last executing test programs: 8m5.328562487s ago: executing program 1 (id=2): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) get_mempolicy(0x0, 0x0, 0x20000200, &(0x7f0000ffd000/0x2000)=nil, 0x3) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e1f, 0x9, @mcast2, 0x9}, 0x1c) io_setup(0x101, &(0x7f0000000340)=0x0) io_submit(r5, 0x1, &(0x7f00000008c0)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x8, r4, 0x0, 0x300, 0x0, 0x0, 0x2}]) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x24, 0x0, "43cad7244bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) 8m2.368841301s ago: executing program 1 (id=7): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) 7m58.264924858s ago: executing program 1 (id=10): syz_usb_connect$uac1(0x2, 0x91, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010102000000403512078240000104030109027f00030101005c090400000001"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x4048841) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r0, 0xc, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00') pread64(r4, &(0x7f0000019180)=""/102349, 0x18fcd, 0x80002) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x4500, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10000) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="dc010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1dc}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) 7m52.722247016s ago: executing program 1 (id=14): socket$nl_crypto(0x10, 0x3, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x40042, 0x0) write$dsp(r0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)=0x8) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0xfffffffe) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r3, 0x1000000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000080)) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0x80000300, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000100)={0xffffffffffffffff, 0xfffffffffffffea3, &(0x7f0000000080)}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="240004801300010062726f616463"], 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x2000c010) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) 7m48.84519302s ago: executing program 1 (id=19): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac0000001000010725bd7000fddbdf25000000", @ANYRES32=0x0, @ANYBLOB="0402000000000400280012800b0001006272696467650000180002800c0020ffff000000000000000500160006000000500012800b00010065727370616e00004000028006000f00080000000500170000000000080014300600"], 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0x4000804) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, 0x0}, 0x80d1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000004000085000000010000008500000050"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r0}, 0xc) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') 7m32.190227218s ago: executing program 32 (id=19): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac0000001000010725bd7000fddbdf25000000", @ANYRES32=0x0, @ANYBLOB="0402000000000400280012800b0001006272696467650000180002800c0020ffff000000000000000500160006000000500012800b00010065727370616e00004000028006000f00080000000500170000000000080014300600"], 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0x4000804) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, 0x0}, 0x80d1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000004000085000000010000008500000050"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r0}, 0xc) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') 5m27.711961842s ago: executing program 3 (id=193): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = epoll_create(0x80000000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x6000200e}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'netdevsim0\x00', {0x1}, 0xfff}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc680000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a31000000003c0003803800008008000340000000022c00"], 0xcc}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) 5m24.663520415s ago: executing program 3 (id=198): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fsopen(&(0x7f0000000180)='btrfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) 5m23.266095501s ago: executing program 3 (id=200): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4004) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000580)={'pcl812\x00', [0x66ce, 0xa, 0x1, 0x4, 0x0, 0xcc7, 0x8, 0x7, 0x1, 0x7fff, 0x7ff, 0x1, 0x8, 0x40000002, 0x4, 0x9, 0x1, 0x9, 0x43, 0x40000003, 0x89, 0x10d, 0xf27, 0x4, 0xc, 0x8, 0x5, 0x40000006, 0x6, 0x10000, 0xfffffff4]}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000200000000000009500000000000000", @ANYRES8], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x2}, 0x94) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r4, 0xc04c5349, &(0x7f0000000140)={0x9, 0x5c5e59bc, 0x7}) r5 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x4}, 0x0, 0x40000000}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r0, 0x0, 0x987a3a9f32358a4c) 5m22.238014032s ago: executing program 3 (id=202): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xab402) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x2, 0x0, 0x23e8, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x6, 0xffff81a4, 0x44, 0x0, 0xf}) 5m18.071770728s ago: executing program 3 (id=210): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000080)={0x4, 0x1, 0xe, 0x4, 0x100, 0x0}) 5m15.354811373s ago: executing program 3 (id=213): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f0000000240)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) syz_open_procfs(0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000080)={0x4, 0x1, 0xe, 0x4, 0x100, &(0x7f0000000440)="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"}) 4m59.108385633s ago: executing program 33 (id=213): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f0000000240)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) syz_open_procfs(0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000080)={0x4, 0x1, 0xe, 0x4, 0x100, &(0x7f0000000440)="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"}) 2.453996851s ago: executing program 5 (id=2729): setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000021c00), 0x4) r0 = eventfd(0x5f0) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x88000) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000011b40)={0x3, 0x0, [{0x2000, 0xd2, &(0x7f0000010940)=""/210}, {0x50000, 0x1000, &(0x7f0000010a40)=""/4096}, {0x9000, 0xdd, &(0x7f0000011a40)=""/221}]}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000ffff00000000000000000000000092010000000000000600000000000000ffff0000000060f4c87e00001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd7000043500000a0001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000200)={0x1, r0}) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r7, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f00000001c0)=0x1) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000080)=0x1) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='timerslack_ns\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r9, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r9, 0x0, 0x489, &(0x7f0000000240)={{0x33, @broadcast, 0x4e22, 0x4, 'fo\x00', 0x13, 0x3, 0x67}, {@rand_addr=0x64010100, 0x4e23, 0x0, 0xa7, 0x3, 0x4}}, 0x44) r10 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r10, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda", 0x3}], 0x1) eventfd2(0x401, 0x800) syz_usb_connect$uac1(0x0, 0x72, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x17cc, 0x1000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x4, 0x40, 0xf6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x6, 0x9, 0x5, {0x7, 0x25, 0x1, 0xc, 0x7f, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xc, 0x2, 0x6, {0x7, 0x25, 0x1, 0x0, 0x0, 0x3}}}}}}}}]}}, 0x0) socket(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x0, 0x1, 0x2}, {0x81}, {0x8, 0x0, 0xfd, 0x7a1f}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28) 1.8284112s ago: executing program 2 (id=2738): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000010"], 0x18}, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1a, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) 1.716446399s ago: executing program 2 (id=2740): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20800, 0x0) r0 = syz_io_uring_setup(0xb02, &(0x7f0000002100)={0x0, 0x191e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000020c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x541}, 0x1}) io_uring_enter(r0, 0xf, 0x7929, 0x1, 0x0, 0x0) 1.617920419s ago: executing program 5 (id=2742): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, 0x0, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x1}) r3 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) sendmsg$nl_route(r3, &(0x7f0000001180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001140)={&(0x7f00000009c0)=@getstats={0x1c, 0x5e, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x5}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x44050) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r4, &(0x7f0000004b80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000001300)="f77d2b5dd5f7d74f0748cf3d2cf218d244566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef22d63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99d15cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a8acbcb2fb79a7d7857d41bca238e0548c5e955d74bbb106fe965274cbb3a29b895df0b4e028b6d65c115b81328e0b660c6920ec9f735329c9b4ad24b907291574f8035e69a21f09bee4d8e56680d791d64148d08fa16bded79cbd0c7ddd08a39c180f215a292c6d6ce11f052ecc7f460f9721b0fe2e5047b7591b704470692c2967d45557746b8ff9df1a7fadf348e82587bd2212ab8f158c27b7c24ae35442c1604ae7fd8b88ede4a5f4bfd7a090000000000000000343ee4cb6ce76dbf0389862077b691a62d80a00f77bdffebc4e555d8de12184f0c11448f9b2cf7efe325bc56c81c004ac34d7f630c4f1a79c323caa25d4843c0d3d7df89318ebbc7d9bac9fa03cb2f6108ab56eef3fbf9f1ed3c2ee6d52b1a49c7ee6a2c3645d3858bfaa5a5b9ef892e3f297c24c8101327c1611d78d8c9ae490a4a3571fabb", 0x209}, {&(0x7f0000000fc0)="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", 0x154}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a299", 0xac}, {&(0x7f0000000040)}], 0x2}}, {{&(0x7f0000000140)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000002680)=[{&(0x7f0000001540)="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", 0xb80}, {&(0x7f0000002540)="8c565329befafcb20b5d638afdc26963154496", 0x13}], 0x2}}, {{0x0, 0x0, &(0x7f0000004a40)=[{&(0x7f0000002700)="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", 0x842}, {0x0}, {&(0x7f0000000ec0)="369eb923b5353218bd08128345ce524b298f13ef3a9fbfb2982c7904638d089f93cb28e6e7f6adcf79e698abf99d2855767d66afb7acf2128a9284d5ddb12c79cdf6de0abe05d41d2058fff55860c1199dc745f6456af343d2d5b0f5999ca491eb0673526338240c18383061d4acda75b818385f003851a94347871e2ce29bd775f85275981a0abb7af287d254ae55707f8116d95896490129b4f0c48f47fb4a6a3f7e61d67567973c7ecf86d210b1fe96e712ab09b3fe74a09601aa05c9a8003f17e4f30ae4251458aa2cd0a9b96b", 0xcf}, {0x0}], 0x4, &(0x7f0000004ac0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1cc}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @multicast1}}}], 0x50}}], 0x5, 0x2090) 1.44089094s ago: executing program 2 (id=2746): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49811, 0x49841}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x32}}]}}}]}, 0x38}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f", 0xa, 0x0, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 1.308040196s ago: executing program 0 (id=2749): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e", 0x8b}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x4, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.144878724s ago: executing program 2 (id=2752): sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4046) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/77, 0x40}, {&(0x7f0000000140)=""/135}], 0x100000000000024c) 1.144087753s ago: executing program 0 (id=2754): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fsopen(&(0x7f0000000180)='btrfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f0000000000)=0xff, 0x4) 1.037289216s ago: executing program 2 (id=2755): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[], 0x0) 992.18012ms ago: executing program 4 (id=2756): syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x5b}, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x11}, 0x800) pipe(0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2c}}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 984.252797ms ago: executing program 6 (id=2757): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x5, &(0x7f0000000e80), 0x13f, 0x5}}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1f0000000000010000480000000000000081"], 0x50) syz_open_dev$vcsn(&(0x7f00000001c0), 0x2, 0x402) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x10000000000000, 0x1, 0x2, 0xa8}, 0x0, &(0x7f0000000000)={0x1f, 0x4, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) 784.987498ms ago: executing program 0 (id=2758): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x40, 0x107, 0x2, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) 784.668728ms ago: executing program 6 (id=2759): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\v/'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000000)={&(0x7f0000000380)=[{0x1, 0xc401, 0x4f, &(0x7f0000000780)="2fa4aaca555c80e980979899f7a2e96c76e007198cf35a3e86a08a361ab693d4b578c5ca80b3dcebae4a9ec3d2084a95f036c2dab0a8e13b7f4757b2a22bf27639286b466ddcf6b2cae2a5a1d1fe21"}], 0x1}) syz_usb_control_io(r0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) unshare(0x8040600) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) pivot_root(&(0x7f0000000280)='.\x00', 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) getpeername$llc(r4, &(0x7f0000000100), &(0x7f0000000180)=0x10) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x60, 0x4, 0x13, 0x8}, {0x6, 0x0, 0x6, 0x201}]}) select(0x0, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0xffffffffffffffff, 0x5, 0x300, 0x0, 0x0, 0xfffffffffffffffe, 0x1}, &(0x7f0000000440)={0x0, 0x2710}) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(0xffffffffffffffff, 0x8010af78, &(0x7f00000001c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) syz_open_procfs(0x0, 0x0) 780.411998ms ago: executing program 4 (id=2760): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000006, 0x20010, 0xffffffffffffffff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) add_key(&(0x7f0000001340)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$BTRFS_IOC_ENCODED_READ(0xffffffffffffffff, 0x80809440, &(0x7f0000000440)={&(0x7f0000000400)=[{&(0x7f0000000180)="10594fca9bfa62e8a8f5b7adaca69295d84537b1e6e4467d2e4830173da156e8", 0x20}, {&(0x7f0000000380)="03c0128d3df9a4e93ba916a2026d2e13791d26b57c58f2eb25e271bc897ba8227e521f2632e853e31fe547fa3f5bed76b36897d1bea12aea906ad7325ccb6290925f4153fc25c01438da2d1e7894e836340910", 0x53}], 0x2, 0x0, 0x0, 0xb, 0x88, 0x100000000, 0xf4b32d6f7ec619fa, 0x4}) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setxattr$security_smack_transmute(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540), &(0x7f0000000580), 0x4, 0x3) syz_fuse_handle_req(r0, &(0x7f0000002dc0)="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", 0x2000, &(0x7f0000004dc0)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x2d, 0x0, 0x6438207, 0x0, 0xffff, 0x0, 0xf84}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) removexattr(&(0x7f0000000240)='./file0\x00', &(0x7f00000004c0)=@known='security.selinux\x00') socket$inet_tcp(0x2, 0x1, 0x0) 707.820148ms ago: executing program 0 (id=2761): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e", 0x8b}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede488", 0x6e}, {0x0}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 627.802776ms ago: executing program 4 (id=2762): r0 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6\xc1N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49811, 0x49841}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x32}}]}}}]}, 0x38}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f", 0xa, 0x0, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 561.304733ms ago: executing program 6 (id=2764): open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file1\x00'}, 0x6e) 496.202012ms ago: executing program 4 (id=2765): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e", 0x8b}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede488", 0x6e}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x48}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 484.669604ms ago: executing program 6 (id=2766): r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000001c0)=""/44, 0x2c) getdents64(r0, 0xfffffffffffffffe, 0x18) 437.375866ms ago: executing program 0 (id=2767): syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x5b}, &(0x7f0000000100), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x10, 0x1412, 0x1, 0x70bd28, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x11}, 0x800) pipe(&(0x7f0000000600)) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2c}}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 417.832828ms ago: executing program 2 (id=2768): r0 = syz_open_dev$video(&(0x7f00000001c0), 0xf28, 0x20) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0xc, @pix={0x3, 0x6, 0x32314247, 0x0, 0x4, 0x8, 0x8, 0x3, 0x1, 0x2, 0x0, 0x2}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a"], 0x58}}, 0x0) socket(0x5, 0x1, 0x40000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000250002000000000005000200000000004500000000000000a500feff0000000095"], &(0x7f0000000100)='GPL\x00'}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x60a4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, "", [{{0x9, 0x4, 0x0, 0x10, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xfffc, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x9, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x20, 0x22, 0x5c, {0x5c, 0x10, "17deeb290a0b03ca9aefae161757f109660492c8f12003af0d8944b1c21d6f3769be68781eb5305e9bce40688b2cc119d16ffc5e50e9c5ada540af96edd6d26f90dab61c132ab0c2d1372d234cc86674a736e957a6de43f83b60"}}, &(0x7f0000000140)={0x0, 0x3, 0x7, @string={0x7, 0x3, "2e620384c7"}}}, 0x0) r4 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0xadcf3000) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x24, 0x14, 0x1, 0x0, 0x0, {0x2c}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "cb9402d6f36dad4255"}]}, 0x24}}, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="780000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1414aa08000200ac1e00010c000280050001000000000008000740000000010b0016"], 0x78}}, 0x0) 417.559585ms ago: executing program 5 (id=2769): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e", 0x8b}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede488", 0x6e}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x48}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 277.98429ms ago: executing program 6 (id=2770): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1f0000000000010000480000000000000081"], 0x50) syz_open_dev$vcsn(&(0x7f00000001c0), 0x2, 0x402) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x10000000000000, 0x1, 0x2, 0xa8}, 0x0, &(0x7f0000000000)={0x1f, 0x4, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) 277.702827ms ago: executing program 4 (id=2771): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1b", 0x7a}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 224.540786ms ago: executing program 0 (id=2772): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e", 0x8b}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {0x0}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa4", 0xc}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 156.846759ms ago: executing program 5 (id=2773): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e", 0x8b}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {0x0}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa4", 0xc}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 36.448913ms ago: executing program 6 (id=2774): r0 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r0, 0x10e, 0x1, 0x0, &(0x7f0000000100)) (fail_nth: 1) 31.719382ms ago: executing program 4 (id=2775): r0 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6\xc1N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n [ 496.399776][T10501] mmap: syz.5.1518 (10501) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 496.758076][T10501] erofs (device nullb0): cannot find valid erofs superblock [ 496.798685][T10510] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 496.817441][T10510] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1522'. [ 497.161250][T10520] binder: 10518:10520 unknown command 24 [ 497.161276][T10520] binder: 10518:10520 ioctl c0306201 200000000540 returned -22 [ 497.470679][ T5890] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 497.620672][ T5890] usb 6-1: Using ep0 maxpacket: 8 [ 497.626320][ T5890] usb 6-1: unable to get BOS descriptor or descriptor too short [ 497.629628][ T5890] usb 6-1: config 6 has an invalid interface number: 205 but max is 3 [ 497.629660][ T5890] usb 6-1: config 6 has an invalid interface number: 168 but max is 3 [ 497.629682][ T5890] usb 6-1: config 6 has an invalid interface number: 7 but max is 3 [ 497.629704][ T5890] usb 6-1: config 6 has an invalid interface number: 169 but max is 3 [ 497.629725][ T5890] usb 6-1: config 6 has no interface number 0 [ 497.629744][ T5890] usb 6-1: config 6 has no interface number 1 [ 497.629762][ T5890] usb 6-1: config 6 has no interface number 2 [ 497.629780][ T5890] usb 6-1: config 6 has no interface number 3 [ 497.629865][ T5890] usb 6-1: config 6 interface 205 altsetting 11 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 497.629898][ T5890] usb 6-1: config 6 interface 205 altsetting 11 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 497.629942][ T5890] usb 6-1: config 6 interface 7 altsetting 7 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 497.629971][ T5890] usb 6-1: config 6 interface 205 has no altsetting 0 [ 497.630007][ T5890] usb 6-1: config 6 interface 168 has no altsetting 0 [ 497.630037][ T5890] usb 6-1: config 6 interface 7 has no altsetting 0 [ 497.630057][ T5890] usb 6-1: config 6 interface 169 has no altsetting 0 [ 497.781194][ T5890] usb 6-1: New USB device found, idVendor=05cc, idProduct=3000, bcdDevice=43.79 [ 497.781229][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.781251][ T5890] usb 6-1: Product: syz [ 497.781266][ T5890] usb 6-1: Manufacturer: syz [ 497.781282][ T5890] usb 6-1: SerialNumber: syz [ 498.469278][ T5890] pegasus 6-1:6.205: Missing or invalid endpoints [ 498.516470][ T5890] pegasus 6-1:6.168: Missing or invalid endpoints [ 498.529293][ T5890] pegasus 6-1:6.7: Missing or invalid endpoints [ 498.552308][ T5890] pegasus 6-1:6.169: Missing or invalid endpoints [ 498.571895][ T5890] usb 6-1: USB disconnect, device number 7 [ 499.817094][T10612] FAULT_INJECTION: forcing a failure. [ 499.817094][T10612] name failslab, interval 1, probability 0, space 0, times 0 [ 499.817134][T10612] CPU: 1 UID: 0 PID: 10612 Comm: syz.6.1565 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 499.817163][T10612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 499.817177][T10612] Call Trace: [ 499.817186][T10612] [ 499.817196][T10612] dump_stack_lvl+0xe8/0x150 [ 499.817238][T10612] should_fail_ex+0x46b/0x600 [ 499.817270][T10612] should_failslab+0xa8/0x100 [ 499.817348][T10612] __kmalloc_noprof+0xdf/0x7b0 [ 499.817383][T10612] ? kfree+0x4d/0x6c0 [ 499.817412][T10612] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 499.817443][T10612] tomoyo_realpath_from_path+0xe3/0x5d0 [ 499.817481][T10612] tomoyo_check_open_permission+0x229/0x470 [ 499.817515][T10612] ? tomoyo_check_open_permission+0x1d3/0x470 [ 499.817550][T10612] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 499.817586][T10612] ? __asan_memset+0x22/0x50 [ 499.817645][T10612] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 499.817675][T10612] ? tomoyo_file_open+0x167/0x220 [ 499.817707][T10612] security_file_open+0xa9/0x240 [ 499.817744][T10612] do_dentry_open+0x4c0/0x13e0 [ 499.817777][T10612] ? vfs_open+0x31/0x350 [ 499.817930][T10612] vfs_open+0x3b/0x350 [ 499.817962][T10612] ? path_openat+0x2e2b/0x38a0 [ 499.818003][T10612] path_openat+0x2e43/0x38a0 [ 499.818083][T10612] ? __pfx_path_openat+0x10/0x10 [ 499.818128][T10612] ? kasan_save_track+0x4f/0x80 [ 499.818162][T10612] ? kasan_save_track+0x3e/0x80 [ 499.818196][T10612] ? __kasan_slab_alloc+0x6c/0x80 [ 499.818281][T10612] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 499.818330][T10612] ? do_raw_spin_lock+0x12b/0x2f0 [ 499.818368][T10612] do_file_open+0x23e/0x4a0 [ 499.818406][T10612] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 499.818452][T10612] ? __pfx_do_file_open+0x10/0x10 [ 499.818488][T10612] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 499.818543][T10612] ? alloc_fd+0x64e/0x6c0 [ 499.818589][T10612] do_sys_openat2+0x113/0x200 [ 499.818623][T10612] ? __pfx_do_sys_openat2+0x10/0x10 [ 499.818657][T10612] ? exc_page_fault+0x6a/0xc0 [ 499.818694][T10612] ? do_user_addr_fault+0xc6f/0x1340 [ 499.818741][T10612] __x64_sys_openat+0x138/0x170 [ 499.818778][T10612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.818806][T10612] do_syscall_64+0x15f/0xf80 [ 499.818838][T10612] ? trace_irq_disable+0x3b/0x140 [ 499.818864][T10612] ? clear_bhb_loop+0x40/0x90 [ 499.818895][T10612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.818920][T10612] RIP: 0033:0x7fec3dcdd04e [ 499.818943][T10612] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 499.818966][T10612] RSP: 002b:00007fec3bf6bea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 499.818993][T10612] RAX: ffffffffffffffda RBX: 00007fec3bf6e6c0 RCX: 00007fec3dcdd04e [ 499.819012][T10612] RDX: 0000000000000002 RSI: 00007fec3ddb1f88 RDI: ffffffffffffff9c [ 499.819028][T10612] RBP: 00007fec3bf6e090 R08: 0000000000000000 R09: 0000000000000000 [ 499.819050][T10612] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000005a [ 499.819065][T10612] R13: 0000200000000080 R14: 0000000000000000 R15: 00007ffd4aa75d98 [ 499.819104][T10612] [ 499.880909][T10612] ERROR: Out of memory at tomoyo_realpath_from_path. [ 499.981521][ T816] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 500.190804][ T816] usb 1-1: Using ep0 maxpacket: 16 [ 500.206002][ T816] usb 1-1: config 2 has an invalid interface number: 5 but max is 0 [ 500.206032][ T816] usb 1-1: config 2 has no interface number 0 [ 500.206074][ T816] usb 1-1: config 2 interface 5 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 500.206101][ T816] usb 1-1: config 2 interface 5 altsetting 64 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 500.206128][ T816] usb 1-1: config 2 interface 5 altsetting 64 bulk endpoint 0xD has invalid maxpacket 32 [ 500.206152][ T816] usb 1-1: config 2 interface 5 altsetting 64 has a duplicate endpoint with address 0xC, skipping [ 500.206175][ T816] usb 1-1: config 2 interface 5 altsetting 64 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 500.206204][ T816] usb 1-1: config 2 interface 5 altsetting 64 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 500.206230][ T816] usb 1-1: config 2 interface 5 altsetting 64 bulk endpoint 0xF has invalid maxpacket 32 [ 500.206253][ T816] usb 1-1: config 2 interface 5 altsetting 64 has a duplicate endpoint with address 0xD, skipping [ 500.206277][ T816] usb 1-1: config 2 interface 5 altsetting 64 endpoint 0x3 has an invalid bInterval 102, changing to 7 [ 500.206303][ T816] usb 1-1: config 2 interface 5 altsetting 64 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 500.206329][ T816] usb 1-1: config 2 interface 5 has no altsetting 0 [ 500.343476][ T816] usb 1-1: New USB device found, idVendor=1557, idProduct=0a80, bcdDevice=36.1b [ 500.343511][ T816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.343535][ T816] usb 1-1: Product: syz [ 500.343552][ T816] usb 1-1: Manufacturer: ࠝ [ 500.343569][ T816] usb 1-1: SerialNumber: syz [ 500.423851][T10605] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 500.424361][T10605] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 500.430962][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 500.630792][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 500.636012][ T10] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 500.636046][ T10] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 500.636070][ T10] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 500.636092][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 500.636114][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 500.636138][ T10] usb 7-1: config 0 has no interface number 0 [ 500.636202][ T10] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 500.636234][ T10] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 500.636260][ T10] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 500.636299][ T10] usb 7-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 500.636330][ T10] usb 7-1: config 0 interface 125 has no altsetting 0 [ 500.760461][ T10] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 500.760497][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.760759][ T10] usb 7-1: Product: syz [ 500.760778][ T10] usb 7-1: Manufacturer: syz [ 500.760795][ T10] usb 7-1: SerialNumber: syz [ 500.857844][ T816] usb 1-1: USB disconnect, device number 12 [ 500.992576][ T10] usb 7-1: config 0 descriptor?? [ 501.217373][ T5890] usb 7-1: USB disconnect, device number 4 [ 501.300772][ T36] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 501.452202][ T36] usb 3-1: Using ep0 maxpacket: 16 [ 501.466966][ T36] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 501.466996][ T36] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 501.493486][ T36] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 501.493522][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.493545][ T36] usb 3-1: Product: syz [ 501.493561][ T36] usb 3-1: Manufacturer: syz [ 501.493578][ T36] usb 3-1: SerialNumber: syz [ 501.553868][ T36] usb 3-1: 0:2 : does not exist [ 501.554007][ T36] usb 3-1: unit 6 not found! [ 501.706406][T10642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1579'. [ 501.736478][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.736552][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.905833][T10640] Process accounting resumed [ 503.009763][ T9] usb 3-1: USB disconnect, device number 15 [ 504.233233][T10697] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 504.776757][T10718] warning: `syz.5.1613' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 505.092576][ T36] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 505.240671][ T36] usb 6-1: Using ep0 maxpacket: 16 [ 505.243129][ T36] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 505.243165][ T36] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 505.246832][ T36] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 505.246873][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.246896][ T36] usb 6-1: Product: syz [ 505.246911][ T36] usb 6-1: Manufacturer: syz [ 505.246927][ T36] usb 6-1: SerialNumber: syz [ 505.317290][ T36] usb 6-1: config 0 descriptor?? [ 505.332510][ T36] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 505.332547][ T36] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 505.780224][ T36] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 505.808668][ T36] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 505.842828][ T36] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 505.842855][ T36] em28xx 6-1:0.0: No AC97 audio processor [ 506.650751][ T10] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 506.715753][ T36] usb 6-1: USB disconnect, device number 8 [ 506.744944][ T36] em28xx 6-1:0.0: Disconnecting em28xx [ 506.813049][ T10] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 506.813081][ T10] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 506.813103][ T10] usb 3-1: config 6 has no interface number 0 [ 506.813150][ T10] usb 3-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 506.818852][ T10] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 506.818884][ T10] usb 3-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 506.818905][ T10] usb 3-1: Product: syz [ 506.818919][ T10] usb 3-1: Manufacturer: syz [ 506.818934][ T10] usb 3-1: SerialNumber: syz [ 506.948120][ T10] hso 3-1:6.2: Failed to find INT IN ep [ 507.183276][ T36] em28xx 6-1:0.0: Freeing device [ 507.207432][ T10] usb 3-1: USB disconnect, device number 16 [ 507.898934][T10793] binder: 10790:10793 unknown command 0 [ 507.898957][T10793] binder: 10790:10793 ioctl c0306201 200000000080 returned -22 [ 508.001469][T10801] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1647'. [ 508.171486][T10808] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 508.588764][T10825] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 510.688885][T10885] netlink: 774 bytes leftover after parsing attributes in process `syz.0.1683'. [ 511.010721][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 511.159422][T10910] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 511.174002][ T10] usb 1-1: config index 0 descriptor too short (expected 37, got 36) [ 511.174064][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.174093][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.174118][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 511.174162][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 511.174189][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.252154][ T10] usb 1-1: config 0 descriptor?? [ 511.257917][T10910] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1695'. [ 511.809741][T10924] FAULT_INJECTION: forcing a failure. [ 511.809741][T10924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 511.809842][T10924] CPU: 0 UID: 0 PID: 10924 Comm: syz.4.1702 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 511.809869][T10924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 511.809882][T10924] Call Trace: [ 511.809891][T10924] [ 511.809901][T10924] dump_stack_lvl+0xe8/0x150 [ 511.809948][T10924] should_fail_ex+0x46b/0x600 [ 511.809980][T10924] _copy_to_user+0x31/0xb0 [ 511.810013][T10924] simple_read_from_buffer+0xe1/0x170 [ 511.810049][T10924] proc_fail_nth_read+0x1be/0x230 [ 511.810084][T10924] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 511.810118][T10924] ? rw_verify_area+0x2ac/0x4e0 [ 511.810149][T10924] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 511.810181][T10924] vfs_read+0x212/0xa80 [ 511.810220][T10924] ? __pfx_vfs_read+0x10/0x10 [ 511.810249][T10924] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 511.810274][T10924] ? lockdep_hardirqs_on+0x7a/0x110 [ 511.810297][T10924] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 511.810320][T10924] ? mutex_lock_nested+0x152/0x1d0 [ 511.810349][T10924] ? fdget_pos+0x252/0x320 [ 511.810380][T10924] ksys_read+0x156/0x270 [ 511.810417][T10924] ? __pfx_ksys_read+0x10/0x10 [ 511.810451][T10924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.810472][T10924] do_syscall_64+0x15f/0xf80 [ 511.810495][T10924] ? trace_irq_disable+0x3b/0x140 [ 511.810515][T10924] ? clear_bhb_loop+0x40/0x90 [ 511.810543][T10924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.810563][T10924] RIP: 0033:0x7fdd38bdd04e [ 511.810580][T10924] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 511.810597][T10924] RSP: 002b:00007fdd36e6dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 511.810616][T10924] RAX: ffffffffffffffda RBX: 00007fdd36e6e6c0 RCX: 00007fdd38bdd04e [ 511.810630][T10924] RDX: 000000000000000f RSI: 00007fdd36e6e0a0 RDI: 0000000000000004 [ 511.810642][T10924] RBP: 00007fdd36e6e090 R08: 0000000000000000 R09: 0000000000000000 [ 511.810653][T10924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.810663][T10924] R13: 00007fdd38e96038 R14: 00007fdd38e95fa0 R15: 00007fffc4c29d78 [ 511.810692][T10924] [ 513.227133][T10952] FAULT_INJECTION: forcing a failure. [ 513.227133][T10952] name failslab, interval 1, probability 0, space 0, times 0 [ 513.227206][T10952] CPU: 1 UID: 0 PID: 10952 Comm: syz.4.1712 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 513.227245][T10952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 513.227262][T10952] Call Trace: [ 513.227273][T10952] [ 513.227284][T10952] dump_stack_lvl+0xe8/0x150 [ 513.227335][T10952] should_fail_ex+0x46b/0x600 [ 513.227371][T10952] should_failslab+0xa8/0x100 [ 513.227401][T10952] __kmalloc_noprof+0xdf/0x7b0 [ 513.227442][T10952] ? kfree+0x4d/0x6c0 [ 513.227477][T10952] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 513.227515][T10952] tomoyo_realpath_from_path+0xe3/0x5d0 [ 513.227547][T10952] ? tomoyo_domain+0xd8/0x130 [ 513.227584][T10952] ? tomoyo_path_number_perm+0x219/0x630 [ 513.227624][T10952] tomoyo_path_number_perm+0x246/0x630 [ 513.227667][T10952] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 513.227713][T10952] ? __pfx___schedule+0x10/0x10 [ 513.227791][T10952] ? security_file_ioctl+0x19/0x2a0 [ 513.227839][T10952] security_file_ioctl+0xc3/0x2a0 [ 513.227882][T10952] __se_sys_ioctl+0x47/0x170 [ 513.227924][T10952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.227954][T10952] do_syscall_64+0x15f/0xf80 [ 513.227990][T10952] ? clear_bhb_loop+0x40/0x90 [ 513.228023][T10952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.228050][T10952] RIP: 0033:0x7fdd38c1c819 [ 513.228075][T10952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.228099][T10952] RSP: 002b:00007fdd36e2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 513.228126][T10952] RAX: ffffffffffffffda RBX: 00007fdd38e96180 RCX: 00007fdd38c1c819 [ 513.228146][T10952] RDX: 0000200000000280 RSI: 0000000040605346 RDI: 0000000000000005 [ 513.228163][T10952] RBP: 00007fdd36e2c090 R08: 0000000000000000 R09: 0000000000000000 [ 513.228179][T10952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.228195][T10952] R13: 00007fdd38e96218 R14: 00007fdd38e96180 R15: 00007fffc4c29d78 [ 513.228246][T10952] [ 513.228288][T10952] ERROR: Out of memory at tomoyo_realpath_from_path. [ 514.131236][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 514.272965][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 514.273114][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 514.281178][ T10] usb 1-1: USB disconnect, device number 13 [ 514.342463][ T9] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 514.342528][ T9] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 514.342559][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.655765][ T9] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 515.435649][T10992] FAULT_INJECTION: forcing a failure. [ 515.435649][T10992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 515.435764][T10992] CPU: 0 UID: 0 PID: 10992 Comm: syz.0.1727 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 515.435792][T10992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 515.435806][T10992] Call Trace: [ 515.435814][T10992] [ 515.435823][T10992] dump_stack_lvl+0xe8/0x150 [ 515.435867][T10992] should_fail_ex+0x46b/0x600 [ 515.435898][T10992] _copy_from_user+0x2d/0xb0 [ 515.435928][T10992] __sys_sendto+0x2bc/0x710 [ 515.435957][T10992] ? __pfx___sys_sendto+0x10/0x10 [ 515.436006][T10992] ? ksys_write+0x248/0x270 [ 515.436044][T10992] ? __pfx_ksys_write+0x10/0x10 [ 515.436083][T10992] __x64_sys_sendto+0xde/0x100 [ 515.436105][T10992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.436133][T10992] do_syscall_64+0x15f/0xf80 [ 515.436164][T10992] ? clear_bhb_loop+0x40/0x90 [ 515.436193][T10992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.436216][T10992] RIP: 0033:0x7f9291b8c819 [ 515.436237][T10992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.436258][T10992] RSP: 002b:00007f928fdc5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 515.436282][T10992] RAX: ffffffffffffffda RBX: 00007f9291e06090 RCX: 00007f9291b8c819 [ 515.436299][T10992] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 515.436312][T10992] RBP: 00007f928fdc5090 R08: 0000200000e68000 R09: 0000000000000010 [ 515.436327][T10992] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000001 [ 515.436341][T10992] R13: 00007f9291e06128 R14: 00007f9291e06090 R15: 00007fffe58ee928 [ 515.436376][T10992] [ 515.733022][ T9] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 515.733048][ T9] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 515.759782][ T9] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 515.759807][ T9] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 515.807827][ T9] usb 3-1: USB disconnect, device number 17 [ 516.048974][ T37] kauditd_printk_skb: 120 callbacks suppressed [ 516.048995][ T37] audit: type=1326 audit(1776553311.582:3038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10993 comm="syz.0.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9291b8c819 code=0x7ffc0000 [ 516.055086][ T37] audit: type=1326 audit(1776553311.582:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10993 comm="syz.0.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9291b8c819 code=0x7ffc0000 [ 516.055270][ T37] audit: type=1326 audit(1776553311.582:3040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10993 comm="syz.0.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9291b8c819 code=0x7ffc0000 [ 516.073031][ T37] audit: type=1326 audit(1776553311.612:3041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10993 comm="syz.0.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9291b8c819 code=0x7ffc0000 [ 516.083104][ T37] audit: type=1326 audit(1776553311.622:3042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10993 comm="syz.0.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f9291b8c819 code=0x7ffc0000 [ 516.083285][ T37] audit: type=1326 audit(1776553311.622:3043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10993 comm="syz.0.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9291b8c819 code=0x7ffc0000 [ 516.083434][ T37] audit: type=1326 audit(1776553311.622:3044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10993 comm="syz.0.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9291b8c819 code=0x7ffc0000 [ 516.116435][ T37] audit: type=1326 audit(1776553311.622:3045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10993 comm="syz.0.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9291b8c819 code=0x7ffc0000 [ 516.116591][ T37] audit: type=1326 audit(1776553311.652:3047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10993 comm="syz.0.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9291b8c819 code=0x7ffc0000 [ 516.116698][ T37] audit: type=1326 audit(1776553311.642:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10993 comm="syz.0.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9291b8c819 code=0x7ffc0000 [ 516.500795][T11007] netlink: 'syz.0.1735': attribute type 6 has an invalid length. [ 516.778701][T11020] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 517.050708][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 517.603575][T11033] FAULT_INJECTION: forcing a failure. [ 517.603575][T11033] name failslab, interval 1, probability 0, space 0, times 0 [ 517.603603][T11033] CPU: 1 UID: 0 PID: 11033 Comm: syz.2.1747 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 517.603622][T11033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 517.603632][T11033] Call Trace: [ 517.603638][T11033] [ 517.603645][T11033] dump_stack_lvl+0xe8/0x150 [ 517.603678][T11033] should_fail_ex+0x46b/0x600 [ 517.603707][T11033] should_failslab+0xa8/0x100 [ 517.603725][T11033] __kmalloc_cache_noprof+0x84/0x690 [ 517.603752][T11033] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 517.603917][T11033] tcp_sendmsg_fastopen+0x1de/0x5e0 [ 517.603950][T11033] tcp_sendmsg_locked+0x4a8e/0x5370 [ 517.603979][T11033] ? __lock_acquire+0x6b5/0x2cf0 [ 517.604006][T11033] ? tcp_sendmsg_locked+0x351/0x5370 [ 517.604049][T11033] ? __lock_acquire+0x6b5/0x2cf0 [ 517.604093][T11033] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 517.604125][T11033] ? lockdep_hardirqs_on+0x7a/0x110 [ 517.604155][T11033] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 517.604185][T11033] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 517.604215][T11033] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 517.604251][T11033] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 517.604288][T11033] ? lockdep_hardirqs_on+0x7a/0x110 [ 517.604319][T11033] ? __pfx_inet_sendmsg+0x10/0x10 [ 517.604420][T11033] tcp_sendmsg+0x2f/0x50 [ 517.604446][T11033] __sys_sendto+0x5f1/0x710 [ 517.604475][T11033] ? __pfx___sys_sendto+0x10/0x10 [ 517.604525][T11033] ? ksys_write+0x248/0x270 [ 517.604563][T11033] ? __pfx_ksys_write+0x10/0x10 [ 517.604603][T11033] __x64_sys_sendto+0xde/0x100 [ 517.604626][T11033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.604652][T11033] do_syscall_64+0x15f/0xf80 [ 517.604683][T11033] ? clear_bhb_loop+0x40/0x90 [ 517.604712][T11033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.604734][T11033] RIP: 0033:0x7f31589dc819 [ 517.604756][T11033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.604774][T11033] RSP: 002b:00007f3156c15028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 517.604798][T11033] RAX: ffffffffffffffda RBX: 00007f3158c56090 RCX: 00007f31589dc819 [ 517.604815][T11033] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 517.604828][T11033] RBP: 00007f3156c15090 R08: 0000200000e68000 R09: 0000000000000010 [ 517.604842][T11033] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000001 [ 517.604856][T11033] R13: 00007f3158c56128 R14: 00007f3158c56090 R15: 00007ffce323b258 [ 517.604891][T11033] [ 517.670728][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 517.791010][ T9] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 517.791145][ T9] usb 1-1: config 0 has no interface number 0 [ 517.956994][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 517.957033][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.957058][ T9] usb 1-1: Product: syz [ 517.957075][ T9] usb 1-1: Manufacturer: syz [ 517.957093][ T9] usb 1-1: SerialNumber: syz [ 518.097480][ T9] usb 1-1: config 0 descriptor?? [ 518.188275][T11039] fuse: Bad value for 'group_id' [ 518.188301][T11039] fuse: Bad value for 'group_id' [ 518.317600][ T9] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 518.317808][ T9] uvcvideo 1-1:0.31: No valid video chain found. [ 518.364337][T11046] netlink: 'syz.5.1751': attribute type 7 has an invalid length. [ 518.577943][T11020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.595653][T11020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.631678][T11020] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 518.685086][T11020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1741'. [ 518.713776][ T815] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 518.758631][ T9] usb 1-1: USB disconnect, device number 14 [ 518.913463][ T815] usb 6-1: config 0 has an invalid interface number: 175 but max is 0 [ 518.913498][ T815] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 518.913523][ T815] usb 6-1: config 0 has no interface number 0 [ 518.913579][ T815] usb 6-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 518.913612][ T815] usb 6-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 518.913646][ T815] usb 6-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 518.913674][ T815] usb 6-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 518.916912][ T815] usb 6-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 518.916946][ T815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.916971][ T815] usb 6-1: Product: syz [ 518.916988][ T815] usb 6-1: Manufacturer: syz [ 518.917005][ T815] usb 6-1: SerialNumber: syz [ 519.064069][ T815] usb 6-1: config 0 descriptor?? [ 519.129384][ T815] symbolserial 6-1:0.175: symbol converter detected [ 519.213092][T11068] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1762'. [ 519.350247][ T815] usb 6-1: symbol converter now attached to ttyUSB0 [ 519.371182][ T9] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 519.522979][ T9] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 519.523013][ T9] usb 7-1: config 0 has no interface number 0 [ 519.523068][ T9] usb 7-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 519.523100][ T9] usb 7-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.523217][ T9] usb 7-1: config 0 interface 1 has no altsetting 0 [ 519.523255][ T9] usb 7-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 519.523289][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.634219][ T9] usb 7-1: config 0 descriptor?? [ 519.932320][ T9] usbhid 7-1:0.1: can't add hid device: -71 [ 519.932428][ T9] usbhid 7-1:0.1: probe with driver usbhid failed with error -71 [ 519.993574][ T9] usb 7-1: USB disconnect, device number 5 [ 520.009841][T11085] tmpfs: Bad value for 'mpol' [ 521.491847][T10753] usb 6-1: USB disconnect, device number 9 [ 521.612782][T10753] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 521.648799][T10753] symbolserial 6-1:0.175: device disconnected [ 521.823000][T11135] FAULT_INJECTION: forcing a failure. [ 521.823000][T11135] name failslab, interval 1, probability 0, space 0, times 0 [ 521.823038][T11135] CPU: 1 UID: 0 PID: 11135 Comm: syz.5.1791 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 521.823064][T11135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 521.823078][T11135] Call Trace: [ 521.823086][T11135] [ 521.823095][T11135] dump_stack_lvl+0xe8/0x150 [ 521.823139][T11135] should_fail_ex+0x46b/0x600 [ 521.823171][T11135] should_failslab+0xa8/0x100 [ 521.823197][T11135] __kmalloc_noprof+0xdf/0x7b0 [ 521.823234][T11135] ? tomoyo_encode+0x28b/0x550 [ 521.823264][T11135] tomoyo_encode+0x28b/0x550 [ 521.823296][T11135] tomoyo_realpath_from_path+0x58d/0x5d0 [ 521.823333][T11135] ? tomoyo_path_number_perm+0x219/0x630 [ 521.823368][T11135] tomoyo_path_number_perm+0x246/0x630 [ 521.823405][T11135] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 521.823438][T11135] ? __lock_acquire+0x6b5/0x2cf0 [ 521.823468][T11135] ? do_raw_spin_lock+0x12b/0x2f0 [ 521.823525][T11135] ? __fget_files+0x2a/0x420 [ 521.823559][T11135] ? __fget_files+0x2a/0x420 [ 521.823587][T11135] ? __fget_files+0x3a6/0x420 [ 521.823615][T11135] ? __fget_files+0x2a/0x420 [ 521.823662][T11135] security_file_ioctl+0xc3/0x2a0 [ 521.823700][T11135] __se_sys_ioctl+0x47/0x170 [ 521.823736][T11135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.823761][T11135] do_syscall_64+0x15f/0xf80 [ 521.823790][T11135] ? trace_irq_disable+0x3b/0x140 [ 521.823813][T11135] ? clear_bhb_loop+0x40/0x90 [ 521.823841][T11135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.823865][T11135] RIP: 0033:0x7f88185bc819 [ 521.823886][T11135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.823906][T11135] RSP: 002b:00007f8816816028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 521.823929][T11135] RAX: ffffffffffffffda RBX: 00007f8818835fa0 RCX: 00007f88185bc819 [ 521.823946][T11135] RDX: 0000200000000200 RSI: 0000000000003b89 RDI: 0000000000000003 [ 521.823960][T11135] RBP: 00007f8816816090 R08: 0000000000000000 R09: 0000000000000000 [ 521.823974][T11135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.823986][T11135] R13: 00007f8818836038 R14: 00007f8818835fa0 R15: 00007fff00c0ce58 [ 521.824022][T11135] [ 521.824289][T11135] ERROR: Out of memory at tomoyo_realpath_from_path. [ 522.143551][T11140] FAULT_INJECTION: forcing a failure. [ 522.143551][T11140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 522.143589][T11140] CPU: 0 UID: 0 PID: 11140 Comm: syz.6.1794 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 522.143624][T11140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 522.143639][T11140] Call Trace: [ 522.143648][T11140] [ 522.143657][T11140] dump_stack_lvl+0xe8/0x150 [ 522.143705][T11140] should_fail_ex+0x46b/0x600 [ 522.143738][T11140] _copy_to_user+0x31/0xb0 [ 522.143773][T11140] simple_read_from_buffer+0xe1/0x170 [ 522.143809][T11140] proc_fail_nth_read+0x1be/0x230 [ 522.143844][T11140] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 522.143877][T11140] ? rw_verify_area+0x2ac/0x4e0 [ 522.143909][T11140] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 522.143942][T11140] vfs_read+0x212/0xa80 [ 522.143983][T11140] ? __pfx_vfs_read+0x10/0x10 [ 522.144020][T11140] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 522.144052][T11140] ? lockdep_hardirqs_on+0x7a/0x110 [ 522.144080][T11140] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 522.144110][T11140] ? mutex_lock_nested+0x152/0x1d0 [ 522.144145][T11140] ? fdget_pos+0x252/0x320 [ 522.144184][T11140] ksys_read+0x156/0x270 [ 522.144220][T11140] ? __pfx_ksys_read+0x10/0x10 [ 522.144264][T11140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.144288][T11140] do_syscall_64+0x15f/0xf80 [ 522.144316][T11140] ? trace_irq_disable+0x3b/0x140 [ 522.144340][T11140] ? clear_bhb_loop+0x40/0x90 [ 522.144369][T11140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.144392][T11140] RIP: 0033:0x7fec3dcdd04e [ 522.144414][T11140] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 522.144434][T11140] RSP: 002b:00007fec3bf6dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 522.144459][T11140] RAX: ffffffffffffffda RBX: 00007fec3bf6e6c0 RCX: 00007fec3dcdd04e [ 522.144475][T11140] RDX: 000000000000000f RSI: 00007fec3bf6e0a0 RDI: 0000000000000005 [ 522.144490][T11140] RBP: 00007fec3bf6e090 R08: 0000000000000000 R09: 0000000000000000 [ 522.144504][T11140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.144517][T11140] R13: 00007fec3df96038 R14: 00007fec3df95fa0 R15: 00007ffd4aa75d98 [ 522.144553][T11140] [ 522.925088][T11163] 9p: Bad value for 'rfdno' [ 523.570346][T11195] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 523.872065][T11208] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 524.080764][ T1253] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 524.250683][ T1253] usb 3-1: Using ep0 maxpacket: 16 [ 524.254128][ T1253] usb 3-1: unable to get BOS descriptor or descriptor too short [ 524.257283][ T1253] usb 3-1: config 2 has an invalid interface number: 5 but max is 0 [ 524.257311][ T1253] usb 3-1: config 2 has no interface number 0 [ 524.257344][ T1253] usb 3-1: config 2 interface 5 has no altsetting 0 [ 524.299575][ T1253] usb 3-1: New USB device found, idVendor=1557, idProduct=0a80, bcdDevice=36.1b [ 524.299610][ T1253] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.299632][ T1253] usb 3-1: Product: syz [ 524.299648][ T1253] usb 3-1: Manufacturer: ࠝ [ 524.299663][ T1253] usb 3-1: SerialNumber: syz [ 524.626791][ T1253] usb 3-1: USB disconnect, device number 18 [ 526.123729][T11255] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1844'. [ 526.123805][T11255] FAULT_INJECTION: forcing a failure. [ 526.123805][T11255] name failslab, interval 1, probability 0, space 0, times 0 [ 526.123837][T11255] CPU: 0 UID: 0 PID: 11255 Comm: syz.5.1844 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 526.123863][T11255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 526.123878][T11255] Call Trace: [ 526.123887][T11255] [ 526.123896][T11255] dump_stack_lvl+0xe8/0x150 [ 526.123940][T11255] should_fail_ex+0x46b/0x600 [ 526.123972][T11255] should_failslab+0xa8/0x100 [ 526.123998][T11255] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 526.124034][T11255] ? __alloc_skb+0x1d0/0x7d0 [ 526.124071][T11255] ? lockdep_hardirqs_on+0x7a/0x110 [ 526.124107][T11255] __alloc_skb+0x1d0/0x7d0 [ 526.124142][T11255] ? netlink_ack_tlv_len+0x6c/0x210 [ 526.124183][T11255] netlink_ack+0x146/0xa50 [ 526.124214][T11255] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 526.124341][T11255] ? ref_tracker_free+0x673/0x820 [ 526.124372][T11255] ? __pfx_ref_tracker_free+0x10/0x10 [ 526.124395][T11255] ? __asan_memcpy+0x40/0x70 [ 526.124423][T11255] ? __skb_clone+0x63/0x7a0 [ 526.124464][T11255] netlink_rcv_skb+0x2b6/0x4b0 [ 526.124500][T11255] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 526.124535][T11255] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 526.124584][T11255] ? netlink_deliver_tap+0x2e/0x1b0 [ 526.124619][T11255] ? netlink_deliver_tap+0x2e/0x1b0 [ 526.124661][T11255] netlink_unicast+0x780/0x920 [ 526.124705][T11255] netlink_sendmsg+0x813/0xb40 [ 526.124737][T11255] ? __pfx_netlink_sendmsg+0x10/0x10 [ 526.124761][T11255] ? unwind_get_return_address+0x4d/0x90 [ 526.124794][T11255] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 526.124832][T11255] ____sys_sendmsg+0x94c/0x9c0 [ 526.124865][T11255] ? __pfx_____sys_sendmsg+0x10/0x10 [ 526.124901][T11255] ? import_iovec+0x73/0xa0 [ 526.124933][T11255] ___sys_sendmsg+0x2a5/0x360 [ 526.124957][T11255] ? __lock_acquire+0x6b5/0x2cf0 [ 526.124989][T11255] ? __pfx____sys_sendmsg+0x10/0x10 [ 526.125050][T11255] ? __fget_files+0x2a/0x420 [ 526.125080][T11255] ? __fget_files+0x3a6/0x420 [ 526.125121][T11255] __x64_sys_sendmsg+0x1c3/0x2a0 [ 526.125149][T11255] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 526.125186][T11255] ? __pfx_ksys_write+0x10/0x10 [ 526.125230][T11255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.125255][T11255] do_syscall_64+0x15f/0xf80 [ 526.125283][T11255] ? trace_irq_disable+0x3b/0x140 [ 526.125306][T11255] ? clear_bhb_loop+0x40/0x90 [ 526.125334][T11255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.125358][T11255] RIP: 0033:0x7f88185bc819 [ 526.125380][T11255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.125399][T11255] RSP: 002b:00007f8816816028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 526.125423][T11255] RAX: ffffffffffffffda RBX: 00007f8818835fa0 RCX: 00007f88185bc819 [ 526.125447][T11255] RDX: 000000001000c890 RSI: 00002000000001c0 RDI: 0000000000000003 [ 526.125462][T11255] RBP: 00007f8816816090 R08: 0000000000000000 R09: 0000000000000000 [ 526.125477][T11255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.125490][T11255] R13: 00007f8818836038 R14: 00007f8818835fa0 R15: 00007fff00c0ce58 [ 526.125524][T11255] [ 526.889044][T11275] FAULT_INJECTION: forcing a failure. [ 526.889044][T11275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 526.889081][T11275] CPU: 1 UID: 0 PID: 11275 Comm: syz.4.1854 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 526.889106][T11275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 526.889119][T11275] Call Trace: [ 526.889128][T11275] [ 526.889137][T11275] dump_stack_lvl+0xe8/0x150 [ 526.889180][T11275] should_fail_ex+0x46b/0x600 [ 526.889212][T11275] _copy_to_user+0x31/0xb0 [ 526.889246][T11275] simple_read_from_buffer+0xe1/0x170 [ 526.889284][T11275] proc_fail_nth_read+0x1be/0x230 [ 526.889320][T11275] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 526.889363][T11275] ? rw_verify_area+0x2ac/0x4e0 [ 526.889398][T11275] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 526.889430][T11275] vfs_read+0x212/0xa80 [ 526.889474][T11275] ? __pfx_vfs_read+0x10/0x10 [ 526.889511][T11275] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 526.889543][T11275] ? lockdep_hardirqs_on+0x7a/0x110 [ 526.889573][T11275] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 526.889603][T11275] ? mutex_lock_nested+0x152/0x1d0 [ 526.889639][T11275] ? fdget_pos+0x252/0x320 [ 526.889677][T11275] ksys_read+0x156/0x270 [ 526.889715][T11275] ? __pfx_ksys_read+0x10/0x10 [ 526.889758][T11275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.889783][T11275] do_syscall_64+0x15f/0xf80 [ 526.889816][T11275] ? trace_irq_disable+0x3b/0x140 [ 526.889840][T11275] ? clear_bhb_loop+0x40/0x90 [ 526.889869][T11275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.889892][T11275] RIP: 0033:0x7fdd38bdd04e [ 526.889914][T11275] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 526.889934][T11275] RSP: 002b:00007fdd36e6dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 526.889959][T11275] RAX: ffffffffffffffda RBX: 00007fdd36e6e6c0 RCX: 00007fdd38bdd04e [ 526.889976][T11275] RDX: 000000000000000f RSI: 00007fdd36e6e0a0 RDI: 0000000000000004 [ 526.889990][T11275] RBP: 00007fdd36e6e090 R08: 0000000000000000 R09: 0000000000000000 [ 526.890005][T11275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.890018][T11275] R13: 00007fdd38e96038 R14: 00007fdd38e95fa0 R15: 00007fffc4c29d78 [ 526.890055][T11275] [ 527.317527][T11280] FAULT_INJECTION: forcing a failure. [ 527.317527][T11280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.317566][T11280] CPU: 1 UID: 0 PID: 11280 Comm: syz.6.1857 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 527.317591][T11280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 527.317605][T11280] Call Trace: [ 527.317614][T11280] [ 527.317624][T11280] dump_stack_lvl+0xe8/0x150 [ 527.317666][T11280] should_fail_ex+0x46b/0x600 [ 527.317698][T11280] _copy_to_user+0x31/0xb0 [ 527.317746][T11280] simple_read_from_buffer+0xe1/0x170 [ 527.317782][T11280] proc_fail_nth_read+0x1be/0x230 [ 527.317817][T11280] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 527.317852][T11280] ? rw_verify_area+0x2ac/0x4e0 [ 527.317884][T11280] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 527.317916][T11280] vfs_read+0x212/0xa80 [ 527.317959][T11280] ? __pfx_vfs_read+0x10/0x10 [ 527.317997][T11280] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 527.318029][T11280] ? lockdep_hardirqs_on+0x7a/0x110 [ 527.318058][T11280] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 527.318087][T11280] ? mutex_lock_nested+0x152/0x1d0 [ 527.318121][T11280] ? fdget_pos+0x252/0x320 [ 527.318161][T11280] ksys_read+0x156/0x270 [ 527.318199][T11280] ? __pfx_ksys_read+0x10/0x10 [ 527.318233][T11280] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 527.318408][T11280] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.318433][T11280] do_syscall_64+0x15f/0xf80 [ 527.318461][T11280] ? trace_irq_disable+0x3b/0x140 [ 527.318484][T11280] ? clear_bhb_loop+0x40/0x90 [ 527.318512][T11280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.318536][T11280] RIP: 0033:0x7fec3dcdd04e [ 527.318557][T11280] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 527.318578][T11280] RSP: 002b:00007fec3bf6dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 527.318602][T11280] RAX: ffffffffffffffda RBX: 00007fec3bf6e6c0 RCX: 00007fec3dcdd04e [ 527.318619][T11280] RDX: 000000000000000f RSI: 00007fec3bf6e0a0 RDI: 0000000000000004 [ 527.318633][T11280] RBP: 00007fec3bf6e090 R08: 0000000000000000 R09: 0000000000000000 [ 527.318647][T11280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.318660][T11280] R13: 00007fec3df96038 R14: 00007fec3df95fa0 R15: 00007ffd4aa75d98 [ 527.318696][T11280] [ 527.895450][T11290] FAULT_INJECTION: forcing a failure. [ 527.895450][T11290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.895487][T11290] CPU: 1 UID: 0 PID: 11290 Comm: syz.4.1862 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 527.895546][T11290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 527.895560][T11290] Call Trace: [ 527.895569][T11290] [ 527.895579][T11290] dump_stack_lvl+0xe8/0x150 [ 527.895621][T11290] should_fail_ex+0x46b/0x600 [ 527.895653][T11290] _copy_to_user+0x31/0xb0 [ 527.895685][T11290] simple_read_from_buffer+0xe1/0x170 [ 527.895720][T11290] proc_fail_nth_read+0x1be/0x230 [ 527.895753][T11290] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 527.895786][T11290] ? rw_verify_area+0x2ac/0x4e0 [ 527.895817][T11290] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 527.895848][T11290] vfs_read+0x212/0xa80 [ 527.895889][T11290] ? __pfx_vfs_read+0x10/0x10 [ 527.895924][T11290] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 527.895955][T11290] ? lockdep_hardirqs_on+0x7a/0x110 [ 527.895982][T11290] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 527.896010][T11290] ? mutex_lock_nested+0x152/0x1d0 [ 527.896047][T11290] ? fdget_pos+0x252/0x320 [ 527.896085][T11290] ksys_read+0x156/0x270 [ 527.896122][T11290] ? __pfx_ksys_read+0x10/0x10 [ 527.896173][T11290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.896198][T11290] do_syscall_64+0x15f/0xf80 [ 527.896226][T11290] ? trace_irq_disable+0x3b/0x140 [ 527.896249][T11290] ? clear_bhb_loop+0x40/0x90 [ 527.896277][T11290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.896300][T11290] RIP: 0033:0x7fdd38bdd04e [ 527.896321][T11290] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 527.896341][T11290] RSP: 002b:00007fdd36e6dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 527.896364][T11290] RAX: ffffffffffffffda RBX: 00007fdd36e6e6c0 RCX: 00007fdd38bdd04e [ 527.896386][T11290] RDX: 000000000000000f RSI: 00007fdd36e6e0a0 RDI: 0000000000000004 [ 527.896400][T11290] RBP: 00007fdd36e6e090 R08: 0000000000000000 R09: 0000000000000000 [ 527.896414][T11290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.896428][T11290] R13: 00007fdd38e96038 R14: 00007fdd38e95fa0 R15: 00007fffc4c29d78 [ 527.896463][T11290] [ 528.100678][ T816] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 528.265069][ T816] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 528.265101][ T816] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 528.265139][ T816] usb 1-1: config 6 has no interface number 0 [ 528.265186][ T816] usb 1-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 528.270470][ T816] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 528.317870][ T816] usb 1-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 528.317900][ T816] usb 1-1: Product: syz [ 528.317917][ T816] usb 1-1: Manufacturer: syz [ 528.317933][ T816] usb 1-1: SerialNumber: syz [ 528.356947][ T816] hso 1-1:6.2: Failed to find INT IN ep [ 528.566338][ T1253] usb 1-1: USB disconnect, device number 15 [ 529.285094][T11322] FAULT_INJECTION: forcing a failure. [ 529.285094][T11322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 529.285132][T11322] CPU: 0 UID: 0 PID: 11322 Comm: syz.4.1876 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 529.285158][T11322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 529.285173][T11322] Call Trace: [ 529.285182][T11322] [ 529.285192][T11322] dump_stack_lvl+0xe8/0x150 [ 529.285234][T11322] should_fail_ex+0x46b/0x600 [ 529.285267][T11322] _copy_to_user+0x31/0xb0 [ 529.285300][T11322] simple_read_from_buffer+0xe1/0x170 [ 529.285338][T11322] proc_fail_nth_read+0x1be/0x230 [ 529.285373][T11322] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 529.285409][T11322] ? rw_verify_area+0x2ac/0x4e0 [ 529.285442][T11322] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 529.285476][T11322] vfs_read+0x212/0xa80 [ 529.285520][T11322] ? __pfx_vfs_read+0x10/0x10 [ 529.285566][T11322] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 529.285600][T11322] ? lockdep_hardirqs_on+0x7a/0x110 [ 529.285629][T11322] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 529.285660][T11322] ? mutex_lock_nested+0x152/0x1d0 [ 529.285696][T11322] ? fdget_pos+0x252/0x320 [ 529.285737][T11322] ksys_read+0x156/0x270 [ 529.285773][T11322] ? __pfx_ksys_read+0x10/0x10 [ 529.285816][T11322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.285842][T11322] do_syscall_64+0x15f/0xf80 [ 529.285866][T11322] ? trace_irq_disable+0x3b/0x140 [ 529.285885][T11322] ? clear_bhb_loop+0x40/0x90 [ 529.285910][T11322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.285931][T11322] RIP: 0033:0x7fdd38bdd04e [ 529.285949][T11322] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 529.285967][T11322] RSP: 002b:00007fdd36e6dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 529.285989][T11322] RAX: ffffffffffffffda RBX: 00007fdd36e6e6c0 RCX: 00007fdd38bdd04e [ 529.286004][T11322] RDX: 000000000000000f RSI: 00007fdd36e6e0a0 RDI: 0000000000000004 [ 529.286018][T11322] RBP: 00007fdd36e6e090 R08: 0000000000000000 R09: 0000000000000000 [ 529.286028][T11322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.286038][T11322] R13: 00007fdd38e96038 R14: 00007fdd38e95fa0 R15: 00007fffc4c29d78 [ 529.286076][T11322] [ 530.198249][ T5809] Bluetooth: hci0: unexpected event for opcode 0x2024 [ 530.967044][T11374] netlink: 'syz.0.1897': attribute type 1 has an invalid length. [ 530.967069][T11374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1897'. [ 530.967088][T11374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1897'. [ 531.034963][T11374] vlan2: entered promiscuous mode [ 531.035000][T11374] bridge0: entered promiscuous mode [ 532.006910][T11406] sp0: Synchronizing with TNC [ 533.035718][ T37] kauditd_printk_skb: 18 callbacks suppressed [ 533.035739][ T37] audit: type=1326 audit(1776553328.572:3066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11455 comm="syz.5.1933" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f88185bc819 code=0x0 [ 533.241993][T11464] netlink: 'syz.0.1935': attribute type 6 has an invalid length. [ 533.242036][T11464] IPv6: NLM_F_CREATE should be specified when creating new route [ 533.570913][ T816] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 533.573962][T11477] FAULT_INJECTION: forcing a failure. [ 533.573962][T11477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 533.574000][T11477] CPU: 0 UID: 0 PID: 11477 Comm: syz.6.1940 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 533.574026][T11477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 533.574039][T11477] Call Trace: [ 533.574051][T11477] [ 533.574061][T11477] dump_stack_lvl+0xe8/0x150 [ 533.574104][T11477] should_fail_ex+0x46b/0x600 [ 533.574136][T11477] _copy_from_user+0x2d/0xb0 [ 533.574166][T11477] ___sys_sendmsg+0x1c6/0x360 [ 533.574192][T11477] ? __lock_acquire+0x6b5/0x2cf0 [ 533.574225][T11477] ? __pfx____sys_sendmsg+0x10/0x10 [ 533.574286][T11477] ? __fget_files+0x2a/0x420 [ 533.574316][T11477] ? __fget_files+0x3a6/0x420 [ 533.574356][T11477] __x64_sys_sendmsg+0x1c3/0x2a0 [ 533.574383][T11477] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 533.574418][T11477] ? __pfx_ksys_write+0x10/0x10 [ 533.574461][T11477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.574486][T11477] do_syscall_64+0x15f/0xf80 [ 533.574513][T11477] ? trace_irq_disable+0x3b/0x140 [ 533.574535][T11477] ? clear_bhb_loop+0x40/0x90 [ 533.574563][T11477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.574586][T11477] RIP: 0033:0x7fec3dd1c819 [ 533.574606][T11477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.574625][T11477] RSP: 002b:00007fec3bf6e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 533.574648][T11477] RAX: ffffffffffffffda RBX: 00007fec3df95fa0 RCX: 00007fec3dd1c819 [ 533.574664][T11477] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 533.574678][T11477] RBP: 00007fec3bf6e090 R08: 0000000000000000 R09: 0000000000000000 [ 533.574691][T11477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.574704][T11477] R13: 00007fec3df96038 R14: 00007fec3df95fa0 R15: 00007ffd4aa75d98 [ 533.574739][T11477] [ 533.820772][ T816] usb 1-1: Using ep0 maxpacket: 16 [ 533.840259][ T816] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 533.840293][ T816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.840317][ T816] usb 1-1: Product: syz [ 533.840333][ T816] usb 1-1: Manufacturer: syz [ 533.840349][ T816] usb 1-1: SerialNumber: syz [ 533.850723][ T10] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 533.907951][ T816] usb 1-1: config 0 descriptor?? [ 534.046769][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 534.073672][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 534.085478][ T10] usb 6-1: config 0 has an invalid interface number: 175 but max is 0 [ 534.085529][ T10] usb 6-1: config 0 has no interface number 0 [ 534.085620][ T10] usb 6-1: config 0 interface 175 has no altsetting 0 [ 534.174589][ T10] usb 6-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 0.0a [ 534.174624][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.174648][ T10] usb 6-1: Product: syz [ 534.174664][ T10] usb 6-1: Manufacturer: syz [ 534.174679][ T10] usb 6-1: SerialNumber: syz [ 534.244231][ T816] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 534.246478][ T816] usb 1-1: clie_3_5_startup: get config number failed: -71 [ 534.246646][ T816] visor 1-1:0.0: probe with driver visor failed with error -71 [ 534.304765][ T816] usb 1-1: USB disconnect, device number 16 [ 534.377836][ T10] usb 6-1: config 0 descriptor?? [ 536.369612][ T10] usb-storage 6-1:0.175: USB Mass Storage device detected [ 536.529212][T11538] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 536.704029][T11546] FAULT_INJECTION: forcing a failure. [ 536.704029][T11546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.704067][T11546] CPU: 1 UID: 0 PID: 11546 Comm: syz.4.1971 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 536.704092][T11546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 536.704106][T11546] Call Trace: [ 536.704114][T11546] [ 536.704124][T11546] dump_stack_lvl+0xe8/0x150 [ 536.704170][T11546] should_fail_ex+0x46b/0x600 [ 536.704202][T11546] _copy_to_user+0x31/0xb0 [ 536.704235][T11546] simple_read_from_buffer+0xe1/0x170 [ 536.704272][T11546] proc_fail_nth_read+0x1be/0x230 [ 536.704308][T11546] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 536.704343][T11546] ? rw_verify_area+0x2ac/0x4e0 [ 536.704376][T11546] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 536.704408][T11546] vfs_read+0x212/0xa80 [ 536.704451][T11546] ? __pfx_vfs_read+0x10/0x10 [ 536.704497][T11546] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 536.704530][T11546] ? lockdep_hardirqs_on+0x7a/0x110 [ 536.704560][T11546] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 536.704589][T11546] ? mutex_lock_nested+0x152/0x1d0 [ 536.704626][T11546] ? fdget_pos+0x252/0x320 [ 536.704667][T11546] ksys_read+0x156/0x270 [ 536.704704][T11546] ? __pfx_ksys_read+0x10/0x10 [ 536.704740][T11546] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 536.704778][T11546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.704804][T11546] do_syscall_64+0x15f/0xf80 [ 536.704832][T11546] ? trace_irq_disable+0x3b/0x140 [ 536.704856][T11546] ? clear_bhb_loop+0x40/0x90 [ 536.704885][T11546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.704908][T11546] RIP: 0033:0x7fdd38bdd04e [ 536.704930][T11546] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 536.704950][T11546] RSP: 002b:00007fdd36e6dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 536.704974][T11546] RAX: ffffffffffffffda RBX: 00007fdd36e6e6c0 RCX: 00007fdd38bdd04e [ 536.704991][T11546] RDX: 000000000000000f RSI: 00007fdd36e6e0a0 RDI: 0000000000000005 [ 536.705006][T11546] RBP: 00007fdd36e6e090 R08: 0000000000000000 R09: 0000000000000000 [ 536.705020][T11546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.705033][T11546] R13: 00007fdd38e96038 R14: 00007fdd38e95fa0 R15: 00007fffc4c29d78 [ 536.705069][T11546] [ 536.952026][ T10] usb 6-1: USB disconnect, device number 10 [ 539.600203][ T5809] Bluetooth: hci0: unexpected event for opcode 0x2024 [ 540.667746][T11654] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2023'. [ 541.371506][T11689] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2037'. [ 541.580688][ T9] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 541.733935][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 541.735187][ T9] usb 6-1: not running at top speed; connect to a high speed hub [ 541.738690][ T9] usb 6-1: config 13 has an invalid interface number: 129 but max is 0 [ 541.738721][ T9] usb 6-1: config 13 contains an unexpected descriptor of type 0x1, skipping [ 541.738742][ T9] usb 6-1: config 13 has an invalid descriptor of length 206, skipping remainder of the config [ 541.738764][ T9] usb 6-1: config 13 has no interface number 0 [ 541.738829][ T9] usb 6-1: config 13 interface 129 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 541.738861][ T9] usb 6-1: config 13 interface 129 altsetting 0 endpoint 0xA has invalid maxpacket 27445, setting to 64 [ 541.738892][ T9] usb 6-1: config 13 interface 129 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 541.738917][ T9] usb 6-1: config 13 interface 129 altsetting 0 has an endpoint descriptor with address 0x48, changing to 0x8 [ 541.738945][ T9] usb 6-1: config 13 interface 129 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 541.738970][ T9] usb 6-1: config 13 interface 129 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 541.738999][ T9] usb 6-1: config 13 interface 129 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 541.739025][ T9] usb 6-1: config 13 interface 129 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 541.739055][ T9] usb 6-1: config 13 interface 129 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 541.739084][ T9] usb 6-1: config 13 interface 129 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 541.739107][ T9] usb 6-1: config 13 interface 129 altsetting 0 has 10 endpoint descriptors, different from the interface descriptor's value: 13 [ 541.896610][ T9] usb 6-1: New USB device found, idVendor=0c6c, idProduct=04b2, bcdDevice=88.96 [ 541.896695][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.896757][ T9] usb 6-1: Product: syz [ 541.896798][ T9] usb 6-1: Manufacturer: syz [ 541.896839][ T9] usb 6-1: SerialNumber: syz [ 541.988423][T11685] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 542.077558][T11685] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 542.485579][T11727] FAULT_INJECTION: forcing a failure. [ 542.485579][T11727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 542.485618][T11727] CPU: 1 UID: 0 PID: 11727 Comm: syz.0.2054 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 542.485644][T11727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 542.485659][T11727] Call Trace: [ 542.485667][T11727] [ 542.485677][T11727] dump_stack_lvl+0xe8/0x150 [ 542.485723][T11727] should_fail_ex+0x46b/0x600 [ 542.485757][T11727] _copy_to_user+0x31/0xb0 [ 542.485791][T11727] simple_read_from_buffer+0xe1/0x170 [ 542.485828][T11727] proc_fail_nth_read+0x1be/0x230 [ 542.485863][T11727] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 542.485897][T11727] ? rw_verify_area+0x2ac/0x4e0 [ 542.485932][T11727] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 542.485966][T11727] vfs_read+0x212/0xa80 [ 542.486010][T11727] ? __pfx_vfs_read+0x10/0x10 [ 542.486055][T11727] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 542.486091][T11727] ? lockdep_hardirqs_on+0x7a/0x110 [ 542.486120][T11727] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 542.486150][T11727] ? mutex_lock_nested+0x152/0x1d0 [ 542.486184][T11727] ? fdget_pos+0x252/0x320 [ 542.486223][T11727] ksys_read+0x156/0x270 [ 542.486260][T11727] ? __pfx_ksys_read+0x10/0x10 [ 542.486305][T11727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.486331][T11727] do_syscall_64+0x15f/0xf80 [ 542.486360][T11727] ? trace_irq_disable+0x3b/0x140 [ 542.486385][T11727] ? clear_bhb_loop+0x40/0x90 [ 542.486415][T11727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.486438][T11727] RIP: 0033:0x7f9291b4d04e [ 542.486460][T11727] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 542.486481][T11727] RSP: 002b:00007f928fde5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 542.486504][T11727] RAX: ffffffffffffffda RBX: 00007f928fde66c0 RCX: 00007f9291b4d04e [ 542.486522][T11727] RDX: 000000000000000f RSI: 00007f928fde60a0 RDI: 0000000000000003 [ 542.486536][T11727] RBP: 00007f928fde6090 R08: 0000000000000000 R09: 0000000000000000 [ 542.486550][T11727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.486564][T11727] R13: 00007f9291e06038 R14: 00007f9291e05fa0 R15: 00007fffe58ee928 [ 542.486601][T11727] [ 543.242932][T11748] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 544.361069][ T9] ftdi_sio 6-1:13.129: FTDI USB Serial Device converter detected [ 544.409609][ T9] ftdi_sio ttyUSB0: unknown device type: 0x8896 [ 544.608968][ T9] usb 6-1: USB disconnect, device number 11 [ 544.735208][ T9] ftdi_sio 6-1:13.129: device disconnected [ 545.093737][T11800] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 545.131104][T11800] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2083'. [ 546.644541][T11852] FAULT_INJECTION: forcing a failure. [ 546.644541][T11852] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 546.644580][T11852] CPU: 1 UID: 0 PID: 11852 Comm: syz.5.2107 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 546.644605][T11852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 546.644619][T11852] Call Trace: [ 546.644628][T11852] [ 546.644637][T11852] dump_stack_lvl+0xe8/0x150 [ 546.644679][T11852] should_fail_ex+0x46b/0x600 [ 546.644711][T11852] prepare_alloc_pages+0x22a/0x6b0 [ 546.644821][T11852] __alloc_frozen_pages_noprof+0x12f/0x380 [ 546.644853][T11852] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 546.644882][T11852] ? __pfx_policy_nodemask+0x10/0x10 [ 546.644936][T11852] ? __lock_acquire+0x6b5/0x2cf0 [ 546.644972][T11852] alloc_pages_mpol+0xd1/0x380 [ 546.645001][T11852] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 546.645029][T11852] vma_alloc_folio_noprof+0xe1/0x1e0 [ 546.645056][T11852] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 546.645081][T11852] ? __pte_offset_map+0x29/0x200 [ 546.645150][T11852] do_pte_missing+0x822/0x2950 [ 546.645193][T11852] handle_mm_fault+0xd0a/0x13c0 [ 546.645236][T11852] ? handle_mm_fault+0xe7/0x13c0 [ 546.645282][T11852] ? __pfx_handle_mm_fault+0x10/0x10 [ 546.645316][T11852] ? lock_vma_under_rcu+0x45a/0x500 [ 546.645368][T11852] do_user_addr_fault+0xa73/0x1340 [ 546.645413][T11852] ? rcu_is_watching+0x15/0xb0 [ 546.645445][T11852] ? trace_page_fault_user+0x84/0x1e0 [ 546.645484][T11852] exc_page_fault+0x6a/0xc0 [ 546.645515][T11852] asm_exc_page_fault+0x26/0x30 [ 546.645538][T11852] RIP: 0033:0x7f8818484246 [ 546.645559][T11852] Code: fc ff ff 90 41 57 31 c0 41 56 49 89 fe 48 8d 3d 1e f5 1c 00 41 55 49 89 d5 41 54 49 89 f4 48 89 d6 55 53 48 81 ec 88 20 00 00 <48> 89 0c 24 4c 89 44 24 08 e8 bc cf fe ff 4d 85 ed 0f 84 2b 0a 00 [ 546.645579][T11852] RSP: 002b:00007f8816813f60 EFLAGS: 00010206 [ 546.645600][T11852] RAX: 0000000000000000 RBX: 00007f8818835fa0 RCX: 0000000000000000 [ 546.645615][T11852] RDX: 00002000000003c0 RSI: 00002000000003c0 RDI: 00007f881865374e [ 546.645631][T11852] RBP: 00007f8816816090 R08: 00007f88184715a0 R09: 0000000000000000 [ 546.645646][T11852] R10: 0000000000000000 R11: 00002000000003c0 R12: 00000000000000a4 [ 546.645661][T11852] R13: 00002000000003c0 R14: 0000000000000000 R15: 00007fff00c0ce58 [ 546.645696][T11852] [ 546.647529][T11852] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 547.468811][T11878] bridge1: entered promiscuous mode [ 547.468841][T11878] bridge1: entered allmulticast mode [ 547.751731][T11878] team0: Port device bridge1 added [ 547.840455][T11888] FAULT_INJECTION: forcing a failure. [ 547.840455][T11888] name failslab, interval 1, probability 0, space 0, times 0 [ 547.840497][T11888] CPU: 0 UID: 0 PID: 11888 Comm: syz.5.2121 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 547.840523][T11888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 547.840538][T11888] Call Trace: [ 547.840547][T11888] [ 547.840557][T11888] dump_stack_lvl+0xe8/0x150 [ 547.840600][T11888] should_fail_ex+0x46b/0x600 [ 547.840633][T11888] should_failslab+0xa8/0x100 [ 547.840660][T11888] __kmalloc_noprof+0xdf/0x7b0 [ 547.840696][T11888] ? kfree+0x4d/0x6c0 [ 547.840726][T11888] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 547.840760][T11888] tomoyo_realpath_from_path+0xe3/0x5d0 [ 547.840789][T11888] ? tomoyo_domain+0xd8/0x130 [ 547.840821][T11888] ? tomoyo_path_number_perm+0x219/0x630 [ 547.840857][T11888] tomoyo_path_number_perm+0x246/0x630 [ 547.840894][T11888] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 547.840929][T11888] ? __lock_acquire+0x6b5/0x2cf0 [ 547.840959][T11888] ? do_raw_spin_lock+0x12b/0x2f0 [ 547.841018][T11888] ? __fget_files+0x2a/0x420 [ 547.841050][T11888] ? __fget_files+0x2a/0x420 [ 547.841079][T11888] ? __fget_files+0x3a6/0x420 [ 547.841108][T11888] ? __fget_files+0x2a/0x420 [ 547.841143][T11888] security_file_ioctl+0xc3/0x2a0 [ 547.841190][T11888] __se_sys_ioctl+0x47/0x170 [ 547.841227][T11888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.841253][T11888] do_syscall_64+0x15f/0xf80 [ 547.841283][T11888] ? trace_irq_disable+0x3b/0x140 [ 547.841307][T11888] ? clear_bhb_loop+0x40/0x90 [ 547.841335][T11888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.841360][T11888] RIP: 0033:0x7f88185bc819 [ 547.841381][T11888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.841402][T11888] RSP: 002b:00007f8816816028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 547.841426][T11888] RAX: ffffffffffffffda RBX: 00007f8818835fa0 RCX: 00007f88185bc819 [ 547.841444][T11888] RDX: 00002000000000c0 RSI: 0000000040101287 RDI: 0000000000000003 [ 547.841459][T11888] RBP: 00007f8816816090 R08: 0000000000000000 R09: 0000000000000000 [ 547.841473][T11888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.841487][T11888] R13: 00007f8818836038 R14: 00007f8818835fa0 R15: 00007fff00c0ce58 [ 547.841523][T11888] [ 547.858791][T11888] ERROR: Out of memory at tomoyo_realpath_from_path. [ 548.409963][T11893] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 548.449345][T11893] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2124'. [ 548.622738][T11902] FAULT_INJECTION: forcing a failure. [ 548.622738][T11902] name failslab, interval 1, probability 0, space 0, times 0 [ 548.622777][T11902] CPU: 0 UID: 0 PID: 11902 Comm: syz.2.2126 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 548.622803][T11902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 548.622817][T11902] Call Trace: [ 548.622825][T11902] [ 548.622835][T11902] dump_stack_lvl+0xe8/0x150 [ 548.622878][T11902] should_fail_ex+0x46b/0x600 [ 548.622910][T11902] should_failslab+0xa8/0x100 [ 548.622935][T11902] __kmalloc_cache_noprof+0x84/0x690 [ 548.622971][T11902] ? __se_sys_mount+0x166/0x420 [ 548.622999][T11902] ? memdup_user+0x99/0xd0 [ 548.623201][T11902] __se_sys_mount+0x166/0x420 [ 548.623236][T11902] ? __pfx___se_sys_mount+0x10/0x10 [ 548.623271][T11902] ? __x64_sys_mount+0x20/0xc0 [ 548.623299][T11902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.623329][T11902] do_syscall_64+0x15f/0xf80 [ 548.623358][T11902] ? trace_irq_disable+0x3b/0x140 [ 548.623381][T11902] ? clear_bhb_loop+0x40/0x90 [ 548.623410][T11902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.623434][T11902] RIP: 0033:0x7f31589dc819 [ 548.623455][T11902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.623475][T11902] RSP: 002b:00007f3156c36028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 548.623499][T11902] RAX: ffffffffffffffda RBX: 00007f3158c55fa0 RCX: 00007f31589dc819 [ 548.623517][T11902] RDX: 00002000000020c0 RSI: 0000200000002080 RDI: 0000000000000000 [ 548.623532][T11902] RBP: 00007f3156c36090 R08: 0000200000002100 R09: 0000000000000000 [ 548.623547][T11902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.623561][T11902] R13: 00007f3158c56038 R14: 00007f3158c55fa0 R15: 00007ffce323b258 [ 548.623596][T11902] [ 548.948274][ T5809] Bluetooth: Frame is too long (len 10, expected len 5) [ 548.993515][T11910] 9p: Bad value for 'wfdno' [ 549.754120][T11945] usb usb8: usbfs: process 11945 (syz.2.2142) did not claim interface 0 before use [ 550.230672][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 551.010798][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 551.014790][ T9] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 243, changing to 7 [ 551.038763][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 551.038798][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.038821][ T9] usb 1-1: Product: Ћ [ 551.038837][ T9] usb 1-1: Manufacturer: 㐊 [ 551.038854][ T9] usb 1-1: SerialNumber: 閏袝꣡绻䬬껽ꁵ⫟ꦿ딭ࢢ碄雀齍⚔樧꧓ਸ਼쇿쥋틐⬵舀㰠舊減컄䏢媀﹧庁톃隇࢚`㨖쌗羄늁讕疤ↂ癖屦褒楈至䲠韔㐖҅킱눳壆ᒸ＄᝹଒縹곔ퟹ傦論ᣳ䏏枻闇 [ 551.150091][ T9] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 551.319105][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 551.546927][ T5815] udevd[5815]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 551.691999][T11985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.698403][T11985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.262447][ T10] usb 1-1: USB disconnect, device number 17 [ 554.019068][T12054] netlink: 774 bytes leftover after parsing attributes in process `syz.0.2191'. [ 555.525372][ T5967] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 556.449511][ T5967] usb 6-1: device descriptor read/64, error -71 [ 556.613687][T12118] FAULT_INJECTION: forcing a failure. [ 556.613687][T12118] name failslab, interval 1, probability 0, space 0, times 0 [ 556.613727][T12118] CPU: 1 UID: 0 PID: 12118 Comm: syz.0.2220 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 556.613764][T12118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 556.613786][T12118] Call Trace: [ 556.613798][T12118] [ 556.613811][T12118] dump_stack_lvl+0xe8/0x150 [ 556.613879][T12118] should_fail_ex+0x46b/0x600 [ 556.613912][T12118] should_failslab+0xa8/0x100 [ 556.613938][T12118] __kmalloc_noprof+0xdf/0x7b0 [ 556.613972][T12118] ? kfree+0x4d/0x6c0 [ 556.614000][T12118] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 556.614032][T12118] tomoyo_realpath_from_path+0xe3/0x5d0 [ 556.614059][T12118] ? tomoyo_domain+0xd8/0x130 [ 556.614093][T12118] tomoyo_path_perm+0x283/0x560 [ 556.614123][T12118] ? tomoyo_path_perm+0x251/0x560 [ 556.614151][T12118] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 556.614186][T12118] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 556.614224][T12118] ? ima_file_check+0xe1/0x130 [ 556.614348][T12118] ? do_dentry_open+0xd5a/0x13e0 [ 556.614376][T12118] ? __pfx_ima_file_check+0x10/0x10 [ 556.614418][T12118] security_file_truncate+0xa9/0x240 [ 556.614452][T12118] path_openat+0x2f6d/0x38a0 [ 556.614516][T12118] ? __pfx_path_openat+0x10/0x10 [ 556.614553][T12118] ? kasan_save_track+0x4f/0x80 [ 556.614594][T12118] ? kasan_save_track+0x3e/0x80 [ 556.614622][T12118] ? __kasan_slab_alloc+0x6c/0x80 [ 556.614653][T12118] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 556.614697][T12118] ? do_raw_spin_lock+0x12b/0x2f0 [ 556.614731][T12118] do_file_open+0x23e/0x4a0 [ 556.614764][T12118] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 556.614798][T12118] ? __pfx_do_file_open+0x10/0x10 [ 556.614829][T12118] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 556.614874][T12118] ? alloc_fd+0x64e/0x6c0 [ 556.614914][T12118] do_sys_openat2+0x113/0x200 [ 556.614942][T12118] ? __pfx_do_sys_openat2+0x10/0x10 [ 556.614967][T12118] ? ksys_write+0x248/0x270 [ 556.614999][T12118] ? __pfx_ksys_write+0x10/0x10 [ 556.615032][T12118] __x64_sys_openat+0x138/0x170 [ 556.615060][T12118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.615085][T12118] do_syscall_64+0x15f/0xf80 [ 556.615111][T12118] ? trace_irq_disable+0x3b/0x140 [ 556.615132][T12118] ? clear_bhb_loop+0x40/0x90 [ 556.615159][T12118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.615180][T12118] RIP: 0033:0x7f9291b8c819 [ 556.615202][T12118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.615219][T12118] RSP: 002b:00007f928fde6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 556.615240][T12118] RAX: ffffffffffffffda RBX: 00007f9291e05fa0 RCX: 00007f9291b8c819 [ 556.615254][T12118] RDX: 000000000000035c RSI: 0000200000000000 RDI: ffffffffffffff9c [ 556.615268][T12118] RBP: 00007f928fde6090 R08: 0000000000000000 R09: 0000000000000000 [ 556.615281][T12118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.615293][T12118] R13: 00007f9291e06038 R14: 00007f9291e05fa0 R15: 00007fffe58ee928 [ 556.615324][T12118] [ 556.615334][T12118] ERROR: Out of memory at tomoyo_realpath_from_path. [ 556.830657][ T5967] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 557.030659][ T5967] usb 6-1: device descriptor read/64, error -71 [ 557.141408][ T5967] usb usb6-port1: attempt power cycle [ 557.233402][ T816] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 557.380641][ T816] usb 1-1: Using ep0 maxpacket: 16 [ 557.384839][ T816] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 243, changing to 7 [ 557.423284][ T816] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 557.423318][ T816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.423341][ T816] usb 1-1: Product: Ћ [ 557.423356][ T816] usb 1-1: Manufacturer: 㐊 [ 557.423373][ T816] usb 1-1: SerialNumber: 閏袝꣡绻䬬껽ꁵ⫟ꦿ딭ࢢ碄雀齍⚔樧꧓ਸ਼쇿쥋틐⬵舀㰠舊減컄䏢媀﹧庁톃隇࢚`㨖쌗羄늁讕疤ↂ癖屦褒楈至䲠韔㐖҅킱눳壆ᒸ＄᝹଒縹곔ퟹ傦論ᣳ䏏枻闇 [ 557.531480][ T816] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 557.545237][ T5967] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 557.581996][ T5967] usb 6-1: device descriptor read/8, error -71 [ 557.773593][T12145] netlink: 774 bytes leftover after parsing attributes in process `syz.2.2232'. [ 557.820642][ T5967] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 557.865023][ T816] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 558.001552][T12157] FAULT_INJECTION: forcing a failure. [ 558.001552][T12157] name failslab, interval 1, probability 0, space 0, times 0 [ 558.001592][T12157] CPU: 1 UID: 0 PID: 12157 Comm: syz.4.2238 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 558.001618][T12157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 558.001634][T12157] Call Trace: [ 558.001643][T12157] [ 558.001653][T12157] dump_stack_lvl+0xe8/0x150 [ 558.001695][T12157] should_fail_ex+0x46b/0x600 [ 558.001727][T12157] should_failslab+0xa8/0x100 [ 558.001752][T12157] kmem_cache_alloc_lru_noprof+0x8b/0x680 [ 558.001789][T12157] ? __d_alloc+0x37/0x6f0 [ 558.001826][T12157] __d_alloc+0x37/0x6f0 [ 558.001860][T12157] ? rcu_is_watching+0x15/0xb0 [ 558.001894][T12157] d_alloc_pseudo+0x21/0xc0 [ 558.001941][T12157] alloc_file_pseudo+0xdd/0x240 [ 558.001974][T12157] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 558.002001][T12157] ? evm_inode_alloc_security+0x40/0xb0 [ 558.002109][T12157] ? security_inode_alloc+0xd5/0x310 [ 558.002148][T12157] sock_alloc_file+0xb8/0x2f0 [ 558.002184][T12157] do_accept+0x3ab/0x760 [ 558.002224][T12157] ? __pfx_do_accept+0x10/0x10 [ 558.002281][T12157] __sys_accept4+0x139/0x230 [ 558.002318][T12157] ? __pfx___sys_accept4+0x10/0x10 [ 558.002352][T12157] ? __pfx_ksys_write+0x10/0x10 [ 558.002394][T12157] __x64_sys_accept4+0x9a/0xb0 [ 558.002428][T12157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.002453][T12157] do_syscall_64+0x15f/0xf80 [ 558.002483][T12157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.002507][T12157] ? clear_bhb_loop+0x40/0x90 [ 558.002536][T12157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.002559][T12157] RIP: 0033:0x7fdd38c1c819 [ 558.002580][T12157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.002601][T12157] RSP: 002b:00007fdd36e6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 558.002625][T12157] RAX: ffffffffffffffda RBX: 00007fdd38e95fa0 RCX: 00007fdd38c1c819 [ 558.002643][T12157] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 558.002657][T12157] RBP: 00007fdd36e6e090 R08: 0000000000000000 R09: 0000000000000000 [ 558.002671][T12157] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 558.002685][T12157] R13: 00007fdd38e96038 R14: 00007fdd38e95fa0 R15: 00007fffc4c29d78 [ 558.002720][T12157] [ 558.054955][ T5967] usb 6-1: device not accepting address 15, error -71 [ 558.059932][ T5967] usb usb6-port1: unable to enumerate USB device [ 558.146673][T12158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.302930][T12158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.479686][ T5815] udevd[5815]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 558.627371][T12166] usb usb9: usbfs: interface 0 claimed by hub while 'syz.5.2240' sets config #-1 [ 558.850300][T12174] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 559.079505][T12183] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2250'. [ 559.099670][T12183] IPv6: sit3: Disabled Multicast RS [ 559.106776][T12183] sit3: entered allmulticast mode [ 559.520689][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 560.021555][ T10] usb 1-1: USB disconnect, device number 18 [ 560.937795][T12215] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2263'. [ 561.049222][T12215] IPv6: sit5: Disabled Multicast RS [ 561.081544][T12215] sit5: entered allmulticast mode [ 561.205684][T12224] netlink: 774 bytes leftover after parsing attributes in process `syz.5.2266'. [ 561.434271][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 561.463645][T12238] FAULT_INJECTION: forcing a failure. [ 561.463645][T12238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 561.463683][T12238] CPU: 1 UID: 0 PID: 12238 Comm: syz.2.2273 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 561.463710][T12238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 561.463725][T12238] Call Trace: [ 561.463733][T12238] [ 561.463742][T12238] dump_stack_lvl+0xe8/0x150 [ 561.463786][T12238] should_fail_ex+0x46b/0x600 [ 561.463827][T12238] _copy_from_user+0x2d/0xb0 [ 561.463858][T12238] sctp_setsockopt+0x1c4/0x12c0 [ 561.463996][T12238] ? sock_common_setsockopt+0x36/0xc0 [ 561.464030][T12238] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 561.464065][T12238] do_sock_setsockopt+0x17c/0x1b0 [ 561.464094][T12238] __x64_sys_setsockopt+0x143/0x1b0 [ 561.464120][T12238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.464145][T12238] do_syscall_64+0x15f/0xf80 [ 561.464174][T12238] ? trace_irq_disable+0x3b/0x140 [ 561.464198][T12238] ? clear_bhb_loop+0x40/0x90 [ 561.464227][T12238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.464251][T12238] RIP: 0033:0x7f31589dc819 [ 561.464272][T12238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.464292][T12238] RSP: 002b:00007f3156c36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 561.464316][T12238] RAX: ffffffffffffffda RBX: 00007f3158c55fa0 RCX: 00007f31589dc819 [ 561.464333][T12238] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 [ 561.464346][T12238] RBP: 00007f3156c36090 R08: 000000000000009c R09: 0000000000000000 [ 561.464360][T12238] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 561.464378][T12238] R13: 00007f3158c56038 R14: 00007f3158c55fa0 R15: 00007ffce323b258 [ 561.464415][T12238] [ 561.620835][ T9] usb 1-1: device descriptor read/64, error -71 [ 561.860887][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 561.991500][ T9] usb 1-1: device descriptor read/64, error -71 [ 562.100905][ T9] usb usb1-port1: attempt power cycle [ 562.450904][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 562.471404][ T9] usb 1-1: device descriptor read/8, error -71 [ 562.711381][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 562.731619][ T9] usb 1-1: device descriptor read/8, error -71 [ 562.841168][ T9] usb usb1-port1: unable to enumerate USB device [ 563.185541][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.185649][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.279837][T12293] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2298'. [ 563.416212][T12297] overlayfs: failed to clone upperpath [ 564.033757][T12332] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 564.048797][T12332] FAULT_INJECTION: forcing a failure. [ 564.048797][T12332] name failslab, interval 1, probability 0, space 0, times 0 [ 564.048835][T12332] CPU: 0 UID: 0 PID: 12332 Comm: syz.4.2315 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 564.048863][T12332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 564.048876][T12332] Call Trace: [ 564.048886][T12332] [ 564.048895][T12332] dump_stack_lvl+0xe8/0x150 [ 564.048937][T12332] should_fail_ex+0x46b/0x600 [ 564.048970][T12332] should_failslab+0xa8/0x100 [ 564.048995][T12332] __kmalloc_noprof+0xdf/0x7b0 [ 564.049035][T12332] ? kfree+0x4d/0x6c0 [ 564.049074][T12332] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 564.049107][T12332] tomoyo_realpath_from_path+0xe3/0x5d0 [ 564.049135][T12332] ? tomoyo_domain+0xd8/0x130 [ 564.049168][T12332] ? tomoyo_path_number_perm+0x219/0x630 [ 564.049202][T12332] tomoyo_path_number_perm+0x246/0x630 [ 564.049240][T12332] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 564.049272][T12332] ? __lock_acquire+0x6b5/0x2cf0 [ 564.049303][T12332] ? do_raw_spin_lock+0x12b/0x2f0 [ 564.049362][T12332] ? __fget_files+0x2a/0x420 [ 564.049396][T12332] ? __fget_files+0x2a/0x420 [ 564.049425][T12332] ? __fget_files+0x3a6/0x420 [ 564.049452][T12332] ? __fget_files+0x2a/0x420 [ 564.049486][T12332] security_file_ioctl+0xc3/0x2a0 [ 564.049524][T12332] __se_sys_ioctl+0x47/0x170 [ 564.049561][T12332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.049586][T12332] do_syscall_64+0x15f/0xf80 [ 564.049615][T12332] ? trace_irq_disable+0x3b/0x140 [ 564.049638][T12332] ? clear_bhb_loop+0x40/0x90 [ 564.049666][T12332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.049689][T12332] RIP: 0033:0x7fdd38c1c819 [ 564.049710][T12332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 564.049731][T12332] RSP: 002b:00007fdd36e6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 564.049756][T12332] RAX: ffffffffffffffda RBX: 00007fdd38e95fa0 RCX: 00007fdd38c1c819 [ 564.049774][T12332] RDX: 0000200000000400 RSI: 0000000000003b80 RDI: 0000000000000003 [ 564.049789][T12332] RBP: 00007fdd36e6e090 R08: 0000000000000000 R09: 0000000000000000 [ 564.049803][T12332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.049816][T12332] R13: 00007fdd38e96038 R14: 00007fdd38e95fa0 R15: 00007fffc4c29d78 [ 564.049851][T12332] [ 564.050076][T12332] ERROR: Out of memory at tomoyo_realpath_from_path. [ 567.305832][T12381] binder: 12379:12381 ioctl 40046205 0 returned -22 [ 567.414288][ T37] audit: type=1107 audit(1776553362.922:3067): pid=12379 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 569.132022][ T5890] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 569.296367][ T5890] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 569.296402][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.356158][ T5890] usb 3-1: config 0 descriptor?? [ 569.401283][ T5890] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 569.820475][ T5890] gp8psk: usb in 138 operation failed. [ 569.820720][ T5890] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 569.820783][ T5890] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 569.869497][ T5890] usb 3-1: USB disconnect, device number 20 [ 570.275354][T12465] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2370'. [ 570.296697][T12465] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 570.684427][T12479] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2376'. [ 570.684453][T12479] netlink: 50 bytes leftover after parsing attributes in process `syz.2.2376'. [ 571.784060][T12530] FAULT_INJECTION: forcing a failure. [ 571.784060][T12530] name failslab, interval 1, probability 0, space 0, times 0 [ 571.784098][T12530] CPU: 1 UID: 0 PID: 12530 Comm: syz.6.2400 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 571.784136][T12530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 571.784150][T12530] Call Trace: [ 571.784159][T12530] [ 571.784169][T12530] dump_stack_lvl+0xe8/0x150 [ 571.784214][T12530] should_fail_ex+0x46b/0x600 [ 571.784244][T12530] ? __pfx_sock_alloc_inode+0x10/0x10 [ 571.784274][T12530] should_failslab+0xa8/0x100 [ 571.784299][T12530] ? __pfx_sock_alloc_inode+0x10/0x10 [ 571.784326][T12530] kmem_cache_alloc_lru_noprof+0x8b/0x680 [ 571.784361][T12530] ? sock_alloc_inode+0x2c/0x190 [ 571.784394][T12530] ? __pfx_sock_alloc_inode+0x10/0x10 [ 571.784423][T12530] sock_alloc_inode+0x2c/0x190 [ 571.784454][T12530] ? __pfx_sock_alloc_inode+0x10/0x10 [ 571.784482][T12530] alloc_inode+0x6a/0x1b0 [ 571.784511][T12530] __sock_create+0x12d/0x9d0 [ 571.784552][T12530] mptcp_subflow_create_socket+0xfb/0x800 [ 571.784711][T12530] ? lockdep_hardirqs_on+0x7a/0x110 [ 571.784743][T12530] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 571.784790][T12530] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 571.784824][T12530] __mptcp_nmpc_sk+0x14e/0x790 [ 571.784886][T12530] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 571.784927][T12530] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 571.784972][T12530] mptcp_bind+0xab/0x1d0 [ 571.785023][T12530] __sys_bind+0x2e9/0x410 [ 571.785060][T12530] ? __pfx___sys_bind+0x10/0x10 [ 571.785108][T12530] ? __pfx_ksys_write+0x10/0x10 [ 571.785148][T12530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.785175][T12530] __x64_sys_bind+0x7a/0x90 [ 571.785210][T12530] do_syscall_64+0x15f/0xf80 [ 571.785238][T12530] ? trace_irq_disable+0x3b/0x140 [ 571.785261][T12530] ? clear_bhb_loop+0x40/0x90 [ 571.785290][T12530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.785314][T12530] RIP: 0033:0x7fec3dd1c819 [ 571.785336][T12530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.785357][T12530] RSP: 002b:00007fec3bf6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 571.785381][T12530] RAX: ffffffffffffffda RBX: 00007fec3df95fa0 RCX: 00007fec3dd1c819 [ 571.785398][T12530] RDX: 0000000000000080 RSI: 00002000000021c0 RDI: 0000000000000003 [ 571.785412][T12530] RBP: 00007fec3bf6e090 R08: 0000000000000000 R09: 0000000000000000 [ 571.785427][T12530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.785440][T12530] R13: 00007fec3df96038 R14: 00007fec3df95fa0 R15: 00007ffd4aa75d98 [ 571.785476][T12530] [ 571.787502][T12530] socket: no more sockets [ 573.261278][T12583] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2423'. [ 573.261310][T12583] netlink: 50 bytes leftover after parsing attributes in process `syz.2.2423'. [ 573.269161][T12587] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 573.318356][T12587] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2422'. [ 573.395557][T12594] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2427'. [ 573.800628][ T816] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 573.950653][ T816] usb 3-1: Using ep0 maxpacket: 8 [ 573.953246][ T816] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.953282][ T816] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.953307][ T816] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 573.953336][ T816] usb 3-1: config 0 interface 0 has no altsetting 0 [ 573.953372][ T816] usb 3-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 573.953408][ T816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.025079][ T816] usb 3-1: config 0 descriptor?? [ 574.257875][ T816] usbhid 3-1:0.0: can't add hid device: -71 [ 574.258003][ T816] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 574.289235][ T816] usb 3-1: USB disconnect, device number 21 [ 575.953767][T12708] FAULT_INJECTION: forcing a failure. [ 575.953767][T12708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 575.953805][T12708] CPU: 0 UID: 0 PID: 12708 Comm: syz.2.2480 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 575.953831][T12708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 575.953845][T12708] Call Trace: [ 575.953853][T12708] [ 575.953862][T12708] dump_stack_lvl+0xe8/0x150 [ 575.953905][T12708] should_fail_ex+0x46b/0x600 [ 575.953936][T12708] _copy_from_user+0x2d/0xb0 [ 575.953967][T12708] __se_sys_mount+0x18b/0x420 [ 575.954004][T12708] ? __pfx___se_sys_mount+0x10/0x10 [ 575.954039][T12708] ? __x64_sys_mount+0x20/0xc0 [ 575.954067][T12708] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.954098][T12708] do_syscall_64+0x15f/0xf80 [ 575.954127][T12708] ? trace_irq_disable+0x3b/0x140 [ 575.954149][T12708] ? clear_bhb_loop+0x40/0x90 [ 575.954179][T12708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.954202][T12708] RIP: 0033:0x7f31589dc819 [ 575.954230][T12708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.954250][T12708] RSP: 002b:00007f3156c36028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 575.954274][T12708] RAX: ffffffffffffffda RBX: 00007f3158c55fa0 RCX: 00007f31589dc819 [ 575.954292][T12708] RDX: 00002000000020c0 RSI: 0000200000002080 RDI: 0000000000000000 [ 575.954307][T12708] RBP: 00007f3156c36090 R08: 0000200000002100 R09: 0000000000000000 [ 575.954322][T12708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.954335][T12708] R13: 00007f3158c56038 R14: 00007f3158c55fa0 R15: 00007ffce323b258 [ 575.954371][T12708] [ 576.136811][T12708] fuse: Bad value for 'group_id' [ 576.136832][T12708] fuse: Bad value for 'group_id' [ 577.584091][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 577.736839][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 577.750593][ T10] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 577.750626][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.750649][ T10] usb 3-1: config 0 has no interface number 0 [ 577.750701][ T10] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 577.750733][ T10] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 577.750760][ T10] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 577.750790][ T10] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 577.750820][ T10] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 577.750852][ T10] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 577.750882][ T10] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 577.750913][ T10] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 577.750940][ T10] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 577.754151][ T10] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 577.754184][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.754209][ T10] usb 3-1: Product: syz [ 577.754226][ T10] usb 3-1: Manufacturer: syz [ 577.754244][ T10] usb 3-1: SerialNumber: syz [ 577.930075][ T10] usb 3-1: config 0 descriptor?? [ 577.936817][T12757] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 577.953091][ T10] microtek usb (rev 0.4.3): will this work? Command EP is not usually 12 [ 577.953114][ T10] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 577.953128][ T10] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 578.036799][ T10] scsi host1: microtekX6 [ 578.165130][T12757] cifs: Unknown parameter 'ca' [ 578.267249][ T1114] microtek usb (rev 0.4.3): error -90 submitting URB [ 578.343263][ T32] microtek usb (rev 0.4.3): error -90 submitting URB [ 578.380708][ T32] microtek usb (rev 0.4.3): error -90 submitting URB [ 578.490659][ T32] microtek usb (rev 0.4.3): error -90 submitting URB [ 578.756071][ T36] usb 3-1: USB disconnect, device number 22 [ 579.732947][T12791] delete_channel: no stack [ 583.935930][T12944] FAULT_INJECTION: forcing a failure. [ 583.935930][T12944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 583.935996][T12944] CPU: 1 UID: 0 PID: 12944 Comm: syz.6.2582 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 583.936024][T12944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 583.936038][T12944] Call Trace: [ 583.936047][T12944] [ 583.936057][T12944] dump_stack_lvl+0xe8/0x150 [ 583.936100][T12944] should_fail_ex+0x46b/0x600 [ 583.936132][T12944] _copy_to_user+0x31/0xb0 [ 583.936166][T12944] simple_read_from_buffer+0xe1/0x170 [ 583.936209][T12944] proc_fail_nth_read+0x1be/0x230 [ 583.936245][T12944] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 583.936282][T12944] ? rw_verify_area+0x2ac/0x4e0 [ 583.936317][T12944] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 583.936351][T12944] vfs_read+0x212/0xa80 [ 583.936395][T12944] ? __pfx_vfs_read+0x10/0x10 [ 583.936433][T12944] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 583.936466][T12944] ? lockdep_hardirqs_on+0x7a/0x110 [ 583.936496][T12944] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 583.936526][T12944] ? mutex_lock_nested+0x152/0x1d0 [ 583.936562][T12944] ? fdget_pos+0x252/0x320 [ 583.936601][T12944] ksys_read+0x156/0x270 [ 583.936639][T12944] ? __pfx_ksys_read+0x10/0x10 [ 583.936683][T12944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.936708][T12944] do_syscall_64+0x15f/0xf80 [ 583.936736][T12944] ? trace_irq_disable+0x3b/0x140 [ 583.936760][T12944] ? clear_bhb_loop+0x40/0x90 [ 583.936792][T12944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.936815][T12944] RIP: 0033:0x7fec3dcdd04e [ 583.936847][T12944] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 583.936866][T12944] RSP: 002b:00007fec3bf6dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 583.936889][T12944] RAX: ffffffffffffffda RBX: 00007fec3bf6e6c0 RCX: 00007fec3dcdd04e [ 583.936905][T12944] RDX: 000000000000000f RSI: 00007fec3bf6e0a0 RDI: 0000000000000003 [ 583.936919][T12944] RBP: 00007fec3bf6e090 R08: 0000000000000000 R09: 0000000000000000 [ 583.936932][T12944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 583.936945][T12944] R13: 00007fec3df96038 R14: 00007fec3df95fa0 R15: 00007ffd4aa75d98 [ 583.936989][T12944] [ 585.028608][ T5124] Bluetooth: hci5: command 0x0406 tx timeout [ 585.657773][T12972] delete_channel: no stack [ 586.153379][T12987] Bluetooth: MGMT ver 1.23 [ 586.197185][ T815] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 586.330794][ T1253] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 586.450641][ T815] usb 3-1: Using ep0 maxpacket: 16 [ 586.495842][ T815] usb 3-1: config 2 has an invalid interface number: 5 but max is 0 [ 586.495874][ T815] usb 3-1: config 2 has no interface number 0 [ 586.495910][ T815] usb 3-1: config 2 interface 5 has no altsetting 0 [ 586.522862][ T815] usb 3-1: New USB device found, idVendor=1557, idProduct=0a80, bcdDevice=36.1b [ 586.522896][ T815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.522920][ T815] usb 3-1: Product: syz [ 586.522935][ T815] usb 3-1: Manufacturer: ࠝ [ 586.522952][ T815] usb 3-1: SerialNumber: syz [ 586.524817][ T1253] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 586.524845][ T1253] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 586.524868][ T1253] usb 5-1: config 220 has no interface number 2 [ 586.524937][ T1253] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 586.524968][ T1253] usb 5-1: config 220 interface 0 has no altsetting 0 [ 586.524989][ T1253] usb 5-1: config 220 interface 76 has no altsetting 0 [ 586.525010][ T1253] usb 5-1: config 220 interface 1 has no altsetting 0 [ 586.529102][ T1253] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 586.529133][ T1253] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.529156][ T1253] usb 5-1: Product: syz [ 586.529171][ T1253] usb 5-1: Manufacturer: syz [ 586.529188][ T1253] usb 5-1: SerialNumber: syz [ 587.491773][ T1253] usb 5-1: selecting invalid altsetting 0 [ 587.525331][ T815] usb 3-1: USB disconnect, device number 23 [ 587.548920][ T1253] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 587.548957][ T1253] uvcvideo 5-1:220.0: No valid video chain found. [ 587.664774][ T1253] usb 5-1: selecting invalid altsetting 0 [ 587.664814][ T1253] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 587.690780][ T1253] usb 5-1: USB disconnect, device number 8 [ 591.199454][T13115] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 591.332177][T13121] FAULT_INJECTION: forcing a failure. [ 591.332177][T13121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 591.332212][T13121] CPU: 1 UID: 0 PID: 13121 Comm: syz.4.2662 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 591.332234][T13121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 591.332246][T13121] Call Trace: [ 591.332253][T13121] [ 591.332261][T13121] dump_stack_lvl+0xe8/0x150 [ 591.332300][T13121] should_fail_ex+0x46b/0x600 [ 591.332325][T13121] _copy_from_iter+0x1d3/0x1670 [ 591.332345][T13121] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 591.332372][T13121] ? __pfx_policy_nodemask+0x10/0x10 [ 591.332395][T13121] ? __pfx__copy_from_iter+0x10/0x10 [ 591.332419][T13121] ? alloc_pages_mpol+0x2ae/0x380 [ 591.332457][T13121] copy_page_from_iter+0x220/0x2d0 [ 591.332482][T13121] tun_get_user+0x1bfa/0x4400 [ 591.332616][T13121] ? is_bpf_text_address+0x292/0x2b0 [ 591.332639][T13121] ? tun_get_user+0x8a1/0x4400 [ 591.332673][T13121] ? __pfx_tun_get_user+0x10/0x10 [ 591.332693][T13121] ? __lock_acquire+0x6b5/0x2cf0 [ 591.332726][T13121] ? ref_tracker_alloc+0x332/0x4a0 [ 591.332746][T13121] ? get_pid_task+0x20/0x1f0 [ 591.332770][T13121] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 591.332795][T13121] ? tun_get+0x1c/0x2f0 [ 591.332815][T13121] ? tun_get+0x1c/0x2f0 [ 591.332841][T13121] ? tun_get+0x1c/0x2f0 [ 591.332860][T13121] ? tun_get+0x1c/0x2f0 [ 591.332884][T13121] tun_chr_write_iter+0x119/0x200 [ 591.332909][T13121] vfs_write+0x629/0xba0 [ 591.332945][T13121] ? __pfx_vfs_write+0x10/0x10 [ 591.332979][T13121] ? __fget_files+0x2a/0x420 [ 591.333009][T13121] ksys_write+0x156/0x270 [ 591.333037][T13121] ? __pfx_ksys_write+0x10/0x10 [ 591.333070][T13121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.333091][T13121] do_syscall_64+0x15f/0xf80 [ 591.333114][T13121] ? trace_irq_disable+0x3b/0x140 [ 591.333132][T13121] ? clear_bhb_loop+0x40/0x90 [ 591.333155][T13121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.333175][T13121] RIP: 0033:0x7fdd38bdd04e [ 591.333194][T13121] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 591.333211][T13121] RSP: 002b:00007fdd36e6dfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 591.333230][T13121] RAX: ffffffffffffffda RBX: 00007fdd36e6e6c0 RCX: 00007fdd38bdd04e [ 591.333243][T13121] RDX: 0000000000000066 RSI: 0000200000000480 RDI: 00000000000000c8 [ 591.333253][T13121] RBP: 00007fdd36e6e090 R08: 0000000000000000 R09: 0000000000000000 [ 591.333264][T13121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.333275][T13121] R13: 00007fdd38e96038 R14: 00007fdd38e95fa0 R15: 00007fffc4c29d78 [ 591.333302][T13121] [ 591.858599][T13134] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 591.885612][T13134] FAULT_INJECTION: forcing a failure. [ 591.885612][T13134] name failslab, interval 1, probability 0, space 0, times 0 [ 591.885654][T13134] CPU: 1 UID: 0 PID: 13134 Comm: syz.4.2666 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 591.885683][T13134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 591.885699][T13134] Call Trace: [ 591.885709][T13134] [ 591.885719][T13134] dump_stack_lvl+0xe8/0x150 [ 591.885769][T13134] should_fail_ex+0x46b/0x600 [ 591.885804][T13134] should_failslab+0xa8/0x100 [ 591.885846][T13134] __kmalloc_noprof+0xdf/0x7b0 [ 591.885887][T13134] ? tomoyo_encode+0x28b/0x550 [ 591.885922][T13134] tomoyo_encode+0x28b/0x550 [ 591.885957][T13134] tomoyo_realpath_from_path+0x58d/0x5d0 [ 591.885998][T13134] ? tomoyo_path_number_perm+0x219/0x630 [ 591.886038][T13134] tomoyo_path_number_perm+0x246/0x630 [ 591.886080][T13134] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 591.886118][T13134] ? __lock_acquire+0x6b5/0x2cf0 [ 591.886152][T13134] ? do_raw_spin_lock+0x12b/0x2f0 [ 591.886217][T13134] ? __fget_files+0x2a/0x420 [ 591.886255][T13134] ? __fget_files+0x2a/0x420 [ 591.886287][T13134] ? __fget_files+0x3a6/0x420 [ 591.886318][T13134] ? __fget_files+0x2a/0x420 [ 591.886365][T13134] security_file_ioctl+0xc3/0x2a0 [ 591.886504][T13134] __se_sys_ioctl+0x47/0x170 [ 591.886544][T13134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.886573][T13134] do_syscall_64+0x15f/0xf80 [ 591.886605][T13134] ? trace_irq_disable+0x3b/0x140 [ 591.886631][T13134] ? clear_bhb_loop+0x40/0x90 [ 591.886662][T13134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.886687][T13134] RIP: 0033:0x7fdd38c1c819 [ 591.886710][T13134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.886732][T13134] RSP: 002b:00007fdd36e6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 591.886758][T13134] RAX: ffffffffffffffda RBX: 00007fdd38e95fa0 RCX: 00007fdd38c1c819 [ 591.886777][T13134] RDX: 0000200000000400 RSI: 0000000000003b80 RDI: 0000000000000003 [ 591.886793][T13134] RBP: 00007fdd36e6e090 R08: 0000000000000000 R09: 0000000000000000 [ 591.886809][T13134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.886825][T13134] R13: 00007fdd38e96038 R14: 00007fdd38e95fa0 R15: 00007fffc4c29d78 [ 591.886865][T13134] [ 591.920769][T13134] ERROR: Out of memory at tomoyo_realpath_from_path. [ 593.006107][T13163] FAULT_INJECTION: forcing a failure. [ 593.006107][T13163] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 593.006147][T13163] CPU: 1 UID: 0 PID: 13163 Comm: syz.4.2681 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 593.006173][T13163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 593.006187][T13163] Call Trace: [ 593.006196][T13163] [ 593.006205][T13163] dump_stack_lvl+0xe8/0x150 [ 593.006250][T13163] should_fail_ex+0x46b/0x600 [ 593.006283][T13163] prepare_alloc_pages+0x22a/0x6b0 [ 593.006326][T13163] __alloc_frozen_pages_noprof+0x12f/0x380 [ 593.006357][T13163] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 593.006388][T13163] ? __pfx_policy_nodemask+0x10/0x10 [ 593.006415][T13163] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 593.006446][T13163] ? lockdep_hardirqs_on+0x7a/0x110 [ 593.006480][T13163] alloc_pages_mpol+0xd1/0x380 [ 593.006508][T13163] alloc_pages_noprof+0xd2/0x2f0 [ 593.006535][T13163] get_free_pages_noprof+0xf/0x80 [ 593.006565][T13163] __kasan_populate_vmalloc+0x38/0x1d0 [ 593.006597][T13163] ? rt_spin_unlock+0x160/0x200 [ 593.006623][T13163] alloc_vmap_area+0xd47/0x1480 [ 593.006748][T13163] ? __pfx_alloc_vmap_area+0x10/0x10 [ 593.006784][T13163] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 593.006823][T13163] ? __get_vm_area_node+0x171/0x350 [ 593.006856][T13163] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 593.006883][T13163] __get_vm_area_node+0x226/0x350 [ 593.006924][T13163] __vmalloc_node_range_noprof+0x36a/0x1750 [ 593.006962][T13163] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 593.006991][T13163] ? __lock_acquire+0x6b5/0x2cf0 [ 593.007038][T13163] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 593.007067][T13163] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 593.007104][T13163] ? __lock_acquire+0x6b5/0x2cf0 [ 593.007134][T13163] ? _parse_integer_limit+0x1ae/0x1f0 [ 593.007214][T13163] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 593.007237][T13163] __vmalloc_noprof+0xd2/0x120 [ 593.007271][T13163] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 593.007299][T13163] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 593.007338][T13163] bpf_prog_alloc+0x3c/0x1a0 [ 593.007365][T13163] bpf_prog_load+0x779/0x1a10 [ 593.007464][T13163] ? __pfx_bpf_prog_load+0x10/0x10 [ 593.007489][T13163] ? __might_fault+0xaf/0x130 [ 593.007542][T13163] ? bpf_lsm_bpf+0x9/0x20 [ 593.007566][T13163] ? security_bpf+0x7e/0x2d0 [ 593.007592][T13163] __sys_bpf+0x618/0x950 [ 593.007617][T13163] ? __pfx___sys_bpf+0x10/0x10 [ 593.007637][T13163] ? rt_mutex_slowunlock+0x1cb/0x300 [ 593.007678][T13163] ? ksys_write+0x248/0x270 [ 593.007715][T13163] ? __pfx_ksys_write+0x10/0x10 [ 593.007755][T13163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.007780][T13163] __x64_sys_bpf+0x7c/0x90 [ 593.007815][T13163] do_syscall_64+0x15f/0xf80 [ 593.007844][T13163] ? trace_irq_disable+0x3b/0x140 [ 593.007866][T13163] ? clear_bhb_loop+0x40/0x90 [ 593.007894][T13163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.007917][T13163] RIP: 0033:0x7fdd38c1c819 [ 593.007939][T13163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 593.007959][T13163] RSP: 002b:00007fdd36e6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 593.007983][T13163] RAX: ffffffffffffffda RBX: 00007fdd38e95fa0 RCX: 00007fdd38c1c819 [ 593.007999][T13163] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 593.008013][T13163] RBP: 00007fdd36e6e090 R08: 0000000000000000 R09: 0000000000000000 [ 593.008028][T13163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 593.008040][T13163] R13: 00007fdd38e96038 R14: 00007fdd38e95fa0 R15: 00007fffc4c29d78 [ 593.008076][T13163] [ 593.025571][T13163] syz.4.2681: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 593.256087][T13163] CPU: 0 UID: 0 PID: 13163 Comm: syz.4.2681 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 593.256160][T13163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 593.256193][T13163] Call Trace: [ 593.256214][T13163] [ 593.256243][T13163] dump_stack_lvl+0xe8/0x150 [ 593.256353][T13163] warn_alloc+0x263/0x3e0 [ 593.256418][T13163] ? kasan_quarantine_put+0xbb/0x1f0 [ 593.256512][T13163] ? __pfx_warn_alloc+0x10/0x10 [ 593.256574][T13163] ? __get_vm_area_node+0x23f/0x350 [ 593.256650][T13163] ? __get_vm_area_node+0x171/0x350 [ 593.256742][T13163] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 593.256817][T13163] ? __get_vm_area_node+0x23f/0x350 [ 593.256914][T13163] __vmalloc_node_range_noprof+0x38f/0x1750 [ 593.257016][T13163] ? __lock_acquire+0x6b5/0x2cf0 [ 593.257143][T13163] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 593.257172][T13163] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 593.257268][T13163] ? __lock_acquire+0x6b5/0x2cf0 [ 593.257367][T13163] ? _parse_integer_limit+0x1ae/0x1f0 [ 593.257475][T13163] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 593.257536][T13163] __vmalloc_noprof+0xd2/0x120 [ 593.257620][T13163] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 593.257685][T13163] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 593.257758][T13163] bpf_prog_alloc+0x3c/0x1a0 [ 593.257831][T13163] bpf_prog_load+0x779/0x1a10 [ 593.257936][T13163] ? __pfx_bpf_prog_load+0x10/0x10 [ 593.258011][T13163] ? __might_fault+0xaf/0x130 [ 593.258146][T13163] ? bpf_lsm_bpf+0x9/0x20 [ 593.258208][T13163] ? security_bpf+0x7e/0x2d0 [ 593.258266][T13163] __sys_bpf+0x618/0x950 [ 593.258335][T13163] ? __pfx___sys_bpf+0x10/0x10 [ 593.258387][T13163] ? rt_mutex_slowunlock+0x1cb/0x300 [ 593.258485][T13163] ? ksys_write+0x248/0x270 [ 593.258585][T13163] ? __pfx_ksys_write+0x10/0x10 [ 593.258663][T13163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.258745][T13163] __x64_sys_bpf+0x7c/0x90 [ 593.258840][T13163] do_syscall_64+0x15f/0xf80 [ 593.258905][T13163] ? trace_irq_disable+0x3b/0x140 [ 593.258967][T13163] ? clear_bhb_loop+0x40/0x90 [ 593.259039][T13163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.259087][T13163] RIP: 0033:0x7fdd38c1c819 [ 593.259141][T13163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 593.259192][T13163] RSP: 002b:00007fdd36e6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 593.259247][T13163] RAX: ffffffffffffffda RBX: 00007fdd38e95fa0 RCX: 00007fdd38c1c819 [ 593.259290][T13163] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 593.259335][T13163] RBP: 00007fdd36e6e090 R08: 0000000000000000 R09: 0000000000000000 [ 593.259369][T13163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 593.259408][T13163] R13: 00007fdd38e96038 R14: 00007fdd38e95fa0 R15: 00007fffc4c29d78 [ 593.259493][T13163] [ 593.287117][T13163] Mem-Info: [ 593.287133][T13163] active_anon:270 inactive_anon:39291 isolated_anon:0 [ 593.287133][T13163] active_file:6149 inactive_file:48693 isolated_file:0 [ 593.287133][T13163] unevictable:768 dirty:174 writeback:0 [ 593.287133][T13163] slab_reclaimable:12211 slab_unreclaimable:107388 [ 593.287133][T13163] mapped:40265 shmem:33705 pagetables:1491 [ 593.287133][T13163] sec_pagetables:0 bounce:0 [ 593.287133][T13163] kernel_misc_reclaimable:0 [ 593.287133][T13163] free:1279519 free_pcp:3366 free_cma:0 [ 593.287323][T13163] Node 0 active_anon:1080kB inactive_anon:157164kB active_file:24408kB inactive_file:194772kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:161060kB dirty:692kB writeback:0kB shmem:133284kB kernel_stack:13308kB pagetables:5828kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 593.287471][T13163] Node 1 active_anon:0kB inactive_anon:0kB active_file:188kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 593.287607][T13163] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 593.287773][T13163] lowmem_reserve[]: 0 2504 2505 2505 2505 [ 593.287899][T13163] Node 0 DMA32 free:1169444kB boost:0kB min:3928kB low:6464kB high:9000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1080kB inactive_anon:157164kB active_file:24408kB inactive_file:194772kB unevictable:1536kB writepending:692kB zspages:0kB present:3129332kB managed:2565000kB mlocked:0kB bounce:0kB free_pcp:13464kB local_pcp:9332kB free_cma:0kB [ 593.288086][T13163] lowmem_reserve[]: 0 0 0 0 0 [ 593.288175][T13163] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:136kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 593.288332][T13163] lowmem_reserve[]: 0 0 0 0 0 [ 593.288426][T13163] Node 1 Normal free:3933272kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:188kB inactive_file:0kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 593.288596][T13163] lowmem_reserve[]: 0 0 0 0 0 [ 593.300721][T13163] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 593.301099][T13163] Node 0 DMA32: 988*4kB (UME) 1923*8kB (UME) 1263*16kB (UME) 6*32kB (ME) 5*64kB (ME) 69*128kB (UME) 121*256kB (UME) 88*512kB (UM) 52*1024kB (U) 14*2048kB (UE) 235*4096kB (M) = 1169400kB [ 593.301715][T13163] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 593.302027][T13163] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 8*16kB (UM) 10*32kB (UM) 6*64kB (UM) 2*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 959*4096kB (UM) = 3933272kB [ 593.319652][T13163] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 593.319706][T13163] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 593.319750][T13163] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 593.319810][T13163] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 593.319853][T13163] 88518 total pagecache pages [ 593.319875][T13163] 0 pages in swap cache [ 593.319897][T13163] Free swap = 124996kB [ 593.319925][T13163] Total swap = 124996kB [ 593.319948][T13163] 2097051 pages RAM [ 593.319968][T13163] 0 pages HighMem/MovableOnly [ 593.319989][T13163] 424152 pages reserved [ 593.320010][T13163] 0 pages cma reserved [ 594.726581][T13193] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 595.040619][ T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 595.192016][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 595.199183][ T10] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 595.199216][ T10] usb 1-1: config 0 has no interface number 0 [ 595.247497][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 595.247533][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.247556][ T10] usb 1-1: Product: syz [ 595.247573][ T10] usb 1-1: Manufacturer: syz [ 595.247590][ T10] usb 1-1: SerialNumber: syz [ 595.305373][ T10] usb 1-1: config 0 descriptor?? [ 595.532867][ T10] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 595.532962][ T10] uvcvideo 1-1:0.31: No valid video chain found. [ 595.759259][T13193] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 595.928813][ T10] usb 1-1: USB disconnect, device number 23 [ 596.117206][T13240] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2715'. [ 596.120323][T13239] FAULT_INJECTION: forcing a failure. [ 596.120323][T13239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 596.120363][T13239] CPU: 1 UID: 0 PID: 13239 Comm: syz.6.2714 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 596.120391][T13239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 596.120407][T13239] Call Trace: [ 596.120417][T13239] [ 596.120428][T13239] dump_stack_lvl+0xe8/0x150 [ 596.120481][T13239] should_fail_ex+0x46b/0x600 [ 596.120515][T13239] _copy_from_user+0x2d/0xb0 [ 596.120549][T13239] clear_refs_write+0x107/0x910 [ 596.120660][T13239] ? trace_kmalloc+0x2a/0xf0 [ 596.120703][T13239] ? __pfx_clear_refs_write+0x10/0x10 [ 596.120728][T13239] ? __kmalloc_noprof+0x408/0x7b0 [ 596.120767][T13239] ? iovec_from_user+0x87/0x250 [ 596.120810][T13239] ? vfs_writev+0x2b0/0x9a0 [ 596.120841][T13239] ? vfs_writev+0x2b0/0x9a0 [ 596.120893][T13239] vfs_writev+0x4c6/0x9a0 [ 596.120926][T13239] ? __pfx_clear_refs_write+0x10/0x10 [ 596.120959][T13239] ? __pfx_vfs_writev+0x10/0x10 [ 596.121009][T13239] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 596.121049][T13239] ? mutex_lock_nested+0x152/0x1d0 [ 596.121089][T13239] ? fdget_pos+0x252/0x320 [ 596.121133][T13239] do_writev+0x15a/0x2e0 [ 596.121167][T13239] ? __pfx_do_writev+0x10/0x10 [ 596.121208][T13239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.121237][T13239] do_syscall_64+0x15f/0xf80 [ 596.121270][T13239] ? trace_irq_disable+0x3b/0x140 [ 596.121295][T13239] ? clear_bhb_loop+0x40/0x90 [ 596.121327][T13239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.121353][T13239] RIP: 0033:0x7fec3dd1c819 [ 596.121378][T13239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.121399][T13239] RSP: 002b:00007fec3bf6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 596.121424][T13239] RAX: ffffffffffffffda RBX: 00007fec3df95fa0 RCX: 00007fec3dd1c819 [ 596.121441][T13239] RDX: 0000000000000009 RSI: 0000200000000100 RDI: 0000000000000003 [ 596.121456][T13239] RBP: 00007fec3bf6e090 R08: 0000000000000000 R09: 0000000000000000 [ 596.121472][T13239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.121486][T13239] R13: 00007fec3df96038 R14: 00007fec3df95fa0 R15: 00007ffd4aa75d98 [ 596.121525][T13239] [ 596.490674][T13240] IPv6: sit3: Disabled Multicast RS [ 596.505640][T13240] sit3: entered allmulticast mode [ 597.640728][T13279] FAULT_INJECTION: forcing a failure. [ 597.640728][T13279] name failslab, interval 1, probability 0, space 0, times 0 [ 597.640764][T13279] CPU: 0 UID: 0 PID: 13279 Comm: syz.2.2730 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 597.640789][T13279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 597.640802][T13279] Call Trace: [ 597.640811][T13279] [ 597.640820][T13279] dump_stack_lvl+0xe8/0x150 [ 597.640880][T13279] should_fail_ex+0x46b/0x600 [ 597.640912][T13279] should_failslab+0xa8/0x100 [ 597.640938][T13279] __kmalloc_noprof+0xdf/0x7b0 [ 597.640984][T13279] ? tomoyo_encode+0x28b/0x550 [ 597.641016][T13279] tomoyo_encode+0x28b/0x550 [ 597.641045][T13279] tomoyo_realpath_from_path+0x58d/0x5d0 [ 597.641074][T13279] ? tomoyo_domain+0xd8/0x130 [ 597.641105][T13279] ? tomoyo_path_number_perm+0x219/0x630 [ 597.641139][T13279] tomoyo_path_number_perm+0x246/0x630 [ 597.641176][T13279] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 597.641211][T13279] ? __lock_acquire+0x6b5/0x2cf0 [ 597.641242][T13279] ? do_raw_spin_lock+0x12b/0x2f0 [ 597.641300][T13279] ? __fget_files+0x2a/0x420 [ 597.641333][T13279] ? __fget_files+0x2a/0x420 [ 597.641364][T13279] ? __fget_files+0x3a6/0x420 [ 597.641393][T13279] ? __fget_files+0x2a/0x420 [ 597.641426][T13279] security_file_ioctl+0xc3/0x2a0 [ 597.641464][T13279] __se_sys_ioctl+0x47/0x170 [ 597.641499][T13279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.641524][T13279] do_syscall_64+0x15f/0xf80 [ 597.641554][T13279] ? trace_irq_disable+0x3b/0x140 [ 597.641576][T13279] ? clear_bhb_loop+0x40/0x90 [ 597.641605][T13279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.641629][T13279] RIP: 0033:0x7f31589dc819 [ 597.641650][T13279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.641670][T13279] RSP: 002b:00007f3156c36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 597.641694][T13279] RAX: ffffffffffffffda RBX: 00007f3158c55fa0 RCX: 00007f31589dc819 [ 597.641711][T13279] RDX: 0000000000000000 RSI: 00000000c008ae67 RDI: 0000000000000005 [ 597.641725][T13279] RBP: 00007f3156c36090 R08: 0000000000000000 R09: 0000000000000000 [ 597.641739][T13279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 597.641753][T13279] R13: 00007f3158c56038 R14: 00007f3158c55fa0 R15: 00007ffce323b258 [ 597.641789][T13279] [ 597.641822][T13279] ERROR: Out of memory at tomoyo_realpath_from_path. [ 597.643005][T13278] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2729'. [ 597.645967][T13278] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2729'. [ 599.204249][T13334] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 599.716586][T13356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2768'. [ 600.037831][T13366] ------------[ cut here ]------------ [ 600.037848][T13366] kcov->t != t [ 600.037867][T13366] WARNING: kernel/kcov.c:483 at kcov_task_exit+0xf5/0x160, CPU#1: syz.0.2772/13366 [ 600.038036][T13366] Modules linked in: [ 600.038067][T13366] CPU: 1 UID: 0 PID: 13366 Comm: syz.0.2772 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 600.038094][T13366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 600.038109][T13366] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 600.038146][T13366] Code: 10 00 00 48 8b bb 90 00 00 00 e8 36 68 55 00 48 89 df 5b 41 5e 41 5f e9 49 25 5b 00 7c 1c 5b 41 5e 41 5f e9 7d cb 69 09 cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 9b 64 68 09 48 89 df be 03 00 [ 600.038168][T13366] RSP: 0018:ffffc900160afae0 EFLAGS: 00010287 [ 600.038188][T13366] RAX: d526c6feef1b8b00 RBX: ffff88802b680900 RCX: 0000000000000000 [ 600.038205][T13366] RDX: 0000000085fa3eb3 RSI: ffffffff8ba73040 RDI: 00000000ffffffff [ 600.038222][T13366] RBP: ffffc900160afc28 R08: ffffffff8b2cf750 R09: ffffffff8dfc80c0 [ 600.038240][T13366] R10: dffffc0000000000 R11: fffffbfff1f1717f R12: dffffc0000000000 [ 600.038258][T13366] R13: 0000000000000000 R14: ffff88802b680908 R15: ffff888032339ec0 [ 600.038275][T13366] FS: 00007f928fde66c0(0000) GS:ffff888126209000(0000) knlGS:0000000000000000 [ 600.038295][T13366] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 600.038311][T13366] CR2: 000000110c3eb46b CR3: 0000000063564000 CR4: 00000000003526f0 [ 600.038332][T13366] Call Trace: [ 600.038341][T13366] [ 600.038354][T13366] do_exit+0x150/0x22c0 [ 600.038396][T13366] ? __pfx_do_exit+0x10/0x10 [ 600.038422][T13366] ? rt_mutex_slowunlock+0x61e/0x8b0 [ 600.038447][T13366] ? reacquire_held_locks+0x104/0x190 [ 600.038486][T13366] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 600.038519][T13366] do_group_exit+0x21b/0x2d0 [ 600.038548][T13366] ? rt_spin_unlock+0x160/0x200 [ 600.038575][T13366] get_signal+0x125c/0x1310 [ 600.038721][T13366] arch_do_signal_or_restart+0xbc/0x830 [ 600.038824][T13366] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 600.038877][T13366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.038905][T13366] exit_to_user_mode_loop+0x86/0x480 [ 600.038965][T13366] ? rcu_is_watching+0x15/0xb0 [ 600.039000][T13366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.039027][T13366] do_syscall_64+0x33e/0xf80 [ 600.039057][T13366] ? trace_irq_disable+0x3b/0x140 [ 600.039083][T13366] ? clear_bhb_loop+0x40/0x90 [ 600.039114][T13366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.039138][T13366] RIP: 0033:0x7f9291b8c819 [ 600.039186][T13366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.039206][T13366] RSP: 002b:00007f928fde60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 600.039232][T13366] RAX: fffffffffffffe00 RBX: 00007f9291e05fa8 RCX: 00007f9291b8c819 [ 600.039251][T13366] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9291e05fa8 [ 600.039267][T13366] RBP: 00007f9291e05fa0 R08: 0000000000000000 R09: 0000000000000000 [ 600.039282][T13366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 600.039296][T13366] R13: 00007f9291e06038 R14: 00007fffe58ee840 R15: 00007fffe58ee928 [ 600.039335][T13366] [ 600.039347][T13366] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 600.039365][T13366] CPU: 1 UID: 0 PID: 13366 Comm: syz.0.2772 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 600.039392][T13366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 600.039407][T13366] Call Trace: [ 600.039415][T13366] [ 600.039425][T13366] vpanic+0x56c/0xa60 [ 600.039461][T13366] ? __pfx__printk+0x10/0x10 [ 600.039489][T13366] ? __pfx_vpanic+0x10/0x10 [ 600.039511][T13366] ? is_bpf_text_address+0x292/0x2b0 [ 600.039539][T13366] ? is_bpf_text_address+0x26/0x2b0 [ 600.039577][T13366] panic+0xc5/0xd0 [ 600.039600][T13366] ? __pfx_panic+0x10/0x10 [ 600.039642][T13366] __warn+0x315/0x4c0 [ 600.039665][T13366] ? kcov_task_exit+0xf5/0x160 [ 600.039703][T13366] ? kcov_task_exit+0xf5/0x160 [ 600.039741][T13366] __report_bug+0x29a/0x540 [ 600.039823][T13366] ? kcov_task_exit+0xf5/0x160 [ 600.039861][T13366] ? __pfx___report_bug+0x10/0x10 [ 600.039889][T13366] ? update_se+0x91/0x610 [ 600.039981][T13366] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 600.040011][T13366] ? rt_spin_lock+0x1e0/0x400 [ 600.040037][T13366] ? rt_spin_lock+0x1e0/0x400 [ 600.040063][T13366] ? kcov_task_exit+0xf5/0x160 [ 600.040099][T13366] report_bug+0x16a/0x220 [ 600.040128][T13366] ? kcov_task_exit+0xf5/0x160 [ 600.040157][T13366] ? kcov_task_exit+0xf7/0x160 [ 600.040191][T13366] handle_bug+0x9c/0x200 [ 600.040226][T13366] exc_invalid_op+0x1a/0x50 [ 600.040261][T13366] asm_exc_invalid_op+0x1a/0x20 [ 600.040284][T13366] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 600.040321][T13366] Code: 10 00 00 48 8b bb 90 00 00 00 e8 36 68 55 00 48 89 df 5b 41 5e 41 5f e9 49 25 5b 00 7c 1c 5b 41 5e 41 5f e9 7d cb 69 09 cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 9b 64 68 09 48 89 df be 03 00 [ 600.040343][T13366] RSP: 0018:ffffc900160afae0 EFLAGS: 00010287 [ 600.040364][T13366] RAX: d526c6feef1b8b00 RBX: ffff88802b680900 RCX: 0000000000000000 [ 600.040382][T13366] RDX: 0000000085fa3eb3 RSI: ffffffff8ba73040 RDI: 00000000ffffffff [ 600.040399][T13366] RBP: ffffc900160afc28 R08: ffffffff8b2cf750 R09: ffffffff8dfc80c0 [ 600.040417][T13366] R10: dffffc0000000000 R11: fffffbfff1f1717f R12: dffffc0000000000 [ 600.040435][T13366] R13: 0000000000000000 R14: ffff88802b680908 R15: ffff888032339ec0 [ 600.040460][T13366] ? rt_spin_lock+0x1e0/0x400 [ 600.040496][T13366] do_exit+0x150/0x22c0 [ 600.040536][T13366] ? __pfx_do_exit+0x10/0x10 [ 600.040561][T13366] ? rt_mutex_slowunlock+0x61e/0x8b0 [ 600.040584][T13366] ? reacquire_held_locks+0x104/0x190 [ 600.040622][T13366] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 600.040655][T13366] do_group_exit+0x21b/0x2d0 [ 600.040685][T13366] ? rt_spin_unlock+0x160/0x200 [ 600.040711][T13366] get_signal+0x125c/0x1310 [ 600.040771][T13366] arch_do_signal_or_restart+0xbc/0x830 [ 600.040821][T13366] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 600.040877][T13366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.040903][T13366] exit_to_user_mode_loop+0x86/0x480 [ 600.040929][T13366] ? rcu_is_watching+0x15/0xb0 [ 600.040960][T13366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.040985][T13366] do_syscall_64+0x33e/0xf80 [ 600.041014][T13366] ? trace_irq_disable+0x3b/0x140 [ 600.041038][T13366] ? clear_bhb_loop+0x40/0x90 [ 600.041069][T13366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.041093][T13366] RIP: 0033:0x7f9291b8c819 [ 600.041114][T13366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.041135][T13366] RSP: 002b:00007f928fde60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 600.041159][T13366] RAX: fffffffffffffe00 RBX: 00007f9291e05fa8 RCX: 00007f9291b8c819 [ 600.041177][T13366] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9291e05fa8 [ 600.041192][T13366] RBP: 00007f9291e05fa0 R08: 0000000000000000 R09: 0000000000000000 [ 600.041208][T13366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 600.041222][T13366] R13: 00007f9291e06038 R14: 00007fffe58ee840 R15: 00007fffe58ee928 [ 600.041259][T13366] [ 600.041870][T13366] Kernel Offset: disabled