efc9 code=0x7ffc0000 [ 1350.603402][T25369] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4882'. [ 1350.741986][ T30] audit: type=1326 audit(1761081844.929:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25358 comm="syz.2.4881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6f5718efc9 code=0x7ffc0000 [ 1350.847619][ T30] audit: type=1326 audit(1761081844.929:3391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25358 comm="syz.2.4881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5718efc9 code=0x7ffc0000 [ 1350.943830][ T30] audit: type=1326 audit(1761081844.939:3392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25358 comm="syz.2.4881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f6f5718efc9 code=0x7ffc0000 [ 1351.072625][ T30] audit: type=1326 audit(1761081844.949:3393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25358 comm="syz.2.4881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5718efc9 code=0x7ffc0000 [ 1351.404193][ T30] audit: type=1326 audit(1761081844.949:3394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25358 comm="syz.2.4881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f6f5718efc9 code=0x7ffc0000 [ 1351.502638][T25390] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20001 [ 1352.389174][ T30] audit: type=1326 audit(1761081845.009:3395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25358 comm="syz.2.4881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5718efc9 code=0x7ffc0000 [ 1352.423563][ T30] audit: type=1326 audit(1761081845.019:3396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25358 comm="syz.2.4881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5718efc9 code=0x7ffc0000 [ 1352.572631][ T30] audit: type=1326 audit(1761081845.079:3397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25358 comm="syz.2.4881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6f5718efc9 code=0x7ffc0000 [ 1352.596964][ T30] audit: type=1326 audit(1761081845.079:3398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25358 comm="syz.2.4881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5718efc9 code=0x7ffc0000 [ 1353.629999][T25408] netlink: 'syz.6.4888': attribute type 20 has an invalid length. [ 1353.674212][T25408] IPv6: NLM_F_CREATE should be specified when creating new route [ 1353.690702][T25408] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1353.697972][T25408] IPv6: NLM_F_CREATE should be set when creating new route [ 1354.979239][T25440] netlink: 'syz.3.4897': attribute type 21 has an invalid length. [ 1354.987105][T25440] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4897'. [ 1354.996658][T25440] netlink: 'syz.3.4897': attribute type 5 has an invalid length. [ 1355.004389][T25440] netlink: 'syz.3.4897': attribute type 6 has an invalid length. [ 1355.012186][T25440] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4897'. [ 1355.433918][T25434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4892'. [ 1355.789959][T25449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4901'. [ 1355.799596][T12382] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1355.906167][T25450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4901'. [ 1355.922824][T25450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4901'. [ 1355.936173][T25450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4901'. [ 1355.951858][T25450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4901'. [ 1356.144802][T12382] usb 6-1: device descriptor read/64, error -71 [ 1356.404429][T12382] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1356.581678][T12382] usb 6-1: device descriptor read/64, error -71 [ 1356.693289][T24771] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1356.735162][T12382] usb usb6-port1: attempt power cycle [ 1356.905303][T24771] usb 1-1: device descriptor read/64, error -71 [ 1356.969569][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1356.969586][ T30] audit: type=1400 audit(1761081851.369:3402): avc: denied { listen } for pid=25451 comm="syz.2.4902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1357.114719][T12382] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1357.135493][T12382] usb 6-1: device descriptor read/8, error -71 [ 1357.154243][T24771] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1357.296547][T24771] usb 1-1: device descriptor read/64, error -71 [ 1357.325250][T19676] dummy0: left promiscuous mode [ 1357.385791][T12382] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1357.430499][T24771] usb usb1-port1: attempt power cycle [ 1357.465280][T12382] usb 6-1: device descriptor read/8, error -71 [ 1357.913709][T12382] usb usb6-port1: unable to enumerate USB device [ 1358.184189][T24771] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1358.414170][T24771] usb 1-1: device descriptor read/8, error -71 [ 1358.786924][T24771] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1358.849123][T24771] usb 1-1: device descriptor read/8, error -71 [ 1358.915534][T25495] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=23 sclass=netlink_tcpdiag_socket pid=25495 comm=syz.3.4916 [ 1358.966155][T24771] usb usb1-port1: unable to enumerate USB device [ 1359.392464][T25500] netlink: 'syz.3.4918': attribute type 21 has an invalid length. [ 1359.400341][T25500] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4918'. [ 1359.409816][T25500] netlink: 'syz.3.4918': attribute type 5 has an invalid length. [ 1359.417934][T25500] netlink: 'syz.3.4918': attribute type 6 has an invalid length. [ 1359.425703][T25500] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4918'. [ 1359.443331][T25501] kAFS: unparsable volume name [ 1359.754394][ T30] audit: type=1400 audit(1761081854.029:3403): avc: denied { watch watch_reads } for pid=25505 comm="syz.5.4920" path="pipe:[96263]" dev="pipefs" ino=96263 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1360.949747][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.277011][T25531] __nla_validate_parse: 1 callbacks suppressed [ 1361.277027][T25531] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4926'. [ 1362.161381][ T30] audit: type=1400 audit(1761081855.899:3404): avc: denied { append } for pid=25530 comm="syz.0.4926" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1362.240975][T25538] befs: (nbd0): No write support. Marking filesystem read-only [ 1362.721744][T24771] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1362.816542][ T30] audit: type=1400 audit(1761081857.219:3405): avc: denied { setopt } for pid=25551 comm="syz.0.4932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1362.904217][T24771] usb 6-1: device descriptor read/64, error -71 [ 1363.094211][T12382] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1363.145040][T24771] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1363.274776][T12382] usb 1-1: Using ep0 maxpacket: 8 [ 1363.283203][T12382] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1363.296272][T12382] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1363.308746][T12382] usb 1-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1363.319940][T24771] usb 6-1: device descriptor read/64, error -71 [ 1363.327571][T12382] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1363.342648][T12382] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1363.352022][T12382] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.375583][T12382] usbtmc 1-1:16.0: bulk endpoints not found [ 1363.444555][T24771] usb usb6-port1: attempt power cycle [ 1363.784191][T24771] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1363.815274][T24771] usb 6-1: device descriptor read/8, error -71 [ 1364.065623][T24771] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1364.209981][T24771] usb 6-1: device descriptor read/8, error -71 [ 1364.325677][T24771] usb usb6-port1: unable to enumerate USB device [ 1365.323954][T25582] lo speed is unknown, defaulting to 1000 [ 1365.583666][T25587] FAULT_INJECTION: forcing a failure. [ 1365.583666][T25587] name failslab, interval 1, probability 0, space 0, times 0 [ 1365.596956][T25587] CPU: 1 UID: 0 PID: 25587 Comm: syz.5.4941 Not tainted syzkaller #0 PREEMPT(full) [ 1365.596972][T25587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1365.596979][T25587] Call Trace: [ 1365.596983][T25587] [ 1365.596987][T25587] dump_stack_lvl+0x16c/0x1f0 [ 1365.597008][T25587] should_fail_ex+0x512/0x640 [ 1365.597022][T25587] ? fs_reclaim_acquire+0xae/0x150 [ 1365.597038][T25587] should_failslab+0xc2/0x120 [ 1365.597054][T25587] __kmalloc_noprof+0xdd/0x880 [ 1365.597066][T25587] ? tomoyo_encode2+0x100/0x3e0 [ 1365.597083][T25587] ? tomoyo_encode2+0x100/0x3e0 [ 1365.597097][T25587] tomoyo_encode2+0x100/0x3e0 [ 1365.597114][T25587] tomoyo_encode+0x29/0x50 [ 1365.597127][T25587] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1365.597144][T25587] ? tomoyo_profile+0x47/0x60 [ 1365.597155][T25587] tomoyo_path_number_perm+0x245/0x580 [ 1365.597168][T25587] ? tomoyo_path_number_perm+0x237/0x580 [ 1365.597182][T25587] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1365.597196][T25587] ? find_held_lock+0x2b/0x80 [ 1365.597219][T25587] ? find_held_lock+0x2b/0x80 [ 1365.597228][T25587] ? hook_file_ioctl_common+0x145/0x410 [ 1365.597242][T25587] ? __fget_files+0x20e/0x3c0 [ 1365.597265][T25587] security_file_ioctl+0x9b/0x240 [ 1365.597290][T25587] __x64_sys_ioctl+0xb7/0x210 [ 1365.597311][T25587] do_syscall_64+0xcd/0xfa0 [ 1365.597324][T25587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1365.597335][T25587] RIP: 0033:0x7fd6e4b8efc9 [ 1365.597352][T25587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1365.597363][T25587] RSP: 002b:00007fd6e5a4a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1365.597373][T25587] RAX: ffffffffffffffda RBX: 00007fd6e4de5fa0 RCX: 00007fd6e4b8efc9 [ 1365.597384][T25587] RDX: 0000200000000140 RSI: 000000000000541b RDI: 0000000000000003 [ 1365.597394][T25587] RBP: 00007fd6e5a4a090 R08: 0000000000000000 R09: 0000000000000000 [ 1365.597404][T25587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1365.597414][T25587] R13: 00007fd6e4de6038 R14: 00007fd6e4de5fa0 R15: 00007ffff21dcf58 [ 1365.597439][T25587] [ 1365.597452][T25587] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1365.888399][T24771] usb 1-1: USB disconnect, device number 62 [ 1365.895588][ T30] audit: type=1400 audit(1761081860.289:3406): avc: denied { mount } for pid=25588 comm="syz.5.4942" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1365.945676][T25595] FAULT_INJECTION: forcing a failure. [ 1365.945676][T25595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1365.964248][T25595] CPU: 0 UID: 0 PID: 25595 Comm: syz.0.4943 Not tainted syzkaller #0 PREEMPT(full) [ 1365.964272][T25595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1365.964282][T25595] Call Trace: [ 1365.964289][T25595] [ 1365.964296][T25595] dump_stack_lvl+0x16c/0x1f0 [ 1365.964330][T25595] should_fail_ex+0x512/0x640 [ 1365.964356][T25595] _copy_from_user+0x2e/0xd0 [ 1365.964379][T25595] copy_msghdr_from_user+0x98/0x160 [ 1365.964403][T25595] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1365.964439][T25595] ___sys_sendmsg+0xfe/0x1d0 [ 1365.964463][T25595] ? __pfx____sys_sendmsg+0x10/0x10 [ 1365.964485][T25595] ? __lock_acquire+0x622/0x1c90 [ 1365.964537][T25595] __sys_sendmsg+0x16d/0x220 [ 1365.964560][T25595] ? __pfx___sys_sendmsg+0x10/0x10 [ 1365.964599][T25595] do_syscall_64+0xcd/0xfa0 [ 1365.964617][T25595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1365.964634][T25595] RIP: 0033:0x7f05e658efc9 [ 1365.964663][T25595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1365.964678][T25595] RSP: 002b:00007f05e73fa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1365.964695][T25595] RAX: ffffffffffffffda RBX: 00007f05e67e5fa0 RCX: 00007f05e658efc9 [ 1365.964706][T25595] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1365.964716][T25595] RBP: 00007f05e73fa090 R08: 0000000000000000 R09: 0000000000000000 [ 1365.964725][T25595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1365.964734][T25595] R13: 00007f05e67e6038 R14: 00007f05e67e5fa0 R15: 00007ffe92d22718 [ 1365.964757][T25595] [ 1367.209743][T25613] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4948'. [ 1367.223824][T25613] FAULT_INJECTION: forcing a failure. [ 1367.223824][T25613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1367.225702][T25613] [ 1367.225708][T25613] ====================================================== [ 1367.225712][T25613] WARNING: possible circular locking dependency detected [ 1367.225716][T25613] syzkaller #0 Not tainted [ 1367.225722][T25613] ------------------------------------------------------ [ 1367.225725][T25613] syz.2.4948/25613 is trying to acquire lock: [ 1367.225730][T25613] ffffffff8e2d1680 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 1367.225763][T25613] [ 1367.225763][T25613] but task is already holding lock: [ 1367.225766][T25613] ffff8880b843a398 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1367.225792][T25613] [ 1367.225792][T25613] which lock already depends on the new lock. [ 1367.225792][T25613] [ 1367.225796][T25613] [ 1367.225796][T25613] the existing dependency chain (in reverse order) is: [ 1367.225799][T25613] [ 1367.225799][T25613] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 1367.225811][T25613] _raw_spin_lock_nested+0x31/0x40 [ 1367.225827][T25613] raw_spin_rq_lock_nested+0x29/0x130 [ 1367.225842][T25613] task_rq_lock+0xcf/0x490 [ 1367.225850][T25613] cgroup_move_task+0x81/0x2a0 [ 1367.225860][T25613] css_set_move_task+0x288/0x5f0 [ 1367.225874][T25613] cgroup_post_fork+0x201/0x9d0 [ 1367.225883][T25613] copy_process+0x602d/0x76a0 [ 1367.225893][T25613] kernel_clone+0xfc/0x930 [ 1367.225902][T25613] user_mode_thread+0xc8/0x110 [ 1367.225911][T25613] rest_init+0x23/0x2b0 [ 1367.225922][T25613] start_kernel+0x3f6/0x4e0 [ 1367.225936][T25613] x86_64_start_reservations+0x18/0x30 [ 1367.225946][T25613] x86_64_start_kernel+0x130/0x190 [ 1367.225954][T25613] common_startup_64+0x13e/0x148 [ 1367.225967][T25613] [ 1367.225967][T25613] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 1367.225979][T25613] _raw_spin_lock_irqsave+0x3a/0x60 [ 1367.225993][T25613] try_to_wake_up+0xb7/0x1870 [ 1367.226007][T25613] __wake_up_common+0x135/0x1f0 [ 1367.226018][T25613] __wake_up+0x31/0x60 [ 1367.226027][T25613] tty_port_default_wakeup+0x47/0x60 [ 1367.226037][T25613] serial8250_tx_chars+0x68e/0x860 [ 1367.226048][T25613] serial8250_handle_irq+0x761/0xcb0 [ 1367.226058][T25613] serial8250_default_handle_irq+0x9e/0x270 [ 1367.226069][T25613] serial8250_interrupt+0xf8/0x1d0 [ 1367.226080][T25613] __handle_irq_event_percpu+0x236/0x920 [ 1367.226090][T25613] handle_irq_event+0xab/0x1e0 [ 1367.226098][T25613] handle_edge_irq+0x3ca/0x9e0 [ 1367.226112][T25613] __common_interrupt+0xd0/0x2f0 [ 1367.226121][T25613] common_interrupt+0x61/0xe0 [ 1367.226133][T25613] asm_common_interrupt+0x26/0x40 [ 1367.226143][T25613] handle_softirqs+0x1dd/0x8e0 [ 1367.226152][T25613] __irq_exit_rcu+0x109/0x170 [ 1367.226159][T25613] irq_exit_rcu+0x9/0x30 [ 1367.226168][T25613] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1367.226182][T25613] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1367.226192][T25613] console_flush_all+0x9a2/0xc60 [ 1367.226206][T25613] console_unlock+0xd8/0x210 [ 1367.226214][T25613] vprintk_emit+0x3d7/0x680 [ 1367.226223][T25613] _printk+0xc7/0x100 [ 1367.226234][T25613] kauditd_hold_skb+0x205/0x250 [ 1367.226246][T25613] kauditd_send_queue+0x239/0x290 [ 1367.226258][T25613] kauditd_thread+0x623/0xa70 [ 1367.226270][T25613] kthread+0x3c5/0x780 [ 1367.226282][T25613] ret_from_fork+0x675/0x7d0 [ 1367.226294][T25613] ret_from_fork_asm+0x1a/0x30 [ 1367.226304][T25613] [ 1367.226304][T25613] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 1367.226316][T25613] _raw_spin_lock_irqsave+0x3a/0x60 [ 1367.226330][T25613] __wake_up+0x1c/0x60 [ 1367.226339][T25613] tty_port_default_wakeup+0x47/0x60 [ 1367.226348][T25613] serial8250_tx_chars+0x68e/0x860 [ 1367.226357][T25613] serial8250_handle_irq+0x761/0xcb0 [ 1367.226367][T25613] serial8250_default_handle_irq+0x9e/0x270 [ 1367.226384][T25613] serial8250_interrupt+0xf8/0x1d0 [ 1367.226395][T25613] __handle_irq_event_percpu+0x236/0x920 [ 1367.226404][T25613] handle_irq_event+0xab/0x1e0 [ 1367.226412][T25613] handle_edge_irq+0x3ca/0x9e0 [ 1367.226425][T25613] __common_interrupt+0xd0/0x2f0 [ 1367.226434][T25613] common_interrupt+0xba/0xe0 [ 1367.226445][T25613] asm_common_interrupt+0x26/0x40 [ 1367.226455][T25613] _raw_spin_unlock_irqrestore+0x31/0x80 [ 1367.226469][T25613] uart_write+0x2a4/0xb30 [ 1367.226477][T25613] n_tty_write+0x41e/0x11e0 [ 1367.226487][T25613] file_tty_write.constprop.0+0x503/0x9b0 [ 1367.226502][T25613] redirected_tty_write+0xd4/0x150 [ 1367.226516][T25613] vfs_write+0x7d3/0x11d0 [ 1367.226528][T25613] ksys_write+0x12a/0x250 [ 1367.226539][T25613] do_syscall_64+0xcd/0xfa0 [ 1367.226547][T25613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1367.226557][T25613] [ 1367.226557][T25613] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 1367.226569][T25613] _raw_spin_lock_irqsave+0x3a/0x60 [ 1367.226582][T25613] serial8250_console_write+0x181/0x1890 [ 1367.226593][T25613] console_flush_all+0x801/0xc60 [ 1367.226607][T25613] console_unlock+0xd8/0x210 [ 1367.226615][T25613] vprintk_emit+0x3d7/0x680 [ 1367.226623][T25613] _printk+0xc7/0x100 [ 1367.226634][T25613] register_console+0xc2d/0x11b0 [ 1367.226643][T25613] univ8250_console_init+0x5f/0x90 [ 1367.226654][T25613] console_init+0x152/0x680 [ 1367.226663][T25613] start_kernel+0x29f/0x4e0 [ 1367.226676][T25613] x86_64_start_reservations+0x18/0x30 [ 1367.226685][T25613] x86_64_start_kernel+0x130/0x190 [ 1367.226693][T25613] common_startup_64+0x13e/0x148 [ 1367.226706][T25613] [ 1367.226706][T25613] -> #0 (console_owner){-.-.}-{0:0}: [ 1367.226718][T25613] __lock_acquire+0x126f/0x1c90 [ 1367.226729][T25613] lock_acquire+0x179/0x350 [ 1367.226741][T25613] console_lock_spinning_enable+0x72/0x80 [ 1367.226755][T25613] console_flush_all+0x7aa/0xc60 [ 1367.226769][T25613] console_unlock+0xd8/0x210 [ 1367.226777][T25613] vprintk_emit+0x3d7/0x680 [ 1367.226785][T25613] _printk+0xc7/0x100 [ 1367.226797][T25613] should_fail_ex+0x4e7/0x640 [ 1367.226809][T25613] copy_to_user_nofault+0xac/0x1c0 [ 1367.226821][T25613] bpf_probe_write_user+0xaf/0xf0 [ 1367.226833][T25613] bpf_prog_8f5dadf009f59a0a+0x44/0x4c [ 1367.226841][T25613] bpf_trace_run4+0x252/0x5b0 [ 1367.226850][T25613] __bpf_trace_sched_switch+0x145/0x190 [ 1367.226864][T25613] __traceiter_sched_switch+0x6f/0xc0 [ 1367.226878][T25613] __schedule+0x183b/0x5de0 [ 1367.226891][T25613] schedule+0xe7/0x3a0 [ 1367.226904][T25613] exit_to_user_mode_loop+0x6b/0x130 [ 1367.226918][T25613] do_syscall_64+0x426/0xfa0 [ 1367.226926][T25613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1367.226935][T25613] [ 1367.226935][T25613] other info that might help us debug this: [ 1367.226935][T25613] [ 1367.226938][T25613] Chain exists of: [ 1367.226938][T25613] console_owner --> &p->pi_lock --> &rq->__lock [ 1367.226938][T25613] [ 1367.226952][T25613] Possible unsafe locking scenario: [ 1367.226952][T25613] [ 1367.226955][T25613] CPU0 CPU1 [ 1367.226958][T25613] ---- ---- [ 1367.226961][T25613] lock(&rq->__lock); [ 1367.226966][T25613] lock(&p->pi_lock); [ 1367.226973][T25613] lock(&rq->__lock); [ 1367.226979][T25613] lock(console_owner); [ 1367.226985][T25613] [ 1367.226985][T25613] *** DEADLOCK *** [ 1367.226985][T25613] [ 1367.226988][T25613] 4 locks held by syz.2.4948/25613: [ 1367.226994][T25613] #0: ffff8880b843a398 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1367.227020][T25613] #1: ffffffff8e3c4460 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x1d5/0x5b0 [ 1367.227041][T25613] #2: ffffffff8e3b1ac0 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 1367.227064][T25613] #3: ffffffff8e3b1b30 (console_srcu){....}-{0:0}, at: console_flush_all+0x158/0xc60 [ 1367.227091][T25613] [ 1367.227091][T25613] stack backtrace: [ 1367.227097][T25613] CPU: 1 UID: 0 PID: 25613 Comm: syz.2.4948 Not tainted syzkaller #0 PREEMPT(full) [ 1367.227109][T25613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1367.227116][T25613] Call Trace: [ 1367.227119][T25613] [ 1367.227123][T25613] dump_stack_lvl+0x116/0x1f0 [ 1367.227139][T25613] print_circular_bug+0x275/0x350 [ 1367.227151][T25613] check_noncircular+0x14c/0x170 [ 1367.227165][T25613] __lock_acquire+0x126f/0x1c90 [ 1367.227179][T25613] lock_acquire+0x179/0x350 [ 1367.227191][T25613] ? console_lock_spinning_enable+0x61/0x80 [ 1367.227207][T25613] ? console_lock_spinning_enable+0x4a/0x80 [ 1367.227223][T25613] console_lock_spinning_enable+0x72/0x80 [ 1367.227238][T25613] ? console_lock_spinning_enable+0x61/0x80 [ 1367.227253][T25613] console_flush_all+0x7aa/0xc60 [ 1367.227269][T25613] ? __pfx_console_flush_all+0x10/0x10 [ 1367.227286][T25613] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1367.227297][T25613] console_unlock+0xd8/0x210 [ 1367.227306][T25613] ? __pfx_console_unlock+0x10/0x10 [ 1367.227321][T25613] ? do_raw_spin_unlock+0x170/0x230 [ 1367.227336][T25613] ? _printk+0xc7/0x100 [ 1367.227348][T25613] ? __down_trylock_console_sem+0xb0/0x140 [ 1367.227362][T25613] vprintk_emit+0x3d7/0x680 [ 1367.227375][T25613] ? __pfx_vprintk_emit+0x10/0x10 [ 1367.227385][T25613] ? __lock_acquire+0xb8a/0x1c90 [ 1367.227397][T25613] _printk+0xc7/0x100 [ 1367.227409][T25613] ? __pfx__printk+0x10/0x10 [ 1367.227422][T25613] ? __lock_acquire+0x622/0x1c90 [ 1367.227434][T25613] ? __pfx____ratelimit+0x10/0x10 [ 1367.227449][T25613] should_fail_ex+0x4e7/0x640 [ 1367.227462][T25613] copy_to_user_nofault+0xac/0x1c0 [ 1367.227475][T25613] bpf_probe_write_user+0xaf/0xf0 [ 1367.227488][T25613] bpf_prog_8f5dadf009f59a0a+0x44/0x4c [ 1367.227495][T25613] bpf_trace_run4+0x252/0x5b0 [ 1367.227504][T25613] ? __pfx_bpf_trace_run4+0x10/0x10 [ 1367.227514][T25613] ? __lock_acquire+0xb8a/0x1c90 [ 1367.227527][T25613] __bpf_trace_sched_switch+0x145/0x190 [ 1367.227543][T25613] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 1367.227558][T25613] ? psi_group_change+0x4a0/0xbe0 [ 1367.227571][T25613] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 1367.227589][T25613] __traceiter_sched_switch+0x6f/0xc0 [ 1367.227604][T25613] __schedule+0x183b/0x5de0 [ 1367.227621][T25613] ? __pfx___schedule+0x10/0x10 [ 1367.227635][T25613] ? __fget_files+0x20e/0x3c0 [ 1367.227650][T25613] ? fput+0x9b/0xd0 [ 1367.227658][T25613] ? ksys_write+0x1ac/0x250 [ 1367.227671][T25613] schedule+0xe7/0x3a0 [ 1367.227685][T25613] exit_to_user_mode_loop+0x6b/0x130 [ 1367.227699][T25613] do_syscall_64+0x426/0xfa0 [ 1367.227708][T25613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1367.227718][T25613] RIP: 0033:0x7f6f5718da7f [ 1367.227726][T25613] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1367.227737][T25613] RSP: 002b:00007f6f58015030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1367.227746][T25613] RAX: 0000000000000001 RBX: 0000000000000008 RCX: 00007f6f5718da7f [ 1367.227752][T25613] RDX: 0000000000000001 RSI: 00007f6f58015090 RDI: 0000000000000008 [ 1367.227758][T25613] RBP: 00007f6f58015090 R08: 0000000000000000 R09: 00007f6f58014df7 [ 1367.227765][T25613] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1367.227771][T25613] R13: 00007f6f573e6218 R14: 00007f6f573e6180 R15: 00007ffd8e826f68 [ 1367.227780][T25613] [ 1368.330616][T25613] CPU: 1 UID: 0 PID: 25613 Comm: syz.2.4948 Not tainted syzkaller #0 PREEMPT(full) [ 1368.330632][T25613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1368.330639][T25613] Call Trace: [ 1368.330645][T25613] [ 1368.330650][T25613] dump_stack_lvl+0x116/0x1f0 [ 1368.330671][T25613] should_fail_ex+0x512/0x640 [ 1368.330686][T25613] copy_to_user_nofault+0xac/0x1c0 [ 1368.330700][T25613] bpf_probe_write_user+0xaf/0xf0 [ 1368.330715][T25613] bpf_prog_8f5dadf009f59a0a+0x44/0x4c [ 1368.330724][T25613] bpf_trace_run4+0x252/0x5b0 [ 1368.330733][T25613] ? __pfx_bpf_trace_run4+0x10/0x10 [ 1368.330743][T25613] ? __lock_acquire+0xb8a/0x1c90 [ 1368.330758][T25613] __bpf_trace_sched_switch+0x145/0x190 [ 1368.330774][T25613] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 1368.330790][T25613] ? psi_group_change+0x4a0/0xbe0 [ 1368.330803][T25613] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 1368.330821][T25613] __traceiter_sched_switch+0x6f/0xc0 [ 1368.330837][T25613] __schedule+0x183b/0x5de0 [ 1368.330855][T25613] ? __pfx___schedule+0x10/0x10 [ 1368.330869][T25613] ? __fget_files+0x20e/0x3c0 [ 1368.330884][T25613] ? fput+0x9b/0xd0 [ 1368.330893][T25613] ? ksys_write+0x1ac/0x250 [ 1368.330906][T25613] schedule+0xe7/0x3a0 [ 1368.330921][T25613] exit_to_user_mode_loop+0x6b/0x130 [ 1368.330936][T25613] do_syscall_64+0x426/0xfa0 [ 1368.330946][T25613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1368.330958][T25613] RIP: 0033:0x7f6f5718da7f [ 1368.330967][T25613] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1368.330978][T25613] RSP: 002b:00007f6f58015030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1368.330988][T25613] RAX: 0000000000000001 RBX: 0000000000000008 RCX: 00007f6f5718da7f [ 1368.330994][T25613] RDX: 0000000000000001 RSI: 00007f6f58015090 RDI: 0000000000000008 [ 1368.331000][T25613] RBP: 00007f6f58015090 R08: 0000000000000000 R09: 00007f6f58014df7 [ 1368.331007][T25613] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1368.331013][T25613] R13: 00007f6f573e6218 R14: 00007f6f573e6180 R15: 00007ffd8e826f68 [ 1368.331023][T25613] [ 1368.778931][T25617] sch_tbf: burst 480 is lower than device lo mtu (1550) ! [ 1368.788296][T25617] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25617 comm=syz.0.4949