last executing test programs: 23m30.439030919s ago: executing program 3 (id=13): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = userfaultfd(0x80001) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x2}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, 0x0, &(0x7f0000000540), 0x6c}, 0x38) r2 = socket(0x1e, 0x4, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000ec0)='net/snmp6\x00') preadv(r3, &(0x7f0000000400)=[{&(0x7f0000000080)=""/14, 0xe}], 0x1, 0xef, 0x1) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x36, 0x36, 0x6, [@var={0xd, 0x0, 0x0, 0xe, 0x1}, @datasec={0xb, 0x2, 0x0, 0xf, 0x2, [{0x4, 0xffff8000, 0x1}, {0x3, 0x4}], "cbc7"}]}, {0x0, [0x61, 0x0, 0x5f, 0xe0b77916a64b0bab]}}, &(0x7f0000000300)=""/204, 0x56, 0xcc, 0x1, 0x73bd, 0x10000, @value=r2}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x9, 0x0, r3, 0x8, '\x00', 0x0, r4, 0x4, 0x0, 0x2}, 0x50) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x900, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x0, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x8000, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x6, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x8, 0xffffffff, 0x6, 0x6, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0x6, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x6, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x6, 0x8, 0xff, 0x3, 0x4, 0xffff, 0x3, 0x8, 0xfc, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x5, 0xb1c, 0x1, 0x200, 0xfff, 0xfff]}, 0x45c) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x918) socket$pppl2tp(0x18, 0x1, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x351}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 23m26.56225507s ago: executing program 3 (id=17): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) syz_usb_connect$uac1(0x3, 0xa2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 23m21.10982997s ago: executing program 3 (id=28): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x0, 0x8000, 0x40024e}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r4 = eventfd2(0xff, 0x80001) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="b800000000010104000000000000000002000000240001801400018008000100e000000108000200000000000c00028005000100000000002c0002800c00028005000100000000001400018008000100e000000108000200ac1e0001060003400000000008000740000000004c001080080003400000013308000240000000cd080001"], 0xb8}}, 0x0) socket$kcm(0x29, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000300)=r4, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x2}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0xc0, &(0x7f0000000200)=0x9, 0x0, 0x4) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) sendmmsg$inet(r6, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x15}], 0x1}}], 0x1, 0x20008000) socket$kcm(0x10, 0x2, 0x0) 23m20.051884728s ago: executing program 3 (id=34): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c010000100001000000000800000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000805600000000000000000000000000000000000000000000000000000010000000090000000000000000000000000000000200010000000000000000000c001c00", @ANYRES32=0x0], 0x14c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001740)}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x25dfdbfc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x26008000}, 0x4000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r6, 0x0) ftruncate(r6, 0x51a9497) pipe2(&(0x7f00000000c0), 0x0) 23m15.759498815s ago: executing program 3 (id=44): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = geteuid() mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x3000404, &(0x7f0000001500)={'trans=virtio,', {[{@posixacl}, {@aname={'aname', 0x3d, '#! '}}, {@version_L}, {@loose}, {@dfltgid={'dfltgid', 0x3d, r1}}], [{@uid_eq={'uid', 0x3d, r2}}, {@subj_user={'subj_user', 0x3d, ',.'}}, {@obj_type={'obj_type', 0x3d, '][++\''}}, {@dont_appraise}, {@fsname={'fsname', 0x3d, '#! '}}, {@flag='nomand'}]}}) setpgid(r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file1\x00'}) write$binfmt_script(r3, &(0x7f00000004c0)={'#! ', './file0', [{0x20, '][++\''}, {0x20, '+'}, {0x20, '\x99-'}, {0x20, 'autofs\x00'}, {0x20, 'autofs\x00'}], 0xa, "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"}, 0x1026) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setpgid(0x0, r0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) utimes(&(0x7f0000000000)='./file0\x00', 0x0) 23m14.363576887s ago: executing program 3 (id=49): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r0, &(0x7f0000000540)}, 0x20) 22m58.914459963s ago: executing program 32 (id=49): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r0, &(0x7f0000000540)}, 0x20) 22m13.197347237s ago: executing program 0 (id=163): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c010000100001000000000800000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000805600000000000000000000000000000000000000000000000000000010000000090000000000000000000000000000000200010000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="01000000480001007368613235360000000000000000000000000000000000000000000000000000000000000000000000000000e2ff0000000000006afb168fdef46545000000800000000008001d00feffffff"], 0x14c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001740)}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x26008000}, 0x4000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r7, 0x0) ftruncate(r7, 0x51a9497) pipe2(&(0x7f00000000c0), 0x0) 22m11.860094969s ago: executing program 0 (id=165): syz_usb_connect(0x2, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4d, 0xcf, 0xf4, 0x8, 0x572, 0xd811, 0x94e2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x1e, 0x0, 0x0, 0xb3, 0x5b, 0x1e}}]}}]}}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) pread64(r0, &(0x7f0000001440)=""/126, 0x7e, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) write$cgroup_pid(r0, &(0x7f0000000200)=r1, 0x12) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000180)={'\x00', 0x0, 0x20000000, 0x8001, 0xa00000000000, 0x7, r3}) getpriority(0x2, r4) 22m8.495137639s ago: executing program 0 (id=169): syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0x352}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff08000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2, @ANYBLOB="0a0001"], 0x48}}, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f0000008500000050"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r4}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) symlink(0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)}], 0x1, 0x0, 0x0, 0x5865}, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(0xffffffffffffffff, 0x17, 0x0, 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf46d32345653600648d0a00120002000a0006005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r7 = dup(r3) open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0) write$FUSE_BMAP(r7, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) 22m3.872568985s ago: executing program 0 (id=176): sendmsg(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000007c0)="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", 0x2000, &(0x7f00000005c0)={&(0x7f0000000340)={0x50, 0x0, 0x40, {0x7, 0x28, 0x7f, 0x9010, 0x0, 0x0, 0x400, 0x3, 0x0, 0x0, 0x0, 0x10001}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x1000) r1 = socket(0x22, 0x2, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r6, 0x8004e500, &(0x7f0000000080)=r5) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0xf4240, 0x0, &(0x7f0000000300)) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000240)=@sha1={0x1, "96a83a5de10f5e6f419f14b2479a6ed5f54f41cd"}, 0x15, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f0000006140)="e0332f8f5747b9f778142cc174a9b5f0244b78bb6346cb5fc9135b8220090ee698fddc241870359d32327f299718466d88c89e68097036bb35abfe03e3c02234dcdb2c7d1209c657485ca1aa3f2fb80e71397b80fca6f3cf2367fb19eb95e5b4a0170063374645d9e020099ffd7def3d94cd29412b3d7b7a47bc70121be848cfcecea78d41a93622b134bd06e84dec07a9e5abc29cb02d5b9091e748cffacf48352628822bab7b24a17bdf4b3f3bd9fb17793496aa6490da3f58039ce5b40745dd63f82d93bed80b50ca5742d67d39029a98db95c9392e2d5fd9a35bad30cfe98682b5a069738a12c3cfd25949106cfc839202fd21c2b28e44be73280d5037351ead2dd1c277d9cc9088c6b14365eb0937ea9685f6b26232293803260f2c8cfe176b55df304bc2865b8f52581afc4beed445ae8cc405cb7bcc51103aef812c41437c5b070a3591ad0964677f4f9017bb300727dfab009056bee3671a9694be2e2f2173fcc06ceba5aed0d93a3d7cd88365c5c354788efcc705e90d572e34e9e566fc206a8167970ecb9cbc43f4d9de4d43688582b6600dfcfc7379c831e756a45835647bd87879a3e3942c61b9ea2c2af35d49a4caa9a109b0beb972996ff8924ea371e15dc48efd12b1203a7f1fe354977fcf9e4ee2c8f210387e551ddb55e5f67ee6bb9bc8772649693b0adf24606e8ccc59f020834d8cbfcadfa1770549fe464dfc412308fbaee8d30bd20c002794bfb923bac6b490841248d12ad9a0e54d1d96e3aff5dc4930a6c8b7c75264a46af7a6339725fb84e0363463ebaaaf58d6b9309ae7c87a8df8c68d2487d684011de1fa7645f3f48cf3bb61bee8bcace2f8ef5f967f2765f8086aeaa5dcc34c84e379a7ddd6438cccb5b8098dfbffffffffffffeadbc4ad2b2ef98412a46f74a171ad056429dbb723cdb9ca9f9f03170dba2870e5988b7cb755599d1eb8f7eaf5c8ded4b56022cb479d0bdfae18f69f9ecc42f4c181ea10838229ba5db7f088ad8d5f77e49c1fd93ed6b983c43b23c7eeb1233f0c114885057a27cd3f67a309e3fecba241836bc92308b830b10b04af6c9595b44e859b9ca7ef079e151fdd500060787be3a7a5b3e23b06ec70f087134504f8b8e7b6799ebfe14f698ba7a813a380e6f92cace9230aa8094a2465f7224e2becad469d0aaf0e48b0098eacfb17abdb69bb2ebba97a09d2b739b532d70db91fcb0fcb38bccdc01d7c8113024ea8b619e385e58d31899721416e10b408504a9c4fcf870d21051227440a616cf62f6637b62eceaee09029f88009be02269cb5e5ed090c6f5e6c652c31214aef301bd23ec2504f90991cd27539c1b8b54db51825e951d076cd0e70f56de4b91894ce22049205483a0fe7d7886b36118bebd96d138980e26604b6e70a7275c6b81501143119a8c2c271558202eda196704ef9ae3c33301e1afbe56d069ce4926bf531d960f3df58192f3da558adc169d48d39e24e04e95c406b34b1f4ed2726ef0f6a67dd84c75636984191d019cebfa883fdf99affcdb4c874614a5312455403895891daf7469d6721583ccd1290ab05b14516f22965fc52c4a528f1a5c20cc133fea279d9efc991ec4d51d2654daceda234f6d3b0c635db697aba3eeaf8356319adba42428266ac09a6e6495ca8f60c1c4e052068511696296e88ef86a591948627ba97df634e0063eb5f208df00a069b1213c29e58cf76f591253d60de9d7c01d29992ccc728140299c429fec0df9d90f83fa2467ce00de83b16d10c7edb80ff8d4b1b19eea9bd1e2783a0d41215c9cf23bc3ca1ff414e3f29aadba00c5a8d5b44c28c10e99140e5428278e54bfd880a93fd1b54b560422ab2bfcf120a7902373b6442c6e9867b19aa0a6b77b1634ab6fd1c8a1d90d99ebb9ebcb89d593562b266fbc53c40501f9298690283c45059b3f6ee278e46cb3904c947446c28af8855b2a68e6e0c0da205a6e12fdd15b393d579039b31c1a54230ac2ea13cf1f5540046b4dcccdd731fff7323c4880e5d2d8668d8a7f08920715c06ef9652eb55f224c82a6fdb970dbf1032403f283bd868a23f4785a6ab9c0bcd2308dba1a1f258ae512cf64784e501008db366ab7093a6cc4b6ee86154d44a1a15c10834602dd5ccf730f6d1142ac19d113496dbcb80021cb5733924265d082a8453b5c21e0245e4a2627e8df090da6a129ee49c58c1a7437369acdee15f5e4e5638f05d9f6391572d9890219def702a013a2b05239664dba44feec2a9508a3200b47de03e6a784bca2f3633df534af33da0a95a34ca845b61a22ff55a5a4c04ff9e06e7162f458a8c56e106e75ffb76a921f4057dd73d5f3801aa78ca4c78d6b79bce560404c2fe3d57876287f73e84c27c486ffb997951f9e0b3aa81a5e7804ac7360add11e7851842d0ed8df041c999e50226fef006373bbb53d5d8e9d1653924e60234fd0b6645b821746f3d88591ff66e294e8e958ca425ddbc7d604f7cbbcb9d5fe0d4ad53878eb16bc801def1005e1eb12a6d4924d2179948e7aa542f2600ba3c6c600629d64c529c7326c1f38aa4e1a6cc259e58f86400d65d67856c8f4fffc33ad4c279dc05367307f562f8127f37b03c3cf38a97cfde0c02aad8ac40d347a9e0a496f227c068dc6c666fb2b6a18990f607399b0707d135752d93739e1840b5b4c125c81eeeb318869b408f87778451e49f3ad988a8aa97672989ad367833ff7e7f0e79c37ac794fe466623e122127fb94ebbc01bc775183b26b2dc407b1aa1a55d4ce04dbe1df4fba0377fea4c4bfa5a37c4dd733fd116b9c7f50b11dd512ad68646b9ddca295fe27bee78476901fbb5c8d2856ae0e9e21ab26e3587c1325f1fa28edb4081f2ba309d5fc39f7f54abbd0d5a152c2f7e3a8b3a5ef6e097b109061c91124f41f33055a7bb86706629f614d40346715cf2fe387ef4e4fc6646839824d3ef85eeac85bc5e681320f6fa7057e0a10de8c4678b48510f77b91bb397dd1209eaba8ea1f237c348e9e0d7af1229e2c04b6560e48e3a7491f3066b63a8923becdcfd8594c1c55098a51283b599765b049831cacd9478e5e996c778d524b476f6677218c94886d7548be7617e5796e35bb3c9b13d70e4897867d85f0350e9329985f051fb556b861aef7dead54e6b29b9ad837cb4774f47a5371ef034e3ce0113e67eba8842f4ac5b51a61315bf050078c710dcf14371d9593730b1d0302ef999f488bbf42b7360171da98ad68932bda4937358fd1d0c2bcd04f7dbe2beaffa0d53cccda316cb19270cf4aa56695ef3203b49fe92d1623cc1d714da6b8f94112db1781562ab2ae50bda23debd55da440434299c992f2f8c264310d6d8ccdd042737db0253d6889d8bf36fe99a131b73300c9798b8fd58b5fc681b97e71230cd3094e441fe5cf1294bbc28f41146f06e39d5e19e673dd489dbddfc16fe281160a8008e375025cbf25e84945f2f0a5ffb2cd58273328ea9d7533b2f0861eff95823cea18dc1877183fefab808bda0890f91f1d79b36953b138fd62caea3411900647a4afadfecade2ff6274175f06614d108daaf9821c413a137e33c826957953bb39e2f852097f978c3577abcb71d68b45794247d8e82614979708f6d6d0e469828206b22913d6d320d815d42c0d943640c63196f703f946089f535eac511e26c6a5a529e875eb15aaf65fd50dcbaf37a009f2f9081cdbc744cf7aa2336913e89f1961581ad4bb6aeb1d23a787e2d3f99639871df5842c30581263d5139128f0a3f37ef48bb636d7aae06581de6baa55a12019d3ed831950915fdc1eee819dd01047bda606f2852699529718c99606246a92bb1dd9435d8f3a48646c0e423441bc783be358c0c91e6846419b6c0a81354500cb2721834dc11ba40c3bbe5717e5142922a168ca0e20fc269ea584c7f68ff7cced62c4277385368b4ad596b79c45a9c4575c37f300cab37a5693cb777fabed412934d3a77505b17cb2628119ddff45f3fcbffb50386eb9cfb6f82b37fa852ad4b65bf8e2898b11bf051cb7fb0fa81cbf81b9ceebb05498aeb2691eb15297edd682976d5a4f444cdaa82f063bc4482c28c4e6257c7cf3e5ee5a502c6527b77b12725e7526ff896ee2f8066536dce04d63072a34c19d533d4dbdb93e7185482cbf7510c5eef2f8aebebad011727cd8061a367b7e1868252bb43d9a74c9c6a10539e357d5367fac69a9296fe5a79a2e5b45950ff462e0e882aa32ff7f29b5644e5311f3e0b076c58683de29ad9dd8b2c92a41ca8313ac997e44981e82aec550bbf6c88adf3d54e9fdf93d9dce95289e9086043d888f19d209cbea79f8f5b2c81b2c3889eae1cb5305e282b883c4cfa3798eceeabb442a74ff6a8470020a296ef01d8e32553663c844e67e5a3a44375f0074ce9547a6c489ee86d7652219491f35c6b904d51a26c3d2cc77d8ff97050dd0d0aed4a1ecf1db7ac48673a1dcc70ac16f709dcf4b90148aede5302111ceaa3a81c49b724cfa206283b62513f96c1da77efafe2d2d08a5f391ab690b5d974ceed2e95e85b1039def0e94c79cc0aa1de1f8133e985adfadf4a657710487b265bb6692fd2b91a06ac98d50b052b8a13168e2638b93209238fbe67f4590a81a2cdbcc479ca9178720a6ec05bc9457f27ad2e2fd2f4e9c643ef85b6287a01f7fd597799cce7d6464ed3c95110733d4ba92314ba3dd81e51f541a6e37f8bb14376e41560f9049b4ff349a467defc205f915a345b5f06d090645180ca642c719f03e9813bff7fd635660efe38b022130d42f2cedd792bcba2bfb14385c6d1cbe5ff2e38c22f1f8d5e4d93d296042507e43f24ff904827b16f2a3572d26078d7fdb0cfdbe2e6bee07b94ae441e510681c96f97ef0ddbd7efbd80ce0689f6e2022a189dd2937d3eadd82a154a5fac91b5ef48523706957b8d5f55077973e9a036009d745a6df39ba154dc59c4ef784d62b3f2d782dc508242a1b0e4cc294b6e62e98ef946f0d984c3174cf86b8a0beb615f046ec50dd0c8a9c0f36df60bd162f1130f894085e7c47b6c28ff336f5d75166c1840e7ad07204fc10ce976505f6aece0316d8c65b973f61cea2fe4c6db722717985c25249f041c07a86b878702a8c9ab7c33fe41039041aa38489b02a28f18d69ab34619e9e35514c54592c8059984ace64b5302b5f22d68c35c7ffb23c63ce877a1e1b160dd2c329eabcc0e1e3072021bd811de3c0c7a68af20ddb9e2912b7eecc2a8cf083a252d0fe31629b20559f7b976e4d8625644385c692b8cdc2886a42d750962d0dee10a1546ecb7ef961216cc456d2450a44aab07014fe0be076ca6bcb46b644af844b2ad8b3817f1895a5d579af3dc937541f4b7e9203e7a7af534b406d8f6e3bc555d767603122ab1c4e62de19d6af63be8e39fe45732859d6d92e11f1a847f7d62764b6364aa7f95f03cc7deba467da5be71657ae50ff6bf93c51efb7d19ac9887e92fe5f3c9d545209eff307c9e02073bd3404827e148aa63c135ed668589bdfec38cb47716201a9d02f1b03993f89e96b33b32e52ddffb0580dac45422ba7a3fef76e519a3dc8d12eac60c2d2f8c4303aafa3e80135c403360d51c9cdeba3ffb31e664302f587e0e983ede7f9b2bfe2bc64bd5029cfa88445e043e08f3e9affee25e980e75d2664738726e3d2eade7dce0ece78a514bbbe5a54c121374d079e3b05996052d66889742232b73e950e1a9892e7352c9e546a8cfb48332d2b2be6327208ca51dc2869a562581947f62b0d5bfb3e0911d4854f822d6738b4deb195840d2bbae0b074b8d1e1010c24ec00052dce7d259e3044aab1a99d261fb3b49cf09dfc85473f94db06d49e202ca12182283d48144f8389a5301679901600bf8130d36315b277a99204b85a1598f84bd2d4c4893108f6717bf44234181467d6eeee61e1823268b5c60bf04d0e13e429f411b51adfca20ff1a1b1eee203d59b03da1643c3e9fc474a91470116c6c5275542adb10f3adae2ae87e88b93f334e0ceb6216fc081e8d84d8b0a503196dc50599b22b89b807627b427a815aea0dbca69e5fb215ee996395d8a21a1c67ac295be33c6517504e1f00f579f8c484873cc670b5b9e787b1c30ca1f0b25f8bb8f4bde3b3f4fa730c292cbf97b25068ba9c65f78c555d5f75d52a57958d7111e824f3afa16484f625abf62afc80654c36fd9f8284466422fb18e08274e8febc719d45b784974d50d187ad2349429af3f7930252a4d45997762e9d5f5493d408ca144532aa89aa3d43c46951dafb8f81794e2e9679ce238cfe86e104461032819d62f217faa71fa9dc6da8861015567d1f7309090e25b7015dcc6d72a5e7ba53296ab1bc72467ac50831628cf5238155aed3fb189a8b527ebd38771e16454fe51e3edde55cea454414690491207c23f6cf33aaeeda432de2d1ede04e039a16245e66cce6f4e4ea534f290f02a2a81a46d6ffea7967dfbe37461f83d472091156594852823392efc953f4ac099d74e2d0328d9f47bd952352981a34055acd0273309484ab56afa85ff0c22fb53ac5d7cc8e346b4c2f38a4e2451738146b7b90c14f826c7dbc1b2be79d83772a8d629f2dfaf15286a15be1ea22a05d4ee3de6a6bfb7e208dbbcc88e77baac940d6438aeeb77c3a32db08b46e79545b65f7f3c1bd433092bc9116668c338ab35c01cb5871167868c6b61bd4c0ca5f96e5ce2465da06c4a320839f3bb7c0dffd40d5bb9a32fcbc6f691787de7211da062616272c77c62ac83e4cb29fb954ab27d9009877b79be54acd336bfe2a6e087abaab004743f5ea4ec8ddfb8086920e8e458a413adb98077a3cf860513cc8a453eb129556c871be7e7232a6130c4332819ad17b289fdb31f8f8854dffb4cfeca6d792567b444c750820a2a8a2e0f93779e61a4966650909369fc8bd5bd2bad4ff95cc8a14f6cd83ae6411b4bfe1a9b5cdf1fcf32c54cef1731edc47d41fa581376b25006fc859b98805d70a157e501a2cb2ab425340965213adfecdb5addb2b4b2ec5cc6935e4e279bb98283fb20dfcd8a2c91aefda9dc5a57bba4d8803d1eb0f4ba9529de01e39c2aa60a91267c31d036a3f669b9377661837f58c6950fdf38986ea13ff5e9c4d966bf999002da1a854d54aa225b259d91eb88425328e7d13b06dea321a151a8dfc44755214da97168e8acf027d66b7fff45ded94fcde53ff80342d4595644549c4ed827225596e2b30480e94eb049b6cd718fe8424d044bb5098e0206047ddb81755e3cb92131dd47ec754b64c4b78f663e364cf8a74cdd9857c81316dc4ccd5f02a84b310abfbc9d6a23ee6d1eaf6b8fc1544cfeb06002c8a40fb0e49859d2073a7b1cb112713518ad5e007d0a256f901469bfa5cae98841f877faeb584d41bfe695da72ca5700ae085f39c99f769502ea9f43c0b84ca4611441d5adb3e5d0a426297e535258748169cad487f97d171c0630642943508206ce648aad2971297f3d4037d73e5fbc73460ca7401b7dbd7807273ae077a81fd0d4bc90b6068e3ec95afcfeab16619306fb23942a4308e8253b35f4912df392dfc5daf35dd842a5a1f78fc294cbdbd504056f0c7779121b5b3db7461e437347452476f3b0bb22e63aa23cb9d3e797c6c95513058d8fb2c27864ac0e1f5001c988e29c79bfa4236c7be41dee5561d825c1f0fbebc0c06cc4712e88ad5efd94f4eb4e93794af42a9752a2ebc57dc2f3881c75bbb23ad25b69619f9f5b07fe114ba291d2b5b4c1c175e1aa3ee3eda55e6126b3ad1e613bf8e0bbac727b879e7796fa0ad100893677a18b53f5eb31db43a97370d3749afbeb43b9c1c11d9515976976d1cc1e44f35d317299ceb68ea2545f2a2b92b4e1046f6f92c33aae6995593189bb2611576599fd765b8e6fe2e88674ffd57ee8252287b1904d622c36a502db45c72b0d5fc3d983cc44bc955eb43911404667a4ab147d72b69ff2514dfb820ad75758e85df88499cea94ed658b4c1c2f49fe2bbb8d2dd97f844a6df289296cfb9cd5bc8d17aa235e2c4501b1422b25acd6dbc3a91d03904c545320524f9034955ab02f5d058097c37d23984baf808d28b3e12821eb8919a77c1b6a8bdeceecfcc487c39db592817dd378a7c5127b427e7279b2a82f6b8eec6b3fabe0947e353e7a386475b15011de93e2f2891f772ef90f4aba1ee1c4d7321c81ce4dcaa378daeabb93182c319494436dbe67d252a01291cacb59686ebd53c6df21c083e98fa299cf5e9b59f1ccea95c62b1437c8ff8754a6372b5b879ebc3241f6430871eafe35337d75cb68c42862846df4342ab434f7f0a7b9f66824e1e696e3dbecde179592774b7511e5a7a1a06ba601eb5f2a935c7cef0f83ecd412a84afdd05120fceb1afb6445ebfcdff8fffffffb75dddccc45afb4f5bb1308d39309c92c0b61a322d5229881fa5d598113cce54107036ca9f63fe863d257c706fe89d5c7ae59a459c6f15ba48d80da4aff541797b26418acddb987df3544bc4918cdbbdd8dd1bc2163c89635044e7b4da878457727a667c0146a12b4c46639497243259bfe4aa5ea50eb79f39fa9209256c9a685e3e39d6d8b6a9ca7d3554fbff0908ad6c6ecf68e506c20b16cd4a98e3ada9eb0cb3eb0b75b13b6d80bf99eddf2282da52cec085d3a725b71c29395d605e1eb26143290946a3a0d24347fa46145735dbf4eabc12150b8d5f7eeca804d7ed1fecd0132d1b94ebec65cbc07dfd4d54a5140567e77c646bd92666922c43aca8e482c59b970fa43087eb76d6715e4e8e5ebe54ca391383ef685b133534fcc1e5c5eb56f9d76a888506c4ac8d289c37039e0c4f927b0e11e85c5c7ec1cf4b19bebee6014cb89ee57f2ade8d166005e956d46a0c01f60b58299479e8a59a2e88f1a7ffd08b27d92fc2772b338959bd0a1c9cb95075c3cc17043c818345b29b76c0b8ed41c8c7259cc780c657cb9509daec1558453cfe061f54e08523a55d3223897559d51096b680802140800000000000000322e007c2af0c08867291dd732bfe4b24d1d5ae517a7f5903c369ac6b157d42eb6ca8c0d7b50fd533a56c814e7cf04db3012eebd53ec1b123d65ab1e462dc19182b690d56a88ad5a1f4d89f1749b005e88085505cc6d7de8eeee08def67bc1d1519d44b7a62dc07e491f328f786956d9200f00d78829e6af7c1a5835366201374b9487330920d4c57e2f7073292e173acc2424bb0d5e0e9448b4c02f9cfc99bc408110b6a3e9bc3799e4b178c2871069bc7d9ceba564378f02b2932c36f159478b5facd452b595a86d119216af9d860bd3997305320159a69a70fc62284141d23d2dc1e5394b271d99e5570450f1c55807e96c7cbe1b7c2e3e96f69fecf0f375e36e0d2acf145ce2d996c1909402744cce63664a75e480b197c345360321e830e5912d1d7bfe5a129a67fa98e6eda5268fa588047859daa11d087d0dbf0ccc7e120e3a5820cb4f5dc06748317e3f866518eb66e39dc8a68a7411b3403fc8eeab8283dee4d767e8e5842ed922e03ae5b3c9c494d5ebc61527ccd1222740fedd9e469ba6b30761cf387d654081c7e63182860e4548748058914a9cea01caf074fe6a78fafa2b45c516f9f20af9ac6773a400fa9661a872f6b55f0ed52a9be9e9c35502604b924f0eb628d6545da322e0713f9a5587e87e4b04fa495423b7c72093b764adfd1430a2e608b7af3d2bf80fef00e5b69abe386618274921ff57621bb99739de2e066ff17e95eba027f6a35170af3a69e93359a9643e155832d45c1aa9a8f71ad35504b99d3d0a1c11ae108664ea36f4dcded083aee17ac9efe7ee3fdf7b63c7c09bcef62caa88708510d45cea79d323083ddbfe7e5d3d9138f206a7af82ef1d26c85015c3e55a285a35d0052546493536b9061db27291a9292033753b7bddac63dac6f6271689240e43523c434a65e1d35299e386c953d0c92f21057e0b7883e049d20961e75069587eb3df6206496f76bbfd96635bb19837ba2ab193d79072ffb8829306b63697ff104a65031b8a38c24cca9ba23d5cdf753169a00fe2b2c3849f234a7029b657b3324c10d553e601aa97d17024f7bf5a99f96392f4a079a83daa27f4e3b512ee8536e764ce4dc36fb7810a9a502a693e55bd9f116202c5e906703e2c43d84448598b7af78aa60a205c152841e75e23436738ccaa6bbcef87e6a237d86d1a5e38e56c162cd6d61a4fb8b410b1643ad557a22348edfa82c23db11c9abdd8141fce263a66537512e93a930a4801ad862a902c7c1e00eb7c7466b1351318b7196c2a9016c55a05e104e124bdb568132f9397e31b10d04e5284bd029ea2f6a3ed11854e09b5871d6a725c21a9ef5d7e729a90a8206d5f61e6e42e47dda3e31b9134d47872a0dd7a576b665ec6ceaa5fd7d85ed7feede9ac9fc23e40241c0318077edda75b62eb271e28fb3705f7b4950c14b721a3a74a7a4e4de02cef5de76a1602b906016c0892ef37db51b0a1dd53f28b3d896f20abbad1ad0e0220960423267fc6e1779d1150fd584dd184bb43278d2d68ff21ac0daeef5408348cb80f4a9e0e606f6048bbaa517289451f084fffb63c5d904788cfc310b5495528a58f4650dafc4e4675b99d35ebab710ac6fefcee6c51a2835510fb6d2dbd8f97c3e53fb7a23c3f3c0283eb2271504581b9c1fa31e35c117e56a5d668a9c57df3b4e1129ca019a8b877fa4a22768dfbdd9d2154e17f4a7755b065090d88982471bfb242d89af5c6782693a6ab1b1be74dfa5655ac3b5ef4ace8dc595803cf4025bdf5c0e9fbe7a12a3a313311809591da08a2cc6cd8480dc960e1f79fa208440a0e589be5756c36d5830a51c4bdc39c2a85c0431bae3a7331b2ffdf23623693d343a7938a8a8a4dd4d523c6450a705bccbb38427f06f4f84a18adf303c0ddecf4ce2b6cdde4e09a4c31816195f0fe9f05fcdc0609f8a75ad2f23d5c24faaf346c13ec0512a5c29477ac561c878085d1a323f6bab08e2fb9ee57d7bb621ef21caf3609d74036c6dc1d7be0b6058d89dcb8d9aa4462fa0a740be66e3fdaa957f27c5a26dc586ac8c927ab2d7cf1b761798ea4191be8f4423cf1a6727d0c5f27a9969a753573afa584dea82678f3471ba36d726c396d68c671e579120f1a11cd50fa66b26fc2d6cb74ba07edbd5d3a288cf58ed1255381df02b2fb8983b7cf833433d1ab8fdef12651c3507e4b69fbc4b234678cca36761e8da434e5f036f204a1400da15277ef27ac140e2d574b89c0fd617da27e6ce862883bbe81c288834b9477d0d440c15dad505b363fcc1cfef8e2e3a96438809505844196acd0af751dedfced67f209c2ffa9c6da842c93ff4b5fd54a67df904f2f31b4236728c99582a667a8461d397770a657ffa7d514b0f076d7f35e9704a836e7882a2acf0a0ec2158ac7234953c3696abdc791c0b163ee76fbcc5adc18b6fa0f51f76f3d313a0d891f1deb69f6e44289b1aa43a768b8d13270959763a2c45129daeea493a5b0d7b36753b223dca9a8037368653400", 0x2000, &(0x7f0000000700)={&(0x7f0000000100)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x2b, 0x1, 0x300900, 0x0, 0x3, 0x5, 0xded, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) 21m56.762597992s ago: executing program 0 (id=191): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="0400000010000100fff5000000000000000000dd7d000000090a010400000000000000000200000008000a40000000000900020073797a300000000009004cf50000000000000000080005400000000d080008400ce4239a140000001000010000000000000000000084000a50394e1341a08b45338ebd22ba2472c4a049a2ba2da6ddbdb46ad0c114bfdc4ae8dab8a9daec8facf2b69e761123eb77fb0e049f53f87ead804cde6e37086eb50e01997daef34a4e0d7fe4ce2d195577e57e0ecc049ac7390d5282f29cdcc524d0782d9ce7625e3b699a13f4abac391657ac92dbd2538f1a63"], 0x6c}}, 0x20010800) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0xa9, @mcast1, 0x2}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000b0603000000000000000000060000020500010007000000240007800c00148008000140640101010c0001800800014064010100058000000b0000000900020073797a3100000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4844}, 0x4800) 21m54.6907845s ago: executing program 0 (id=195): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001800090200000000000000000200000008000000000000001000083d2c48800b0000007b26282f283a00004a5da09932c027f4b098326461eaed9b70e9cbb6bb64a44c6163472f94552218238284782e18c100b949fc355428873e77356d5d639da58bead9b7eb4e8dcec4136b6b5458c95fdb464eec3b6371e667856243b9457a0342d243716600"/154], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB="3200000010", @ANYRES32], 0x20) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$video4linux(&(0x7f0000001540), 0x6, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() socket(0x6, 0x1, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x4a200, 0x0) r3 = syz_open_dev$loop(0x0, 0x81, 0x2a82) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000004b80)) r5 = fsopen(&(0x7f0000000240)='vfat\x00', 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000140)) connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f0000000100)) munlockall() close_range(r5, 0xffffffffffffffff, 0x0) 21m53.199190451s ago: executing program 33 (id=195): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001800090200000000000000000200000008000000000000001000083d2c48800b0000007b26282f283a00004a5da09932c027f4b098326461eaed9b70e9cbb6bb64a44c6163472f94552218238284782e18c100b949fc355428873e77356d5d639da58bead9b7eb4e8dcec4136b6b5458c95fdb464eec3b6371e667856243b9457a0342d243716600"/154], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB="3200000010", @ANYRES32], 0x20) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$video4linux(&(0x7f0000001540), 0x6, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() socket(0x6, 0x1, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x4a200, 0x0) r3 = syz_open_dev$loop(0x0, 0x81, 0x2a82) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000004b80)) r5 = fsopen(&(0x7f0000000240)='vfat\x00', 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000140)) connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f0000000100)) munlockall() close_range(r5, 0xffffffffffffffff, 0x0) 13m44.990724556s ago: executing program 4 (id=1742): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="001300"}) 13m44.771256819s ago: executing program 4 (id=1744): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000000000)=""/167, &(0x7f00000000c0)=0xa7) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000560000000000000066ba2100b066eeb9e00a"], 0x56}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000380)={0x2, 0x102000, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @pic={0x7, 0x10, 0x4, 0x81, 0x0, 0xb, 0x7, 0x9, 0x61, 0x1, 0x8, 0x1, 0x31, 0x0, 0x5, 0x4b}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13m43.659264371s ago: executing program 4 (id=1747): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=@bridge_getneigh={0x20, 0x1e, 0xb7b6511a36acb75d}, 0x20}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x480, @loopback}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) 13m41.050898652s ago: executing program 4 (id=1751): mq_open(&(0x7f0000000080)=' \x01\x9c\xcf\xfc\xd4\xa2W)\xebS\x93\xa7\xc7-\xeb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00AWK\n\x8b!QO\x8ew\x8d]d`[\xb8\')\xe50\xb8\x84\x8f\xf6\xec\xa5fs\xd5l{T\x87r\xd2)r\xa7\xd6\bO\x002:\"\xf4\x12\xc0T+\x00\x00\x00\x00\x8d\xd5\xb2Dvc\x8e\x93\xd8\x00\x00\xc56\xd2x\xe3g:\x00\x007\xcf\x1a\xab5 \x13\xbb\xae!\xd9\x00P,\xed6\xf3u\xe3\x91\x03\xea\xf5\x11f\x85_\xde6p\xad\xb0\xb0\xb0\xecBS\xc4\x97', 0x40, 0x80, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="020d00001000000000000000000000000800120002000200000000000000000010006c0003000000000000000000000010003300000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6d", 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b7050000000000007910a8668b00000000001d0afffff0ffffff9500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffec0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000100)=ANY=[], 0x36) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYRES32=0x0], 0x294}, 0x1, 0x0, 0x0, 0x4c814}, 0x0) clock_adjtime(0x0, &(0x7f00000003c0)={0x2, 0x7, 0xeb, 0x7fffffff, 0xffffffffffff0e21, 0xfffffffffffffffa, 0x5, 0x1, 0x9, 0x3ff, 0x7, 0xf07f, 0x80000001, 0x80000001, 0x5, 0x6, 0x2, 0xffffffffffffff3d, 0x6, 0x2, 0x1, 0xf7, 0x7, 0x0, 0x4, 0xf}) 13m36.016488719s ago: executing program 4 (id=1762): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfb) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8be0, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0x4, 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000a80)={0x0, 0xea60}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x2) shutdown(r3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, 0x0, 0x0) 13m34.588868344s ago: executing program 4 (id=1766): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 13m19.288740723s ago: executing program 34 (id=1766): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3m10.912034587s ago: executing program 6 (id=3777): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x2000) read(r1, &(0x7f0000000200)=""/209, 0x128) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000180)={0x2, 0x6, 0x6}) 3m9.659520288s ago: executing program 6 (id=3781): syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1, 0x0, 0x8}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xf0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xd, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) 3m9.484014113s ago: executing program 6 (id=3783): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) (async, rerun: 64) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 64) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}]}, 0x38}}, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800000026e56d7bd0491067674d2b92a3df58d17b8e9ac584e27749eaa09fbc87c7560c4759097e9946f75c4e41c3a6d99cb8890b68ce079320c2bf3e8fc486aff6edf07d390ca022d09aafef4ef7b0fb53d7c13be5993c545e2c6fbfc6703b12d45d63f8d0c0e10147d2043c34dda3d03e0500d0fc7f67617fa03298a964ad5024f8a086e94c4bc0c793699192455b94fc6ad9e647ab6689098c3033", @ANYRES16=r7, @ANYBLOB="0100000000000000000009000000240004801300010062726f6164636173742d6c696e6b00000c0007800800020000000000"], 0x38}}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000001b80)={{0x12, 0x1, 0x0, 0xd5, 0x7, 0xdf, 0x8, 0x10c4, 0x8244, 0xdc00, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r9, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ecm(r9, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$printer(r9, 0x0, 0x0) (async, rerun: 64) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYRES16], 0xb8}}, 0x0) r10 = io_uring_setup(0x6390, &(0x7f0000000000)={0x0, 0x621d, 0x842, 0x3, 0x39c}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r10, 0xb, &(0x7f0000000080), 0x0) (async) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r10, 0xc, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r10, 0x12, 0x0, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 3m7.195877378s ago: executing program 6 (id=3794): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40, 0x1}) io_uring_enter(r3, 0x628, 0xccf8, 0x43, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) unshare(0x20060400) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r9, 0xc0bc5351, &(0x7f0000000d40)={0x400, 0x2, 'client1\x00', 0x0, "24db67818b4014fd", "859e92f118c4484604734b1d43209426c1bd711b936fc2c4d28f902e94f8e647"}) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000e006"]) 3m2.691462017s ago: executing program 6 (id=3804): r0 = fsopen(&(0x7f00000035c0)='ocfs2\x00', 0x1) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000003640), 0x2000, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000003600)='smackfsroot', 0x3000000000000, r1) 3m2.064770572s ago: executing program 6 (id=3806): syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1, 0x0, 0x8}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xf0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xd, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) 3m0.662917054s ago: executing program 35 (id=3806): syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1, 0x0, 0x8}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xf0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xd, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) 9.683514449s ago: executing program 1 (id=4364): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') (async) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) read$FUSE(r0, &(0x7f0000001300)={0x2020}, 0x2020) (async, rerun: 64) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) (async) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (rerun: 64) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async, rerun: 32) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) (rerun: 32) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) (async, rerun: 32) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 64) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async, rerun: 64) mount$bind(&(0x7f0000000140)='./bus\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async, rerun: 32) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x20, &(0x7f00000005c0)={[{@workdir={'workdir', 0x3d, './file1/../file0'}}, {@nfs_export_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async, rerun: 32) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') mknodat$null(0xffffffffffffffff, 0x0, 0x4, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x10) (async) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r3, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000340)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.579857023s ago: executing program 1 (id=4367): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x4, 0x80000000) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r4}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ptrace$poke(0x5, r5, &(0x7f0000000080), 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'batadv0\x00', &(0x7f0000000040)=@ethtool_perm_addr={0x20, 0xe3, "b8a568462022a2412451aa7c8b9d25fac0e14f75a317da703e7b9b9ac05165b175f4bb2cb98d435579115f4f7c84e9dfae9621d765278147dddcbbc7924063cd2baa6ca54fb65a51c711610d537cbe99a4ba7c52bf5478415e14ce60c393f16c51d4f295e3ff3c7a82aa7d2eccbf445270db424a0c9721b05120931ce4ae3de6ad38a5363754c277d493b6abab39670f6989fc8f3d6377d211a0e79d581806b79ff16af18607fa325c5ba61794e07f54562e10b5566afd1fc8cb8bbcd84af48e7c4e5aec15facee29859b794b9a17a605db352bd882c4540bd57a2fc38a73ef262a1ae"}}) r7 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000000080)={0x7, @pix={0x4, 0x6, 0x31363553, 0x0, 0xff800000, 0x50, 0x1, 0x3, 0x0, 0x3, 0x0, 0x1}}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000f6ffffffffffffff0000000000000000000e24", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090200000300ffe5000d0000000000b702000000000000739af0ff00000000c509000000010000c3aaf0fff1000000bf8700000000000037080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r9, @ANYBLOB="0000000004000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000009004"]) 8.019536093s ago: executing program 7 (id=4370): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000000)=@filename='./file0\x00', 0x0, &(0x7f0000000300)='./file0\x00') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000100)='./cgroup/../file0\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x4, 0x2) r1 = openat$cgroup_int(r0, &(0x7f0000000380)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x27) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) readlink(0x0, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa97c4864ef7a30800490000240064000000879078ac1414bbac1414238907efe000000d8605fffffffffffc00"], 0x0) 7.957493982s ago: executing program 8 (id=4372): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r0 = fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x5, &(0x7f0000000200)=0x4000007) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@local}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r6, 0x101, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r7, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) 7.936065229s ago: executing program 1 (id=4373): io_setup(0x1, &(0x7f0000000000)=0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) r2 = eventfd2(0x9, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = syz_open_dev$vcsa(&(0x7f0000000280), 0x8, 0x80000) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000012c0), 0x40000, 0x0) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000001340), 0x2000, 0x0) r8 = eventfd(0x2) io_submit(r0, 0x4, &(0x7f0000001480)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x33, r1, &(0x7f0000000080)="9ba3beb04916ae7016990a62e5135188b2cf4c646c938e240859383a9c5f3eb594945f62004b1b82a7da26ecfade01829fc4ab96230a994368e6692a2ca50ab451efaf7e85089dd85ced0f19b0e6888eb7af3a9b6e557aeb24b6f46ba1549182c1d353dac33deba4c4bfce165d7ae59821ae5c2711190e9c1fcf1189d2a286bf32160530cfa1eb8ef47f4f26ec8a49c33ab27998e1d5706495967aa23b0afcaa5e668e1146890c5c94fc174e64fa4c4fad5c14", 0xb3, 0x0, 0x0, 0x0, r2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x0, r3, &(0x7f0000000180)="dadc5821e22fa5b83c56e4ab31c5ebcfb18a19480ea9a3a9826e84759f2cf4564a86422cc0933b4b4cf1ffa25bed9ce1944264cbc2842428600d56f77e38bac0973e25eabeb23313249ab4ab8c8c444496ffa9778a07441db24783bdf61148490ee56dc63be6bdca77bb8db2039f05a99cb52f4b0076c5dc627cfa65f6631f2df643b30902fd2f9160029a2ecd0c8a31d4d161340d65d779d5eeca5656233b76434b263791", 0xa5, 0x7fff, 0x0, 0x3, r4}, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x5, 0x3, r5, &(0x7f00000002c0)="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", 0x1000, 0x9, 0x0, 0x3, r6}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x7, 0x3aa, r7, &(0x7f0000001380)="d682d5bc31af6aafc224be3ba1a856700f86ddabfaea88bb8b4ae1eba15a7af23056f3fd33e5f17af0bb27531a08ed275581ddc00166f0fedf76e8ce15482247439c98aed14b029529c2d0879c201327c2fb3f48a783985c32c2f8d8f0ed7a93ecbc356515277683c3b8867e48f34cd18d26a90e4c0db054d6d03e8b2ae2c58523abf2eeb834666d3685f9007b85a6afd80a0525ede6bfb0894eb76581e4c4c86f6a74997d70bdee6a8a1853bfa08eec92b340c2fc40d52ad140fde474b7c3c9", 0xc0, 0x1ff, 0x0, 0x3, r8}]) 6.942750779s ago: executing program 5 (id=4375): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x100000, 0x0, 0x0, 0xeffffdff, 0x0, [{0x2, 0x0, 0xfc, '\x00', 0xff}, {0x3, 0x8, 0x80, '\x00', 0x7c}, {0xfc, 0x13, 0x4, '\x00', 0xb9}, {0x11, 0xb}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0xfe, '\x00', 0x5}, {0xfd, 0x0, 0x6}, {}, {0x1, 0x8f, 0xf7, '\x00', 0xfc}, {0xa8, 0x6, 0x0, '\x00', 0x1}, {0xe, 0xfd}, {0x3, 0x99, 0x2, '\x00', 0xff}, {0x0, 0x0, 0x2, '\x00', 0x3}, {0x6, 0x2, 0x6}, {0xc3, 0x0, 0x0, '\x00', 0x49}, {0x0, 0x20, 0x80, '\x00', 0x5}, {0x3}, {0x0, 0x2, 0x6, '\x00', 0x10}, {0x2, 0x0, 0xd}, {0x0, 0x80}, {0x0, 0x2, 0xff, '\x00', 0x37}, {0xfd, 0x9, 0x7f, '\x00', 0x5}, {0x2, 0x2, 0x9}, {0x80, 0xff, 0x3, '\x00', 0x7}]}}) 6.227962056s ago: executing program 1 (id=4377): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000001000000002"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xac}}}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) 6.015406803s ago: executing program 5 (id=4379): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, &(0x7f0000000b00)) 6.003570478s ago: executing program 1 (id=4380): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x0, 0x7}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) mount$9p_tcp(0x0, 0x0, &(0x7f0000000340), 0x800002, 0x0) listen(0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000680)='cmdline\x00') preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000040)=""/3, 0x3}, {0x0, 0x3}], 0x2, 0x0, 0x0) 5.410833528s ago: executing program 8 (id=4381): r0 = fsopen(&(0x7f00000003c0)='zonefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000640)='dU|\xcbM\xe6\x91q\xe0\x05\xbes\xc0\xd2\xdb0}\xa6\xc4t\x8fy\xe0+\xb8~\xd9ymx\xa1\x06\xb4F\xf3Q:\xfem\xea\xed\xfc\x04\xf88\xe0\xa1&\xa8\xff\x10\xb3\xb2\x92N\f\x00!\xdbV\xc3\xca\r\x8c\xfb\x8esJ\xb3\x1bf\xce\v\x0e\xe3\xd5', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000007c0)='{)+}@@!}\x00', &(0x7f0000000800)='dU|\xcbM\xe6\x91q\xe0', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001ec0)='\\$#[\\/\x00\xd5\xd4^\xa7\xe4\xd4\x1f.yh\x18\xb8s\xe6\f\xaf*4\xe1\xa1e\x04%f\x8f\xde\x91\x04\xbb\xc8\x17\x15\xa4\xf0\x00\x15w\x00\x00\xed\xdd}\x00\x18\xf3\xde\n\xbe\x91\xc4\xc5\xe6\xd3o\xaau\xf34\t\x9d\x80rg\xbc\xee\x96p\x18\x9e(h\xeb\xd9\xde\xa6\xfc\x8e\xe3,\xae\xa8\xf0\x82y\x91\x1c{\x85 \xc7P\xa3\x9c\x06\xc1\xd3\x92\xcd\xcc\x17\xb2}\x13:\xbbh\"%;\b\x7f\x91\x8a\xa5Z\x92~<\xfe3\x19\xdcVJ\f\xd1\x89d\xf9N\xbd\x92\x86\xa2\xa8\xc0:\x1f\n\xc9\x8eUO\x8e\xea\x99\xe1\xbe%Y\x9eH#\xa4\x9d5\xa88m6\x89kE\xce\xc3\aBW\xec_\xea_\x81\xbe\x86~\x84F\xa9\xcd\xba\xfb\xd8\x8f\x01\x81~\x9c#\r\x87\xcf\x19\xb9\xbd \xcb\xff\x88io\xb0\xb1\xa0B\x8cI\x82+\xc4\xcf\xf4!+\x16v\xb6\x8a\xb7k}\x1d\xf2\x1c\x00\x8f\xd7\x84R\x12\xed){SM[\xe6g6\xfeF\x1dJ\x83', &(0x7f0000000380)='\xbd\x10\xe2\n\xc4\xa8\xa8?\a\x9e@O<\xf4s\x85~X\x85\xdc\x11\x04a\xf8\xa6f\x96nB\x02\x10+C$\f\xb3\xcc\xed\"M\xb6 V\xc5\x9a\x11o^\xda\xc8', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000ec0)='\xcfD\xbc\xbf\x95@\xd6j\'$\x1d\x14\xb7!\x8b\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\x04[\x02\xa9[>\xf9\x9c\x83@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby\xe1\xdf\x1a\xae\xd6ez\xe5\xa8\xe1\'', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a40)='\xcfD\xbc\xbf\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\xec\xe6\x04T\xcbn\xa5\xc3\x04[\x02\xa9[=\xf9\x8b\xf7\xc1\x9c\x83@\x1e\x99\xca\xc3\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby:\xd8\xc5\xccrun4\xe0\xca\xc1\x0f\xc3\x03D\xe1\f\xb3O\xa4\x1c\x04]8)}\x83:\x9e\xc0X\xdb\xd9\x89\x94\x9b(\x19\\\xf5!w\xbafo\xea\xe4\xb5Xe\x84\xbc\xcdw\x802\xb4\xb8\x1f\xc2\x97\xbfi\xe8\xf8\xbd\x1d,\xffUX\xbeA\x00{\"\xdbya#I\x03\xec\xed\x8b\x97\xff\x1eiq\xd1n\xf99\xc6\a\a\xed\x0f\x15x\x91\xdc\x05P\xf7\xf3\xad\xa3\xbc\xe4[\xa2\xc7\xfa\x9e\xad\xa2\xad\x86\xc4\aD\xc9\xdf\xf8\xf7\xc1\xc5\xc5.\x8a&:\x90\xb2\x8c\x86\xb2\\\xa8%!\x98TQ\x91\x00\x00\x00\x00$\x99\xbf', &(0x7f00000006c0)='\x01\x8dik\xc2\xed\xf9\x8a\xae\x86\xae)Dn<(\x02:cU\xa0d\xd4\x1f\xd4\x95\x93\xb7\xc1\xcc\x84\x8c\xdd\xbf^]~\xcf\xcb6w\xb3\xfa0b\x88\x04\x10\x9d_\x97\x9f\x89\xb7\xe35C\xf3\x1b\xafV\\wGU\xaf\xa4\f&\xe7m\xf0\xaa{\xb2\xe5\xe2\xeb\x9bN#\x99\xdc\x9f\"\xab&\x8f\x01\x17Y\xaf\xb7\xdc`r\x9c6\\\x0e\x94\xc0a\xf7\xd4u\xdf\xf0\x9b\xb0p\v\xa1\x8a\x145\x9b\xd95\xc8U\xe4V\x81-1\xb0K\x9a\xa3+\x03\xc1\xf0\xeb\xafYI&\x9e\xd0\xe1\x148\xfe\x10\x0f\xbd\xa2\xed}\xe6\x1asT\x1f\x92\xdb\xa1&\'\xc7\xe9\xa5\xd0\x89\x8d\xf1$\"\xdc\xe5\xfcT\xad\fj\xfe\'t', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='$\x00', &(0x7f0000000340)='{)+}@@!}\x00', 0x0) close(r0) 5.146604605s ago: executing program 2 (id=4382): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x0, 0x7}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000680)='cmdline\x00') preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000040)=""/3, 0x3}, {0x0, 0x3}], 0x2, 0x0, 0x0) 4.59190852s ago: executing program 8 (id=4383): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000380)={0x0, 0x8c}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1300000010003ee40700000000000000cbc00f33938c98be73bee103218da666a3c989a92461fd3e957b4704094ee4efcd11582236bc2a6e09a85828884430e2127cb4aaefaffc326bff80aaa7d7e295da1d99f71fa403223594ee8d75aea9b304b6e7fe71a9fcd55b6ca3a206f004fce839f00cd7a9ddc9c7b03cd2e8a6ec", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f00000000c0)='ecryptfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_int(r6, 0x1, 0x13, 0x0, &(0x7f0000000080)) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000000)={0x48, 0x5, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, 0x0, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r5, 0x3ba0, &(0x7f0000000280)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x1, 0x1000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 4.475506116s ago: executing program 1 (id=4384): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x1, 0x20800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) connect$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, 0x0, &(0x7f0000000280)) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioprio_set$uid(0x0, 0x0, 0x6000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000140)}) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080)) readv(r1, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/8, 0x8}, {&(0x7f0000000200)=""/54, 0x36}], 0x2) 4.474268136s ago: executing program 5 (id=4385): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x216183, 0x0) socket(0x28, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5f, &(0x7f0000000380)=ANY=[@ANYRES32=r0], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='sched_switch\x00', r1, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x642e, 0x167682) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000580)=ANY=[@ANYBLOB="0002020100000000ff02000000000000000000000000000137a5bc3bfda259f50cfdb6afe174f825df40b38cc208b36fd09b2e667ae7e61e9936ecace0a5210501892e159a4f8abd1745fb7c4b3005653f83f5359f126c15bdeec508c3c447b58fdfd1d0174fb9d273db11f4cc7b025d1dc6980c34053972ef700a8a01a4f1c3337c03b0ab6c85cc49ed5e06c1136b6fd0", @ANYBLOB="fdc75d8d14ac24c5b7136aeadee5b4155950543feb249b564ab678e98c0505459ad55de5b77b64928719e0a211a59fcfe62319117b21c2bc4f0edfe954a28b845b7c8c8ae472afdf68389affc3e884965965b33e076fae5a40b9e36af334f5cbb8bdfad6e76a5d09cbced1e70eb01b0c0cd1855ddbc34f360e564ded086f57aeb20102c7d80e9e18508184a6ad430eba6b73b992d53990abcb97fa86e709f7e67dd7918bd1c5f189dec4962283850dc5c29e6ab3b20bb6210affaa81c4d499ce81e2b0a1dc1c57750679a4d8ff88b679daf32cf3d81b1d06", @ANYRES8=r2], 0x18) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x24, &(0x7f0000000000)=0x7, 0x4) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r4 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000000)={{0x5, 0x6, 0x81, 0xfffffffe, 'syz0\x00', 0x1}, 0x3, 0x20, 0x3, 0x0, 0x1, 0x8, 'syz1\x00', &(0x7f0000000340)=[':#,\x00]%n\xd6\xafX+\x8d\x06\x00\x00\x00_\x8592\x97\xa5^J\x9f\"\xb0Q\xefCA<+\x97!0\xeeo\xf0T\x99\xdfn\xba\xac\b\x00\xdag\xba\xcb\xae\xe9\x83\xa0\x8f\xfa\xaeM'], 0x3b}) socket(0x28, 0x5, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0x541b, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20000) syz_io_uring_setup(0x172, &(0x7f0000000780)={0x0, 0x4f5c, 0x200, 0x2, 0x1ca}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x58, 0x2007, @fd, 0x0, 0x0, 0x0, 0x1e, 0x1, {0x1}}) 3.771434529s ago: executing program 5 (id=4386): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000002f80)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) 3.421659828s ago: executing program 2 (id=4387): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() r3 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='i2c_result\x00', r4}, 0x10) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000080)={&(0x7f0000000040)=[{0x9, 0x29, 0x0, 0x0}], 0x1}) 3.402574313s ago: executing program 7 (id=4388): prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) creat(&(0x7f0000001380)='./file0\x00', 0x4) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 3.171397273s ago: executing program 7 (id=4389): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x8, 0x80000) fanotify_mark(r2, 0x105, 0x48000033, r1, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (fail_nth: 2) 3.020912097s ago: executing program 5 (id=4390): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 2.238599948s ago: executing program 2 (id=4391): syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x4) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x4, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x3, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x27, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0x7, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0xfffffed1, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000ffdbdf25010000000c0001800500020001000000af303b5bc4902acb2b2351606fc015e9ac9c4399c2c9387c92f134dc1d897b44ec05de781d10314ea1"], 0x20}, 0x1, 0x0, 0x0, 0xaa34a4cffb93b201}, 0x10) 2.207970956s ago: executing program 5 (id=4392): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000004000b7080000000000007baaf8ff00000000b5080200000000017b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000000c00000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0xff7, &(0x7f0000002e00)=""/4087, 0x0, 0xa1}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) 2.135622671s ago: executing program 8 (id=4393): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0xff, '\x00', @p_u8=0x0}}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x2c, 0x7, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4000}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0xff, '\x00', @p_u8=0x0}}) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x2c, 0x7, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4000}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) (async) 2.13522629s ago: executing program 7 (id=4394): syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0x352}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff08000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2, @ANYBLOB="0a0001"], 0x48}}, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f0000008500000050"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r4}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) symlink(0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket(0x10, 0x3, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)}], 0x1, 0x0, 0x0, 0x5865}, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(0xffffffffffffffff, 0x17, 0x0, 0x1) sendto$inet6(r6, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf46d32345653600648d0a00120002000a0006005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r8 = dup(r3) open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0) write$FUSE_BMAP(r8, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) 1.946750993s ago: executing program 8 (id=4395): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x16, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0xb0}, @exit], &(0x7f00000000c0)='GPL\x00', 0x7}, 0x94) 1.177974532s ago: executing program 2 (id=4396): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newspdinfo={0x1c, 0x24, 0x201, 0x70bd2b, 0x25dfdbfc, 0xfffffff8, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004000}, 0x4000) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x1) 1.064807216s ago: executing program 8 (id=4397): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={0x0, 0x0, 0x38, 0x0, 0x9, 0x3}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYRES64=r4, @ANYRES64=r9, @ANYRES32=r11], 0xfc}, 0x1, 0x0, 0x0, 0x42081}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {}, {0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x9200}, @TCA_FLOW_XOR={0x8, 0x7, 0x7ff}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 1.06310474s ago: executing program 7 (id=4398): keyctl$clear(0x3, 0xfffffffffffffffc) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0x0) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000001ffb)={'syz', 0x0}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdedH\xe5+\xf0', r0) 867.58564ms ago: executing program 2 (id=4399): prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) creat(&(0x7f0000001380)='./file0\x00', 0x4) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 828.084386ms ago: executing program 7 (id=4400): socket$kcm(0x2, 0x200000000000001, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x101440, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000010400)={0x10200, 0x1c0, 0x400, &(0x7f0000010000)=[0xfffffffffffff800, 0x3, 0x1, 0x3, 0x5, 0xf, 0x8, 0x8, 0x800, 0x3, 0x16, 0x4, 0xc, 0xa9, 0xfff, 0x792, 0x0, 0x66df, 0x0, 0x2, 0x3, 0x1, 0xffff, 0x0, 0x7, 0x1, 0x1, 0x7, 0x1, 0xb, 0x8000, 0x8, 0x4, 0x7fffffff, 0x7, 0x8, 0x5, 0x9, 0xfffffffffffffffb, 0x2, 0x4, 0x9c9, 0x1, 0x2, 0x26, 0x10, 0x2, 0x1e79, 0x3, 0x6, 0x6, 0x7, 0x2, 0x2f0, 0x100000001, 0x4, 0x9, 0x4, 0x6, 0xfffffffffffffffa, 0x6, 0x4, 0x2, 0x5, 0xae94, 0x101, 0x7, 0x7, 0xc, 0x1, 0xfffffffffffffffc, 0x2, 0x0, 0x0, 0xd, 0x9, 0x8, 0x1, 0x3, 0x8, 0xffffffffffffffff, 0x0, 0x2, 0x6, 0x3, 0x2, 0x3, 0x5, 0x80f, 0x4, 0xa, 0x0, 0x1, 0x1000, 0xffffffffffffffff, 0x10001, 0x3, 0xffffffff80000001, 0x3, 0xd, 0x2, 0x7, 0x2, 0x9, 0x6, 0x7b117423, 0x3, 0xffffffff, 0x1, 0xfe2, 0x4, 0x4, 0x178, 0x202a, 0xfffffffffffffffb, 0x7, 0x79, 0x8000000000000, 0xb5c, 0x3, 0x2, 0x2, 0x2, 0xfffffffffffffffa, 0x2, 0x0, 0x540d102, 0x3ff]}) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000caa000/0x1000)=nil, 0x1000, &(0x7f0000000000)='/dev/snd/midiC#D#\x00') sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 0s ago: executing program 2 (id=4401): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card0/oss_mixer\x00', 0x62000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000000008010200000000000000000200ffff0600024022eb000005000300ffff00000900010073797a3000000000260004"], 0x58}, 0x1, 0x0, 0x0, 0x20000015}, 0x20008000) kernel console output (not intermixed with test programs): f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1235.800399][T19099] RSP: 002b:00007fb522778038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1235.800417][T19099] RAX: ffffffffffffffda RBX: 00007fb521bb5fa0 RCX: 00007fb52198e929 [ 1235.800430][T19099] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1235.800441][T19099] RBP: 00007fb522778090 R08: 0000000000000000 R09: 0000000000000000 [ 1235.800452][T19099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1235.800462][T19099] R13: 0000000000000000 R14: 00007fb521bb5fa0 R15: 00007fff3d9f9ce8 [ 1235.800488][T19099] [ 1236.290819][T19100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1236.480649][T19109] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1237.457669][T19122] FAULT_INJECTION: forcing a failure. [ 1237.457669][T19122] name failslab, interval 1, probability 0, space 0, times 0 [ 1237.540155][T19122] CPU: 0 UID: 0 PID: 19122 Comm: syz.6.3565 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 1237.540190][T19122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1237.540205][T19122] Call Trace: [ 1237.540214][T19122] [ 1237.540225][T19122] dump_stack_lvl+0x189/0x250 [ 1237.540264][T19122] ? __pfx____ratelimit+0x10/0x10 [ 1237.540296][T19122] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1237.540329][T19122] ? __pfx__printk+0x10/0x10 [ 1237.540358][T19122] ? __pfx___might_resched+0x10/0x10 [ 1237.540388][T19122] ? fs_reclaim_acquire+0x7d/0x100 [ 1237.540426][T19122] should_fail_ex+0x414/0x560 [ 1237.540458][T19122] should_failslab+0xa8/0x100 [ 1237.540489][T19122] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 1237.540518][T19122] ? kobject_set_name_vargs+0x61/0x110 [ 1237.540558][T19122] kvasprintf+0xdc/0x190 [ 1237.540582][T19122] ? __pfx_kvasprintf+0x10/0x10 [ 1237.540613][T19122] ? kvasprintf_const+0xe1/0x240 [ 1237.540637][T19122] kobject_set_name_vargs+0x61/0x110 [ 1237.540674][T19122] dev_set_name+0xd4/0x120 [ 1237.540710][T19122] ? __pfx_dev_set_name+0x10/0x10 [ 1237.540740][T19122] ? __init_waitqueue_head+0xa9/0x150 [ 1237.540771][T19122] ? device_initialize+0x24b/0x440 [ 1237.540809][T19122] wakeup_source_sysfs_add+0x185/0x280 [ 1237.540848][T19122] wakeup_source_register+0x18a/0x380 [ 1237.540890][T19122] ep_insert+0xef6/0x1a00 [ 1237.540931][T19122] ? __pfx_ep_insert+0x10/0x10 [ 1237.540956][T19122] ? __pfx___mutex_lock+0x10/0x10 [ 1237.540989][T19122] ? rcu_is_watching+0x15/0xb0 [ 1237.541030][T19122] ? bpf_lsm_capable+0x9/0x20 [ 1237.541073][T19122] do_epoll_ctl+0x7f4/0xe90 [ 1237.541109][T19122] __x64_sys_epoll_ctl+0x163/0x1a0 [ 1237.541139][T19122] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1237.541162][T19122] ? rcu_is_watching+0x15/0xb0 [ 1237.541197][T19122] ? do_syscall_64+0xbe/0x3b0 [ 1237.541234][T19122] do_syscall_64+0xfa/0x3b0 [ 1237.541264][T19122] ? lockdep_hardirqs_on+0x9c/0x150 [ 1237.541294][T19122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.541316][T19122] ? clear_bhb_loop+0x60/0xb0 [ 1237.541343][T19122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.541364][T19122] RIP: 0033:0x7fb52198e929 [ 1237.541385][T19122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1237.541404][T19122] RSP: 002b:00007fb522778038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1237.541428][T19122] RAX: ffffffffffffffda RBX: 00007fb521bb5fa0 RCX: 00007fb52198e929 [ 1237.541444][T19122] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 1237.541457][T19122] RBP: 00007fb522778090 R08: 0000000000000000 R09: 0000000000000000 [ 1237.541471][T19122] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1237.541486][T19122] R13: 0000000000000000 R14: 00007fb521bb5fa0 R15: 00007fff3d9f9ce8 [ 1237.541520][T19122] [ 1237.878024][T19125] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3567'. [ 1238.119853][T10792] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1238.248815][T19132] fuse: Unknown parameter '18446744073709551615' [ 1238.290626][T10792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1238.539467][T19135] fuse: Bad value for 'fd' [ 1239.115678][T10792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1239.128679][T10792] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 1239.137913][T10792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.219963][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.226362][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.334230][T10792] usb 3-1: config 0 descriptor?? [ 1240.537804][T10792] usb 3-1: can't set config #0, error -71 [ 1240.545108][T10792] usb 3-1: USB disconnect, device number 27 [ 1240.661124][T19147] tipc: Started in network mode [ 1240.693258][T19147] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 1240.745049][T19147] tipc: Enabled bearer , priority 10 [ 1242.651387][ T5924] tipc: Node number set to 4269801488 [ 1243.314781][T19164] netlink: 'syz.7.3577': attribute type 10 has an invalid length. [ 1243.323854][T19164] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1243.710727][T19141] netlink: 'syz.5.3572': attribute type 4 has an invalid length. [ 1244.837951][T19164] overlayfs: failed to clone upperpath [ 1247.243161][T19168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1247.684491][T19176] fuse: Unknown parameter '18446744073709551615' [ 1247.946140][T19180] program syz.2.3581 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1248.017613][T19181] fuse: Bad value for 'fd' [ 1249.477496][T19186] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3583'. [ 1249.491477][T19186] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1249.500282][T19186] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1249.508988][T19186] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1249.517972][T19186] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1249.569868][T19186] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1249.578828][T19186] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1249.588432][T19186] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1249.597492][T19186] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1250.190038][T19196] hub 8-0:1.0: USB hub found [ 1250.196030][T19196] hub 8-0:1.0: 1 port detected [ 1251.252617][T19201] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3588'. [ 1251.282642][T19201] netlink: 'syz.1.3588': attribute type 5 has an invalid length. [ 1253.306993][T19226] fuse: Unknown parameter '18446744073709551615' [ 1253.556970][T19224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1253.652053][T19235] fuse: Bad value for 'fd' [ 1254.486667][T19237] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3599'. [ 1254.527970][T19237] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3599'. [ 1254.539607][T10791] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1254.733938][T10791] usb 7-1: Using ep0 maxpacket: 32 [ 1254.753183][T10791] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 1254.781044][T19243] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3601'. [ 1254.790811][T10791] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1254.794682][T10791] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 1254.832714][T10791] usb 7-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 1254.877091][T10791] usb 7-1: Product: syz [ 1254.959431][T19246] netlink: 'syz.5.3601': attribute type 5 has an invalid length. [ 1255.153873][T10791] usb 7-1: Manufacturer: syz [ 1255.397322][T10791] usb 7-1: SerialNumber: syz [ 1255.434595][T10791] usb 7-1: config 0 descriptor?? [ 1255.517915][T10791] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1256.390766][T19233] syzkaller1: entered promiscuous mode [ 1256.396989][T19233] syzkaller1: entered allmulticast mode [ 1256.711315][ T6911] usb 7-1: Failed to submit usb control message: -71 [ 1256.718539][ T6911] usb 7-1: unable to send the bmi data to the device: -71 [ 1256.726527][ T6911] usb 7-1: unable to get target info from device [ 1256.734528][ T6911] usb 7-1: could not get target info (-71) [ 1256.752860][T17490] usb 7-1: USB disconnect, device number 17 [ 1256.763847][ T6911] usb 7-1: could not probe fw (-71) [ 1258.159615][ T5924] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1258.534051][ T5924] usb 3-1: device descriptor read/64, error -71 [ 1259.327883][ T5924] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1259.530527][ T5924] usb 3-1: device descriptor read/64, error -71 [ 1260.040187][ T5924] usb usb3-port1: attempt power cycle [ 1260.448777][ T5924] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1260.481045][ T5924] usb 3-1: device descriptor read/8, error -71 [ 1261.778940][T19327] netlink: 'syz.1.3622': attribute type 11 has an invalid length. [ 1261.909674][T19322] input: syz1 as /devices/virtual/input/input18 [ 1261.946630][T19333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3622'. [ 1261.995198][T19333] tipc: Enabled bearer , priority 10 [ 1262.401478][T19327] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3622'. [ 1262.419604][T19327] tipc: Resetting bearer [ 1262.488798][T19327] tipc: Disabling bearer [ 1266.215585][T19358] netlink: 'syz.6.3630': attribute type 1 has an invalid length. [ 1266.289434][T19358] netlink: 15198 bytes leftover after parsing attributes in process `syz.6.3630'. [ 1266.437784][T19364] hub 8-0:1.0: USB hub found [ 1266.449689][T19364] hub 8-0:1.0: 1 port detected [ 1269.625575][T19383] netlink: 'syz.1.3634': attribute type 10 has an invalid length. [ 1269.698496][T19385] overlayfs: failed to clone upperpath [ 1270.087200][T19383] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1270.110490][T19383] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1270.122567][T19383] team0: Port device virt_wifi0 added [ 1271.752221][T19406] program syz.6.3641 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1272.898473][T19409] delete_channel: no stack [ 1272.972587][T19396] syz.2.3639 (19396): drop_caches: 2 [ 1274.176784][T19420] netlink: 'syz.7.3645': attribute type 10 has an invalid length. [ 1274.200671][T19420] overlayfs: failed to clone upperpath [ 1275.503867][T19429] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3648'. [ 1277.971702][ T30] audit: type=1326 audit(1751060021.522:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19461 comm="syz.2.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155ff8e929 code=0x7ffc0000 [ 1278.278688][T19467] pimreg3: entered allmulticast mode [ 1278.787172][T19470] netlink: 'syz.2.3660': attribute type 10 has an invalid length. [ 1278.928459][ T30] audit: type=1326 audit(1751060021.522:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19461 comm="syz.2.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155ff8e929 code=0x7ffc0000 [ 1279.510438][ T30] audit: type=1326 audit(1751060021.522:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19461 comm="syz.2.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f155ff8e929 code=0x7ffc0000 [ 1279.540066][ T30] audit: type=1326 audit(1751060021.522:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19461 comm="syz.2.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155ff8e929 code=0x7ffc0000 [ 1279.976658][ T30] audit: type=1326 audit(1751060021.522:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19461 comm="syz.2.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f155ff8e929 code=0x7ffc0000 [ 1280.004889][ T30] audit: type=1326 audit(1751060021.522:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19461 comm="syz.2.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155ff8e929 code=0x7ffc0000 [ 1280.202596][ T30] audit: type=1326 audit(1751060021.522:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19461 comm="syz.2.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155ff8e929 code=0x7ffc0000 [ 1280.329088][ T30] audit: type=1326 audit(1751060021.522:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19461 comm="syz.2.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f155ff8e929 code=0x7ffc0000 [ 1280.355613][T19476] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3662'. [ 1280.379475][ T30] audit: type=1326 audit(1751060021.522:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19461 comm="syz.2.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155ff8e929 code=0x7ffc0000 [ 1280.384676][T19476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3662'. [ 1280.404801][ T30] audit: type=1326 audit(1751060021.522:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19461 comm="syz.2.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155ff8e929 code=0x7ffc0000 [ 1280.440847][T19476] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3662'. [ 1281.829278][T19487] FAULT_INJECTION: forcing a failure. [ 1281.829278][T19487] name failslab, interval 1, probability 0, space 0, times 0 [ 1281.842182][T19487] CPU: 1 UID: 0 PID: 19487 Comm: syz.2.3665 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 1281.842212][T19487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1281.842226][T19487] Call Trace: [ 1281.842236][T19487] [ 1281.842245][T19487] dump_stack_lvl+0x189/0x250 [ 1281.842283][T19487] ? __pfx____ratelimit+0x10/0x10 [ 1281.842314][T19487] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1281.842347][T19487] ? __pfx__printk+0x10/0x10 [ 1281.842372][T19487] ? __pfx___might_resched+0x10/0x10 [ 1281.842403][T19487] ? fs_reclaim_acquire+0x7d/0x100 [ 1281.842440][T19487] should_fail_ex+0x414/0x560 [ 1281.842472][T19487] should_failslab+0xa8/0x100 [ 1281.842502][T19487] __kmalloc_noprof+0xcb/0x4f0 [ 1281.842527][T19487] ? tomoyo_encode+0x28b/0x550 [ 1281.842563][T19487] tomoyo_encode+0x28b/0x550 [ 1281.842601][T19487] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1281.842645][T19487] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1281.842672][T19487] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1281.842701][T19487] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1281.842726][T19487] ? lockdep_hardirqs_on+0x9c/0x150 [ 1281.842775][T19487] ? hook_file_ioctl+0xe0/0x530 [ 1281.842820][T19487] ? __fget_files+0x2a/0x420 [ 1281.842853][T19487] ? __fget_files+0x2a/0x420 [ 1281.842880][T19487] ? __fget_files+0x3a0/0x420 [ 1281.842907][T19487] ? __fget_files+0x2a/0x420 [ 1281.842940][T19487] security_file_ioctl+0xcb/0x2d0 [ 1281.842970][T19487] __se_sys_ioctl+0x47/0x170 [ 1281.842997][T19487] do_syscall_64+0xfa/0x3b0 [ 1281.843030][T19487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1281.843051][T19487] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1281.843072][T19487] ? clear_bhb_loop+0x60/0xb0 [ 1281.843099][T19487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1281.843120][T19487] RIP: 0033:0x7f155ff8e929 [ 1281.843140][T19487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1281.843167][T19487] RSP: 002b:00007f155ddb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1281.843189][T19487] RAX: ffffffffffffffda RBX: 00007f15601b6160 RCX: 00007f155ff8e929 [ 1281.843205][T19487] RDX: 0000200000000140 RSI: 00000000c040564a RDI: 0000000000000006 [ 1281.843220][T19487] RBP: 00007f155ddb4090 R08: 0000000000000000 R09: 0000000000000000 [ 1281.843233][T19487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1281.843246][T19487] R13: 0000000000000000 R14: 00007f15601b6160 R15: 00007ffc5de05938 [ 1281.843280][T19487] [ 1281.843407][T19487] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1283.491751][T19506] 9p: Unknown Cache mode or invalid value r [ 1284.848051][T19521] vcan0: tx drop: invalid da for name 0x0000000000000e00 [ 1284.940277][T17490] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1285.172276][T17490] usb 3-1: Using ep0 maxpacket: 8 [ 1285.327129][ T5924] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1285.433481][T17490] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1285.459654][T17490] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.467743][T17490] usb 3-1: Product: syz [ 1285.489398][T17490] usb 3-1: Manufacturer: syz [ 1285.494124][T17490] usb 3-1: SerialNumber: syz [ 1285.525962][ T5924] usb 7-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 1285.543832][T17490] usb 3-1: config 0 descriptor?? [ 1285.571297][ T5924] usb 7-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 1285.612891][ T5924] usb 7-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 1285.635347][ T5924] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.831573][T17490] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1285.832533][ T5924] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 1286.605337][ T5924] gspca_sn9c2028: read1 error -71 [ 1286.622906][ T5924] gspca_sn9c2028: read1 error -71 [ 1286.849389][ T5924] gspca_sn9c2028: read1 error -71 [ 1286.854645][ T5924] sn9c2028 7-1:220.0: probe with driver sn9c2028 failed with error -71 [ 1286.912115][ T5924] usb 7-1: USB disconnect, device number 18 [ 1287.355768][T19558] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3687'. [ 1287.364918][T19558] netlink: 100 bytes leftover after parsing attributes in process `syz.6.3687'. [ 1287.440245][T19558] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3687'. [ 1287.950288][T17490] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1288.043092][T17490] usb 3-1: USB disconnect, device number 32 [ 1288.132039][T19564] xt_hashlimit: max too large, truncated to 1048576 [ 1289.668419][T10790] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1290.306261][T10790] usb 6-1: Using ep0 maxpacket: 16 [ 1290.320103][T10790] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1290.349471][T10790] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1290.359885][T10790] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1290.421822][T10790] usb 6-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 1290.527538][T10790] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.582897][T10790] usb 6-1: Product: syz [ 1290.587150][T10790] usb 6-1: Manufacturer: syz [ 1290.609425][T10790] usb 6-1: SerialNumber: syz [ 1290.628146][T10790] usb 6-1: config 0 descriptor?? [ 1290.817814][T10790] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 1290.834657][T10790] gspca_stv06xx: st6422 sensor detected [ 1291.213415][T19590] netlink: 'syz.7.3697': attribute type 4 has an invalid length. [ 1291.382234][T10788] IPVS: starting estimator thread 0... [ 1291.629434][T19598] IPVS: using max 26 ests per chain, 62400 per kthread [ 1291.927348][T19602] hub 8-0:1.0: USB hub found [ 1292.029452][T19602] hub 8-0:1.0: 1 port detected [ 1292.259914][T10790] STV06xx 6-1:0.0: probe with driver STV06xx failed with error -71 [ 1292.346341][T19604] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3701'. [ 1292.357294][T10790] usb 6-1: USB disconnect, device number 15 [ 1292.371809][T19604] netlink: 100 bytes leftover after parsing attributes in process `syz.7.3701'. [ 1292.410452][T19604] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3701'. [ 1292.813086][T19615] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3705'. [ 1292.904449][T19619] Device name cannot be null; rc = [-22] [ 1293.894026][T19635] FAULT_INJECTION: forcing a failure. [ 1293.894026][T19635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1293.949586][T19635] CPU: 1 UID: 0 PID: 19635 Comm: syz.2.3714 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 1293.949623][T19635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1293.949637][T19635] Call Trace: [ 1293.949646][T19635] [ 1293.949657][T19635] dump_stack_lvl+0x189/0x250 [ 1293.949695][T19635] ? __pfx____ratelimit+0x10/0x10 [ 1293.949726][T19635] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1293.949758][T19635] ? __pfx__printk+0x10/0x10 [ 1293.949793][T19635] should_fail_ex+0x414/0x560 [ 1293.949825][T19635] _copy_to_user+0x31/0xb0 [ 1293.949861][T19635] simple_read_from_buffer+0xe1/0x170 [ 1293.949894][T19635] proc_fail_nth_read+0x1df/0x250 [ 1293.949929][T19635] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1293.949964][T19635] ? rw_verify_area+0x258/0x650 [ 1293.949986][T19635] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1293.950018][T19635] vfs_read+0x1fd/0x980 [ 1293.950048][T19635] ? __pfx___mutex_lock+0x10/0x10 [ 1293.950080][T19635] ? __pfx_vfs_read+0x10/0x10 [ 1293.950106][T19635] ? __fget_files+0x2a/0x420 [ 1293.950140][T19635] ? __fget_files+0x3a0/0x420 [ 1293.950167][T19635] ? __fget_files+0x2a/0x420 [ 1293.950221][T19635] ksys_read+0x145/0x250 [ 1293.950249][T19635] ? __pfx_ksys_read+0x10/0x10 [ 1293.950270][T19635] ? fput+0xa0/0xd0 [ 1293.950306][T19635] ? do_syscall_64+0xbe/0x3b0 [ 1293.950342][T19635] do_syscall_64+0xfa/0x3b0 [ 1293.950372][T19635] ? lockdep_hardirqs_on+0x9c/0x150 [ 1293.950402][T19635] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1293.950423][T19635] ? clear_bhb_loop+0x60/0xb0 [ 1293.950450][T19635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1293.950472][T19635] RIP: 0033:0x7f155ff8d33c [ 1293.950490][T19635] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1293.950510][T19635] RSP: 002b:00007f155ddf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1293.950533][T19635] RAX: ffffffffffffffda RBX: 00007f15601b5fa0 RCX: 00007f155ff8d33c [ 1293.950549][T19635] RDX: 000000000000000f RSI: 00007f155ddf60a0 RDI: 0000000000000004 [ 1293.950563][T19635] RBP: 00007f155ddf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1293.950576][T19635] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 1293.950590][T19635] R13: 0000000000000000 R14: 00007f15601b5fa0 R15: 00007ffc5de05938 [ 1293.950624][T19635] [ 1294.730858][T19639] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3715'. [ 1294.769546][T19639] netlink: 100 bytes leftover after parsing attributes in process `syz.7.3715'. [ 1294.811249][T19639] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3715'. [ 1294.951746][T19649] FAULT_INJECTION: forcing a failure. [ 1294.951746][T19649] name failslab, interval 1, probability 0, space 0, times 0 [ 1294.965073][T19649] CPU: 1 UID: 0 PID: 19649 Comm: syz.5.3718 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 1294.965103][T19649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1294.965116][T19649] Call Trace: [ 1294.965125][T19649] [ 1294.965135][T19649] dump_stack_lvl+0x189/0x250 [ 1294.965184][T19649] ? __pfx____ratelimit+0x10/0x10 [ 1294.965215][T19649] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1294.965247][T19649] ? __pfx__printk+0x10/0x10 [ 1294.965285][T19649] should_fail_ex+0x414/0x560 [ 1294.965316][T19649] should_failslab+0xa8/0x100 [ 1294.965347][T19649] __kmalloc_cache_noprof+0x70/0x3d0 [ 1294.965374][T19649] ? reuseport_alloc+0x121/0x4d0 [ 1294.965401][T19649] reuseport_alloc+0x121/0x4d0 [ 1294.965424][T19649] ? sctp_hash_endpoint+0x2b/0x5a0 [ 1294.965454][T19649] sctp_hash_endpoint+0x39f/0x5a0 [ 1294.965483][T19649] ? sctp_hash_endpoint+0x2b/0x5a0 [ 1294.965517][T19649] sctp_inet_listen+0x7aa/0xa70 [ 1294.965548][T19649] ? __pfx_sctp_inet_listen+0x10/0x10 [ 1294.965583][T19649] ? __fget_files+0x2a/0x420 [ 1294.965627][T19649] __x64_sys_listen+0x1c7/0x240 [ 1294.965666][T19649] do_syscall_64+0xfa/0x3b0 [ 1294.965696][T19649] ? lockdep_hardirqs_on+0x9c/0x150 [ 1294.965726][T19649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.965748][T19649] ? clear_bhb_loop+0x60/0xb0 [ 1294.965776][T19649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.965804][T19649] RIP: 0033:0x7f97cbd8e929 [ 1294.965824][T19649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1294.965844][T19649] RSP: 002b:00007f97ccb68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 1294.965866][T19649] RAX: ffffffffffffffda RBX: 00007f97cbfb5fa0 RCX: 00007f97cbd8e929 [ 1294.965881][T19649] RDX: 0000000000000000 RSI: 00000000000003a5 RDI: 0000000000000005 [ 1294.965893][T19649] RBP: 00007f97ccb68090 R08: 0000000000000000 R09: 0000000000000000 [ 1294.965906][T19649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1294.965919][T19649] R13: 0000000000000000 R14: 00007f97cbfb5fa0 R15: 00007ffea7291ab8 [ 1294.965953][T19649] [ 1295.178583][ C1] vkms_vblank_simulate: vblank timer overrun [ 1295.208621][T19652] netlink: 'syz.7.3720': attribute type 10 has an invalid length. [ 1295.216847][T19652] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3720'. [ 1295.665210][T19652] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1295.792228][T19662] FAULT_INJECTION: forcing a failure. [ 1295.792228][T19662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1295.872842][T19662] CPU: 0 UID: 0 PID: 19662 Comm: syz.6.3721 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 1295.872877][T19662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1295.872891][T19662] Call Trace: [ 1295.872899][T19662] [ 1295.872909][T19662] dump_stack_lvl+0x189/0x250 [ 1295.872947][T19662] ? __pfx____ratelimit+0x10/0x10 [ 1295.872977][T19662] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1295.873009][T19662] ? __pfx__printk+0x10/0x10 [ 1295.873059][T19662] should_fail_ex+0x414/0x560 [ 1295.873090][T19662] _copy_to_user+0x31/0xb0 [ 1295.873126][T19662] simple_read_from_buffer+0xe1/0x170 [ 1295.873161][T19662] proc_fail_nth_read+0x1df/0x250 [ 1295.873195][T19662] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1295.873230][T19662] ? rw_verify_area+0x258/0x650 [ 1295.873252][T19662] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1295.873284][T19662] vfs_read+0x1fd/0x980 [ 1295.873315][T19662] ? __pfx___mutex_lock+0x10/0x10 [ 1295.873348][T19662] ? __pfx_vfs_read+0x10/0x10 [ 1295.873374][T19662] ? __fget_files+0x2a/0x420 [ 1295.873407][T19662] ? __fget_files+0x3a0/0x420 [ 1295.873435][T19662] ? __fget_files+0x2a/0x420 [ 1295.873474][T19662] ksys_read+0x145/0x250 [ 1295.873502][T19662] ? __pfx_ksys_read+0x10/0x10 [ 1295.873525][T19662] ? rcu_is_watching+0x15/0xb0 [ 1295.873558][T19662] ? trace_sys_enter+0x25/0x120 [ 1295.873592][T19662] do_syscall_64+0xfa/0x3b0 [ 1295.873623][T19662] ? lockdep_hardirqs_on+0x9c/0x150 [ 1295.873652][T19662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.873673][T19662] ? clear_bhb_loop+0x60/0xb0 [ 1295.873700][T19662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.873721][T19662] RIP: 0033:0x7fb52198d33c [ 1295.873740][T19662] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1295.873759][T19662] RSP: 002b:00007fb522757030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1295.873781][T19662] RAX: ffffffffffffffda RBX: 00007fb521bb6080 RCX: 00007fb52198d33c [ 1295.873797][T19662] RDX: 000000000000000f RSI: 00007fb5227570a0 RDI: 0000000000000005 [ 1295.873810][T19662] RBP: 00007fb522757090 R08: 0000000000000000 R09: 0000000000000000 [ 1295.873823][T19662] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 1295.873836][T19662] R13: 0000000000000000 R14: 00007fb521bb6080 R15: 00007fff3d9f9ce8 [ 1295.873871][T19662] [ 1297.787063][T19680] FAULT_INJECTION: forcing a failure. [ 1297.787063][T19680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1297.800357][T19680] CPU: 0 UID: 0 PID: 19680 Comm: syz.5.3726 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 1297.800387][T19680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1297.800400][T19680] Call Trace: [ 1297.800409][T19680] [ 1297.800419][T19680] dump_stack_lvl+0x189/0x250 [ 1297.800457][T19680] ? __pfx____ratelimit+0x10/0x10 [ 1297.800488][T19680] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1297.800519][T19680] ? __pfx__printk+0x10/0x10 [ 1297.800541][T19680] ? __might_fault+0xb0/0x130 [ 1297.800578][T19680] should_fail_ex+0x414/0x560 [ 1297.800608][T19680] _copy_from_user+0x2d/0xb0 [ 1297.800643][T19680] iommufd_fops_ioctl+0x3f9/0x520 [ 1297.800678][T19680] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1297.800722][T19680] ? __fget_files+0x3a0/0x420 [ 1297.800750][T19680] ? __fget_files+0x2a/0x420 [ 1297.800782][T19680] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1297.800811][T19680] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1297.800842][T19680] __se_sys_ioctl+0xf9/0x170 [ 1297.800868][T19680] do_syscall_64+0xfa/0x3b0 [ 1297.800899][T19680] ? lockdep_hardirqs_on+0x9c/0x150 [ 1297.800928][T19680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.800951][T19680] ? clear_bhb_loop+0x60/0xb0 [ 1297.800977][T19680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.800998][T19680] RIP: 0033:0x7f97cbd8e929 [ 1297.801018][T19680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1297.801038][T19680] RSP: 002b:00007f97ccb47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1297.801061][T19680] RAX: ffffffffffffffda RBX: 00007f97cbfb6080 RCX: 00007f97cbd8e929 [ 1297.801076][T19680] RDX: 0000200000000180 RSI: 0000000000003b82 RDI: 0000000000000008 [ 1297.801090][T19680] RBP: 00007f97ccb47090 R08: 0000000000000000 R09: 0000000000000000 [ 1297.801104][T19680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1297.801117][T19680] R13: 0000000000000000 R14: 00007f97cbfb6080 R15: 00007ffea7291ab8 [ 1297.801150][T19680] [ 1300.754202][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.761720][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1303.343080][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1303.343101][ T30] audit: type=1326 audit(1751060046.882:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19731 comm="syz.7.3744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1d78e929 code=0x7ffc0000 [ 1304.412689][ T30] audit: type=1326 audit(1751060046.932:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19731 comm="syz.7.3744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1d78e929 code=0x7ffc0000 [ 1304.436079][ T30] audit: type=1326 audit(1751060046.932:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19731 comm="syz.7.3744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f9c1d78e929 code=0x7ffc0000 [ 1304.900096][T10798] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1305.251351][ T30] audit: type=1326 audit(1751060046.932:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19731 comm="syz.7.3744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1d78e929 code=0x7ffc0000 [ 1305.469567][ T30] audit: type=1326 audit(1751060046.932:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19731 comm="syz.7.3744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1d78e929 code=0x7ffc0000 [ 1306.526076][T10798] usb 3-1: device descriptor read/64, error -71 [ 1306.892864][ T30] audit: type=1326 audit(1751060046.942:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19731 comm="syz.7.3744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f9c1d78e929 code=0x7ffc0000 [ 1307.560731][ T30] audit: type=1326 audit(1751060046.942:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19731 comm="syz.7.3744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1d78e929 code=0x7ffc0000 [ 1307.704152][ T30] audit: type=1326 audit(1751060046.942:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19731 comm="syz.7.3744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f9c1d78e929 code=0x7ffc0000 [ 1307.792826][ T30] audit: type=1326 audit(1751060046.942:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19731 comm="syz.7.3744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1d78e929 code=0x7ffc0000 [ 1307.959747][ T30] audit: type=1326 audit(1751060046.952:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19731 comm="syz.7.3744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f9c1d78e929 code=0x7ffc0000 [ 1308.322731][T19760] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3751'. [ 1308.563720][T19760] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1308.572648][T19760] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1308.581436][T19760] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1308.590236][T19760] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1308.960603][T19760] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1308.969634][T19760] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1308.978534][T19760] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1308.987491][T19760] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1310.209277][T19774] 9pnet_fd: Insufficient options for proto=fd [ 1312.000522][T19792] netlink: 'syz.5.3761': attribute type 30 has an invalid length. [ 1312.079649][T10798] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 1312.126471][T19797] netlink: 'syz.7.3760': attribute type 1 has an invalid length. [ 1312.331511][T10798] usb 7-1: too many configurations: 49, using maximum allowed: 8 [ 1312.624632][T10788] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 1312.636804][T10798] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1312.679526][T10798] usb 7-1: can't read configurations, error -61 [ 1312.815189][T10788] usb 3-1: device descriptor read/64, error -71 [ 1312.859530][T10798] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 1313.114839][T10788] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 1314.002005][T10798] usb 7-1: too many configurations: 49, using maximum allowed: 8 [ 1314.020901][T10798] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1314.038223][T10798] usb 7-1: can't read configurations, error -61 [ 1314.045193][T10798] usb usb7-port1: attempt power cycle [ 1314.139439][T10788] usb 3-1: device descriptor read/64, error -71 [ 1314.259751][T10788] usb usb3-port1: attempt power cycle [ 1314.392077][T10798] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 1314.439070][T10798] usb 7-1: too many configurations: 49, using maximum allowed: 8 [ 1314.487491][T10798] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1314.513237][T10798] usb 7-1: can't read configurations, error -61 [ 1314.569040][T19823] syz_tun: entered promiscuous mode [ 1314.575359][T19823] batadv_slave_0: entered promiscuous mode [ 1314.610031][T10788] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 1314.629527][T19823] hsr1: entered allmulticast mode [ 1314.691578][T19823] syz_tun: entered allmulticast mode [ 1314.696952][T19823] batadv_slave_0: entered allmulticast mode [ 1314.751746][T10798] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 1314.781817][T10788] usb 3-1: device descriptor read/8, error -71 [ 1314.797127][T10798] usb 7-1: device descriptor read/8, error -71 [ 1314.930308][T10798] usb usb7-port1: unable to enumerate USB device [ 1315.020309][T10788] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 1315.182405][T10788] usb 3-1: device descriptor read/8, error -71 [ 1315.285946][T19831] SET target dimension over the limit! [ 1315.367979][T10788] usb usb3-port1: unable to enumerate USB device [ 1316.255681][T19845] 9pnet_fd: Insufficient options for proto=fd [ 1316.414386][T19849] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3778'. [ 1318.019416][T10798] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1318.169361][T10798] usb 7-1: Using ep0 maxpacket: 8 [ 1318.372023][T10798] usb 7-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1318.394030][T10798] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.142996][T10798] usb 7-1: Product: syz [ 1319.147253][T10798] usb 7-1: Manufacturer: syz [ 1319.169500][T10798] usb 7-1: SerialNumber: syz [ 1319.187681][T10798] usb 7-1: config 0 descriptor?? [ 1319.215542][T10798] radio-usb-si4713 7-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1319.643863][T10798] radio-usb-si4713 7-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 1319.674780][T10798] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1319.698317][T10798] usb 7-1: USB disconnect, device number 23 [ 1321.307021][T19921] FAULT_INJECTION: forcing a failure. [ 1321.307021][T19921] name failslab, interval 1, probability 0, space 0, times 0 [ 1321.321830][T19921] CPU: 1 UID: 0 PID: 19921 Comm: syz.5.3792 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 1321.321860][T19921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1321.321874][T19921] Call Trace: [ 1321.321882][T19921] [ 1321.321891][T19921] dump_stack_lvl+0x189/0x250 [ 1321.321929][T19921] ? __pfx____ratelimit+0x10/0x10 [ 1321.321958][T19921] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1321.321989][T19921] ? __pfx__printk+0x10/0x10 [ 1321.322017][T19921] ? __pfx___might_resched+0x10/0x10 [ 1321.322089][T19921] ? fs_reclaim_acquire+0x7d/0x100 [ 1321.322134][T19921] should_fail_ex+0x414/0x560 [ 1321.322166][T19921] should_failslab+0xa8/0x100 [ 1321.322196][T19921] __kmalloc_noprof+0xcb/0x4f0 [ 1321.322221][T19921] ? snd_pcm_hw_refine+0x967/0x1640 [ 1321.322252][T19921] snd_pcm_hw_refine+0x967/0x1640 [ 1321.322281][T19921] ? do_syscall_64+0xfa/0x3b0 [ 1321.322323][T19921] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1321.322388][T19921] ? __kasan_kmalloc+0x93/0xb0 [ 1321.322416][T19921] ? _snd_pcm_hw_param_min+0x2f5/0x540 [ 1321.322454][T19921] snd_pcm_hw_param_near+0xfd/0x500 [ 1321.322485][T19921] ? __asan_memset+0x22/0x50 [ 1321.322514][T19921] snd_pcm_oss_change_params_locked+0x2135/0x3e40 [ 1321.322584][T19921] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1321.322616][T19921] ? snd_pcm_oss_get_active_substream+0x136/0x280 [ 1321.322666][T19921] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1321.322712][T19921] snd_pcm_oss_get_active_substream+0x1e2/0x280 [ 1321.322753][T19921] snd_pcm_oss_set_channels+0x1b6/0x4d0 [ 1321.322793][T19921] snd_pcm_oss_ioctl+0xadb/0xdd0 [ 1321.322828][T19921] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1321.322859][T19921] __se_sys_ioctl+0xf9/0x170 [ 1321.322885][T19921] do_syscall_64+0xfa/0x3b0 [ 1321.322915][T19921] ? lockdep_hardirqs_on+0x9c/0x150 [ 1321.322945][T19921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1321.322967][T19921] ? clear_bhb_loop+0x60/0xb0 [ 1321.322994][T19921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1321.323015][T19921] RIP: 0033:0x7f97cbd8e929 [ 1321.323034][T19921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1321.323053][T19921] RSP: 002b:00007f97ccb26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1321.323078][T19921] RAX: ffffffffffffffda RBX: 00007f97cbfb6160 RCX: 00007f97cbd8e929 [ 1321.323099][T19921] RDX: 0000200000000080 RSI: 00000000c0045006 RDI: 0000000000000005 [ 1321.323114][T19921] RBP: 00007f97ccb26090 R08: 0000000000000000 R09: 0000000000000000 [ 1321.323127][T19921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1321.323140][T19921] R13: 0000000000000000 R14: 00007f97cbfb6160 R15: 00007ffea7291ab8 [ 1321.323174][T19921] [ 1324.526478][T19947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3803'. [ 1324.546097][T19948] 9pnet_fd: Insufficient options for proto=fd [ 1324.705466][T19947] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1324.714962][T19947] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1324.723724][T19947] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1324.732500][T19947] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1324.767957][T19947] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1324.779492][T19947] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1324.789322][T19947] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1324.799852][T19947] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1325.320238][T19953] netlink: 'syz.2.3805': attribute type 1 has an invalid length. [ 1326.144936][ T6911] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.337980][ T6911] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.691361][T19966] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3811'. [ 1326.985973][ T6911] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.164211][ T6911] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.212542][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1327.224247][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1327.231327][T10794] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 1327.269048][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1327.286076][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1327.297887][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1327.413479][T10794] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1327.484384][T10794] usb 3-1: not running at top speed; connect to a high speed hub [ 1327.522697][T10794] usb 3-1: config 1 has an invalid interface number: 86 but max is 0 [ 1327.544695][T10794] usb 3-1: config 1 has no interface number 0 [ 1327.572246][T10794] usb 3-1: config 1 interface 86 altsetting 1 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1327.591764][T10794] usb 3-1: config 1 interface 86 altsetting 1 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 1327.606265][T10794] usb 3-1: config 1 interface 86 altsetting 1 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1327.645012][T10794] usb 3-1: config 1 interface 86 has no altsetting 0 [ 1327.664681][ T6911] bridge_slave_1: left allmulticast mode [ 1327.681622][T10794] usb 3-1: New USB device found, idVendor=2013, idProduct=0248, bcdDevice=46.22 [ 1327.693062][ T6911] bridge_slave_1: left promiscuous mode [ 1327.721660][T10794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.741006][ T6911] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.759744][T10794] usb 3-1: Product: à°„ [ 1327.763986][T10794] usb 3-1: Manufacturer: ဠ[ 1327.792630][ T6911] bridge_slave_0: left allmulticast mode [ 1327.812630][ T6911] bridge_slave_0: left promiscuous mode [ 1327.832162][ T6911] bridge0: port 1(bridge_slave_0) entered disabled state [ 1327.938841][T19969] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1328.779562][T19996] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3818'. [ 1329.020255][T19999] kAFS: unable to lookup cell '.,' [ 1329.078781][T19999] FAULT_INJECTION: forcing a failure. [ 1329.078781][T19999] name failslab, interval 1, probability 0, space 0, times 0 [ 1329.154684][T19999] CPU: 0 UID: 0 PID: 19999 Comm: syz.5.3819 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 1329.154716][T19999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1329.154730][T19999] Call Trace: [ 1329.154749][T19999] [ 1329.154758][T19999] dump_stack_lvl+0x189/0x250 [ 1329.154796][T19999] ? __pfx____ratelimit+0x10/0x10 [ 1329.154826][T19999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1329.154858][T19999] ? __pfx__printk+0x10/0x10 [ 1329.154886][T19999] ? __pfx___might_resched+0x10/0x10 [ 1329.154923][T19999] should_fail_ex+0x414/0x560 [ 1329.154953][T19999] should_failslab+0xa8/0x100 [ 1329.154982][T19999] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1329.155007][T19999] ? ptlock_alloc+0x20/0x70 [ 1329.155037][T19999] ptlock_alloc+0x20/0x70 [ 1329.155062][T19999] pte_alloc_one+0x7d/0x170 [ 1329.155095][T19999] __pte_alloc+0x25/0x1a0 [ 1329.155129][T19999] __handle_mm_fault+0x4b8a/0x5620 [ 1329.155177][T19999] ? __pfx___handle_mm_fault+0x10/0x10 [ 1329.155224][T19999] ? __pfx___might_resched+0x10/0x10 [ 1329.155259][T19999] handle_mm_fault+0x2d5/0x7f0 [ 1329.155284][T19999] ? vma_is_secretmem+0xd/0x50 [ 1329.155321][T19999] __get_user_pages+0x1af4/0x30b0 [ 1329.155340][T19999] ? __lock_acquire+0xab9/0xd20 [ 1329.155408][T19999] ? __pfx___get_user_pages+0x10/0x10 [ 1329.155441][T19999] __gup_longterm_locked+0xd66/0x15b0 [ 1329.155493][T19999] pin_user_pages_remote+0xd4/0x120 [ 1329.155521][T19999] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 1329.155551][T19999] ? down_read+0x1ad/0x2e0 [ 1329.155573][T19999] process_vm_rw+0x59e/0xb40 [ 1329.155597][T19999] ? get_pid_task+0x20/0x1f0 [ 1329.155635][T19999] ? __pfx_process_vm_rw+0x10/0x10 [ 1329.155657][T19999] ? rcu_read_lock_any_held+0xb3/0x120 [ 1329.155724][T19999] ? __pfx_vfs_write+0x10/0x10 [ 1329.155784][T19999] ? ksys_write+0x22a/0x250 [ 1329.155810][T19999] ? __pfx_ksys_write+0x10/0x10 [ 1329.155831][T19999] ? rcu_is_watching+0x15/0xb0 [ 1329.155868][T19999] __x64_sys_process_vm_readv+0xe0/0x100 [ 1329.155899][T19999] do_syscall_64+0xfa/0x3b0 [ 1329.155929][T19999] ? lockdep_hardirqs_on+0x9c/0x150 [ 1329.155957][T19999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1329.155978][T19999] ? clear_bhb_loop+0x60/0xb0 [ 1329.156005][T19999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1329.156026][T19999] RIP: 0033:0x7f97cbd8e929 [ 1329.156045][T19999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1329.156063][T19999] RSP: 002b:00007f97ccb68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 1329.156086][T19999] RAX: ffffffffffffffda RBX: 00007f97cbfb5fa0 RCX: 00007f97cbd8e929 [ 1329.156102][T19999] RDX: 0000000000000004 RSI: 0000200000000540 RDI: 00000000000001b5 [ 1329.156115][T19999] RBP: 00007f97ccb68090 R08: 0000000000000001 R09: 0000000000000000 [ 1329.156128][T19999] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000001 [ 1329.156142][T19999] R13: 0000000000000000 R14: 00007f97cbfb5fa0 R15: 00007ffea7291ab8 [ 1329.156176][T19999] [ 1329.492927][ T5827] Bluetooth: hci1: command tx timeout [ 1330.001003][T20005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3822'. [ 1330.860295][T20014] netlink: 'syz.2.3823': attribute type 1 has an invalid length. [ 1331.054553][ T6911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1331.067474][ T6911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1331.079575][ T6911] bond0 (unregistering): Released all slaves [ 1331.163128][T19996] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1331.172166][T19996] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1331.180964][T19996] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1331.191003][T19996] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1331.220072][T19996] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1331.229075][T19996] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1331.238108][T19996] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1331.247242][T19996] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1331.509838][T16608] Bluetooth: hci1: command tx timeout [ 1331.554836][T20014] bond1: entered promiscuous mode [ 1331.600702][T20014] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1331.699991][T20015] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1331.721955][T20015] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1331.746936][T20015] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 1331.803091][T20015] bond1: (slave vxcan3): making interface the new active one [ 1331.827148][T20015] vxcan3: entered promiscuous mode [ 1331.846611][T20015] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 1332.114593][T20028] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1332.997873][T20037] sctp: [Deprecated]: syz.7.3828 (pid 20037) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1332.997873][T20037] Use struct sctp_sack_info instead [ 1333.055411][T10794] dvb-usb: found a 'Pinnacle PCTV 282e' in cold state, will try to load a firmware [ 1333.205700][T10794] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1333.224330][T10794] dib0700: firmware download failed at 7 with -8 [ 1333.227967][T20043] ceph: No mds server is up or the cluster is laggy [ 1333.255694][T20048] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1333.609336][T16608] Bluetooth: hci1: command tx timeout [ 1333.656092][ T6911] hsr_slave_0: left promiscuous mode [ 1333.704045][ T6911] hsr_slave_1: left promiscuous mode [ 1333.871518][ T6911] batman_adv: batadv0: Interface deactivated: dummy0 [ 1333.896707][ T6911] batman_adv: batadv0: Removing interface: dummy0 [ 1333.950398][ T6911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1333.979906][ T6911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1334.195497][ T6911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1334.203535][ T6911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1334.228316][T20054] 9pnet_fd: Insufficient options for proto=fd [ 1334.280116][T10794] usb 3-1: USB disconnect, device number 39 [ 1334.329211][ T6911] veth1_macvtap: left promiscuous mode [ 1334.357611][ T6911] veth0_macvtap: left promiscuous mode [ 1334.384456][ T6911] veth1_vlan: left promiscuous mode [ 1334.413393][ T6911] veth0_vlan: left promiscuous mode [ 1335.764442][T16608] Bluetooth: hci1: command tx timeout [ 1337.747417][ T6911] team0 (unregistering): Port device team_slave_1 removed [ 1337.825068][ T6911] team0 (unregistering): Port device team_slave_0 removed [ 1338.289467][T17936] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1338.453399][T17936] usb 6-1: Using ep0 maxpacket: 32 [ 1338.471077][T17936] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1338.488329][T17936] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1338.498212][T17936] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1338.509439][T17936] usb 6-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 1338.528856][T17936] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.551217][T17936] usb 6-1: config 0 descriptor?? [ 1338.920270][T17936] usbhid 6-1:0.0: can't add hid device: -71 [ 1338.926379][T17936] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1338.984853][T19973] chnl_net:caif_netlink_parms(): no params data found [ 1339.053356][T17936] usb 6-1: USB disconnect, device number 16 [ 1340.395170][T20110] 9pnet_fd: Insufficient options for proto=fd [ 1340.683517][T20111] netlink: 'syz.5.3842': attribute type 5 has an invalid length. [ 1341.099024][T20118] netlink: 'syz.7.3844': attribute type 10 has an invalid length. [ 1343.235621][T19973] bridge0: port 1(bridge_slave_0) entered blocking state [ 1343.274700][T19973] bridge0: port 1(bridge_slave_0) entered disabled state [ 1343.298229][T19973] bridge_slave_0: entered allmulticast mode [ 1343.374141][T19973] bridge_slave_0: entered promiscuous mode [ 1343.423063][T19973] bridge0: port 2(bridge_slave_1) entered blocking state [ 1343.454410][T19973] bridge0: port 2(bridge_slave_1) entered disabled state [ 1343.466325][T19973] bridge_slave_1: entered allmulticast mode [ 1343.485243][T19973] bridge_slave_1: entered promiscuous mode [ 1343.696635][T19973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1343.726566][T19973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1344.189887][ T6911] IPVS: stop unused estimator thread 0... [ 1344.636605][T20147] openvswitch: netlink: Tunnel attr 6 has unexpected len 1 expected 0 [ 1344.775371][T19973] team0: Port device team_slave_0 added [ 1345.065447][T20151] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1345.700730][T20154] hub 8-0:1.0: USB hub found [ 1345.706660][T20154] hub 8-0:1.0: 1 port detected [ 1345.764280][T19973] team0: Port device team_slave_1 added [ 1346.576093][T20160] 9pnet_fd: Insufficient options for proto=fd [ 1346.725799][T19973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1346.764924][T19973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1346.836238][T19973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1346.891330][T19973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1346.898521][T19973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1346.942870][T19973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1346.968204][T20176] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3862'. [ 1347.126329][ T5924] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1347.318074][T19973] hsr_slave_0: entered promiscuous mode [ 1347.329865][T19973] hsr_slave_1: entered promiscuous mode [ 1347.346861][T19973] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1347.364276][T19973] Cannot create hsr debugfs directory [ 1347.445090][ T5924] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1347.575504][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1347.727881][ T5924] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1347.905028][ T5924] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1348.126301][ T5924] usb 3-1: Manufacturer: syz [ 1348.135708][ T5924] usb 3-1: config 0 descriptor?? [ 1348.291123][ T5924] rc_core: IR keymap rc-hauppauge not found [ 1348.299035][ T5924] Registered IR keymap rc-empty [ 1348.321281][ T5924] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1348.356114][ T5924] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input19 [ 1348.383995][ C1] igorplugusb 3-1:0.0: Error: urb status = -32 [ 1350.613021][T19973] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1350.840760][T20204] 9pnet_fd: Insufficient options for proto=fd [ 1350.868023][T19973] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1350.885580][T17490] usb 3-1: USB disconnect, device number 40 [ 1350.902587][T20205] Bluetooth: MGMT ver 1.23 [ 1350.940753][T19973] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1350.984006][T19973] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1351.102132][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 1351.102160][ T30] audit: type=1326 audit(1751060094.652:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20219 comm="syz.2.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155ff8e929 code=0x7ffc0000 [ 1351.203254][ T30] audit: type=1326 audit(1751060094.652:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20219 comm="syz.2.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155ff8e929 code=0x7ffc0000 [ 1352.523534][T19973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1352.701415][T19973] 8021q: adding VLAN 0 to HW filter on device team0 [ 1352.748730][T13284] bridge0: port 1(bridge_slave_0) entered blocking state [ 1352.755523][T20233] fuse: Bad value for 'fd' [ 1352.756080][T13284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1352.791304][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1352.798723][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1352.896512][T19973] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1352.928018][T19973] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1352.949821][T16608] Bluetooth: hci0: command 0x0c1a tx timeout [ 1354.337284][T20250] 9pnet_fd: Insufficient options for proto=fd [ 1354.438266][T19973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1354.510918][T20255] fuse: Bad value for 'fd' [ 1355.294386][T17936] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1355.488936][T17936] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1355.653003][T17936] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1355.846185][T17936] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1356.085050][T17936] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 1356.094632][T17936] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.106754][T17936] usb 6-1: config 0 descriptor?? [ 1356.106927][T19973] veth0_vlan: entered promiscuous mode [ 1356.162559][T19973] veth1_vlan: entered promiscuous mode [ 1356.183758][ T30] audit: type=1326 audit(1751060099.732:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20277 comm="syz.2.3891" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f155ff8e929 code=0x0 [ 1356.242631][T19973] veth0_macvtap: entered promiscuous mode [ 1356.256001][T19973] veth1_macvtap: entered promiscuous mode [ 1356.291546][T19973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1356.318316][T19973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1356.340621][T19973] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.352740][T19973] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.363428][T19973] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.372498][T19973] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.512223][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1356.525283][T17936] pyra 0003:1E7D:2C24.0017: hidraw0: USB HID v0.00 Device [HID 1e7d:2c24] on usb-dummy_hcd.5-1/input0 [ 1356.536647][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1356.587525][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1356.596646][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1356.737619][T17936] usb 6-1: USB disconnect, device number 17 [ 1356.909872][T20291] 9pnet_fd: Insufficient options for proto=fd [ 1357.099280][T17490] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1357.759988][T17490] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1357.791767][T20300] fuse: Bad value for 'fd' [ 1357.795280][T17490] usb 9-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b [ 1357.821110][T17490] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.150158][T17490] usb 9-1: config 0 descriptor?? [ 1358.177790][T17490] usb 9-1: unsupported MDLM descriptors [ 1358.213870][T20305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3898'. [ 1359.030799][T20313] fuse: Unknown parameter 'roo‰mode' [ 1359.478780][T20319] fuse: Bad value for 'fd' [ 1361.918072][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.924602][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.185691][T10794] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1362.217288][T10772] usb 9-1: USB disconnect, device number 2 [ 1362.339320][T10794] usb 6-1: Using ep0 maxpacket: 16 [ 1363.446959][T10794] usb 6-1: device descriptor read/all, error -71 [ 1364.184402][T20337] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3910'. [ 1364.308902][T20344] netlink: 'syz.8.3913': attribute type 1 has an invalid length. [ 1364.318573][T20344] netlink: 'syz.8.3913': attribute type 1 has an invalid length. [ 1364.341354][T20344] netlink: 'syz.8.3913': attribute type 1 has an invalid length. [ 1364.349562][T20344] netlink: 160 bytes leftover after parsing attributes in process `syz.8.3913'. [ 1364.358719][T20344] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3913'. [ 1364.481067][T17490] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1364.492512][T20350] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3915'. [ 1364.657541][T20355] xt_hashlimit: max too large, truncated to 1048576 [ 1364.809572][T17490] usb 3-1: Using ep0 maxpacket: 16 [ 1364.939989][T17490] usb 3-1: config 0 has an invalid interface number: 25 but max is 0 [ 1365.314171][T20352] netlink: 'syz.5.3918': attribute type 5 has an invalid length. [ 1365.323551][T17490] usb 3-1: config 0 has no interface number 0 [ 1365.513071][T17490] usb 3-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=f9.12 [ 1365.539221][T17490] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.559322][T17490] usb 3-1: Product: syz [ 1365.563561][T17490] usb 3-1: Manufacturer: syz [ 1365.588610][T17490] usb 3-1: SerialNumber: syz [ 1365.633196][T17490] usb 3-1: config 0 descriptor?? [ 1365.658885][T17490] mct_u232 3-1:0.25: MCT U232 converter detected [ 1365.680531][T17490] mct_u232 ttyUSB0: expected endpoint missing [ 1365.945890][T17490] usb 3-1: USB disconnect, device number 41 [ 1365.956174][T17490] mct_u232 3-1:0.25: device disconnected [ 1368.042750][T20378] Bluetooth: hci4: Frame reassembly failed (-84) [ 1369.128306][T10239] Bluetooth: hci4: Frame reassembly failed (-84) [ 1370.083111][T20391] 9pnet_fd: Insufficient options for proto=fd [ 1370.119355][T16608] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1370.795968][T20408] delete_channel: no stack [ 1372.037646][ T30] audit: type=1326 audit(1751060115.582:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20413 comm="syz.2.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155ff8e929 code=0x7ffc0000 [ 1372.059265][ C1] vkms_vblank_simulate: vblank timer overrun [ 1372.159410][ T30] audit: type=1326 audit(1751060115.582:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20413 comm="syz.2.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155ff8e929 code=0x7ffc0000 [ 1372.733587][T20430] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3938'. [ 1372.907458][ T30] audit: type=1326 audit(1751060115.632:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20413 comm="syz.2.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f155ff8e929 code=0x7ffc0000 [ 1372.932694][T20425] netlink: 'syz.7.3935': attribute type 27 has an invalid length. [ 1373.075016][ T30] audit: type=1326 audit(1751060115.642:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20413 comm="syz.2.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155ff8e929 code=0x7ffc0000 [ 1373.135963][T20425] bond0: left allmulticast mode [ 1373.141256][T20425] bond_slave_0: left allmulticast mode [ 1373.146908][T20425] bond_slave_1: left allmulticast mode [ 1373.272872][T20425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1373.289109][T20425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1373.329961][T20435] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1373.333501][T20425] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 1373.394516][ T30] audit: type=1326 audit(1751060115.642:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20413 comm="syz.2.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f155ff90847 code=0x7ffc0000 [ 1373.409992][T20439] 9pnet_fd: Insufficient options for proto=fd [ 1373.436943][ T30] audit: type=1326 audit(1751060115.642:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20413 comm="syz.2.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155ff8e929 code=0x7ffc0000 [ 1373.460732][ T30] audit: type=1326 audit(1751060115.642:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20413 comm="syz.2.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f155ff8e929 code=0x7ffc0000 [ 1373.483040][ T30] audit: type=1326 audit(1751060115.642:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20413 comm="syz.2.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f155ff8e963 code=0x7ffc0000 [ 1373.504953][ T30] audit: type=1326 audit(1751060115.642:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20413 comm="syz.2.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155ff8e929 code=0x7ffc0000 [ 1373.527597][ T30] audit: type=1326 audit(1751060115.642:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20413 comm="syz.2.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f155ff8e929 code=0x7ffc0000 [ 1373.621196][T20425] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.633816][T20425] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.659350][T20425] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.678689][T20425] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.687971][T10798] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 1373.824893][T20449] 9pnet_fd: Insufficient options for proto=fd [ 1373.841628][T10798] usb 6-1: config index 0 descriptor too short (expected 63186, got 210) [ 1373.851821][T10798] usb 6-1: config 0 has an invalid interface number: 106 but max is 0 [ 1373.869259][T10798] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1373.888004][T20425] bridge1: left promiscuous mode [ 1373.901995][T10798] usb 6-1: config 0 has no interface number 0 [ 1373.909492][T20425] bridge1: left allmulticast mode [ 1373.922132][T10798] usb 6-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1373.944139][T10798] usb 6-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1373.973666][T10798] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1374.014849][T10798] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.090212][T10798] usb 6-1: config 0 descriptor?? [ 1374.125635][T10798] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1374.277491][T20457] netlink: 'syz.2.3945': attribute type 10 has an invalid length. [ 1374.750990][T20441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1374.768795][T20431] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1374.799788][T20441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1374.841424][T20457] hsr0: entered promiscuous mode [ 1374.850784][T20457] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1374.861889][T20457] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1374.875726][T20457] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1374.892954][T20459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1374.930269][T20459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1375.523108][T19033] usb 6-1: Failed to submit usb control message: -110 [ 1375.656349][T19033] usb 6-1: unable to send the bmi data to the device: -110 [ 1375.774176][T19033] usb 6-1: unable to get target info from device [ 1375.780862][T19033] usb 6-1: could not get target info (-110) [ 1375.787121][T19033] usb 6-1: could not probe fw (-110) [ 1376.017508][T20466] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3947'. [ 1376.139718][T10788] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 1377.292418][T10794] usb 6-1: USB disconnect, device number 20 [ 1377.532275][T20480] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1377.559771][T10798] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1377.635144][T20490] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3954'. [ 1377.769377][T10794] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1377.949474][T10794] usb 6-1: Using ep0 maxpacket: 32 [ 1377.957916][T10794] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1377.999288][T10794] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1378.022500][T10794] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1378.066091][T10794] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1378.069586][T10788] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1378.090565][T10794] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.116042][T10794] usb 6-1: config 0 descriptor?? [ 1378.279539][T10788] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1378.397851][T10788] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1378.442611][T10788] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1378.473452][T17936] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1378.489506][T10788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.499338][T10788] usb 3-1: Product: syz [ 1378.503686][T10788] usb 3-1: Manufacturer: syz [ 1378.512873][T10788] usb 3-1: SerialNumber: syz [ 1378.523785][T10788] cdc_mbim 3-1:1.0: MBIM functional descriptor missing [ 1378.535986][T20485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1378.546456][T20485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1378.557441][T10788] cdc_mbim 3-1:1.0: bind() failure [ 1378.735094][T10788] usb 3-1: USB disconnect, device number 43 [ 1379.016168][T10794] usbhid 6-1:0.0: can't add hid device: -71 [ 1379.029494][T10794] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1379.049004][T10794] usb 6-1: USB disconnect, device number 21 [ 1380.433523][T20524] sctp: [Deprecated]: syz.5.3963 (pid 20524) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1380.433523][T20524] Use struct sctp_sack_info instead [ 1381.287844][T20531] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3967'. [ 1381.297358][T20531] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3967'. [ 1383.334189][T20558] 9pnet_fd: Insufficient options for proto=fd [ 1383.508572][T20561] hub 8-0:1.0: USB hub found [ 1383.557479][T20561] hub 8-0:1.0: 1 port detected [ 1384.214597][T20566] FAULT_INJECTION: forcing a failure. [ 1384.214597][T20566] name failslab, interval 1, probability 0, space 0, times 0 [ 1384.259354][T20566] CPU: 1 UID: 0 PID: 20566 Comm: syz.5.3973 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 1384.259388][T20566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1384.259410][T20566] Call Trace: [ 1384.259419][T20566] [ 1384.259436][T20566] dump_stack_lvl+0x189/0x250 [ 1384.259539][T20566] ? __pfx____ratelimit+0x10/0x10 [ 1384.259576][T20566] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1384.259609][T20566] ? __pfx__printk+0x10/0x10 [ 1384.259646][T20566] should_fail_ex+0x414/0x560 [ 1384.259677][T20566] should_failslab+0xa8/0x100 [ 1384.259708][T20566] __kmalloc_cache_noprof+0x70/0x3d0 [ 1384.259734][T20566] ? sctp_add_bind_addr+0x8c/0x370 [ 1384.259773][T20566] sctp_add_bind_addr+0x8c/0x370 [ 1384.259823][T20566] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1384.259866][T20566] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1384.259905][T20566] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1384.259940][T20566] ? sctp_v6_is_any+0x64/0x80 [ 1384.259963][T20566] ? sctp_copy_one_addr+0x93/0x360 [ 1384.260000][T20566] sctp_bind_addr_copy+0xb3/0x3c0 [ 1384.260035][T20566] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1384.260074][T20566] sctp_connect_new_asoc+0x2e0/0x690 [ 1384.260103][T20566] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1384.260127][T20566] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1384.260166][T20566] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1384.260193][T20566] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1384.260223][T20566] sctp_sendmsg+0x155c/0x2810 [ 1384.260262][T20566] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1384.260286][T20566] ? __lock_acquire+0xab9/0xd20 [ 1384.260334][T20566] ? sock_rps_record_flow+0x19/0x410 [ 1384.260369][T20566] ? inet_sendmsg+0x2f4/0x370 [ 1384.260406][T20566] __sock_sendmsg+0x19c/0x270 [ 1384.260448][T20566] __sys_sendto+0x3bd/0x520 [ 1384.260473][T20566] ? __pfx___sys_sendto+0x10/0x10 [ 1384.260492][T20566] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1384.260539][T20566] ? __fget_files+0x3a0/0x420 [ 1384.260580][T20566] ? ksys_write+0x22a/0x250 [ 1384.260607][T20566] ? __pfx_ksys_write+0x10/0x10 [ 1384.260629][T20566] ? rcu_is_watching+0x15/0xb0 [ 1384.260666][T20566] __x64_sys_sendto+0xde/0x100 [ 1384.260693][T20566] do_syscall_64+0xfa/0x3b0 [ 1384.260723][T20566] ? lockdep_hardirqs_on+0x9c/0x150 [ 1384.260753][T20566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.260774][T20566] ? clear_bhb_loop+0x60/0xb0 [ 1384.260801][T20566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.260822][T20566] RIP: 0033:0x7f97cbd8e929 [ 1384.260841][T20566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1384.260860][T20566] RSP: 002b:00007f97ccb68038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1384.260883][T20566] RAX: ffffffffffffffda RBX: 00007f97cbfb5fa0 RCX: 00007f97cbd8e929 [ 1384.260899][T20566] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 1384.260912][T20566] RBP: 00007f97ccb68090 R08: 0000200000000140 R09: 000000000000001c [ 1384.260926][T20566] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 1384.260939][T20566] R13: 0000000000000000 R14: 00007f97cbfb5fa0 R15: 00007ffea7291ab8 [ 1384.260973][T20566] [ 1384.571937][ C1] vkms_vblank_simulate: vblank timer overrun [ 1385.911350][T10790] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1385.932205][T20585] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3980'. [ 1386.793260][T10790] usb 3-1: config 0 has an invalid interface number: 235 but max is 0 [ 1386.809251][T10790] usb 3-1: config 0 has no interface number 0 [ 1386.815442][T10790] usb 3-1: New USB device found, idVendor=0451, idProduct=5416, bcdDevice= 1.00 [ 1386.835135][T10790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1386.854787][T10790] usb 3-1: config 0 descriptor?? [ 1386.916168][T10790] usb-storage 3-1:0.235: USB Mass Storage device detected [ 1386.959070][T10790] usb-storage 3-1:0.235: Quirks match for vid 0451 pid 5416: 2 [ 1387.008251][T20594] 9pnet_fd: Insufficient options for proto=fd [ 1387.063040][T20603] overlayfs: failed to clone upperpath [ 1387.126970][T10790] usb 3-1: USB disconnect, device number 44 [ 1387.679807][T10788] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1387.687890][T17936] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1388.419421][T17936] usb 9-1: Using ep0 maxpacket: 32 [ 1388.427986][T10788] usb 6-1: New USB device found, idVendor=055d, idProduct=9002, bcdDevice=31.44 [ 1388.437232][T17936] usb 9-1: config 0 has an invalid interface number: 183 but max is 0 [ 1388.448977][T17936] usb 9-1: config 0 has no interface number 0 [ 1388.455181][T10788] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1388.463355][T17936] usb 9-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528 [ 1388.477878][T17936] usb 9-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 1388.488312][T10788] usb 6-1: config 0 descriptor?? [ 1388.506013][T10788] pwc: Samsung SNC-35E (v3.0) USB webcam detected. [ 1388.517677][T17936] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.527573][T17936] usb 9-1: Product: syz [ 1388.531896][T17936] usb 9-1: Manufacturer: syz [ 1388.537447][T17936] usb 9-1: SerialNumber: syz [ 1388.553864][T17936] usb 9-1: config 0 descriptor?? [ 1388.561078][T20613] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1388.789689][T17936] net1080 9-1:0.183: probe with driver net1080 failed with error -71 [ 1388.832265][T20632] netlink: 232 bytes leftover after parsing attributes in process `syz.7.3999'. [ 1388.841632][T20632] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3999'. [ 1388.851182][T10790] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1388.859274][T17936] usb 9-1: USB disconnect, device number 3 [ 1389.179340][T10790] usb 3-1: Using ep0 maxpacket: 32 [ 1389.199821][T10790] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 1389.872575][T20637] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1390.092769][T10790] usb 3-1: config 0 has no interface number 0 [ 1390.234555][T10790] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1390.252777][T10790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.270679][T10790] usb 3-1: Product: syz [ 1390.280115][T10790] usb 3-1: Manufacturer: syz [ 1390.311110][T10790] usb 3-1: SerialNumber: syz [ 1390.327230][T20643] 9pnet_fd: Insufficient options for proto=fd [ 1390.348296][T10790] usb 3-1: config 0 descriptor?? [ 1390.373960][T10790] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 1390.392786][T10790] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 1390.468523][T10788] pwc: Failed to set LED on/off time (-71) [ 1391.120195][T10790] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 1391.309341][T10788] pwc: send_video_command error -71 [ 1391.314629][T10788] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1391.346258][T10790] usbhid 3-1:0.35: couldn't find an input interrupt endpoint [ 1391.465539][T10788] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 1391.495601][T10788] usb 6-1: USB disconnect, device number 22 [ 1391.677048][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1391.677070][ T30] audit: type=1326 audit(1751060135.222:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20624 comm="syz.2.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155ff8e929 code=0x7ffc0000 [ 1391.990782][ T30] audit: type=1326 audit(1751060135.222:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20624 comm="syz.2.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155ff8e929 code=0x7ffc0000 [ 1392.090944][ T30] audit: type=1326 audit(1751060135.282:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20624 comm="syz.2.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f155ff8e929 code=0x7ffc0000 [ 1392.117433][ T30] audit: type=1326 audit(1751060135.292:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20624 comm="syz.2.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155ff8e929 code=0x7ffc0000 [ 1392.146334][ T30] audit: type=1326 audit(1751060135.292:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20624 comm="syz.2.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155ff8e929 code=0x7ffc0000 [ 1392.172904][ T30] audit: type=1326 audit(1751060135.292:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20624 comm="syz.2.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f155ff8e929 code=0x7ffc0000 [ 1392.236220][ T30] audit: type=1326 audit(1751060135.292:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20624 comm="syz.2.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155ff8e929 code=0x7ffc0000 [ 1392.423495][ T30] audit: type=1326 audit(1751060135.292:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20624 comm="syz.2.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155ff8e929 code=0x7ffc0000 [ 1392.540339][ T30] audit: type=1326 audit(1751060135.292:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20624 comm="syz.2.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f155ff8e929 code=0x7ffc0000 [ 1392.623442][ T30] audit: type=1326 audit(1751060135.292:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20624 comm="syz.2.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155ff8e929 code=0x7ffc0000 [ 1392.699385][T10794] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1392.937671][T20678] netlink: 'syz.7.4013': attribute type 5 has an invalid length. [ 1392.957992][T10794] usb 6-1: Using ep0 maxpacket: 32 [ 1392.965903][T10794] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1392.974933][T10794] usb 6-1: config 0 has no interface number 0 [ 1392.983938][T10794] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1392.999797][T10794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.036318][T10794] usb 6-1: Product: syz [ 1393.085372][T10794] usb 6-1: Manufacturer: syz [ 1393.191913][T10794] usb 6-1: SerialNumber: syz [ 1393.235258][T10794] usb 6-1: config 0 descriptor?? [ 1393.266365][T10794] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1393.461561][T17936] usb 3-1: USB disconnect, device number 45 [ 1393.557300][T20680] 9pnet_fd: Insufficient options for proto=fd [ 1393.786166][T10794] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1393.865338][T10794] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1396.223247][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1396.314857][T17936] usb 6-1: USB disconnect, device number 23 [ 1396.355083][T17936] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1396.460057][T17936] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1396.524670][T17936] quatech2 6-1:0.51: device disconnected [ 1396.772852][T20706] netlink: 'syz.7.4023': attribute type 4 has an invalid length. [ 1396.794583][T20706] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4023'. [ 1396.839118][T20709] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4024'. [ 1396.856595][T20709] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1396.865505][T20709] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1396.874557][T20709] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1396.883344][T20709] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1397.233145][T20709] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1397.246325][T20709] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1397.259476][T20709] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1397.268364][T20709] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1397.755529][T20715] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4025'. [ 1397.836433][T20713] 9pnet_fd: Insufficient options for proto=fd [ 1397.951723][T20719] netlink: 56 bytes leftover after parsing attributes in process `syz.8.4027'. [ 1398.047738][T20720] fuse: Bad value for 'fd' [ 1398.374378][T20721] syz.5.4025 (20721): drop_caches: 4 [ 1398.427625][T20725] fuse: Bad value for 'fd' [ 1400.282502][T20775] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1401.068445][T20785] 9pnet_fd: Insufficient options for proto=fd [ 1401.409556][T10790] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1401.505978][T20790] netlink: 'syz.8.4037': attribute type 10 has an invalid length. [ 1401.516314][T20790] hsr0: entered promiscuous mode [ 1401.536085][T20790] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1401.547961][T20790] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1401.560526][T20790] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1401.699455][T10790] usb 3-1: Using ep0 maxpacket: 32 [ 1401.835991][T10790] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1402.116401][T10790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.131257][T10790] usb 3-1: Product: syz [ 1402.135610][T10790] usb 3-1: Manufacturer: syz [ 1402.172047][T10790] usb 3-1: SerialNumber: syz [ 1402.200583][T10790] usb 3-1: config 0 descriptor?? [ 1402.738602][T20801] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4045'. [ 1402.983197][T10790] peak_usb 3-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 1403.040255][T10790] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 1403.059372][T10790] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 1403.798913][T10790] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -22 [ 1404.719753][T10790] usb 3-1: USB disconnect, device number 46 [ 1404.807041][T20838] fuse: Bad value for 'fd' [ 1404.903862][T20844] netlink: 'syz.7.4054': attribute type 5 has an invalid length. [ 1405.005219][T20845] tipc: Started in network mode [ 1405.033858][T20845] tipc: Node identity 7f000001, cluster identity 4711 [ 1405.035294][T20845] tipc: Enabled bearer , priority 10 [ 1405.093817][T20845] netlink: 'syz.2.4057': attribute type 3 has an invalid length. [ 1405.093837][T20845] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4057'. [ 1405.111009][T10794] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1405.221254][T20849] fuse: Bad value for 'fd' [ 1405.259290][T10794] usb 6-1: Using ep0 maxpacket: 16 [ 1405.267237][T10794] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1405.267271][T10794] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1405.270491][T10794] usb 6-1: config 0 descriptor?? [ 1405.283100][T10794] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1405.798133][T10794] gspca_sonixj: reg_w1 err -110 [ 1406.207181][T10794] sonixj 6-1:0.0: probe with driver sonixj failed with error -110 [ 1406.259836][T10790] tipc: Node number set to 2130706433 [ 1406.373794][T20857] FAULT_INJECTION: forcing a failure. [ 1406.373794][T20857] name failslab, interval 1, probability 0, space 0, times 0 [ 1406.387188][T20857] CPU: 0 UID: 0 PID: 20857 Comm: syz.5.4058 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 1406.387218][T20857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1406.387232][T20857] Call Trace: [ 1406.387240][T20857] [ 1406.387249][T20857] dump_stack_lvl+0x189/0x250 [ 1406.387284][T20857] ? lockdep_hardirqs_on+0x9c/0x150 [ 1406.387314][T20857] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1406.387362][T20857] should_fail_ex+0x414/0x560 [ 1406.387391][T20857] should_failslab+0xa8/0x100 [ 1406.387419][T20857] __kmalloc_noprof+0xcb/0x4f0 [ 1406.387442][T20857] ? user_preparse+0x9e/0x160 [ 1406.387478][T20857] user_preparse+0x9e/0x160 [ 1406.387511][T20857] __key_create_or_update+0x370/0xa30 [ 1406.387554][T20857] ? __pfx___key_create_or_update+0x10/0x10 [ 1406.387607][T20857] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1406.387653][T20857] key_create_or_update+0x42/0x60 [ 1406.387685][T20857] __se_sys_add_key+0x329/0x400 [ 1406.387709][T20857] ? __pfx___se_sys_add_key+0x10/0x10 [ 1406.387739][T20857] ? __x64_sys_add_key+0x20/0xc0 [ 1406.387761][T20857] do_syscall_64+0xfa/0x3b0 [ 1406.387788][T20857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1406.387806][T20857] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1406.387824][T20857] ? clear_bhb_loop+0x60/0xb0 [ 1406.387846][T20857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1406.387863][T20857] RIP: 0033:0x7f97cbd8e929 [ 1406.387880][T20857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1406.387896][T20857] RSP: 002b:00007f97ccb26038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1406.387916][T20857] RAX: ffffffffffffffda RBX: 00007f97cbfb6160 RCX: 00007f97cbd8e929 [ 1406.387929][T20857] RDX: 0000200000000080 RSI: 0000200000000180 RDI: 0000200000000040 [ 1406.387942][T20857] RBP: 00007f97ccb26090 R08: fffffffffffffffb R09: 0000000000000000 [ 1406.387954][T20857] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 1406.387965][T20857] R13: 0000000000000000 R14: 00007f97cbfb6160 R15: 00007ffea7291ab8 [ 1406.387993][T20857] [ 1407.115012][T10788] usb 6-1: USB disconnect, device number 24 [ 1407.519528][T17936] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1407.710780][T17936] usb 3-1: Using ep0 maxpacket: 16 [ 1407.735182][T17936] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 528 [ 1407.783211][T17936] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 64 [ 1407.843225][T17936] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1407.970842][T17936] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1407.994019][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1408.000517][T17936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.017375][T17936] usb 3-1: Product: syz [ 1408.041202][T17936] usb 3-1: Manufacturer: syz [ 1408.056079][T17936] usb 3-1: SerialNumber: syz [ 1408.084438][T20869] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1408.097754][T20869] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1408.160955][T20875] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 1408.193577][T20878] 9pnet_fd: Insufficient options for proto=fd [ 1408.214418][T20875] overlayfs: missing 'lowerdir' [ 1408.537067][T20869] FAULT_INJECTION: forcing a failure. [ 1408.537067][T20869] name failslab, interval 1, probability 0, space 0, times 0 [ 1408.542002][T20887] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1408.550050][T20869] CPU: 0 UID: 0 PID: 20869 Comm: syz.2.4065 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 1408.550083][T20869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1408.550098][T20869] Call Trace: [ 1408.550107][T20869] [ 1408.550119][T20869] dump_stack_lvl+0x189/0x250 [ 1408.550162][T20869] ? __pfx____ratelimit+0x10/0x10 [ 1408.550194][T20869] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1408.550229][T20869] ? __pfx__printk+0x10/0x10 [ 1408.550260][T20869] ? __pfx___might_resched+0x10/0x10 [ 1408.550314][T20869] should_fail_ex+0x414/0x560 [ 1408.550348][T20869] should_failslab+0xa8/0x100 [ 1408.550380][T20869] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1408.550410][T20869] ? __alloc_skb+0x112/0x2d0 [ 1408.550439][T20869] __alloc_skb+0x112/0x2d0 [ 1408.550468][T20869] netlink_dump+0x22b/0xe20 [ 1408.550495][T20869] ? __pfx_ethnl_parse_header_dev_get+0x10/0x10 [ 1408.550529][T20869] ? __pfx_netlink_dump+0x10/0x10 [ 1408.550569][T20869] ? genl_start+0x581/0x6c0 [ 1408.550610][T20869] __netlink_dump_start+0x5cb/0x7e0 [ 1408.550645][T20869] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 1408.550682][T20869] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1408.550712][T20869] ? genl_get_cmd+0x67f/0x910 [ 1408.550750][T20869] ? __pfx_genl_start+0x10/0x10 [ 1408.550778][T20869] ? __pfx_genl_dumpit+0x10/0x10 [ 1408.550806][T20869] ? __pfx_genl_done+0x10/0x10 [ 1408.550855][T20869] genl_rcv_msg+0x5da/0x790 [ 1408.550895][T20869] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1408.550924][T20869] ? ref_tracker_free+0x63a/0x7d0 [ 1408.550951][T20869] ? __pfx_ethnl_tsinfo_start+0x10/0x10 [ 1408.550972][T20869] ? __pfx_ethnl_tsinfo_dumpit+0x10/0x10 [ 1408.550994][T20869] ? __pfx_ethnl_tsinfo_done+0x10/0x10 [ 1408.551018][T20869] ? __pfx_ref_tracker_free+0x10/0x10 [ 1408.551060][T20869] netlink_rcv_skb+0x205/0x470 [ 1408.551085][T20869] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1408.551119][T20869] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1408.551165][T20869] ? down_read+0x1ad/0x2e0 [ 1408.551190][T20869] genl_rcv+0x28/0x40 [ 1408.551220][T20869] netlink_unicast+0x758/0x8d0 [ 1408.551277][T20869] netlink_sendmsg+0x805/0xb30 [ 1408.551315][T20869] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1408.551349][T20869] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1408.551378][T20869] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1408.551405][T20869] __sock_sendmsg+0x21c/0x270 [ 1408.551444][T20869] ____sys_sendmsg+0x505/0x830 [ 1408.551479][T20869] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1408.551519][T20869] ? import_iovec+0x74/0xa0 [ 1408.551560][T20869] ___sys_sendmsg+0x21f/0x2a0 [ 1408.551590][T20869] ? __pfx____sys_sendmsg+0x10/0x10 [ 1408.551663][T20869] ? __fget_files+0x2a/0x420 [ 1408.551692][T20869] ? __fget_files+0x3a0/0x420 [ 1408.551736][T20869] __x64_sys_sendmsg+0x19b/0x260 [ 1408.551766][T20869] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1408.551806][T20869] ? __pfx_ksys_write+0x10/0x10 [ 1408.551839][T20869] ? do_syscall_64+0xbe/0x3b0 [ 1408.551878][T20869] do_syscall_64+0xfa/0x3b0 [ 1408.551913][T20869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.551934][T20869] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1408.551959][T20869] ? clear_bhb_loop+0x60/0xb0 [ 1408.551987][T20869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.552010][T20869] RIP: 0033:0x7f155ff8e929 [ 1408.552031][T20869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1408.552050][T20869] RSP: 002b:00007f155ddf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1408.552075][T20869] RAX: ffffffffffffffda RBX: 00007f15601b5fa0 RCX: 00007f155ff8e929 [ 1408.552092][T20869] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 1408.552108][T20869] RBP: 00007f155ddf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1408.552122][T20869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1408.552136][T20869] R13: 0000000000000000 R14: 00007f15601b5fa0 R15: 00007ffc5de05938 [ 1408.552172][T20869] [ 1408.972916][T20892] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1408.987010][T17936] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 47 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 1409.002246][T17936] usb 3-1: USB disconnect, device number 47 [ 1409.023715][T17936] usblp0: removed [ 1410.214055][T10798] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1410.231371][T20914] input: syz0 as /devices/virtual/input/input20 [ 1410.428098][T10798] usb 9-1: Using ep0 maxpacket: 16 [ 1410.492505][T10798] usb 9-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1410.555455][T10798] usb 9-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 1410.651395][T10798] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1410.727726][T10798] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.781494][T10798] usb 9-1: Product: syz [ 1410.821548][T10798] usb 9-1: Manufacturer: syz [ 1410.852088][T10798] usb 9-1: SerialNumber: syz [ 1411.431030][T16608] Bluetooth: hci0: command 0x0c1a tx timeout [ 1411.729090][T20909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1411.738686][T20909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1411.923453][T20931] fuse: Bad value for 'fd' [ 1412.086932][T20931] fuse: Bad value for 'fd' [ 1413.581220][T20952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1413.753419][T17936] usb 9-1: USB disconnect, device number 4 [ 1414.859780][T20970] netlink: 'syz.8.4092': attribute type 10 has an invalid length. [ 1414.867914][T20970] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1414.887763][T20970] team0: Port device virt_wifi0 added [ 1415.819506][T10798] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1416.110216][T20972] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4090'. [ 1416.182752][T20974] fuse: Bad value for 'fd' [ 1416.419428][T10798] usb 9-1: Using ep0 maxpacket: 16 [ 1416.425529][T20974] fuse: Bad value for 'fd' [ 1416.440642][T10798] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1416.460221][T10798] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1416.475429][T10798] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1416.503800][T10798] usb 9-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 1416.552415][T10798] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.599391][T10798] usb 9-1: Product: syz [ 1416.603639][T10798] usb 9-1: Manufacturer: syz [ 1416.625984][T10798] usb 9-1: SerialNumber: syz [ 1416.655613][T10798] usb 9-1: config 0 descriptor?? [ 1416.676957][T10798] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 1416.719674][T10798] gspca_stv06xx: st6422 sensor detected [ 1416.960140][T20983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4097'. [ 1417.845897][T20987] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4098'. [ 1417.859036][T20987] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4098'. [ 1418.441545][T10798] STV06xx 9-1:0.0: probe with driver STV06xx failed with error -71 [ 1418.526871][T10798] usb 9-1: USB disconnect, device number 5 [ 1418.839598][T21005] fuse: Bad value for 'fd' [ 1419.045145][T21005] fuse: Bad value for 'fd' [ 1419.167891][T21006] 9pnet_fd: Insufficient options for proto=fd [ 1419.944691][T21013] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1421.209728][T21035] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 1421.448895][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805812d400: rx timeout, send abort [ 1421.949069][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805812c800: rx timeout, send abort [ 1421.957640][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805812d400: abort rx timeout. Force session deactivation [ 1422.117595][T21053] fuse: Bad value for 'fd' [ 1422.377791][T21055] fuse: Bad value for 'fd' [ 1422.457502][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805812c800: abort rx timeout. Force session deactivation [ 1422.912114][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 1422.912134][ T30] audit: type=1326 audit(1751060166.462:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21056 comm="syz.5.4118" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97cbd8e929 code=0x0 [ 1423.352772][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.361723][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.664428][T21069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4121'. [ 1423.680995][T21069] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1423.689909][T21069] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1423.698663][T21069] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1423.707458][T21069] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1423.899633][T21069] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1423.908660][T21069] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1423.918070][T21069] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1423.928137][T21069] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1424.052094][T21076] hub 8-0:1.0: USB hub found [ 1424.059740][T21076] hub 8-0:1.0: 1 port detected [ 1424.847381][T21083] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4124'. [ 1424.959563][T21083] 8021q: VLANs not supported on gre0 [ 1425.276175][T21093] overlay: Unknown parameter 'fscontext' [ 1425.367747][T21097] tmpfs: Unknown parameter 'quN [ 1425.367747][T21097] ' [ 1425.443673][T21098] netlink: 'syz.8.4128': attribute type 1 has an invalid length. [ 1425.459292][T10792] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1425.796772][T10792] usb 6-1: Using ep0 maxpacket: 16 [ 1425.813419][T10792] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1425.835929][T10792] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1426.521378][T10792] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1426.559609][T10792] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1426.568690][T10792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.591194][T10792] usb 6-1: Product: syz [ 1426.647693][T10792] usb 6-1: Manufacturer: syz [ 1426.669339][T10792] usb 6-1: SerialNumber: syz [ 1427.512090][T10792] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 1428.096875][T21118] overlayfs: missing 'lowerdir' [ 1428.272672][T21090] netlink: 'syz.5.4126': attribute type 2 has an invalid length. [ 1428.280669][T21090] netlink: 'syz.5.4126': attribute type 8 has an invalid length. [ 1428.288512][T21090] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4126'. [ 1428.413728][T10792] usb 6-1: 2:1: cannot get freq at ep 0x82 [ 1428.515781][T10792] usb 6-1: USB disconnect, device number 25 [ 1429.739335][T10798] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 1429.811540][ T30] audit: type=1326 audit(1751060173.362:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21138 comm="syz.1.4141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3fbf8e929 code=0x7ffc0000 [ 1429.845690][ T30] audit: type=1326 audit(1751060173.362:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21138 comm="syz.1.4141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3fbf8e929 code=0x7ffc0000 [ 1429.876408][ T30] audit: type=1326 audit(1751060173.382:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21138 comm="syz.1.4141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7ff3fbf8e929 code=0x7ffc0000 [ 1429.913355][T10798] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1429.921229][ T30] audit: type=1326 audit(1751060173.382:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21138 comm="syz.1.4141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3fbf8e929 code=0x7ffc0000 [ 1429.944576][T10798] usb 3-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 1429.952903][ T30] audit: type=1326 audit(1751060173.382:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21138 comm="syz.1.4141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3fbf8e929 code=0x7ffc0000 [ 1429.985654][T10798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.999922][T10792] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1430.007430][T10798] usb 3-1: config 0 descriptor?? [ 1430.024274][ T30] audit: type=1326 audit(1751060173.392:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21138 comm="syz.1.4141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff3fbf8e929 code=0x7ffc0000 [ 1430.072437][ T30] audit: type=1326 audit(1751060173.392:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21138 comm="syz.1.4141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3fbf8e929 code=0x7ffc0000 [ 1430.168126][ T30] audit: type=1326 audit(1751060173.392:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21138 comm="syz.1.4141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3fbf8e929 code=0x7ffc0000 [ 1430.192486][T10792] usb 9-1: Using ep0 maxpacket: 16 [ 1430.219536][T10792] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1430.237520][T10792] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1430.271623][ T30] audit: type=1326 audit(1751060173.392:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21138 comm="syz.1.4141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff3fbf8e929 code=0x7ffc0000 [ 1430.293513][T10792] usb 9-1: New USB device found, idVendor=0dac, idProduct=024b, bcdDevice= 0.04 [ 1430.319289][T10792] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.348695][T10792] usb 9-1: config 0 descriptor?? [ 1430.357914][ T30] audit: type=1326 audit(1751060173.392:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21138 comm="syz.1.4141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3fbf8e929 code=0x7ffc0000 [ 1430.516112][T21155] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4144'. [ 1430.534336][T21155] netlink: 1284 bytes leftover after parsing attributes in process `syz.7.4144'. [ 1430.644364][T21155] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4144'. [ 1431.615685][T10792] hid-generic 0003:0DAC:024B.0019: item fetching failed at offset 2/69 [ 1431.630530][T10794] usb 3-1: USB disconnect, device number 48 [ 1431.658864][T21137] netlink: 'syz.8.4140': attribute type 7 has an invalid length. [ 1431.660186][T10792] hid-generic 0003:0DAC:024B.0019: probe with driver hid-generic failed with error -22 [ 1431.681029][T21137] netlink: 140 bytes leftover after parsing attributes in process `syz.8.4140'. [ 1431.774722][T21170] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4147'. [ 1431.784462][T21170] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4147'. [ 1433.321575][T21199] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4157'. [ 1433.340505][T21201] netlink: 'syz.2.4155': attribute type 5 has an invalid length. [ 1433.367576][T21199] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4157'. [ 1433.855768][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1433.865988][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1434.979906][T10794] usb 9-1: USB disconnect, device number 6 [ 1435.134984][T21215] tmpfs: Unknown parameter 'usrquota depth 0 [ 1435.134984][T21215] processed 0 insns (limit 1000000) max_states_per_insn 0 total_states 0 peak_states 0 mark_read 0 [ 1435.134984][T21215] ' [ 1435.583510][T21227] fuse: Bad value for 'fd' [ 1435.859983][T21232] fuse: Bad value for 'fd' [ 1436.019377][T10794] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1436.179728][T10794] usb 9-1: Using ep0 maxpacket: 32 [ 1436.821309][T10794] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 1436.830814][T10794] usb 9-1: config 0 has no interface number 0 [ 1436.836982][T10794] usb 9-1: config 0 interface 184 has no altsetting 0 [ 1436.850380][T10794] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1436.869011][T10794] usb 9-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 1436.891900][T10794] usb 9-1: Product: syz [ 1436.896146][T10794] usb 9-1: Manufacturer: syz [ 1436.909277][T10794] usb 9-1: SerialNumber: syz [ 1436.980350][T10794] usb 9-1: config 0 descriptor?? [ 1436.988132][T10794] smsc75xx v1.0.0 [ 1437.783137][T21246] netlink: 'syz.2.4170': attribute type 5 has an invalid length. [ 1437.936576][T10794] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1437.950701][T10794] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 1438.170642][T10794] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1438.360260][T10794] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -61 [ 1438.525427][T21245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1438.572414][T21245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1439.533878][T21269] sch_tbf: burst 4398 is lower than device lo mtu (65511) ! [ 1439.763765][T21275] fuse: Bad value for 'fd' [ 1440.022825][T21277] fuse: Bad value for 'fd' [ 1441.111058][T21283] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4181'. [ 1441.844331][T21295] netlink: 'syz.2.4185': attribute type 5 has an invalid length. [ 1442.502675][T21285] netlink: 'syz.1.4182': attribute type 4 has an invalid length. [ 1444.773114][T21319] fuse: Bad value for 'fd' [ 1444.982205][T21321] overlayfs: failed to clone upperpath [ 1445.023779][T21324] FAULT_INJECTION: forcing a failure. [ 1445.023779][T21324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1445.052750][T21323] fuse: Bad value for 'fd' [ 1445.065846][ T43] usb 9-1: USB disconnect, device number 7 [ 1445.104081][T21324] CPU: 0 UID: 0 PID: 21324 Comm: syz.5.4193 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 1445.104115][T21324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1445.104132][T21324] Call Trace: [ 1445.104142][T21324] [ 1445.104152][T21324] dump_stack_lvl+0x189/0x250 [ 1445.104192][T21324] ? __pfx____ratelimit+0x10/0x10 [ 1445.104223][T21324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1445.104254][T21324] ? __pfx__printk+0x10/0x10 [ 1445.104289][T21324] should_fail_ex+0x414/0x560 [ 1445.104319][T21324] _copy_to_user+0x31/0xb0 [ 1445.104355][T21324] simple_read_from_buffer+0xe1/0x170 [ 1445.104387][T21324] proc_fail_nth_read+0x1df/0x250 [ 1445.104421][T21324] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1445.104454][T21324] ? rw_verify_area+0x258/0x650 [ 1445.104476][T21324] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1445.104508][T21324] vfs_read+0x1fd/0x980 [ 1445.104537][T21324] ? __pfx___mutex_lock+0x10/0x10 [ 1445.104568][T21324] ? __pfx_vfs_read+0x10/0x10 [ 1445.104593][T21324] ? __fget_files+0x2a/0x420 [ 1445.104632][T21324] ? __fget_files+0x3a0/0x420 [ 1445.104658][T21324] ? __fget_files+0x2a/0x420 [ 1445.104696][T21324] ksys_read+0x145/0x250 [ 1445.104722][T21324] ? __pfx_ksys_read+0x10/0x10 [ 1445.104742][T21324] ? rcu_is_watching+0x15/0xb0 [ 1445.104779][T21324] ? do_syscall_64+0xbe/0x3b0 [ 1445.104822][T21324] do_syscall_64+0xfa/0x3b0 [ 1445.104852][T21324] ? lockdep_hardirqs_on+0x9c/0x150 [ 1445.104880][T21324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.104901][T21324] ? clear_bhb_loop+0x60/0xb0 [ 1445.104926][T21324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.104947][T21324] RIP: 0033:0x7f97cbd8d33c [ 1445.104966][T21324] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1445.104984][T21324] RSP: 002b:00007f97ccb68030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1445.105007][T21324] RAX: ffffffffffffffda RBX: 00007f97cbfb5fa0 RCX: 00007f97cbd8d33c [ 1445.105022][T21324] RDX: 000000000000000f RSI: 00007f97ccb680a0 RDI: 0000000000000003 [ 1445.105035][T21324] RBP: 00007f97ccb68090 R08: 0000000000000000 R09: 0000000000000000 [ 1445.105052][T21324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1445.105065][T21324] R13: 0000000000000000 R14: 00007f97cbfb5fa0 R15: 00007ffea7291ab8 [ 1445.105098][T21324] [ 1448.821767][T21375] overlayfs: failed to clone lowerpath [ 1448.928915][T21376] overlayfs: failed to clone upperpath [ 1449.731168][T21386] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4212'. [ 1450.470259][T17936] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1450.987132][T17936] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 1451.016517][T17936] usb 9-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 1451.027325][T17936] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1451.038683][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 1451.054064][T17936] usb 9-1: config 0 descriptor?? [ 1451.496996][T17936] logitech 0003:046D:CA03.001A: item fetching failed at offset 5/7 [ 1451.524445][T17936] logitech 0003:046D:CA03.001A: parse failed [ 1451.541919][T17936] logitech 0003:046D:CA03.001A: probe with driver logitech failed with error -22 [ 1451.696619][T17936] usb 9-1: USB disconnect, device number 8 [ 1452.004714][T21417] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4220'. [ 1453.795286][T10790] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1454.529322][T10790] usb 3-1: Using ep0 maxpacket: 8 [ 1454.531750][T10790] usb 3-1: config index 0 descriptor too short (expected 30482, got 18) [ 1454.531783][T10790] usb 3-1: config 0 has too many interfaces: 101, using maximum allowed: 32 [ 1454.531805][T10790] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 101 [ 1454.533764][T10790] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00 [ 1454.811871][T10790] usb 3-1: New USB device strings: Mfr=253, Product=255, SerialNumber=0 [ 1455.479211][T10790] usb 3-1: Product: syz [ 1455.483473][T10790] usb 3-1: Manufacturer: syz [ 1455.520847][T10790] usb 3-1: config 0 descriptor?? [ 1455.609914][T10790] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1455.656977][T10790] usb 3-1: Detected FT2232C/D [ 1457.319576][T21461] Device name cannot be null; rc = [-22] [ 1458.742150][T10790] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1458.767152][T10790] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1458.781845][T10790] usb 3-1: USB disconnect, device number 49 [ 1458.817347][T10790] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1458.858442][T10790] ftdi_sio 3-1:0.0: device disconnected [ 1460.056071][T21492] netlink: 'syz.8.4242': attribute type 10 has an invalid length. [ 1460.075179][T21492] batman_adv: batadv0: Adding interface: wlan0 [ 1460.092148][T21495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4244'. [ 1460.131765][T21492] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1460.184363][T21492] batman_adv: batadv0: Interface activated: wlan0 [ 1460.692295][T21495] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1461.892514][T21516] Device name cannot be null; rc = [-22] [ 1463.300329][T21530] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4254'. [ 1465.890647][T21568] Device name cannot be null; rc = [-22] [ 1466.153382][T16608] Bluetooth: hci2: unexpected event for opcode 0x0413 [ 1466.429589][T10790] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1467.369224][T10790] usb 6-1: Using ep0 maxpacket: 8 [ 1467.380730][T10790] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 62432, setting to 1024 [ 1467.394791][ T13] batman_adv: batadv2: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 1467.424018][T10790] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1467.521155][T21583] netlink: 'syz.2.4269': attribute type 5 has an invalid length. [ 1467.639450][T10790] usb 6-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1468.039293][T10790] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1468.067882][T10790] usb 6-1: config 0 descriptor?? [ 1468.094369][T21566] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1468.118740][T10790] hso 6-1:0.0: Can't find BULK OUT endpoint [ 1468.192227][T21589] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 1468.336291][T10788] usb 6-1: USB disconnect, device number 26 [ 1469.192897][T21603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4278'. [ 1469.203816][T21603] netlink: 'syz.1.4278': attribute type 21 has an invalid length. [ 1469.485229][T21607] Device name cannot be null; rc = [-22] [ 1470.281718][T16608] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1470.294743][T16608] Bluetooth: hci2: Injecting HCI hardware error event [ 1470.340299][T16608] Bluetooth: hci2: hardware error 0x00 [ 1471.029386][T21620] xt_TCPMSS: Only works on TCP SYN packets [ 1472.471408][T10798] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1473.519582][T16608] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1476.879732][T21661] random: crng reseeded on system resumption [ 1477.688248][T21672] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1477.722183][T21666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1477.907679][T21680] fuse: Bad value for 'fd' [ 1480.449232][T10790] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1480.567397][T21693] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4306'. [ 1480.619488][T10790] usb 6-1: Using ep0 maxpacket: 16 [ 1480.628896][T10790] usb 6-1: no configurations [ 1480.645494][T10790] usb 6-1: can't read configurations, error -22 [ 1481.039565][T10790] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1481.362392][T10790] usb 6-1: Using ep0 maxpacket: 16 [ 1481.400705][T10790] usb 6-1: no configurations [ 1481.488247][T10790] usb 6-1: can't read configurations, error -22 [ 1481.586093][T10790] usb usb6-port1: attempt power cycle [ 1482.091533][T21707] 9pnet_fd: Insufficient options for proto=fd [ 1482.559240][T10790] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1482.837958][T10790] usb 6-1: Using ep0 maxpacket: 16 [ 1482.845344][T10790] usb 6-1: no configurations [ 1482.850061][T10790] usb 6-1: can't read configurations, error -22 [ 1482.890998][T21713] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1482.989357][T10790] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1483.047366][T10790] usb 6-1: Using ep0 maxpacket: 16 [ 1483.262691][T10790] usb 6-1: device descriptor read/all, error -71 [ 1483.326691][T10790] usb usb6-port1: unable to enumerate USB device [ 1483.926897][T10790] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1484.089330][T10790] usb 6-1: Using ep0 maxpacket: 8 [ 1484.163087][T10790] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 1484.313251][T10790] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1484.535179][T10790] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1484.657280][T10790] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1484.710932][T10790] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1484.911865][T21737] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1484.923189][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.933424][T10790] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1484.933993][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.955442][T10790] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1484.970347][T10790] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1485.242703][T10790] usb 6-1: GET_CAPABILITIES returned 0 [ 1485.263669][T10790] usbtmc 6-1:16.0: can't read capabilities [ 1485.457208][T10798] usb 6-1: USB disconnect, device number 32 [ 1485.690418][T21748] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1487.018337][T10792] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 1487.055986][T10792] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1487.807573][T21767] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4324'. [ 1487.827166][T21767] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1487.836085][T21767] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1487.844908][T21767] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1487.853759][T21767] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1487.856875][T10798] usb 9-1: new low-speed USB device number 9 using dummy_hcd [ 1487.934628][T21767] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1487.944077][T21767] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1487.953054][T21767] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1487.962028][T21767] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1488.009592][T10798] usb 9-1: device descriptor read/64, error -71 [ 1488.249669][T10798] usb 9-1: new low-speed USB device number 10 using dummy_hcd [ 1488.879312][T10798] usb 9-1: device descriptor read/64, error -71 [ 1489.021327][T10798] usb usb9-port1: attempt power cycle [ 1489.400489][T10798] usb 9-1: new low-speed USB device number 11 using dummy_hcd [ 1489.450128][T10798] usb 9-1: device descriptor read/8, error -71 [ 1489.859593][T10798] usb 9-1: new low-speed USB device number 12 using dummy_hcd [ 1490.119387][T10798] usb 9-1: device descriptor read/8, error -71 [ 1490.329262][T21789] 9pnet: Could not find request transport: f [ 1490.338198][T10798] usb usb9-port1: unable to enumerate USB device [ 1490.443691][T21796] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 1491.682729][T21805] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4338'. [ 1492.195031][T21813] netlink: 'syz.7.4339': attribute type 5 has an invalid length. [ 1492.772868][T21818] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1493.066537][T21825] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1493.085733][T21825] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1493.159379][T21825] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 1494.507471][T21845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1497.008055][T21873] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1497.020439][T21873] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1497.055768][T21873] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1497.156105][T21882] Device name cannot be null; rc = [-22] [ 1498.823149][T21900] 9pnet_fd: Insufficient options for proto=fd [ 1502.979778][T21940] snd_dummy snd_dummy.0: control 6:129:-2:syz0:1 is already present [ 1503.511319][T21941] Device name cannot be null; rc = [-22] [ 1504.968749][T21970] netlink: 'syz.7.4394': attribute type 5 has an invalid length. [ 1505.740907][T10788] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1505.933785][T10788] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1505.989468][T10788] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1506.011541][T10788] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1506.089618][T10788] usb 6-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 1506.134411][T10788] usb 6-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 1506.159306][T10788] usb 6-1: Manufacturer: syz [ 1506.251690][T21988] hub 8-0:1.0: USB hub found [ 1506.258330][T21988] hub 8-0:1.0: 1 port detected [ 1506.830139][T10788] usb 6-1: config 0 descriptor?? [ 1506.838955][T10788] smsusb:smsusb_probe: board id=9, interface number 0 [ 1506.869209][T10788] smsusb:siano_media_device_register: media controller created [ 1506.892849][T10788] ------------[ cut here ]------------ [ 1506.898406][T10788] usb 6-1: BOGUS urb xfer, pipe 3 != type 1 [ 1506.915865][T10788] WARNING: CPU: 1 PID: 10788 at drivers/usb/core/urb.c:504 usb_submit_urb+0xc82/0x1890 [ 1506.926437][T10788] Modules linked in: [ 1506.930839][T10788] CPU: 1 UID: 0 PID: 10788 Comm: kworker/1:9 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 1506.943112][T10788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1506.953407][T10788] Workqueue: usb_hub_wq hub_event [ 1506.958510][T10788] RIP: 0010:usb_submit_urb+0xc82/0x1890 [ 1506.964409][T10788] Code: 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 6d 08 00 00 45 8b 04 24 48 c7 c7 a0 5b 33 8c 4c 89 f6 4c 89 fa e8 af f2 69 fa 90 <0f> 0b 90 90 44 0f b6 64 24 48 4c 89 e7 48 c7 c6 30 02 dd 8e e8 55 [ 1506.985316][T10788] RSP: 0018:ffffc9000e526ad0 EFLAGS: 00010246 [ 1506.992366][T10788] RAX: ad62a51c291d7700 RBX: ffff888064de8f00 RCX: 0000000000100000 [ 1507.000488][T10788] RDX: ffffc90019f65000 RSI: 0000000000026b51 RDI: 0000000000026b52 [ 1507.008509][T10788] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1507.016902][T10788] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffffffff8c33598c [ 1507.025054][T10788] R13: dffffc0000000000 R14: ffffffff8c33c480 R15: ffff888140abf920 [ 1507.033537][T10788] FS: 0000000000000000(0000) GS:ffff888125d84000(0000) knlGS:0000000000000000 [ 1507.042675][T10788] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1507.049445][T10788] CR2: 0000001b3170cff8 CR3: 0000000079746000 CR4: 00000000003526f0 [ 1507.057540][T10788] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1507.065674][T10788] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1507.073730][T21990] netlink: 34 bytes leftover after parsing attributes in process `syz.2.4401'. [ 1507.084790][T10788] Call Trace: [ 1507.088191][T10788] [ 1507.091275][T10788] smsusb_start_streaming+0x22/0x340 [ 1507.096673][T10788] smsusb_probe+0x18f6/0x2060 [ 1507.101637][T10788] ? __pfx_smsusb_probe+0x10/0x10 [ 1507.106790][T10788] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 1507.112558][T10788] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1507.118614][T10788] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1507.125201][T10788] ? __pm_runtime_set_status+0x785/0xa50 [ 1507.131037][T10788] usb_probe_interface+0x641/0xbc0 [ 1507.136269][T10788] ? __pfx_usb_probe_interface+0x10/0x10 [ 1507.142814][T10788] really_probe+0x26a/0x9a0 [ 1507.147455][T10788] __driver_probe_device+0x18c/0x2f0 [ 1507.153657][T10788] driver_probe_device+0x4f/0x430 [ 1507.158842][T10788] __device_attach_driver+0x2ce/0x530 [ 1507.165708][T10788] bus_for_each_drv+0x251/0x2e0 [ 1507.171229][T10788] ? __pfx___device_attach_driver+0x10/0x10 [ 1507.178768][T10788] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1507.185289][T10788] __device_attach+0x2b8/0x400 [ 1507.190266][T10788] ? __pfx___device_attach+0x10/0x10 [ 1507.195668][T10788] ? do_raw_spin_unlock+0x122/0x240 [ 1507.201200][T10788] bus_probe_device+0x185/0x260 [ 1507.206201][T10788] device_add+0x7b6/0xb50 [ 1507.210731][T10788] usb_set_configuration+0x1a87/0x20e0 [ 1507.216379][T10788] usb_generic_driver_probe+0x8d/0x150 [ 1507.222115][T10788] usb_probe_device+0x1c1/0x390 [ 1507.227093][T10788] ? __pfx_usb_probe_device+0x10/0x10 [ 1507.232709][T10788] really_probe+0x26a/0x9a0 [ 1507.237342][T10788] __driver_probe_device+0x18c/0x2f0 [ 1507.242842][T10788] driver_probe_device+0x4f/0x430 [ 1507.247999][T10788] __device_attach_driver+0x2ce/0x530 [ 1507.253617][T10788] bus_for_each_drv+0x251/0x2e0 [ 1507.258605][T10788] ? __pfx___device_attach_driver+0x10/0x10 [ 1507.264688][T10788] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1507.270280][T10788] __device_attach+0x2b8/0x400 [ 1507.276205][T10788] ? __pfx___device_attach+0x10/0x10 [ 1507.282542][T10788] ? do_raw_spin_unlock+0x122/0x240 [ 1507.287827][T10788] bus_probe_device+0x185/0x260 [ 1507.292794][T10788] device_add+0x7b6/0xb50 [ 1507.297188][T10788] usb_new_device+0xa39/0x16c0 [ 1507.302093][T10788] ? __pfx_usb_new_device+0x10/0x10 [ 1507.307375][T10788] ? _raw_spin_unlock_irq+0x23/0x50 [ 1507.312740][T10788] ? lockdep_hardirqs_on+0x9c/0x150 [ 1507.318017][T10788] hub_event+0x2941/0x4a00 [ 1507.322645][T10788] ? __pfx_hub_event+0x10/0x10 [ 1507.327518][T10788] ? process_scheduled_works+0x9ef/0x17b0 [ 1507.333716][T10788] ? _raw_spin_unlock_irq+0x23/0x50 [ 1507.338985][T10788] ? process_scheduled_works+0x9ef/0x17b0 [ 1507.344838][T10788] ? process_scheduled_works+0x9ef/0x17b0 [ 1507.350689][T10788] process_scheduled_works+0xade/0x17b0 [ 1507.356352][T10788] ? __pfx_process_scheduled_works+0x10/0x10 [ 1507.362519][T10788] worker_thread+0x8a0/0xda0 [ 1507.367237][T10788] kthread+0x70e/0x8a0 [ 1507.371488][T10788] ? __pfx_worker_thread+0x10/0x10 [ 1507.376763][T10788] ? __pfx_kthread+0x10/0x10 [ 1507.382639][T10788] ? _raw_spin_unlock_irq+0x23/0x50 [ 1507.388840][T10788] ? lockdep_hardirqs_on+0x9c/0x150 [ 1507.394264][T10788] ? __pfx_kthread+0x10/0x10 [ 1507.398979][T10788] ret_from_fork+0x3fc/0x770 [ 1507.403807][T10788] ? __pfx_ret_from_fork+0x10/0x10 [ 1507.409061][T10788] ? __switch_to_asm+0x39/0x70 [ 1507.413964][T10788] ? __switch_to_asm+0x33/0x70 [ 1507.418815][T10788] ? __pfx_kthread+0x10/0x10 [ 1507.423626][T10788] ret_from_fork_asm+0x1a/0x30 [ 1507.428528][T10788] [ 1507.432175][T10788] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1507.439640][T10788] CPU: 1 UID: 0 PID: 10788 Comm: kworker/1:9 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 1507.452011][T10788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1507.462153][T10788] Workqueue: usb_hub_wq hub_event [ 1507.467296][T10788] Call Trace: [ 1507.470666][T10788] [ 1507.473688][T10788] dump_stack_lvl+0x99/0x250 [ 1507.478419][T10788] ? __asan_memcpy+0x40/0x70 [ 1507.483138][T10788] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1507.488497][T10788] ? __pfx__printk+0x10/0x10 [ 1507.493235][T10788] panic+0x2db/0x790 [ 1507.497263][T10788] ? __pfx_panic+0x10/0x10 [ 1507.501841][T10788] ? ret_from_fork_asm+0x1a/0x30 [ 1507.506899][T10788] __warn+0x31b/0x4b0 [ 1507.511000][T10788] ? usb_submit_urb+0xc82/0x1890 [ 1507.516050][T10788] ? usb_submit_urb+0xc82/0x1890 [ 1507.521101][T10788] report_bug+0x2be/0x4f0 [ 1507.525514][T10788] ? usb_submit_urb+0xc82/0x1890 [ 1507.530635][T10788] ? usb_submit_urb+0xc82/0x1890 [ 1507.535651][T10788] ? usb_submit_urb+0xc84/0x1890 [ 1507.540684][T10788] handle_bug+0x84/0x160 [ 1507.544982][T10788] exc_invalid_op+0x1a/0x50 [ 1507.549548][T10788] asm_exc_invalid_op+0x1a/0x20 [ 1507.554458][T10788] RIP: 0010:usb_submit_urb+0xc82/0x1890 [ 1507.560063][T10788] Code: 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 6d 08 00 00 45 8b 04 24 48 c7 c7 a0 5b 33 8c 4c 89 f6 4c 89 fa e8 af f2 69 fa 90 <0f> 0b 90 90 44 0f b6 64 24 48 4c 89 e7 48 c7 c6 30 02 dd 8e e8 55 [ 1507.579746][T10788] RSP: 0018:ffffc9000e526ad0 EFLAGS: 00010246 [ 1507.585902][T10788] RAX: ad62a51c291d7700 RBX: ffff888064de8f00 RCX: 0000000000100000 [ 1507.593927][T10788] RDX: ffffc90019f65000 RSI: 0000000000026b51 RDI: 0000000000026b52 [ 1507.601978][T10788] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1507.610000][T10788] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffffffff8c33598c [ 1507.618016][T10788] R13: dffffc0000000000 R14: ffffffff8c33c480 R15: ffff888140abf920 [ 1507.626045][T10788] smsusb_start_streaming+0x22/0x340 [ 1507.631370][T10788] smsusb_probe+0x18f6/0x2060 [ 1507.636087][T10788] ? __pfx_smsusb_probe+0x10/0x10 [ 1507.641145][T10788] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 1507.646725][T10788] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1507.652750][T10788] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1507.659121][T10788] ? __pm_runtime_set_status+0x785/0xa50 [ 1507.664790][T10788] usb_probe_interface+0x641/0xbc0 [ 1507.670028][T10788] ? __pfx_usb_probe_interface+0x10/0x10 [ 1507.675685][T10788] really_probe+0x26a/0x9a0 [ 1507.680236][T10788] __driver_probe_device+0x18c/0x2f0 [ 1507.685567][T10788] driver_probe_device+0x4f/0x430 [ 1507.690721][T10788] __device_attach_driver+0x2ce/0x530 [ 1507.696222][T10788] bus_for_each_drv+0x251/0x2e0 [ 1507.701148][T10788] ? __pfx___device_attach_driver+0x10/0x10 [ 1507.707080][T10788] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1507.712491][T10788] __device_attach+0x2b8/0x400 [ 1507.717294][T10788] ? __pfx___device_attach+0x10/0x10 [ 1507.722607][T10788] ? do_raw_spin_unlock+0x122/0x240 [ 1507.727838][T10788] bus_probe_device+0x185/0x260 [ 1507.732727][T10788] device_add+0x7b6/0xb50 [ 1507.737089][T10788] usb_set_configuration+0x1a87/0x20e0 [ 1507.742616][T10788] usb_generic_driver_probe+0x8d/0x150 [ 1507.748115][T10788] usb_probe_device+0x1c1/0x390 [ 1507.753025][T10788] ? __pfx_usb_probe_device+0x10/0x10 [ 1507.758464][T10788] really_probe+0x26a/0x9a0 [ 1507.763015][T10788] __driver_probe_device+0x18c/0x2f0 [ 1507.768432][T10788] driver_probe_device+0x4f/0x430 [ 1507.773502][T10788] __device_attach_driver+0x2ce/0x530 [ 1507.778910][T10788] bus_for_each_drv+0x251/0x2e0 [ 1507.783792][T10788] ? __pfx___device_attach_driver+0x10/0x10 [ 1507.789716][T10788] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1507.795131][T10788] __device_attach+0x2b8/0x400 [ 1507.799920][T10788] ? __pfx___device_attach+0x10/0x10 [ 1507.805239][T10788] ? do_raw_spin_unlock+0x122/0x240 [ 1507.810467][T10788] bus_probe_device+0x185/0x260 [ 1507.815361][T10788] device_add+0x7b6/0xb50 [ 1507.819716][T10788] usb_new_device+0xa39/0x16c0 [ 1507.824529][T10788] ? __pfx_usb_new_device+0x10/0x10 [ 1507.829763][T10788] ? _raw_spin_unlock_irq+0x23/0x50 [ 1507.834996][T10788] ? lockdep_hardirqs_on+0x9c/0x150 [ 1507.840259][T10788] hub_event+0x2941/0x4a00 [ 1507.844763][T10788] ? __pfx_hub_event+0x10/0x10 [ 1507.849568][T10788] ? process_scheduled_works+0x9ef/0x17b0 [ 1507.855338][T10788] ? _raw_spin_unlock_irq+0x23/0x50 [ 1507.860584][T10788] ? process_scheduled_works+0x9ef/0x17b0 [ 1507.866345][T10788] ? process_scheduled_works+0x9ef/0x17b0 [ 1507.872099][T10788] process_scheduled_works+0xade/0x17b0 [ 1507.877706][T10788] ? __pfx_process_scheduled_works+0x10/0x10 [ 1507.883736][T10788] worker_thread+0x8a0/0xda0 [ 1507.888381][T10788] kthread+0x70e/0x8a0 [ 1507.892479][T10788] ? __pfx_worker_thread+0x10/0x10 [ 1507.897635][T10788] ? __pfx_kthread+0x10/0x10 [ 1507.902261][T10788] ? _raw_spin_unlock_irq+0x23/0x50 [ 1507.907517][T10788] ? lockdep_hardirqs_on+0x9c/0x150 [ 1507.912747][T10788] ? __pfx_kthread+0x10/0x10 [ 1507.917365][T10788] ret_from_fork+0x3fc/0x770 [ 1507.921992][T10788] ? __pfx_ret_from_fork+0x10/0x10 [ 1507.927140][T10788] ? __switch_to_asm+0x39/0x70 [ 1507.931928][T10788] ? __switch_to_asm+0x33/0x70 [ 1507.936716][T10788] ? __pfx_kthread+0x10/0x10 [ 1507.941337][T10788] ret_from_fork_asm+0x1a/0x30 [ 1507.946142][T10788] [ 1507.949555][T10788] Kernel Offset: disabled [ 1507.953896][T10788] Rebooting in 86400 seconds..