last executing test programs: 13.172128943s ago: executing program 4 (id=1494): r0 = open(&(0x7f0000000000)='./bus\x00', 0x501642, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x4052, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000004000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a000000070000000300000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) keyctl$get_keyring_id(0x0, 0x0, 0x1ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r7}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 13.038751583s ago: executing program 4 (id=1496): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x4e, 0x0, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') connect$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x20040051) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x10, 0xd, "cf0da7087b9539556f7ab2a8bf68b63bfcbea9"}) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000100)=0x8683) ioctl$TCSETAF(r5, 0x5408, &(0x7f00000002c0)={0x6b7, 0x0, 0x0, 0x0, 0x0, "2bf6081b90893985"}) 12.064927961s ago: executing program 4 (id=1500): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="0000c383f4684b2ed7"], 0x48) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = socket$key(0xf, 0x3, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0xd) sendmsg$key(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="0218000007000000fdffffff0000000005001800"], 0x38}}, 0x40010) socket(0x10, 0x2, 0x0) setfsuid(0x0) 11.847136581s ago: executing program 4 (id=1501): syz_open_dev$char_usb(0xc, 0xb4, 0x2d) r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$eJzs3MGLG1UcB/Bf19rW1N2sWqstiA+96GVo9uBFL0G2IA0obSO0gjB1JxoyJiETFiJi9eTVv0M8ehPEm1724t/gbS8eexBHTNR2l3hYdDewfD6X/OD3vuQ9BgbeMG/23/jq40Gvynr5NNbOnIm1cUR6kCLFWvzt83j19R9/euHWnbs32p3O9s2Urrdvt15LKW28+P17n37z0g/Ti+9+u/Hd+djbfH//161f9i7vXdn//fZH/Sr1qzQcTVOe7o1G0/xeWaSdfjXIUnqnLPKqSP1hVUwO9HvlaDyepXy4s94YT4qqSvlwlgbFLE1HaTqZpfzDvD9MWZal9UbwX3S/flDXdURdPx7noq7r+oloxMV4MtZjI5qxGU/F0/FMXIpn43I8F8/HlfmoVc8bAAAAAAAAAAAAAAAAAAAAThfn/wEAAAAAAAAAAAAAAAAAAGD1bt25e6Pd6WzfTOlCRPnlbne3u/hd9Nu96EcZRVyLZvwW89P/C4v6+lud7WtpbjO+KO//lb+/233sYL41/5zA0nxrkU8H8+ej8Wh+K5pxaXl+a2n+Qrzy8iP5LJrx8wcxijJ24s/sw/xnrZTefLtzKH91Pg4AAABOgyz9Y+n+Pcv+rb/IH+H5wKH99dm4ena1ayeimn0yyMuymBxbcS6O/S8UCsX/XKz6zsRJeHjRVz0TAAAAAAAAAAAAjuIkXidc9RoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/2IFjAQAAAABh/tZpdGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBVAAAA//8xgdSv") r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x4000010, r0, 0x0) ptrace(0x10, r1) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)={0x1e4, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x19c, 0x8, 0x0, 0x1, [{0x198, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x1}, 0x4}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x13c, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x10}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xf}}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}]}, 0x1e4}}, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000100)=0x3, 0x4) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x718, 0x410, 0x528, 0x0, 0x260, 0x260, 0x648, 0x648, 0x648, 0x648, 0x648, 0x6, &(0x7f0000000140), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[0x4e23, 0x4e22], [0x4e20, 0x4e23], 0xc, 0x1, 0x81, 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x31, 0x17, 0x2}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x1000, 0x1, 0x0, [0x6, 0x3, 0x3, 0x3ff, 0xe18, 0x400, 0xb, 0x37, 0x7, 0x9, 0x6, 0x9, 0x357d, 0xe, 0x10, 0x7f], 0xc}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@multicast2, [0xff, 0xffffffff, 0xff000000, 0xff000000], @ipv4=@multicast2, [0xffffffff, 0x0, 0xffffff00, 0xffffff00], @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xffffff00, 0xffffff00, 0xffffffff], @ipv4=@local, [0xffffff00, 0xff, 0x0, 0xff], 0xfffffeff, 0x1, 0x8, 0x4e21, 0x4e24, 0x4e20, 0x4e21, 0x984, 0x2000}, 0x180, 0xc0}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local, 0x36, 0x39, 0x7}}}, {{@ipv6={@loopback, @empty, [0xff, 0xffffff00, 0xffffff00, 0xffffffff], [0xff, 0xffffffff, 0x0, 0xffffff00], 'veth1_to_bond\x00', 'wlan0\x00', {0xff}, {0xff}, 0x87, 0x0, 0x0, 0x10}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0x7f}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@private=0xa010101, 0x11, 0x2a, 0x5}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@hl={{0x28}, {0x1, 0x4}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) sendmmsg$inet6(r2, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x4c880) ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x8, &(0x7f0000000f00)={[0xea]}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, 0x16, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x2c}}, 0x0) 11.675447471s ago: executing program 4 (id=1504): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x563, &(0x7f0000000640)="$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") (fail_nth: 18) 11.54732349s ago: executing program 4 (id=1507): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000840)='./bus\x00', 0x210052, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYBLOB=',dots,dots,check=relaxed,dots,nodots,sys_immutable,dos1xfloppy,dots,dots,codepage=860,dots,nocase,codepage=932,check=relaxed,nodots,fmask=00000000000000000000002,umask=00000000000000000000005,nodots,dots,dots,fsmagic=0x00000000000000fb,pcr=00000000000000000021,uid>', @ANYRESHEX, @ANYBLOB=',context=system_u,ro,audit,subj_role=,hash,\x00'], 0x0, 0x1c7, &(0x7f0000000500)="$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") sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x0) 11.505672221s ago: executing program 32 (id=1507): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000840)='./bus\x00', 0x210052, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYBLOB=',dots,dots,check=relaxed,dots,nodots,sys_immutable,dos1xfloppy,dots,dots,codepage=860,dots,nocase,codepage=932,check=relaxed,nodots,fmask=00000000000000000000002,umask=00000000000000000000005,nodots,dots,dots,fsmagic=0x00000000000000fb,pcr=00000000000000000021,uid>', @ANYRESHEX, @ANYBLOB=',context=system_u,ro,audit,subj_role=,hash,\x00'], 0x0, 0x1c7, &(0x7f0000000500)="$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") sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x0) 7.263811673s ago: executing program 0 (id=1540): r0 = getpid() syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000640), 0xfc, 0x594, &(0x7f0000000680)="$eJzs3U1rXNUbAPDnTibp6//fFEpRFxLowkrtpEl8qShYl6LFgu7rkExDyaRTMpPSxILtwm7cSBFELIgfwLUui1/AT1HQQpESdCFC5N7cSafJTN6adNLM7we3Pee+5Nxnzn0O586dYQLoWUPpP4WIFyPi6yTiSMu2YuQbh5b2W3h0Yzxdklhc/OTPJJJ8XXP/JP//UF55ISJ+/TLiVGF1u/W5+alytVqZyevDjemrw/W5+dOXp8uTlcnKldGxsbNvjI2+/dab2xbrqxf+/u7jex+c/erEwrc/PTh6J4lzcTjf1hrHU7jZWhkq/5uX+uPcih1HtqGx3STp9gmwJX15nvdHOgYcib4864G974uIWAR6VCL/oUc15wHNe/ttug9+bjx8f+kGKIt9oDX+4tJ7I7E/uzc6uJA8cWeU3u8ObkP7aRu//HH3TrrE2u9DHFinDrApN29FxJlicfX4n+Tj39adyd48XtvKNpbbN7rBjruXzn9eazf/KyzPf6LN/OdQm9zdio75v6zwYBua6Sid/73bdv67PHQN9uW1/2Vzvv7k0uVq5UxE/D8iTkb/vrS+1vOcswv3Fztta53/pUvafnMumJ/Hg+K+J4+ZKDfKETHwNHE3PbwV8VKxXfzJcv8nbfo/fT0ubLCN45W7L3falt6DtI3/GY3/iz9GvNK2/x8/0UrWfj45nF0Pw82rYrW/bh//rVP76/f/zkr7/+BS/En++HJl/INJ6/Pa+ubb+GH/P5VO27Z6/Q8kn2blZhJcLzcaMyMRA8lHq9ePPj62WW/un8Z/8sTa41+76z+9PD/bYPy3j93uuOtu6P+Jta//Ff2/+cL9Dz//vlP7G+v/17PSyXxNPv61l18rGz3Bp339AAAAAAAAYDcpRMThSAql5XKhUCotfb7jWBwsVGv1xqlLtdkrE5F9V3Yw+gvNJ91HWj4PMZJ/HrZZH11RH4uIoxHxTd+BrF4ar1Unuh08AAAAAAAAAAAAAAAAAAAA7BKHOnz/P/V7X7fPDthx2Q8b7Ov2WQDdsO5P/g/5OTbYq9bNf2DPkv/Qu+Q/9C75D71L/kPvkv/Qu+Q/9C75DwAAAAAAAAAAAAAAAAAAAAAAAAAAANvqwvnz6bK48OjGeFqfuDY3O1W7dnqiUp8qTc+Ol8ZrM1dLk7XaZLVSGq9Nr/f3qrXa1ZHRmL0+3KjUG8P1ufmL07XZK42Ll6fLk5WLlf5nEhUAAAAAAAAAAAAAAAAAAAA8X+pz81PlarUyo9Cx8F7seBN9eXeka36OiGxT8dkF+Lj1TR9e3NJR70Ts/KuqkBVu5d27uaO6NCABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQBv/BQAA//+JfCsS") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000140)={{}, {0x1, 0x4}}, 0x24, 0x2) llistxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) setns(r1, 0x24020000) userfaultfd(0x80801) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x2f, 0x8, 0x0, 0x3, 0x40, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x40, 0x9f, 0xfffffffa}}) sendmsg$nl_route(r5, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="680000004a00000325bd7000fddbdf250a004000", @ANYRES32=r8, @ANYBLOB="060004001400012021b36f00000000000000ffff0a01010114000100ff010000000000b9367cfc9848b5f00000040004000000010800020008000200030000001400010020010000000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x100) 6.376273531s ago: executing program 0 (id=1544): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="3400000010000304000000000000000000000040c77d79306667cee6cfeae4d8e2f313d5b15cb8b8ee5a2da940b4cc4810fb31f1ac0800000000000000a627f2f1216ee560dce3065f1147cd"], 0x34}, 0x1, 0xba01}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB=',defcontext']) (fail_nth: 5) 6.084099011s ago: executing program 0 (id=1545): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) mkdir(&(0x7f0000000100)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000000000000000000000100000000", @ANYRES32]) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{}]}) 6.01601772s ago: executing program 0 (id=1546): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) chdir(&(0x7f0000000240)='./file0\x00') removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=@known='system.posix_acl_default\x00') bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") (async) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) (async) chdir(&(0x7f0000000240)='./file0\x00') (async) removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=@known='system.posix_acl_default\x00') (async) 5.96711411s ago: executing program 1 (id=1547): r0 = getpid() syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000640), 0xfc, 0x594, &(0x7f0000000680)="$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") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000140)={{}, {0x1, 0x4}}, 0x24, 0x2) llistxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r6}, 0x18) setns(r1, 0x24020000) userfaultfd(0x80801) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x2f, 0x8, 0x0, 0x3, 0x40, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x40, 0x9f, 0xfffffffa}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x100) 5.944356751s ago: executing program 0 (id=1548): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xfd, 0x1bf, &(0x7f0000000480)="$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") mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300)='./file0\x00') open(0x0, 0x40c5, 0x130) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000002440)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002400)={&(0x7f0000001140)={0x128c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0x1270, 0x8, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8000}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5a4}]}, {0x9e0, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x348, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0xff}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x36}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1ff, @mcast2, 0x8}}, @WGPEER_A_ALLOWEDIPS={0x17c, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "27e9b1313d8a7968cb67fce8689a3bf1292da1a00ea81ce4863daf2628177bc5"}, @WGPEER_A_ALLOWEDIPS={0x270, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x6}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x42}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @empty}}, @WGPEER_A_ALLOWEDIPS={0x230, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xea4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}}]}, {0x340, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9b3, @private2, 0x3ff}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "48803348f73f2098be1c44026d7e0be4bd28670a1cc8677ae71ac68a822cda6c"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfffc}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "75e0aa56ddaad5391173f4afece796fa4ac11aa419ffae7e99c471d84e6483d6"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fe729fb7fc9bbf541d2943261e3beb2ab79d2e9232b3622e34714cbb22c6b20c"}, @WGPEER_A_ALLOWEDIPS={0x260, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x5, 0x3, 0x1}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x5, 0x3, 0x2}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}]}]}, {0x528, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfffc}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x4, @rand_addr=' \x01\x00', 0x5}}, @WGPEER_A_ALLOWEDIPS={0x4f4, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x10}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x15}}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}]}]}]}]}, 0x128c}, 0x1, 0x0, 0x0, 0x6000c084}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 5.518123019s ago: executing program 0 (id=1550): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./bus\x00', 0x100c000, &(0x7f0000000840)={[{@nolazytime}, {}, {@barrier_val}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}]}, 0xfc, 0x57c, &(0x7f0000000100)="$eJzs3V1rHNUbAPBnNpv0/d8USvnrhRR6YaV20yS+VBCsl6LFgt7XJZmGkk23ZDeliQXbC3vjjRRBxIL4Abz3svgF/BQFLRQpQS9EiMxmNt0ku3nrxk27vx9Mcs7OTM48e+aZnLOzywbQt05mPwoRL0XE10nEUMu6YuQrTy5vt/jk1kS2JLG09MkfSST5Y83tk/z3obzy/4j45cuIM4X17dbmF6bLlUo6m9dH6jPXR2rzC2evzpSn0qn02tj4+Pk3x8feefutrsX62qW/vvv4wQfnvzq1+O1Pj47dS+JCHM7XtcbxDG63Vk6W/8lLg3FhzYajXWhsL0l6fQDsyECe54ORXQOOxkCe9cCL74uIWAL6VCL/oU81xwHNuX2X5sHPjcfvL0+AGrEPtcZfXH5tJPY35kYHF5NVM6NsvjvchfazNn7+/f69bImNX4c4sEkdYFtu34mIc8Xi+ut/kl//du5c48Xjja1to9/+/0AvPcjGP6+3G/8VVsY/0Wb8c6hN7u7E5vlfeNSFZjrKxn/vth3/rly6hgfy2pHGmG8wuXK1kp6LiP9FxOkY3JfVN7qfc37x4VKnda3jv2zJ2m+OBfPjeFTct3qfyXK9HKtv1e3Y4zsRLxfbxZ+s9H/Spv+z5+PSFts4kd5/pdO6NfEnxXXx766lHyNebdv/T+9oJRvfnxxpnA8jzbNivT/vnvi1U/ub9//uyvr/4MbxDyet92tr22/jh/1/p53W7fT8H0o+bZSbSXCzXK/PjkYMJR+tf3zs6b7NenP7LP7Tpza+/rU7/7PJ12dbjP/u8bsdN10d/5HoRf9Pbqv/t194+OHn33dqf2v9/0ajdDp/JL/+tZefK1s9wGd9/gAAAAAAAGAvKUTE4UgKpZVyoVAqLb+/43gcLFSqtfqZK9W5a5PR+KzscAwWmne6j7a8H2I0fz9ssz62pj4eEcci4puBA416aaJamex18AAAAAAAAAAAAAAAAAAAALBHHOrw+f/MbwO9Pjpg1zW+2GBfr48C6IVNv/K/G9/0BOxJm+Y/8MKS/9C/5D/0L/kP/Uv+Q/+S/9C/5D/0L/kPAAAAAAAAAAAAAAAAAAAAAAAAAAAAXXXp4sVsWVp8cmsiq0/emJ+brt44O5nWpkszcxOliers9dJUtTpVSUsT1ZnN/l6lWr0+OhZzN0fqaa0+UptfuDxTnbtWv3x1pjyVXk4H/5OoAAAAAAAAAAAAAAAAAAAA4PlSm1+YLlcq6axCx8J7sScOYzcDXLaj3Yt7JQqFDoU7efdub68eXpQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYI1/AwAA///VDy/N") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f0000000000)=0x2) sendfile(r4, r4, 0x0, 0x7a680000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/18, @ANYRES32=0x0, @ANYBLOB="7b130000000000002800128009"], 0x48}}, 0x40080) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip_vti0\x00'}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x1c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161642, 0x0) 5.465690309s ago: executing program 33 (id=1550): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./bus\x00', 0x100c000, &(0x7f0000000840)={[{@nolazytime}, {}, {@barrier_val}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}]}, 0xfc, 0x57c, &(0x7f0000000100)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f0000000000)=0x2) sendfile(r4, r4, 0x0, 0x7a680000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/18, @ANYRES32=0x0, @ANYBLOB="7b130000000000002800128009"], 0x48}}, 0x40080) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip_vti0\x00'}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x1c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161642, 0x0) 5.46400517s ago: executing program 5 (id=1554): sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0xffff) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) listxattr(&(0x7f0000000080)='./file0/../file0/file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1}, 0x50) 5.433053679s ago: executing program 2 (id=1555): r0 = getpid() syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000640), 0xfc, 0x594, &(0x7f0000000680)="$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") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000140)={{}, {0x1, 0x4}}, 0x24, 0x2) llistxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) setns(r1, 0x24020000) userfaultfd(0x80801) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x2f, 0x8, 0x0, 0x3, 0x40, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x40, 0x9f, 0xfffffffa}}) sendmsg$nl_route(r5, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="680000004a00000325bd7000fddbdf250a004000", @ANYRES32=r8, @ANYBLOB="060004001400012021b36f00000000000000ffff0a01010114000100ff010000000000b9367cfc9848b5f0000004000400000001080002000800020003000000140001002001000000000000000000000000000111daf74753fa1f"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x100) 5.015627928s ago: executing program 1 (id=1556): r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$msr(r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) unshare(0x20040600) prlimit64(0x0, 0xe, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 4.907278748s ago: executing program 1 (id=1558): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000404c054b0200000000000109022400010000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff0309"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 4.531210978s ago: executing program 5 (id=1559): r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$msr(r0, 0x0, 0x0) (fail_nth: 2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) unshare(0x20040600) prlimit64(0x0, 0xe, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 4.530578898s ago: executing program 2 (id=1560): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x4e, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x20040051) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x10, 0xd, "cf0da7087b9539556f7ab2a8bf68b63bfcbea9"}) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000100)=0x8683) ioctl$TCSETAF(r3, 0x5408, &(0x7f00000002c0)={0x6b7, 0x0, 0x0, 0x0, 0x0, "2bf6081b90893985"}) 4.491012838s ago: executing program 5 (id=1561): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xfd, 0x1bf, &(0x7f0000000480)="$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") mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300)='./file0\x00') open(0x0, 0x40c5, 0x130) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000002440)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002400)={&(0x7f0000001140)={0x128c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0x1270, 0x8, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8000}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5a4}]}, {0x9e0, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x348, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0xff}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x36}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1ff, @mcast2, 0x8}}, @WGPEER_A_ALLOWEDIPS={0x17c, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "27e9b1313d8a7968cb67fce8689a3bf1292da1a00ea81ce4863daf2628177bc5"}, @WGPEER_A_ALLOWEDIPS={0x270, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x6}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x42}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @empty}}, @WGPEER_A_ALLOWEDIPS={0x230, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xea4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}}]}, {0x340, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9b3, @private2, 0x3ff}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "48803348f73f2098be1c44026d7e0be4bd28670a1cc8677ae71ac68a822cda6c"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfffc}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "75e0aa56ddaad5391173f4afece796fa4ac11aa419ffae7e99c471d84e6483d6"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fe729fb7fc9bbf541d2943261e3beb2ab79d2e9232b3622e34714cbb22c6b20c"}, @WGPEER_A_ALLOWEDIPS={0x260, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x5, 0x3, 0x1}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x5, 0x3, 0x2}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}]}]}, {0x528, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfffc}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x4, @rand_addr=' \x01\x00', 0x5}}, @WGPEER_A_ALLOWEDIPS={0x4f4, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x10}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x15}}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}]}]}]}]}, 0x128c}, 0x1, 0x0, 0x0, 0x6000c084}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 4.359956417s ago: executing program 2 (id=1564): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="0000c383f4684b2ed7"], 0x48) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x9) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x7f) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = socket$key(0xf, 0x3, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0xd) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="0218000007000000fdffffff0000000005001800"], 0x38}}, 0x40010) socket(0x10, 0x2, 0x0) setfsuid(0x0) 4.240269527s ago: executing program 2 (id=1565): r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$msr(r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000a00)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x1f8, 0x1f8, 0x110, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @private, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r2 = syz_create_resource$binfmt(&(0x7f0000000080)='./file0\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) close(r3) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x220c450, &(0x7f0000000500)=ANY=[@ANYRESOCT=r1, @ANYRES16], 0x1, 0x5566, &(0x7f00000063c0)="$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") r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSTI(r4, 0x5437, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0) syncfs(r5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x67ce626eb9b39ab3, 0x4008072, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1, @any, 0xfffa, 0x1}, 0xc) setsockopt$bt_BT_SECURITY(r9, 0x112, 0x4, 0x0, 0x0) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7fd}, 0xe) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.205787437s ago: executing program 5 (id=1566): r0 = getpid() syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000640), 0xfc, 0x594, &(0x7f0000000680)="$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") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000140)={{}, {0x1, 0x4}}, 0x24, 0x2) llistxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) setns(r1, 0x24020000) userfaultfd(0x80801) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(0x0, 0x21) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x2f, 0x8, 0x0, 0x3, 0x40, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x40, 0x9f, 0xfffffffa}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x100) 4.080029747s ago: executing program 3 (id=1567): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000240)=0xf2b, 0x4) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317df34f948dd89054875500090502020002020000099406aa8c81ea"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x0, 0x17, 0x1, "fc"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x2, 0x3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000600)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000040)={0x3}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 3.260081715s ago: executing program 5 (id=1569): r0 = getpid() syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000640), 0xfc, 0x594, &(0x7f0000000680)="$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") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000140)={{}, {0x1, 0x4}}, 0x24, 0x2) llistxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) setns(r1, 0x24020000) userfaultfd(0x80801) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x2f, 0x8, 0x0, 0x3, 0x40, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x40, 0x9f, 0xfffffffa}}) sendmsg$nl_route(r5, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="680000004a00000325bd7000fddbdf250a004000", @ANYRES32=r8, @ANYBLOB="060004001400012021b36f00000000000000ffff0a01010114000100ff010000000000b9367cfc9848b5f0000004000400000001080002000800020003000000140001002001000000000000000000000000000111daf74753fa1f"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x100) 3.000008105s ago: executing program 2 (id=1570): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x40003) (async) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) (async) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) (async) setpgid(0x0, r5) (async) r6 = dup(r3) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x5, &(0x7f0000000000)=0x2) (async) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) (async) shutdown(r8, 0x0) recvmmsg(r8, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r6}}) (async) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ff9000/0x6000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x6000, 0x2}) close(r1) 2.700580095s ago: executing program 2 (id=1571): socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket(0x23, 0x80000, 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001400b59500000000040000000a400000", @ANYRES32=r2, @ANYBLOB="14000200ff020000000000000072be000000000000060000001400010000000000000000000000000066f886a7757c6c3c217fbe78775d00000001decc6015421bf336214c2e539f980fcb838422d169b7c13985276ce71e2eedf1a5c5272908a7a7f07fd684a333359befd37ce5ebbf6df6446f470debdafb57ad"], 0x54}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x16}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) r6 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12015002020000082505d09d1716a1a440000102030109025c000201d960930904000001020d0000052406000105240006000d240f01feffffff0400faff0606241aff07340905810300020100000000150000020d00000904010102020d000009058202100081090609050302ff03000020"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r10) r11 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r11, &(0x7f0000001fc0)=""/184, 0xb8) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000740)={0x14, 0x0, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 2.163407433s ago: executing program 5 (id=1578): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x48001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000000000)='./file1\x00', 0xc000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r4, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00') chroot(&(0x7f0000000040)='./file1\x00') syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) 1.876054803s ago: executing program 1 (id=1579): r0 = getpid() syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000640), 0xfc, 0x594, &(0x7f0000000680)="$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") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000140)={{}, {0x1, 0x4}}, 0x24, 0x2) llistxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) setns(r1, 0x24020000) userfaultfd(0x80801) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(0x0, 0x21) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x2f, 0x8, 0x0, 0x3, 0x40, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x40, 0x9f, 0xfffffffa}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x100) 1.837701633s ago: executing program 6 (id=1580): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x800090, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x6, 0x2d3, &(0x7f0000000a40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140), 0xfcb8) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x601, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x2a}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6000010}, 0x40800) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=ANY=[@ANYBLOB="e80000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000440012800e0001006970366772657461700000063000028014000700ff0100000000000000000002000000010500170000e8ff0006000f00010000000500160002000000080013"], 0xe8}}, 0x0) 1.673890332s ago: executing program 6 (id=1581): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x12ba82, 0x189) write$tcp_congestion(r0, &(0x7f0000000280)='highspeed\x00', 0xa) socket$can_bcm(0x1d, 0x2, 0x2) 1.467940662s ago: executing program 6 (id=1582): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000001c0), 0xfe, 0x25e, &(0x7f0000000280)="$eJzs3T9o3FYcB/Cf7k9d16a47VIo/QOllNZg3KFQ6NIuLRhKMaUU2oJLKZ2CHXBssvkyZcmQzEnwlMWEbHEyhiwmSyCrk3hwlgwxGWIyJMMFne7C+Xwmjs93CtbnA7L09J70nkDfZ3mQHEBhjUXEDxFRjojxiKhGRNLe4LNsGWsWl4fXZiLq9d8eJ412WTnTOm4kImoR8V1EpVW3uPrX5tP1n788s1D94tLqn8ODur52W5sbv2xf/PX01alvFkvNfaPNdft1HKaky75KEvF+Pzp7QySVvEfAfkyfvHI3zf0HEfF5I//VKDUje3b+rZvV+PrCXseee3Tno0GOFTh89Xo1/R1YqwOFU2o8AyeliYjItkuliYnsGf5eOYljc/Mnxv+fW5j9L++ZCjgESS37u3fjp+tD10Y68v+wnOV/X77t80iBvkjz//v0yv10e7uc92iAgfg4W6X5H/9n6auQfygc+Yfikn8oLvmHI+CA2ZV/KC75h+KSfzjCqq2NWtdq+Yfikn8oro785/I+LpCP9vwDAMVSH8r7DWQgL3nPPwAAAAAAAAAAAAAAAAAAwG7Lw2szrWVQfd46H7H1Y0RUdvY/1KgtN/4fccTbjZ/vPEnSZi8l2WE9+fvTHk/Qo8s5v3397oN8+7/9SX/Oe2pncc9v2y3NRtTSxpOVyu77P2nefwf33ivqq//22MFrSjrK3/8x2P47PV/Jt/+p9Ygb6fwz2W3+K8WHjXX3+We0/RPLB3T8WY8nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYGBeBAAA//9hymrI") mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1}) r2 = syz_open_dev$usbfs(0x0, 0x203, 0x8401) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) 1.404175162s ago: executing program 6 (id=1583): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=ANY=[@ANYBLOB="e80000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000440012800e0001006970366772657461700000063000028014000700ff0100000000000000000002000000010500170000e8ff0006000f00010000000500160002000000080013"], 0xe8}}, 0x0) (fail_nth: 5) 1.196274452s ago: executing program 3 (id=1584): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000000)={0x7, 'veth0_to_hsr\x00', {0x6}, 0x1}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f0000000040)={0x80, 0x0, 0x6}) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r2, 0x10e, 0x1, &(0x7f00000000c0)=""/57, &(0x7f0000000100)=0x39) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000140)=""/31) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x8c, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfa8000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8, @mcast1, 0x81}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4010}, 0x8800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r0}, 0x20) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)={0x6, 0x0, 0x2, 0x0, 0x0, [{{}, 0x2}, {{r3}, 0x9}]}) fcntl$setstatus(r3, 0x4, 0xc00) r4 = open_tree(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x8001) write$binfmt_aout(r4, &(0x7f0000000480)={{0xcc, 0x1, 0x7, 0x136, 0x215, 0x80000001, 0xcc, 0x1}, "5819df5854da5a65f701b76eadb75f6e3c6bdbeb0d73721e3be674eae53c87d2cfba2f06cfc1996a45e98f1eb6907b67d7ef63a38ebc8537791b51de6034a82a0ac48055c9ba23cc33f02f12e17855f7f0b9eb9e0cbca0890fb4babf6dde54cbd5dbbfc113d6b49ca3fe6a7be206a9ef16f1742e010a30a6e17752d991460b4d01d5226ad2a5ad40a8d38d6a137fd3f3", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7b0) ioctl$int_in(r4, 0x5421, &(0x7f0000000c40)=0xffffffffffff3b06) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000c80)={@loopback, @local, 0x1, 0x3, [@dev={0xac, 0x14, 0x14, 0x28}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x21}]}, 0x1c) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, &(0x7f0000000cc0)=0x800, 0x4) ioctl$TIOCSBRK(r4, 0x5427) syslog(0x3, &(0x7f0000000d00)=""/86, 0x56) syslog(0x9, &(0x7f0000000d80)=""/21, 0x15) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000dc0)=0x2, 0x4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e40), r2) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x70, r5, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x5}}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x4) write$binfmt_misc(r4, &(0x7f0000000f80)="b7e8a52d929afa50e28f6765400bab74346b350e2447e2b46ac3786c128bf8f63a0739d6a2f7f6b5958437945f10ed54cb9f2328f174e023b0daab253f2d4aca94ac24578e0739e461c833580e146836cd7b7fda652c5105b8766bf4d594d6f80150aa01d05512f0f341a0effd6a87dad4acbfab95793e1e593ffe58a152f3ecc3fd13613f05d1ecf2ed2f7895c0d9a7e5dbfe60c55265fbf828ef", 0x9b) unlinkat(r4, &(0x7f0000001040)='./file0\x00', 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000001380)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001340)={&(0x7f00000010c0)={0x268, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x28e, 0xf}}}}, [@NL80211_ATTR_FRAME_MATCH={0xc4, 0x5b, "9ecab5c23e6f974fabe25d7377b64f6b61b5de22bcd1f19b2844c785cf71196e575772b5e14d59682f365a3d40ffcdbf4be907d90c8ec3c4ba13b38e5e86baf9006aae1a4df5d088fca0d2396a817ac0f978e0ccfb7edef4a283cd3fdf5fa66da4641fd492bf39fc489f3e968510007921bbd6b35ded300004004f88a68208e5e64ba2baceab81d864e9e6ae184c79cd1f4d4b4ee0d3bda16853289d1d5c8eb4cadf52626408fb6e479bc8963490ab94df55a541dff1a0eac12a3f0e14738d50"}, @NL80211_ATTR_FRAME_MATCH={0x49, 0x5b, "aeb1066b8eadd5fb796706238f8dd47324bab466a84171a5d67047c6ca2b698191293363412868444d38372fc3f0d1b0f6943d2130f019248863ded60266f241fcafd56eaa"}, @NL80211_ATTR_FRAME_MATCH={0xe7, 0x5b, "9eedcdf04a0fd32ec0da9a806376e167fe6ec31dddc0688e92e3fb366911f213e180dd3a8efe92f47658ccc925507b560b479746ff8fdbe12cb43f008f69ff774a8dccd33c6c0abb655309330b290dd1e84582abb62ecdc3379953ba40fa5d564991b26e8c101c8baf057ea1318435e457c9fafa3fa19ac37c6d61149e7842ed202145b1c561165d9c7d45be05a0446d43763cc2c0f66e7b137967cb68262360ef37e0699dec5c377bf4d6ab9cc778105f300a6d31f759612c1f14a3eb6b8fa11e6b8acbf136a1f2a65b8b185dd54d13c6ce240613917efab3bf49936592996e5b280a"}, @NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8001}, @NL80211_ATTR_FRAME_MATCH={0x31, 0x5b, "4c9a9710b0dce711e9f1409a284913e65dff44bb4227c8a2fccbad29caf7d19d2decb7e5a311cdc991295f87ac"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x400}]}, 0x268}, 0x1, 0x0, 0x0, 0x48041}, 0x54) timer_create(0x1, &(0x7f00000014c0)={0x0, 0x20, 0x2, @thr={&(0x7f00000013c0)="0acbe8ce9779ad9b3b6f3a824d5eb62fd5e7c739c59abd4d0f71bba1b499f1495258c771d6cb8780c3c9a0a39a35fc75117ae7ac15e833e7128df79d31fb59b0b5c597acd152da44d83a364cc99a8bd95473d8922af59b5f14aff8c4b4f9d22350dca622195d79c0be8c122caab51fdffa106693d6cb", &(0x7f0000001440)="6f7ae4216d1afb3c610d25602345a187c837ee4b2fb5a19432fabe22494a5730d13fd2e47f5e79df9e928d56ebd898f5fbaaf1b1e0ca7f18a133580b495302c77840b33f5f0d8244a658f7bfb83ac6be03d0b2827c8f19c8ca958e3133a6b7f9fc174a3eb9d8c7b2582e3663df89317328de1505e0e9f5"}}, &(0x7f0000001500)) syslog(0x3, &(0x7f0000001540)=""/253, 0xfd) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x38, r6, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0xa}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}]}, 0x38}}, 0x88c0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000017c0)={r4, &(0x7f0000001780)="0ce72bb8c3e5a0713e829a3910e04c78b40142b12c52b96e903ed5102dac8fd00b360f197c36e4d150df321dc372"}, 0x20) 1.195689342s ago: executing program 3 (id=1585): socketpair(0x1, 0x5, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x80) fallocate(r1, 0x0, 0x8000000000000001, 0xf) mount$cgroup(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@clone_children}, {@clone_children}, {@cpuset_v2_mode}, {@name={'name', 0x3d, 'bbr\x00'}}, {@cpuset_v2_mode}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@subsystem='cpuset'}, {@nofavordynmods}], [{@smackfstransmute={'smackfstransmute', 0x3d, '[+'}}, {@obj_type}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@measure}]}) statx(r2, &(0x7f0000000280)='./file0/../file0\x00', 0x100, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@mcast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f00000004c0)=0xe8) mount$binder(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x80, &(0x7f0000000500)={[{@max={'max', 0x3d, 0x3}}, {@max={'max', 0x3d, 0x1}}, {@max={'max', 0x3d, 0x1}}], [{@permit_directio}, {@smackfsfloor}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@smackfshat={'smackfshat', 0x3d, '&$\x00'}}, {@fowner_gt={'fowner>', r3}}, {@uid_lt={'uid<', r4}}, {@subj_type}, {@smackfsdef={'smackfsdef', 0x3d, 'cpuset_v2_mode'}}]}) r5 = syz_open_dev$vcsu(&(0x7f0000000600), 0x6, 0x20000) io_setup(0x0, &(0x7f0000000640)=0x0) r7 = eventfd(0xd5) io_submit(r6, 0x6, &(0x7f0000001a40)=[&(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x1, 0xffffffffffffffff, &(0x7f0000000680)="991d30746a4aa303df821bf65b58b4cd3e9d390e4c93443e753ec71de2bb8cac70d86728b204acb96445f1ee80e1f20b0d48aff4bfe8ecd3d1fd8b952491ec37e807a3f41a82c017fbd418ac50e7e18e1f122a095b08399dacc917f3cfe0cdf31f9760974473c7b01c6ec59188f84d610723b3f714a87fdb1bd67118a611aa025cda6af7c81da42a13105b65f32e14e86b54e1c59ac8ea3111bca9", 0x9b, 0x2, 0x0, 0x2}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x8, r0, &(0x7f0000000780)="af58d1ff4335bfccbb7540249faf362d0c4e3702fc911c11823605d8d0", 0x1d, 0x80008000, 0x0, 0x3}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x7, 0x2, r1, &(0x7f0000000800)="94779e8051eaf92704f3c595561d1e65422a35995b4f1e0fc58840a60a7664730c1344b5a79e5ac64960fde236f813f9dd1139c57da39347a9e13019429b6ccfcc264c91cbedadf5820f3c19c321278caca0614d9b6d83b196ebe159f018498efaedf335581cd48d344890c337de075ea7170bfa216a8e9887af703df50d307607e62814d3b4bb2fab9f02f3eb01c2cf48e2403340e3029530dcc2f5d6114cadee2869f209116db95ba1533e54d6bf8d8259feabc83d20a2", 0xb8, 0x4, 0x0, 0x3, r7}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x1, 0x5, r1, &(0x7f0000000900)="c94e6fb0704b853350cc6bfea28663", 0xf, 0x3, 0x0, 0x2, r2}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x7, 0x5, r5, &(0x7f0000000980)="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", 0x1000, 0xd1d, 0x0, 0x0, r5}, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x2, 0xfffa, r5, &(0x7f00000019c0)="75d9ecb3b246a82a8b6e2947ba057290e523d055231efbda4f", 0x19, 0x3ff, 0x0, 0x1, r2}]) r8 = syz_open_dev$usbfs(&(0x7f0000001a80), 0x4, 0x406800) ioctl$USBDEVFS_GETDRIVER(r8, 0x41045508, &(0x7f0000001ac0)={0x3ff, "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"}) r9 = userfaultfd(0x1) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000001c00)) splice(r9, &(0x7f0000001c40)=0xa683, r5, &(0x7f0000001c80)=0x2, 0x3, 0xe) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r5, 0xc0406619, &(0x7f0000001cc0)={@desc={0x1, 0x0, @desc2}}) ioctl$KVM_GET_FPU(r5, 0x81a0ae8c, &(0x7f0000001d00)) recvmmsg(r5, &(0x7f00000032c0)=[{{&(0x7f0000001ec0)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000003140)=[{&(0x7f0000001f40)=""/198, 0xc6}, {&(0x7f0000002040)=""/128, 0x80}, {&(0x7f00000020c0)=""/45, 0x2d}, {&(0x7f0000002100)=""/43, 0x2b}, {&(0x7f0000002140)=""/4096, 0x1000}], 0x5, &(0x7f00000031c0)=""/200, 0xc8}, 0x6}], 0x1, 0x40000003, &(0x7f0000003300)={0x77359400}) openat$dir(0xffffffffffffff9c, &(0x7f0000003340)='./file0\x00', 0x30300, 0x1) ioctl$FIOCLEX(r2, 0x5451) getdents(r2, &(0x7f0000003380)=""/167, 0xa7) clock_gettime(0x0, &(0x7f0000003480)={0x0, 0x0}) recvmmsg(r5, &(0x7f0000003440), 0x0, 0x40000200, &(0x7f00000034c0)={r10, r11+60000000}) openat$cgroup_int(r2, &(0x7f0000003500)='cpu.weight\x00', 0x2, 0x0) ioctl$UFFDIO_UNREGISTER(r9, 0x8010aa01, &(0x7f0000003540)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) recvmmsg(r0, &(0x7f0000004f00)=[{{&(0x7f0000003580)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003740)=[{&(0x7f0000003600)=""/82, 0x52}, {&(0x7f0000003680)=""/67, 0x43}, {&(0x7f0000003700)=""/27, 0x1b}], 0x3, &(0x7f0000003780)=""/123, 0x7b}, 0x7}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000003800)=""/11, 0xb}, {&(0x7f0000003840)=""/3, 0x3}, {&(0x7f0000003880)=""/234, 0xea}, {&(0x7f0000003980)=""/158, 0x9e}], 0x4, &(0x7f0000003a80)=""/91, 0x5b}, 0xe}, {{&(0x7f0000003b00)=@sco, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003b80)=""/4096, 0x1000}, {&(0x7f0000004b80)=""/92, 0x5c}, {&(0x7f0000004c00)=""/142, 0x8e}, {&(0x7f0000004cc0)=""/221, 0xdd}], 0x4, &(0x7f0000004e00)=""/238, 0xee}, 0x4ca9}], 0x3, 0x2, &(0x7f0000004fc0)={0x0, 0x989680}) socket$netlink(0x10, 0x3, 0xb) sendto$inet(r0, &(0x7f0000005000)="1e0162b591cce77ff940c6754bdc8c72c1081e1b72ffd3219fb36c027f745b15e508a6cd109454c006878762313f752bef891d06dd24e7772eb9b942cab359f302c696588aaa7de4192573eda92f1de325ed5d33acd98ccd2f03d40e3a51b45fa8aace029a388181deb159cae609713ebff184d25dc95d93747cfde66cd29fd93139b6d1b30eb43909b0457e4fb1fc12e701094433cc2cc3a4d4fd4468dc925486ccc0e41c08e3b825eb13fa444f3abcc61ff8071754364346109a42646657fc53dd1f9a2bb72fd40fb0ab577c456e8136ea948c7da17a40c6038f0f8011e89e37", 0xe1, 0x10, &(0x7f0000005100)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) 1.010902251s ago: executing program 3 (id=1586): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x4e, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x20040051) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x10, 0xd, "cf0da7087b9539556f7ab2a8bf68b63bfcbea9"}) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000100)=0x8683) ioctl$TCSETAF(r3, 0x5408, &(0x7f00000002c0)={0x6b7, 0x0, 0x0, 0x0, 0x0, "2bf6081b90893985"}) 962.029141ms ago: executing program 6 (id=1587): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="0000c383f4684b2ed7"], 0x48) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x9) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x7f) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = socket$key(0xf, 0x3, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0xd) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="0218000007000000fdffffff0000000005001800"], 0x38}}, 0x40010) socket(0x10, 0x2, 0x0) setfsuid(0x0) 960.976051ms ago: executing program 1 (id=1588): r0 = getpid() syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000640), 0xfc, 0x594, &(0x7f0000000680)="$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") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000140)={{}, {0x1, 0x4}}, 0x24, 0x2) llistxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) setns(r1, 0x24020000) userfaultfd(0x80801) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x2f, 0x8, 0x0, 0x3, 0x40, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x40, 0x9f, 0xfffffffa}}) sendmsg$nl_route(r5, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="680000004a00000325bd7000fddbdf250a004000", @ANYRES32=r8, @ANYBLOB="060004001400012021b36f00000000000000ffff0a01010114000100ff010000000000b9367cfc9848b5f0000004000400000001080002000800020003000000140001002001000000000000000000000000000111daf74753fa1f"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x100) 905.077851ms ago: executing program 3 (id=1589): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x13, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x400, 0x70bd2d, 0x27dfdbfb, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x7, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4517, &(0x7f0000000d40), 0x12, 0x4b3, &(0x7f0000001b00)="$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") r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x3002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x7c, 0x0, 0x1, 0x505, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @private=0xa010101}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}]}]}, 0x7c}}, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file1\x00', 0x1080a1, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x40084503, &(0x7f0000001500)=""/4103) ioctl$KVM_RUN(0xffffffffffffffff, 0x8004ae98, 0x0) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYRES8], 0x90) r6 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_open_procfs(0x0, 0x0) 842.551241ms ago: executing program 6 (id=1590): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000300)=ANY=[], 0x8, 0x2eb, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000003e40)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x1e, 0x0, &(0x7f0000000540)) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r5}, 0x18) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, 0x0) r6 = socket(0x10, 0x3, 0x0) recvmsg$inet_nvme(r6, &(0x7f0000000400)={&(0x7f00000000c0)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000280)=""/128, 0x80}], 0x1, &(0x7f0000000300)=""/241, 0xf1}, 0x100) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) 334.58µs ago: executing program 3 (id=1591): r0 = accept(0xffffffffffffffff, &(0x7f0000000080)=@nfc_llcp, &(0x7f0000000000)=0x80) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x29, 0xff, 0x6, 0xfffffffc, 0x48, @rand_addr=' \x01\x00', @mcast1, 0x1, 0x8, 0xa52e, 0x4}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newnexthop={0x24, 0x68, 0x1, 0x3, 0x80000004, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0xfa}]}]}, 0x24}}, 0x4000) 0s ago: executing program 1 (id=1592): r0 = openat$random(0xffffffffffffff9c, 0x0, 0x54b040, 0x0) fallocate(r0, 0x20, 0x7, 0x9) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0xfffffffffffffc70, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f00000007c9c0d224d324b9a7abb3"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000180), 0x0, 0x80200) r3 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r3, 0x10e, 0x5, 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x400c4808, &(0x7f0000000100)={0x3, 0x100, 0x2}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x2000400) vmsplice(r4, &(0x7f0000000400)=[{&(0x7f0000000480)="a0", 0x1}], 0x1, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r6, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x24008001) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, 0x0) close(0x3) fcntl$getown(r2, 0x9) kernel console output (not intermixed with test programs): ay corrupt user memory! [ 288.878153][ T6190] syz.4.1218[6190] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 289.056354][ T18] usb 4-1: device descriptor read/64, error 18 [ 289.130929][ T6190] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 289.366049][ T18] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 289.679957][ T18] usb 4-1: device descriptor read/64, error 18 [ 290.254834][ T6206] cgroup: syz.2.1216 (6206) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 290.272267][ T6206] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 290.292119][ T6194] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 290.446039][ T18] usb 4-1: device descriptor read/64, error 18 [ 290.557694][ T6213] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 290.567557][ T18] usb usb4-port1: attempt power cycle [ 291.317593][ T23] audit: type=1400 audit(1740774874.699:299): avc: denied { connect } for pid=6232 comm="syz.4.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 291.408097][ T6233] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 291.416237][ T6233] EXT4-fs (loop4): can't mount with dioread_nolock if block size != PAGE_SIZE [ 291.419041][ T6226] F2FS-fs (loop0): invalid crc value [ 291.446480][ T6226] F2FS-fs (loop0): Found nat_bits in checkpoint [ 291.512182][ T6226] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 291.551527][ T6233] SELinux: Context : is not valid (left unmapped). [ 291.629028][ T23] audit: type=1400 audit(1740774875.009:300): avc: denied { relabelto } for pid=6232 comm="syz.4.1227" name="rdma.current" dev="tmpfs" ino=57818 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 291.699612][ T23] audit: type=1400 audit(1740774875.029:301): avc: denied { associate } for pid=6232 comm="syz.4.1227" name="rdma.current" dev="tmpfs" ino=57818 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":" [ 291.858971][ T6253] EXT4-fs (loop1): Unrecognized mount option "hash" or missing value [ 291.886431][ T6248] F2FS-fs (loop2): invalid crc value [ 291.933380][ T6248] F2FS-fs (loop2): Found nat_bits in checkpoint [ 291.973721][ T6253] EXT4-fs (loop1): invalid inodes per group: 0 [ 291.973721][ T6253] [ 292.013864][ T6248] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 292.100246][ T6268] Invalid mount options [ 292.235560][ T23] audit: type=1400 audit(1740774875.609:302): avc: denied { unlink } for pid=352 comm="syz-executor" name="rdma.current" dev="tmpfs" ino=57818 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 292.276848][ T6271] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 292.378524][ T6280] attempt to access beyond end of device [ 292.378524][ T6280] loop0: rw=2049, want=77960, limit=40427 [ 292.898073][ T443] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 292.910342][ T356] attempt to access beyond end of device [ 292.910342][ T356] loop0: rw=2049, want=45104, limit=40427 [ 292.984723][ T6279] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 293.068401][ T6287] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1239'. [ 293.079740][ T6287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6287 comm=syz.1.1239 [ 293.439543][ T6293] attempt to access beyond end of device [ 293.439543][ T6293] loop2: rw=2049, want=77960, limit=40427 [ 293.696410][ T355] attempt to access beyond end of device [ 293.696410][ T355] loop2: rw=2049, want=45104, limit=40427 [ 293.756304][ T443] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.775968][ T443] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.795693][ T443] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 293.826453][ T443] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 293.835349][ T443] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.128676][ T443] usb 4-1: config 0 descriptor?? [ 294.643768][ T6313] EXT4-fs (loop2): 1 orphan inode deleted [ 294.649451][ T6313] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 294.669168][ T6313] ext4 filesystem being mounted at /207/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 295.178313][ T443] plantronics 0003:047F:FFFF.0045: unknown main item tag 0xd [ 295.186034][ T443] plantronics 0003:047F:FFFF.0045: No inputs registered, leaving [ 295.346377][ T443] plantronics 0003:047F:FFFF.0045: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 295.367412][ T443] usb 4-1: USB disconnect, device number 28 [ 295.410377][ T6322] EXT4-fs (loop2): Unrecognized mount option "nodioread_nolock" or missing value [ 295.443068][ T6325] Invalid mount options [ 295.457340][ T6322] FAULT_INJECTION: forcing a failure. [ 295.457340][ T6322] name failslab, interval 1, probability 0, space 0, times 0 [ 295.486730][ T6322] CPU: 1 PID: 6322 Comm: syz.2.1245 Not tainted 5.4.290-syzkaller-00017-g6b07fcd94a6a #0 [ 295.496342][ T6322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 295.506235][ T6322] Call Trace: [ 295.509375][ T6322] dump_stack+0x1d8/0x241 [ 295.513537][ T6322] ? panic+0x89d/0x89d [ 295.517443][ T6322] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 295.523345][ T6322] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 295.528984][ T6322] should_fail+0x71f/0x880 [ 295.533236][ T6322] ? setup_fault_attr+0x3d0/0x3d0 [ 295.538108][ T6322] ? fuse_init_fs_context+0x4f/0x190 [ 295.543222][ T6322] should_failslab+0x5/0x20 [ 295.547563][ T6322] kmem_cache_alloc_trace+0x28/0x260 [ 295.552681][ T6322] fuse_init_fs_context+0x4f/0x190 [ 295.557627][ T6322] alloc_fs_context+0x551/0x660 [ 295.562325][ T6322] do_new_mount+0x162/0x570 [ 295.566649][ T6322] ? do_move_mount_old+0x160/0x160 [ 295.571602][ T6322] ? security_capable+0x86/0xb0 [ 295.576284][ T6322] do_mount+0x688/0xe10 [ 295.580274][ T6322] ? copy_mount_string+0x30/0x30 [ 295.585053][ T6322] ? _copy_from_user+0xa6/0xe0 [ 295.589654][ T6322] ? copy_mount_options+0xcb/0x300 [ 295.594596][ T6322] ksys_mount+0xc2/0xf0 [ 295.598591][ T6322] __x64_sys_mount+0xb1/0xc0 [ 295.603016][ T6322] do_syscall_64+0xca/0x1c0 [ 295.607357][ T6322] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 295.613085][ T6322] RIP: 0033:0x7fa69379a169 [ 295.617334][ T6322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.636774][ T6322] RSP: 002b:00007fa691e04038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 295.645020][ T6322] RAX: ffffffffffffffda RBX: 00007fa6939b2fa0 RCX: 00007fa69379a169 [ 295.652831][ T6322] RDX: 0000400000002100 RSI: 0000400000000000 RDI: 0000000000000000 [ 295.660638][ T6322] RBP: 00007fa691e04090 R08: 0000000000000000 R09: 0000000000000000 [ 295.668451][ T6322] R10: 000000000020c081 R11: 0000000000000246 R12: 0000000000000001 [ 295.676264][ T6322] R13: 0000000000000000 R14: 00007fa6939b2fa0 R15: 00007fff7d021848 [ 295.708237][ T23] audit: type=1400 audit(1740774879.089:303): avc: denied { name_bind } for pid=6330 comm="syz.3.1248" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 296.002541][ T6340] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 296.349138][ T6342] F2FS-fs (loop3): invalid crc value [ 296.381866][ T6342] F2FS-fs (loop3): Found nat_bits in checkpoint [ 296.443885][ T6342] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 296.484093][ T6357] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue [ 296.495768][ T6357] ext4 filesystem being mounted at /233/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 296.716188][ T6368] Invalid mount options [ 296.922549][ T6382] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1262'. [ 296.943905][ T6382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6382 comm=syz.0.1262 [ 297.237078][ T6389] attempt to access beyond end of device [ 297.237078][ T6389] loop3: rw=2049, want=77960, limit=40427 [ 297.461577][ T354] attempt to access beyond end of device [ 297.461577][ T354] loop3: rw=2049, want=45104, limit=40427 [ 297.479407][ T6387] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 297.690354][ T6399] overlayfs: unrecognized mount option "uuid=on" or missing value [ 297.940282][ T6401] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 297.954994][ T6401] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 297.965156][ T6401] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 297.978432][ T6401] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 297.986200][ T6401] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=c000e118, mo2=0000] [ 297.994020][ T6401] EXT4-fs (loop4): orphan cleanup on readonly fs [ 298.001062][ T6401] EXT4-fs error (device loop4): ext4_validate_block_bitmap:418: comm syz.4.1268: bg 0: block 35: padding at end of block bitmap is not set [ 298.032261][ T6407] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 298.034960][ T6401] Quota error (device loop4): write_blk: dquota write failed [ 298.049770][ T6401] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 298.095582][ T6411] EXT4-fs (loop3): mounted filesystem without journal. Opts: noquota,barrier=0x0000000000001000,grpjquota=,noauto_da_alloc,dioread_lock,,errors=continue [ 298.111516][ T6411] ext4 filesystem being mounted at /293/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 298.123794][ T6420] Invalid mount options [ 298.132087][ T6401] EXT4-fs (loop4): 1 truncate cleaned up [ 298.148204][ T6411] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 298.169113][ T6401] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,discard,nogrpid,noblock_validity,,errors=continue [ 298.366664][ T6427] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 9 with max blocks 1681 with error 28 [ 298.383811][ T6427] EXT4-fs (loop3): This should not happen!! Data will be lost [ 298.383811][ T6427] [ 298.397272][ T6427] EXT4-fs (loop3): Total free blocks count 0 [ 298.403082][ T6427] EXT4-fs (loop3): Free/Dirty block details [ 298.408863][ T6427] EXT4-fs (loop3): free_blocks=39627 [ 298.413951][ T6427] EXT4-fs (loop3): dirty_blocks=1681 [ 298.419328][ T6427] EXT4-fs (loop3): Block reservation details [ 298.426445][ T6427] EXT4-fs (loop3): i_reserved_data_blocks=1681 [ 298.440933][ T6423] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,data_err=abort,,errors=continue [ 298.452117][ T6423] ext4 filesystem being mounted at /252/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 298.474213][ T6433] EXT4-fs (loop0): Unrecognized mount option "dax=inode" or missing value [ 298.604256][ T6433] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 298.613737][ T23] audit: type=1400 audit(1740774881.989:304): avc: denied { relabelto } for pid=6432 comm="syz.0.1273" name="242" dev="tmpfs" ino=59626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 298.640120][ T23] audit: type=1400 audit(1740774881.989:305): avc: denied { associate } for pid=6432 comm="syz.0.1273" name="242" dev="tmpfs" ino=59626 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 298.667402][ T23] audit: type=1400 audit(1740774881.989:306): avc: denied { write } for pid=6432 comm="syz.0.1273" name="242" dev="tmpfs" ino=59626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 298.694004][ T23] audit: type=1400 audit(1740774881.989:307): avc: denied { add_name } for pid=6432 comm="syz.0.1273" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 298.719095][ T23] audit: type=1400 audit(1740774881.989:308): avc: denied { associate } for pid=6432 comm="syz.0.1273" name="memory.events" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 298.740815][ T23] audit: type=1400 audit(1740774881.999:309): avc: denied { remove_name } for pid=356 comm="syz-executor" name="memory.events" dev="tmpfs" ino=58793 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 298.768449][ T23] audit: type=1400 audit(1740774881.999:310): avc: denied { unlink } for pid=356 comm="syz-executor" name="memory.events" dev="tmpfs" ino=58793 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 298.794028][ T1252] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 298.794515][ T23] audit: type=1400 audit(1740774881.999:311): avc: denied { rmdir } for pid=356 comm="syz-executor" name="242" dev="tmpfs" ino=59626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 298.882347][ T6438] F2FS-fs (loop4): invalid crc value [ 298.889190][ T6438] F2FS-fs (loop4): Found nat_bits in checkpoint [ 298.912835][ T6438] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 299.008530][ T6441] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1274'. [ 299.027976][ T6441] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6441 comm=syz.3.1274 [ 299.227309][ T6456] FAT-fs (loop0): Unrecognized mount option "nonul=0" or missing value [ 299.304816][ T6460] device batadv_slave_1 entered promiscuous mode [ 299.320018][ T6460] mmap: syz.3.1279 (6460): VmData 167489536 exceed data ulimit 83946689. Update limits or use boot option ignore_rlimit_data. [ 299.396351][ T1252] usb 2-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 299.424344][ T1252] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.473457][ T1252] usb 2-1: Product: syz [ 299.490506][ T1252] usb 2-1: Manufacturer: syz [ 299.556803][ T1252] usb 2-1: SerialNumber: syz [ 299.576183][ T1252] usb 2-1: config 0 descriptor?? [ 299.739984][ T18] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 299.859732][ T6466] attempt to access beyond end of device [ 299.859732][ T6466] loop4: rw=2049, want=77960, limit=40427 [ 300.014288][ T1252] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 300.024311][ T1252] asix: probe of 2-1:0.0 failed with error -71 [ 300.067451][ T1252] usb 2-1: USB disconnect, device number 35 [ 300.104320][ T352] attempt to access beyond end of device [ 300.104320][ T352] loop4: rw=2049, want=45104, limit=40427 [ 300.155992][ T18] usb 4-1: Using ep0 maxpacket: 8 [ 300.286836][ T18] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 300.295174][ T18] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 300.354333][ T18] usb 4-1: config 135 has no interface number 0 [ 300.389125][ T18] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 300.666191][ T18] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 300.675382][ T18] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.684771][ T18] usb 4-1: Product: syz [ 300.689616][ T18] usb 4-1: Manufacturer: syz [ 300.694053][ T18] usb 4-1: SerialNumber: syz [ 300.752785][ T18] uvcvideo: Found UVC 0.00 device syz (18ec:3288) [ 300.762044][ T6470] EXT4-fs (loop0): 1 orphan inode deleted [ 300.767820][ T6470] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 300.786449][ T6470] ext4 filesystem being mounted at /245/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 300.796834][ T6469] FAULT_INJECTION: forcing a failure. [ 300.796834][ T6469] name failslab, interval 1, probability 0, space 0, times 0 [ 300.809268][ T6469] CPU: 1 PID: 6469 Comm: syz.0.1281 Not tainted 5.4.290-syzkaller-00017-g6b07fcd94a6a #0 [ 300.818854][ T6469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 300.828740][ T6469] Call Trace: [ 300.831876][ T6469] dump_stack+0x1d8/0x241 [ 300.836038][ T6469] ? panic+0x89d/0x89d [ 300.839941][ T6469] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 300.845580][ T6469] should_fail+0x71f/0x880 [ 300.849828][ T6469] ? setup_fault_attr+0x3d0/0x3d0 [ 300.854688][ T6469] ? path_openat+0x103/0x34b0 [ 300.859202][ T6469] ? do_sys_open+0x39c/0x810 [ 300.863630][ T6469] ? do_syscall_64+0xca/0x1c0 [ 300.868142][ T6469] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 300.874044][ T6469] ? __d_alloc+0x2a/0x6a0 [ 300.878210][ T6469] should_failslab+0x5/0x20 [ 300.882549][ T6469] kmem_cache_alloc+0x28/0x250 [ 300.887154][ T6469] __d_alloc+0x2a/0x6a0 [ 300.891148][ T6469] ? selinux_inode_follow_link+0x3c0/0x3c0 [ 300.896785][ T6469] d_alloc_parallel+0xec/0x1390 [ 300.901470][ T6469] ? generic_permission+0x141/0x3e0 [ 300.906506][ T6469] ? memset+0x1f/0x40 [ 300.910324][ T6469] ? success_walk_trace+0xab/0x3d0 [ 300.915279][ T6469] ? check_preemption_disabled+0x9f/0x320 [ 300.920825][ T6469] ? __nd_alloc_stack+0x110/0x110 [ 300.925685][ T6469] ? d_hash_and_lookup+0x1e0/0x1e0 [ 300.930632][ T6469] ? __d_lookup+0x4cd/0x540 [ 300.934972][ T6469] ? down_write+0xd7/0x150 [ 300.939223][ T6469] ? down_read_killable+0x220/0x220 [ 300.944260][ T6469] path_openat+0x9f5/0x34b0 [ 300.948603][ T6469] ? do_filp_open+0x450/0x450 [ 300.953122][ T6469] ? do_sys_open+0x357/0x810 [ 300.957538][ T6469] ? do_syscall_64+0xca/0x1c0 [ 300.962051][ T6469] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 300.967956][ T6469] do_filp_open+0x20b/0x450 [ 300.972297][ T6469] ? vfs_tmpfile+0x2c0/0x2c0 [ 300.976738][ T6469] ? _raw_spin_unlock+0x49/0x60 [ 300.981413][ T6469] ? __alloc_fd+0x4c5/0x570 [ 300.985852][ T6469] do_sys_open+0x39c/0x810 [ 300.990112][ T6469] ? check_preemption_disabled+0x153/0x320 [ 300.995749][ T6469] ? file_open_root+0x490/0x490 [ 301.000434][ T6469] do_syscall_64+0xca/0x1c0 [ 301.004858][ T6469] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 301.010587][ T6469] RIP: 0033:0x7f63482cc169 [ 301.014837][ T6469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.034287][ T6469] RSP: 002b:00007f6346915038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 301.042527][ T6469] RAX: ffffffffffffffda RBX: 00007f63484e5080 RCX: 00007f63482cc169 [ 301.050356][ T6469] RDX: 000000000000275a RSI: 0000400000000300 RDI: ffffffffffffff9c [ 301.058145][ T6469] RBP: 00007f6346915090 R08: 0000000000000000 R09: 0000000000000000 [ 301.066050][ T6469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.073852][ T6469] R13: 0000000000000000 R14: 00007f63484e5080 R15: 00007ffe8829d468 [ 301.082777][ T18] uvcvideo: No valid video chain found. [ 301.137831][ T6480] FAULT_INJECTION: forcing a failure. [ 301.137831][ T6480] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 301.151132][ T6480] CPU: 0 PID: 6480 Comm: syz.1.1284 Not tainted 5.4.290-syzkaller-00017-g6b07fcd94a6a #0 [ 301.160725][ T6480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 301.170617][ T6480] Call Trace: [ 301.173751][ T6480] dump_stack+0x1d8/0x241 [ 301.177915][ T6480] ? panic+0x89d/0x89d [ 301.181815][ T6480] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 301.187469][ T6480] should_fail+0x71f/0x880 [ 301.191710][ T6480] ? setup_fault_attr+0x3d0/0x3d0 [ 301.196670][ T6480] ? __unwind_start+0x708/0x890 [ 301.201395][ T6480] ? debug_smp_processor_id+0x20/0x20 [ 301.206566][ T6480] __alloc_pages_nodemask+0x1b4/0x840 [ 301.211788][ T6480] ? debug_smp_processor_id+0x20/0x20 [ 301.216991][ T6480] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 301.222392][ T6480] ? __count_memcg_events+0x97/0x210 [ 301.227487][ T6480] ? __lru_cache_add+0x206/0x2b0 [ 301.232257][ T6480] wp_page_copy+0x20f/0x1820 [ 301.236686][ T6480] ? check_preemption_disabled+0x153/0x320 [ 301.242354][ T6480] ? __kunmap_atomic+0x80/0x80 [ 301.246930][ T6480] ? _raw_spin_unlock+0x49/0x60 [ 301.251612][ T6480] ? do_wp_page+0x4d7/0xae0 [ 301.255959][ T6480] handle_mm_fault+0x1888/0x4920 [ 301.260727][ T6480] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 301.266630][ T6480] ? finish_fault+0x230/0x230 [ 301.271153][ T6480] ? unwind_next_frame+0x1ea0/0x1ea0 [ 301.276282][ T6480] ? down_read_trylock+0x179/0x1d0 [ 301.281211][ T6480] __do_page_fault+0x509/0xbb0 [ 301.285811][ T6480] page_fault+0x2f/0x40 [ 301.289980][ T6480] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 301.296421][ T6480] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 301.315892][ T6480] RSP: 0018:ffff8881e16d7908 EFLAGS: 00050206 [ 301.321846][ T6480] RAX: ffffffff822bb401 RBX: 0000400000006080 RCX: 0000000000000080 [ 301.329667][ T6480] RDX: 0000000000001000 RSI: ffff8881ec7a3f80 RDI: 0000400000006000 [ 301.337473][ T6480] RBP: dffffc0000000000 R08: dffffc0000000000 R09: ffffed103d8f4800 [ 301.345281][ T6480] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000001000 [ 301.353093][ T6480] R13: 0000400000005080 R14: 00007ffffffff000 R15: ffff8881ec7a3000 [ 301.360922][ T6480] ? copy_page_to_iter+0x321/0x760 [ 301.365859][ T6480] copy_page_to_iter+0x422/0x760 [ 301.370633][ T6480] generic_file_read_iter+0x16f8/0x21f0 [ 301.376010][ T6480] ? __kasan_kmalloc+0x171/0x210 [ 301.380808][ T6480] ? rw_copy_check_uvector+0xa0/0x2f0 [ 301.385987][ T6480] ? import_iovec+0x10d/0x380 [ 301.390507][ T6480] ? find_get_pages_range_tag+0xae0/0xae0 [ 301.396066][ T6480] ? memset+0x1f/0x40 [ 301.399881][ T6480] do_iter_readv_writev+0x591/0x7a0 [ 301.404920][ T6480] ? vfs_dedupe_file_range+0x890/0x890 [ 301.410208][ T6480] ? security_file_permission+0x1dc/0x2f0 [ 301.415778][ T6480] do_iter_read+0x15b/0x580 [ 301.420117][ T6480] ? dup_iter+0x180/0x180 [ 301.424733][ T6480] do_preadv+0x20e/0x350 [ 301.428810][ T6480] ? vfs_writev+0x350/0x350 [ 301.433150][ T6480] ? fput_many+0x15e/0x1b0 [ 301.437415][ T6480] ? check_preemption_disabled+0x153/0x320 [ 301.443056][ T6480] do_syscall_64+0xca/0x1c0 [ 301.447390][ T6480] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 301.453136][ T6480] RIP: 0033:0x7f6d983e1169 [ 301.457368][ T6480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.476807][ T6480] RSP: 002b:00007f6d96a4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 301.485054][ T6480] RAX: ffffffffffffffda RBX: 00007f6d985f9fa0 RCX: 00007f6d983e1169 [ 301.492860][ T6480] RDX: 000000000000003e RSI: 00004000000015c0 RDI: 0000000000000007 [ 301.500670][ T6480] RBP: 00007f6d96a4b090 R08: 0000000000000000 R09: 0000000000000000 [ 301.508482][ T6480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.516303][ T6480] R13: 0000000000000000 R14: 00007f6d985f9fa0 R15: 00007ffd45c8aeb8 [ 301.585961][ T443] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 301.589832][ T18] usb 4-1: USB disconnect, device number 29 [ 301.600473][ T6460] device batadv_slave_1 left promiscuous mode [ 301.660498][ T6489] Invalid mount options [ 301.745707][ T6497] xt_ecn: cannot match TCP bits for non-tcp packets [ 301.753589][ T6487] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 301.779772][ T6492] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 302.347697][ T443] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 302.373065][ T443] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 302.548134][ T443] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 302.726073][ T443] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 302.735010][ T443] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.737617][ T6527] Zero length message leads to an empty skb [ 302.743074][ T443] usb 3-1: Product: syz [ 302.752458][ T443] usb 3-1: Manufacturer: syz [ 302.757500][ T443] usb 3-1: SerialNumber: syz [ 302.767294][ T6532] Invalid mount options [ 302.837489][ T6536] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000000,grpjquota=,nolazytime,,errors=continue [ 302.851144][ T6536] ext4 filesystem being mounted at /260/file2 supports timestamps until (%ptR?) (0x7fffffff) [ 302.905985][ T1076] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 302.915972][ T18] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 302.999581][ T6479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1285'. [ 303.076074][ T443] usb 3-1: 0:2 : does not exist [ 303.082994][ T443] usb 3-1: USB disconnect, device number 37 [ 303.175979][ T1076] usb 1-1: device descriptor read/64, error 18 [ 303.195999][ T517] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 303.286383][ T402] udevd[402]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 303.302077][ T18] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.312779][ T18] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.322521][ T18] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 303.335419][ T18] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 303.344288][ T18] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.352842][ T18] usb 5-1: config 0 descriptor?? [ 303.435976][ T517] usb 2-1: Using ep0 maxpacket: 8 [ 303.586055][ T1076] usb 1-1: device descriptor read/64, error 18 [ 303.626012][ T517] usb 2-1: unable to get BOS descriptor or descriptor too short [ 303.706034][ T517] usb 2-1: config 8 has an invalid interface number: 1 but max is 0 [ 303.713855][ T517] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 303.723804][ T517] usb 2-1: config 8 has no interface number 0 [ 303.836962][ T18] plantronics 0003:047F:FFFF.0046: unknown main item tag 0xd [ 303.844480][ T18] plantronics 0003:047F:FFFF.0046: No inputs registered, leaving [ 303.854188][ T18] plantronics 0003:047F:FFFF.0046: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 303.876019][ T1076] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 303.886042][ T517] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 303.895005][ T517] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.903015][ T517] usb 2-1: Product: syz [ 303.907133][ T517] usb 2-1: Manufacturer: syz [ 303.911582][ T517] usb 2-1: SerialNumber: syz [ 304.155963][ T1076] usb 1-1: device descriptor read/64, error 18 [ 304.198286][ T517] usb 2-1: USB disconnect, device number 36 [ 304.406341][ T402] udevd[402]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:8.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 304.536556][ T6552] FAT-fs (loop2): Unrecognized mount option "g" or missing value [ 304.547261][ T1076] usb 1-1: device descriptor read/64, error 18 [ 304.667460][ T1076] usb usb1-port1: attempt power cycle [ 304.698209][ T6556] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 305.115966][ T1076] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 305.436010][ T443] usb 5-1: reset high-speed USB device number 36 using dummy_hcd [ 305.441143][ T6576] Invalid mount options [ 305.446161][ T1076] usb 1-1: device descriptor read/8, error -61 [ 305.845995][ T1076] usb 1-1: device descriptor read/8, error -71 [ 305.981982][ T6586] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 306.151877][ T6589] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 306.584905][ T6596] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=74 sclass=netlink_tcpdiag_socket pid=6596 comm=syz.1.1312 [ 306.859875][ T6600] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 306.872720][ T6600] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 306.887830][ T6600] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,noinit_itable,usrjquota=./file1,grpjquota=.,stripe=0x0000000000000009,init_itable,,errors=continue [ 306.904804][ T6600] ext4 filesystem being mounted at /275/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 307.006070][ T372] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 307.017580][ T6616] FAULT_INJECTION: forcing a failure. [ 307.017580][ T6616] name failslab, interval 1, probability 0, space 0, times 0 [ 307.026754][ T6608] FAT-fs (loop2): Unrecognized mount option "g" or missing value [ 307.035969][ T6616] CPU: 1 PID: 6616 Comm: syz.1.1319 Not tainted 5.4.290-syzkaller-00017-g6b07fcd94a6a #0 [ 307.047522][ T6616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 307.057409][ T6616] Call Trace: [ 307.060539][ T6616] dump_stack+0x1d8/0x241 [ 307.064703][ T6616] ? panic+0x89d/0x89d [ 307.068619][ T6616] ? deref_stack_reg+0x15c/0x1f0 [ 307.073821][ T6616] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 307.079452][ T6616] ? get_reg+0x220/0x220 [ 307.083533][ T6616] ? avc_denied+0x1d0/0x1d0 [ 307.087872][ T6616] ? proc_pident_instantiate+0x6f/0x2a0 [ 307.093251][ T6616] should_fail+0x71f/0x880 [ 307.097522][ T6616] ? setup_fault_attr+0x3d0/0x3d0 [ 307.102440][ T6616] ? unwind_next_frame+0x1ea0/0x1ea0 [ 307.107772][ T6616] ? get_reg+0x220/0x220 [ 307.111821][ T6616] ? kvmalloc_node+0x7e/0xf0 [ 307.116243][ T6616] should_failslab+0x5/0x20 [ 307.120586][ T6616] __kmalloc+0x51/0x2e0 [ 307.124579][ T6616] kvmalloc_node+0x7e/0xf0 [ 307.128835][ T6616] __kvm_set_memory_region+0xb92/0xf60 [ 307.134128][ T6616] ? kvm_put_kvm+0xf30/0xf30 [ 307.138651][ T6616] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 307.144555][ T6616] ? check_preemption_disabled+0x9f/0x320 [ 307.150106][ T6616] ? __unwind_start+0x708/0x890 [ 307.154792][ T6616] kvm_vm_ioctl_set_memory_region+0x67/0x90 [ 307.160521][ T6616] kvm_vm_ioctl+0x7d7/0xbd0 [ 307.164915][ T6616] ? vcpu_stat_clear_per_vm+0x290/0x290 [ 307.170251][ T6616] ? __kernel_text_address+0x94/0x100 [ 307.175453][ T6616] ? unwind_get_return_address+0x49/0x80 [ 307.180914][ T6616] ? arch_stack_walk+0xf5/0x140 [ 307.185604][ T6616] ? _kstrtoull+0x390/0x4a0 [ 307.189943][ T6616] ? kstrtouint_from_user+0x20a/0x2a0 [ 307.195148][ T6616] ? kstrtol_from_user+0x310/0x310 [ 307.200098][ T6616] ? get_pid_task+0xde/0x130 [ 307.204523][ T6616] ? proc_fail_nth_write+0x20b/0x290 [ 307.209651][ T6616] ? proc_fail_nth_read+0x210/0x210 [ 307.214676][ T6616] ? proc_fail_nth_read+0x210/0x210 [ 307.219712][ T6616] ? memset+0x1f/0x40 [ 307.223530][ T6616] ? fsnotify+0x1280/0x1340 [ 307.227871][ T6616] ? vcpu_stat_clear_per_vm+0x290/0x290 [ 307.233273][ T6616] do_vfs_ioctl+0x742/0x1720 [ 307.237684][ T6616] ? ioctl_preallocate+0x250/0x250 [ 307.242804][ T6616] ? __fget+0x407/0x490 [ 307.246796][ T6616] ? fget_many+0x20/0x20 [ 307.250870][ T6616] ? debug_smp_processor_id+0x20/0x20 [ 307.256080][ T6616] ? security_file_ioctl+0x7d/0xa0 [ 307.261025][ T6616] __x64_sys_ioctl+0xd4/0x110 [ 307.265541][ T6616] do_syscall_64+0xca/0x1c0 [ 307.269878][ T6616] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 307.275616][ T6616] RIP: 0033:0x7f6d983e1169 [ 307.279866][ T6616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.299298][ T6616] RSP: 002b:00007f6d96a4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 307.307540][ T6616] RAX: ffffffffffffffda RBX: 00007f6d985f9fa0 RCX: 00007f6d983e1169 [ 307.315351][ T6616] RDX: 0000400000000500 RSI: 000000004020ae46 RDI: 0000000000000004 [ 307.323165][ T6616] RBP: 00007f6d96a4b090 R08: 0000000000000000 R09: 0000000000000000 [ 307.330974][ T6616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.338789][ T6616] R13: 0000000000000000 R14: 00007f6d985f9fa0 R15: 00007ffd45c8aeb8 [ 307.361638][ T125] usb 5-1: USB disconnect, device number 36 [ 307.421900][ T6623] Invalid mount options [ 307.557363][ T6625] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 307.566122][ T372] usb 4-1: Using ep0 maxpacket: 32 [ 307.686068][ T372] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.713466][ T372] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.723177][ T372] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 307.732171][ T372] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.741012][ T372] usb 4-1: config 0 descriptor?? [ 307.786467][ T372] hub 4-1:0.0: USB hub found [ 307.808662][ T6630] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1323'. [ 307.820519][ T6630] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6630 comm=syz.4.1323 [ 308.172940][ T6595] EXT4-fs error (device loop3): ext4_free_blocks:4891: comm syz.3.1315: Freeing blocks in system zone - Block = 11, count = 1 [ 308.185972][ T125] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 308.207765][ T6595] EXT4-fs (loop3): Remounting filesystem read-only [ 308.217572][ T6595] EXT4-fs error (device loop3): ext4_clear_blocks:858: inode #13: comm syz.3.1315: attempt to clear invalid blocks 1024 len 1 [ 308.233424][ T6595] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 308.249894][ T6595] EXT4-fs error (device loop3): ext4_free_branches:1022: inode #13: comm syz.3.1315: invalid indirect mapped block 1819239214 (level 0) [ 308.264788][ T6595] EXT4-fs (loop3): 1 truncate cleaned up [ 308.272542][ T6595] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,commit=0x0000000000000000,noblock_validity,errors=remount-ro,auto_da_alloc, [ 308.416889][ T372] hub 4-1:0.0: 1 port detected [ 308.655621][ T125] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.678548][ T125] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.700567][ T125] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 308.778761][ T6651] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1328'. [ 308.925983][ T125] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 308.934838][ T125] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.956815][ T125] usb 2-1: config 0 descriptor?? [ 309.012582][ T6647] F2FS-fs (loop0): invalid crc value [ 309.023000][ T6647] F2FS-fs (loop0): Found nat_bits in checkpoint [ 309.066256][ T6639] F2FS-fs (loop2): Found nat_bits in checkpoint [ 309.067331][ T6647] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 309.113681][ T6639] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 309.152817][ T6639] overlayfs: missing 'lowerdir' [ 309.383202][ T372] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 309.408787][ T372] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 309.442233][ T6667] attempt to access beyond end of device [ 309.442233][ T6667] loop0: rw=2049, want=77960, limit=40427 [ 309.445127][ T18] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 309.454738][ T125] plantronics 0003:047F:FFFF.0047: unknown main item tag 0xd [ 309.469695][ T125] plantronics 0003:047F:FFFF.0047: No inputs registered, leaving [ 309.483224][ T125] plantronics 0003:047F:FFFF.0047: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 309.526155][ T372] usbhid 4-1:0.0: can't add hid device: -71 [ 309.533377][ T372] usbhid: probe of 4-1:0.0 failed with error -71 [ 309.559887][ T6669] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 309.577247][ T372] usb 4-1: USB disconnect, device number 30 [ 309.641246][ T356] attempt to access beyond end of device [ 309.641246][ T356] loop0: rw=2049, want=45104, limit=40427 [ 309.978422][ T18] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.990203][ T18] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.006632][ T18] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 310.016585][ T18] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.026289][ T18] usb 3-1: config 0 descriptor?? [ 310.063069][ T6680] Invalid mount options [ 310.345972][ T372] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 310.475970][ T1252] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 310.635953][ T372] usb 4-1: device descriptor read/64, error 18 [ 310.641422][ T18] sony 0003:054C:024B.0048: unexpected long global item [ 310.649095][ T18] sony 0003:054C:024B.0048: parse failed [ 310.654546][ T18] sony: probe of 0003:054C:024B.0048 failed with error -22 [ 310.717294][ T125] usb 3-1: USB disconnect, device number 38 [ 310.845962][ T1252] usb 1-1: Using ep0 maxpacket: 32 [ 310.945969][ T1076] usb 2-1: reset high-speed USB device number 37 using dummy_hcd [ 310.966017][ T1252] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 310.973934][ T1252] usb 1-1: config 0 has an invalid descriptor of length 148, skipping remainder of the config [ 310.984222][ T1252] usb 1-1: config 0 has no interface number 0 [ 310.990134][ T1252] usb 1-1: config 0 interface 67 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 311.025954][ T372] usb 4-1: device descriptor read/64, error 18 [ 311.155988][ T1076] usb 2-1: device descriptor read/64, error -32 [ 311.162219][ T1252] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 311.171091][ T1252] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.178879][ T1252] usb 1-1: Product: syz [ 311.182839][ T1252] usb 1-1: Manufacturer: syz [ 311.187306][ T1252] usb 1-1: SerialNumber: syz [ 311.192359][ T1252] usb 1-1: config 0 descriptor?? [ 311.296116][ T372] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 311.455643][ T6693] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 311.575943][ T372] usb 4-1: device descriptor read/64, error 18 [ 311.656316][ T1252] smsc95xx v1.0.6 [ 311.671426][ T1252] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 311.715039][ T6701] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1338'. [ 311.801677][ T6701] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6701 comm=syz.4.1338 [ 311.808585][ T1252] smsc95xx: probe of 1-1:0.67 failed with error -22 [ 311.821529][ T1252] usb 1-1: USB disconnect, device number 44 [ 311.900495][ T6706] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro, [ 311.909427][ T6706] ext4 filesystem being mounted at /227/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 311.922057][ T6706] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 311.936710][ T6706] EXT4-fs (loop2): Remounting filesystem read-only [ 311.946312][ T1053] __quota_error: 2 callbacks suppressed [ 311.946321][ T1053] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 311.963886][ T1053] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 312.066089][ T372] usb 4-1: device descriptor read/64, error 18 [ 312.073324][ T6713] EXT4-fs (loop2): Invalid journal IO priority (must be 0-7) [ 312.186398][ T372] usb usb4-port1: attempt power cycle [ 312.191871][ T6716] EXT4-fs (loop4): Unrecognized mount option "fowner=00000000000000000000" or missing value [ 312.236303][ T443] usb 2-1: USB disconnect, device number 37 [ 312.324569][ T23] audit: type=1400 audit(1740774895.699:314): avc: denied { write } for pid=6721 comm="syz.1.1342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 312.349515][ T6722] tipc: Failed to remove local publication {66,0,0}/3334982962 [ 312.393207][ T23] audit: type=1400 audit(1740774895.769:315): avc: denied { ioctl } for pid=6715 comm="syz.4.1340" path="socket:[61733]" dev="sockfs" ino=61733 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 312.396497][ T6728] cgroup1: Unknown subsys name 'smackfstransmute' [ 312.434566][ T6728] Invalid mount options [ 312.564087][ T6735] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 312.573250][ T6735] EXT4-fs (loop2): orphan cleanup on readonly fs [ 312.579666][ T6735] EXT4-fs error (device loop2): ext4_ext_check_inode:543: inode #3: comm syz.2.1347: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 2(4), depth 0(0) [ 312.597269][ T372] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 312.612578][ T6735] EXT4-fs (loop2): Remounting filesystem read-only [ 312.623366][ T6735] EXT4-fs error (device loop2): ext4_quota_enable:6059: comm syz.2.1347: Bad quota inode: 3, type: 0 [ 312.634673][ T6735] EXT4-fs warning (device loop2): ext4_enable_quotas:6100: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 312.649599][ T6735] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 312.656266][ T6735] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000008,data_err=abort,minixdf,errors=remount-ro,abort,max_dir_size_kb=0x0000000000000009,barrier,journal_dev=0x0000000000000f35, [ 312.672459][ T6733] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 312.716022][ T443] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 312.776044][ T372] usb 4-1: device descriptor read/8, error -61 [ 312.868429][ T6744] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=74 sclass=netlink_tcpdiag_socket pid=6744 comm=syz.4.1345 [ 313.085994][ T443] usb 1-1: Using ep0 maxpacket: 32 [ 313.096126][ T372] usb 4-1: device descriptor read/8, error -71 [ 313.177165][ T6750] FAT-fs (loop2): Unrecognized mount option "g" or missing value [ 313.206052][ T443] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 313.214302][ T443] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 313.223257][ T443] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 313.232269][ T443] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 313.242596][ T443] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 313.252593][ T443] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 313.265646][ T443] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 313.274684][ T443] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.297064][ T443] usb 1-1: config 0 descriptor?? [ 313.487860][ T6762] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 313.522978][ T6763] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1351'. [ 313.609228][ T443] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 45 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 313.620987][ T6763] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6763 comm=syz.4.1351 [ 313.685963][ T18] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 313.849316][ T23] audit: type=1400 audit(1740774897.229:316): avc: denied { read write } for pid=6718 comm="syz.0.1341" name="lp0" dev="devtmpfs" ino=61864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 313.872784][ C0] usblp0: nonzero read bulk status received: -71 [ 313.879194][ T443] usb 1-1: USB disconnect, device number 45 [ 313.885182][ T23] audit: type=1400 audit(1740774897.229:317): avc: denied { open } for pid=6718 comm="syz.0.1341" path="/dev/usb/lp0" dev="devtmpfs" ino=61864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 313.925977][ T18] usb 2-1: Using ep0 maxpacket: 32 [ 313.941330][ T23] audit: type=1400 audit(1740774897.319:318): avc: denied { create } for pid=6771 comm="syz.2.1354" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 313.961801][ T23] audit: type=1400 audit(1740774897.319:319): avc: denied { read } for pid=6771 comm="syz.2.1354" name="file0" dev="tmpfs" ino=61882 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 313.961808][ T6772] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.961875][ T6772] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.983901][ T23] audit: type=1400 audit(1740774897.319:320): avc: denied { open } for pid=6771 comm="syz.2.1354" path="/232/file0" dev="tmpfs" ino=61882 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 314.026317][ T23] audit: type=1400 audit(1740774897.329:321): avc: denied { ioctl } for pid=6771 comm="syz.2.1354" path="/232/file0" dev="tmpfs" ino=61882 ioctlcmd=0x127c scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 314.042712][ T6775] netlink: 'syz.2.1355': attribute type 3 has an invalid length. [ 314.065604][ T6718] usblp0: removed [ 314.066452][ T18] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 314.077611][ T18] usb 2-1: config 0 has an invalid descriptor of length 148, skipping remainder of the config [ 314.087706][ T18] usb 2-1: config 0 has no interface number 0 [ 314.103209][ T6782] cgroup1: Unknown subsys name 'smackfstransmute' [ 314.109968][ T18] usb 2-1: config 0 interface 67 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 314.123848][ T6782] Invalid mount options [ 314.277921][ T6791] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 314.328890][ T18] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 314.338304][ T18] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.346377][ T18] usb 2-1: Product: syz [ 314.350334][ T18] usb 2-1: Manufacturer: syz [ 314.354763][ T18] usb 2-1: SerialNumber: syz [ 314.360328][ T18] usb 2-1: config 0 descriptor?? [ 314.448197][ T6798] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=74 sclass=netlink_tcpdiag_socket pid=6798 comm=syz.2.1361 [ 314.559546][ T13] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 314.613301][ T6801] FAULT_INJECTION: forcing a failure. [ 314.613301][ T6801] name failslab, interval 1, probability 0, space 0, times 0 [ 314.626153][ T6801] CPU: 1 PID: 6801 Comm: syz.0.1363 Not tainted 5.4.290-syzkaller-00017-g6b07fcd94a6a #0 [ 314.635756][ T6801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 314.645648][ T6801] Call Trace: [ 314.648791][ T6801] dump_stack+0x1d8/0x241 [ 314.652967][ T6801] ? panic+0x89d/0x89d [ 314.656851][ T6801] ? do_syscall_64+0xca/0x1c0 [ 314.661368][ T6801] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 314.667023][ T6801] should_fail+0x71f/0x880 [ 314.671262][ T6801] ? setup_fault_attr+0x3d0/0x3d0 [ 314.676121][ T6801] ? selinux_sk_alloc_security+0x71/0x190 [ 314.681673][ T6801] should_failslab+0x5/0x20 [ 314.686024][ T6801] kmem_cache_alloc_trace+0x28/0x260 [ 314.691136][ T6801] selinux_sk_alloc_security+0x71/0x190 [ 314.696534][ T6801] security_sk_alloc+0x6d/0xa0 [ 314.701118][ T6801] sk_prot_alloc+0x14c/0x3e0 [ 314.705540][ T6801] sk_alloc+0x35/0x2f0 [ 314.709447][ T6801] unix_create1+0x8e/0x590 [ 314.713698][ T6801] unix_create+0x12c/0x1b0 [ 314.717969][ T6801] __sock_create+0x3cb/0x7a0 [ 314.722381][ T6801] __sys_socketpair+0x28f/0x6e0 [ 314.727065][ T6801] ? __ia32_sys_socket+0x80/0x80 [ 314.731842][ T6801] ? do_syscall_64+0x1c0/0x1c0 [ 314.736455][ T6801] ? __ia32_sys_read+0x80/0x80 [ 314.741828][ T6801] __x64_sys_socketpair+0x97/0xb0 [ 314.746689][ T6801] do_syscall_64+0xca/0x1c0 [ 314.751029][ T6801] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 314.756755][ T6801] RIP: 0033:0x7f63482cc169 [ 314.761011][ T6801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.780448][ T6801] RSP: 002b:00007f6346936038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 314.788698][ T6801] RAX: ffffffffffffffda RBX: 00007f63484e4fa0 RCX: 00007f63482cc169 [ 314.796807][ T6801] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 314.804604][ T6801] RBP: 00007f6346936090 R08: 0000000000000000 R09: 0000000000000000 [ 314.812504][ T6801] R10: 0000400000000080 R11: 0000000000000246 R12: 0000000000000001 [ 314.820316][ T6801] R13: 0000000000000000 R14: 00007f63484e4fa0 R15: 00007ffe8829d468 [ 314.966381][ T18] smsc95xx v1.0.6 [ 314.970114][ T18] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 314.988320][ T18] smsc95xx: probe of 2-1:0.67 failed with error -22 [ 315.004110][ T18] usb 2-1: USB disconnect, device number 38 [ 315.035982][ T13] usb 5-1: device descriptor read/64, error 18 [ 315.052867][ T6809] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 315.069943][ T6809] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 315.081111][ T6809] F2FS-fs (loop3): invalid crc value [ 315.087801][ T6809] F2FS-fs (loop3): Found nat_bits in checkpoint [ 315.121028][ T6809] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 315.128541][ T6809] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 315.167202][ T6816] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1367'. [ 315.180707][ T6809] attempt to access beyond end of device [ 315.180707][ T6809] loop3: rw=10241, want=45104, limit=40427 [ 315.192274][ T6816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6816 comm=syz.0.1367 [ 315.205298][ T6809] attempt to access beyond end of device [ 315.205298][ T6809] loop3: rw=2049, want=45104, limit=40427 [ 315.219006][ T6809] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1366'. [ 315.227823][ T6809] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1366'. [ 315.243655][ T6510] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 315.252491][ T6510] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 315.287862][ T6510] attempt to access beyond end of device [ 315.287862][ T6510] loop3: rw=1, want=45112, limit=40427 [ 315.395293][ T6823] F2FS-fs (loop2): Invalid log blocks per segment (4278190089) [ 315.402730][ T6823] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 315.414976][ T6823] F2FS-fs (loop2): invalid crc value [ 315.421464][ T6823] F2FS-fs (loop2): Found nat_bits in checkpoint [ 315.436070][ T13] usb 5-1: device descriptor read/64, error 18 [ 315.446854][ T6823] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 315.453693][ T6823] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 315.485004][ T6826] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,auto_da_alloc,minixdf,,errors=continue [ 315.518644][ T6826] ext4 filesystem being mounted at /260/bus supports timestamps until (%ptR?) (0x7fffffff) [ 315.537100][ T6836] cgroup1: Unknown subsys name 'smackfstransmute' [ 315.549518][ T6836] Invalid mount options [ 315.554438][ T6823] attempt to access beyond end of device [ 315.554438][ T6823] loop2: rw=2049, want=45112, limit=40427 [ 315.672024][ T6838] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 315.705995][ T13] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 316.165960][ T13] usb 5-1: device descriptor read/64, error 18 [ 316.178675][ T6848] F2FS-fs (loop0): fault_injection options not supported [ 316.193954][ T6848] F2FS-fs (loop0): invalid crc value [ 316.201585][ T6861] FAT-fs (loop2): Unrecognized mount option "g" or missing value [ 316.224708][ T6848] F2FS-fs (loop0): Found nat_bits in checkpoint [ 316.297645][ T6848] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 316.344184][ T356] attempt to access beyond end of device [ 316.344184][ T356] loop0: rw=2049, want=45104, limit=40427 [ 316.497589][ T6868] EXT4-fs (loop1): can't mount with dioread_nolock if block size != PAGE_SIZE [ 316.565981][ T13] usb 5-1: device descriptor read/64, error 18 [ 316.609948][ T6868] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1379'. [ 316.612256][ T6871] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1380'. [ 316.629457][ T6868] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1379'. [ 316.686033][ T13] usb usb5-port1: attempt power cycle [ 316.737819][ T6875] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1381'. [ 316.756439][ T6875] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6875 comm=syz.3.1381 [ 316.837903][ T6878] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 316.936018][ T379] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 317.040693][ T6884] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=74 sclass=netlink_tcpdiag_socket pid=6884 comm=syz.0.1378 [ 317.198646][ T6892] FAULT_INJECTION: forcing a failure. [ 317.198646][ T6892] name failslab, interval 1, probability 0, space 0, times 0 [ 317.207355][ T6893] cgroup1: No subsys list or none specified [ 317.217043][ T6892] CPU: 0 PID: 6892 Comm: syz.3.1385 Not tainted 5.4.290-syzkaller-00017-g6b07fcd94a6a #0 [ 317.219003][ T6893] Invalid mount options [ 317.226640][ T6892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 317.226644][ T6892] Call Trace: [ 317.226663][ T6892] dump_stack+0x1d8/0x241 [ 317.226670][ T6892] ? panic+0x89d/0x89d [ 317.226677][ T6892] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 317.226687][ T6892] should_fail+0x71f/0x880 [ 317.226695][ T6892] ? setup_fault_attr+0x3d0/0x3d0 [ 317.226704][ T6892] ? __alloc_skb+0x7a/0x4d0 [ 317.226713][ T6892] should_failslab+0x5/0x20 [ 317.226728][ T6892] kmem_cache_alloc+0x28/0x250 [ 317.226738][ T6892] __alloc_skb+0x7a/0x4d0 [ 317.226748][ T6892] ? netlink_autobind+0x143/0x180 [ 317.226757][ T6892] netlink_sendmsg+0x797/0xcf0 [ 317.226768][ T6892] ? netlink_getsockopt+0x550/0x550 [ 317.226775][ T6892] ? import_iovec+0x1bb/0x380 [ 317.226793][ T6892] ? security_socket_sendmsg+0x7d/0xa0 [ 317.308347][ T6892] ? netlink_getsockopt+0x550/0x550 [ 317.313369][ T6892] ____sys_sendmsg+0x5ac/0x8f0 [ 317.317968][ T6892] ? __sys_sendmsg_sock+0x2b0/0x2b0 [ 317.323021][ T6892] ? proc_fail_nth_read+0x210/0x210 [ 317.325972][ T517] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 317.328039][ T6892] __sys_sendmsg+0x28b/0x380 [ 317.328053][ T6892] ? ____sys_sendmsg+0x8f0/0x8f0 [ 317.344610][ T6892] ? check_preemption_disabled+0x9f/0x320 [ 317.350192][ T6892] ? fput_many+0x15e/0x1b0 [ 317.354428][ T6892] ? check_preemption_disabled+0x153/0x320 [ 317.360061][ T6892] ? __do_page_fault+0x725/0xbb0 [ 317.364833][ T6892] do_syscall_64+0xca/0x1c0 [ 317.369174][ T6892] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 317.374908][ T6892] RIP: 0033:0x7f98d6efe169 [ 317.379162][ T6892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.398594][ T6892] RSP: 002b:00007f98d5568038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 317.407118][ T6892] RAX: ffffffffffffffda RBX: 00007f98d7116fa0 RCX: 00007f98d6efe169 [ 317.414943][ T6892] RDX: 0000000000000000 RSI: 0000400000000240 RDI: 0000000000000003 [ 317.422771][ T6892] RBP: 00007f98d5568090 R08: 0000000000000000 R09: 0000000000000000 [ 317.430553][ T6892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.438390][ T6892] R13: 0000000000000000 R14: 00007f98d7116fa0 R15: 00007ffccfc8f518 [ 317.446530][ T13] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 317.520754][ T6897] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 317.565979][ T379] usb 2-1: Using ep0 maxpacket: 32 [ 317.573616][ T6906] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 317.586005][ T517] usb 3-1: Using ep0 maxpacket: 8 [ 317.686041][ T379] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 317.693956][ T379] usb 2-1: config 0 has an invalid descriptor of length 148, skipping remainder of the config [ 317.704556][ T379] usb 2-1: config 0 has no interface number 0 [ 317.710489][ T379] usb 2-1: config 0 interface 67 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 317.746351][ T517] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 242, using maximum allowed: 30 [ 317.757461][ T517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 317.769939][ T517] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 242 [ 317.793299][ T517] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 317.803375][ T517] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.838149][ T517] usb 3-1: config 0 descriptor?? [ 317.919501][ T6916] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000000,grpjquota=,nolazytime,,errors=continue [ 317.933226][ T6916] ext4 filesystem being mounted at /263/file2 supports timestamps until (%ptR?) (0x7fffffff) [ 317.946167][ T13] usb 5-1: device not accepting address 39, error -71 [ 317.986102][ T379] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 317.997335][ T379] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.005604][ T379] usb 2-1: Product: syz [ 318.009952][ T379] usb 2-1: Manufacturer: syz [ 318.014403][ T379] usb 2-1: SerialNumber: syz [ 318.024345][ T379] usb 2-1: config 0 descriptor?? [ 318.062422][ T6925] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1394'. [ 318.072073][ T6925] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6925 comm=syz.0.1394 [ 318.446356][ T379] smsc95xx v1.0.6 [ 318.449879][ T379] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 318.459974][ T379] smsc95xx: probe of 2-1:0.67 failed with error -22 [ 318.467088][ T379] usb 2-1: USB disconnect, device number 39 [ 318.503748][ T6938] cgroup1: No subsys list or none specified [ 318.510398][ T6938] Invalid mount options [ 318.576023][ T517] usbhid 3-1:0.0: can't add hid device: -71 [ 318.581842][ T517] usbhid: probe of 3-1:0.0 failed with error -71 [ 318.588958][ T517] usb 3-1: USB disconnect, device number 39 [ 318.708815][ T108] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 318.749272][ T23] kauditd_printk_skb: 11 callbacks suppressed [ 318.749279][ T23] audit: type=1400 audit(1740774902.129:333): avc: denied { nlmsg_read } for pid=6941 comm="syz.4.1400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 318.806037][ T443] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 318.977352][ T6948] erofs: (device loop1): mounted with opts: , root inode @ nid 36. [ 319.006002][ T108] usb 4-1: device descriptor read/64, error 18 [ 319.039710][ T6948] erofs: (device loop1): vle_extent_lookback: bogus lookback distance @ nid 36 [ 319.045987][ T443] usb 1-1: Using ep0 maxpacket: 32 [ 319.053959][ T6948] erofs: (device loop1): z_erofs_vle_normalaccess_readpage: failed to read, err [-117] [ 319.068404][ T6951] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 319.166090][ T443] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.177131][ T443] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.237303][ T6962] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=74 sclass=netlink_tcpdiag_socket pid=6962 comm=syz.4.1403 [ 319.332649][ T443] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 319.341529][ T443] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.350609][ T443] usb 1-1: config 0 descriptor?? [ 319.386402][ T443] hub 1-1:0.0: USB hub found [ 319.396003][ T108] usb 4-1: device descriptor read/64, error 18 [ 319.495988][ T13] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 319.503412][ T379] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 319.606039][ T443] hub 1-1:0.0: 1 port detected [ 319.665980][ T108] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 319.746024][ T379] usb 3-1: Using ep0 maxpacket: 8 [ 319.750936][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 319.866141][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.877040][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.879659][ T6964] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1406'. [ 319.890419][ T13] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 319.898880][ T6964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6964 comm=syz.4.1406 [ 319.904472][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.924791][ T13] usb 2-1: config 0 descriptor?? [ 319.955971][ T108] usb 4-1: device descriptor read/64, error 18 [ 319.966406][ T13] hub 2-1:0.0: USB hub found [ 320.037193][ T379] usb 3-1: New USB device found, idVendor=20a6, idProduct=1105, bcdDevice=c2.eb [ 320.046153][ T379] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.053847][ T379] usb 3-1: Product: syz [ 320.057867][ T379] usb 3-1: Manufacturer: syz [ 320.062260][ T379] usb 3-1: SerialNumber: syz [ 320.067736][ T379] usb 3-1: config 0 descriptor?? [ 320.106885][ T379] usb 3-1: bad CDC descriptors [ 320.167018][ T6948] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 320.173595][ T6967] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 320.229254][ T13] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 320.246047][ T379] hub 1-1:0.0: activate --> -90 [ 320.316851][ T6959] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 320.327982][ T517] usb 3-1: USB disconnect, device number 40 [ 320.366045][ T108] usb 4-1: device descriptor read/64, error 18 [ 320.476045][ T13] usbhid 2-1:0.0: can't add hid device: -71 [ 320.481870][ T13] usbhid: probe of 2-1:0.0 failed with error -71 [ 320.496128][ T108] usb usb4-port1: attempt power cycle [ 320.517217][ T13] usb 2-1: USB disconnect, device number 40 [ 320.666713][ T1402] usb 1-1: USB disconnect, device number 46 [ 320.905994][ T108] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 321.024891][ T6979] cgroup1: No subsys list or none specified [ 321.032193][ T6976] FAT-fs (loop1): Unrecognized mount option "g" or missing value [ 321.040934][ T6979] Invalid mount options [ 321.116082][ T108] usb 4-1: device descriptor read/8, error -61 [ 321.221636][ T23] audit: type=1400 audit(1740774904.599:334): avc: denied { ioctl } for pid=6987 comm="syz.0.1413" path="socket:[63761]" dev="sockfs" ino=63761 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 321.416074][ T108] usb 4-1: device descriptor read/8, error -61 [ 321.455973][ T13] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 321.598774][ T6991] F2FS-fs (loop0): Insane cp_payload (553648128 > 510) [ 321.612686][ T6991] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 321.625100][ T6991] F2FS-fs (loop0): invalid crc value [ 321.631156][ T6994] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,,errors=continue [ 321.641467][ T6994] ext4 filesystem being mounted at /320/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 321.647859][ T6999] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 321.662056][ T23] audit: type=1400 audit(1740774905.049:335): avc: denied { write } for pid=6993 comm="syz.3.1415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 321.667127][ T6991] F2FS-fs (loop0): Found nat_bits in checkpoint [ 321.687392][ T23] audit: type=1400 audit(1740774905.049:336): avc: denied { read } for pid=6993 comm="syz.3.1415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 321.706524][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 321.765757][ T6991] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 321.772653][ T6991] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 321.790358][ T356] attempt to access beyond end of device [ 321.790358][ T356] loop0: rw=2049, want=45104, limit=40427 [ 321.860376][ T7009] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=74 sclass=netlink_tcpdiag_socket pid=7009 comm=syz.1.1416 [ 322.002667][ T13] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 322.010624][ T13] usb 3-1: config 0 has an invalid descriptor of length 148, skipping remainder of the config [ 322.020668][ T13] usb 3-1: config 0 has no interface number 0 [ 322.026581][ T13] usb 3-1: config 0 interface 67 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 322.036035][ T108] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 322.106721][ T7011] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1418'. [ 322.116161][ T7011] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7011 comm=syz.4.1418 [ 322.196028][ T13] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 322.210045][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.218169][ T13] usb 3-1: Product: syz [ 322.222161][ T13] usb 3-1: Manufacturer: syz [ 322.226602][ T13] usb 3-1: SerialNumber: syz [ 322.231883][ T13] usb 3-1: config 0 descriptor?? [ 322.326053][ T108] usb 4-1: unable to get BOS descriptor or descriptor too short [ 322.355751][ T7015] EXT4-fs (loop0): can't mount with dioread_nolock if block size != PAGE_SIZE [ 322.366027][ T108] usb 4-1: not running at top speed; connect to a high speed hub [ 322.446019][ T108] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x82 has invalid maxpacket 2047, setting to 64 [ 322.494414][ T108] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 322.505294][ T108] usb 4-1: config 1 interface 0 has no altsetting 0 [ 322.616103][ T443] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 322.629810][ T7022] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 322.656415][ T13] smsc95xx v1.0.6 [ 322.659874][ T13] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 322.670235][ T13] smsc95xx: probe of 3-1:0.67 failed with error -22 [ 322.681037][ T13] usb 3-1: USB disconnect, device number 41 [ 322.709149][ T7030] cgroup1: No subsys list or none specified [ 322.715649][ T7030] Invalid mount options [ 322.776537][ T108] usb 4-1: string descriptor 0 read error: -22 [ 322.783515][ T108] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 322.802036][ T108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.876292][ T6994] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 322.883371][ T6994] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 323.075961][ T1402] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 323.086031][ T443] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.095967][ T443] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 323.126083][ T108] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 323.138320][ T108] usb 4-1: USB disconnect, device number 38 [ 323.186498][ T443] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 323.187060][ T7045] FAT-fs (loop2): Unrecognized mount option "g" or missing value [ 323.196510][ T443] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 323.211705][ T443] usb 5-1: SerialNumber: syz [ 323.355967][ T1402] usb 1-1: device descriptor read/64, error 18 [ 323.496632][ T443] usb 5-1: 0:2 : does not exist [ 323.505374][ T443] usb 5-1: USB disconnect, device number 41 [ 323.659993][ T23] audit: type=1400 audit(1740774907.039:337): avc: denied { write } for pid=7051 comm="syz.3.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 323.692406][ T23] audit: type=1400 audit(1740774907.069:338): avc: denied { execute } for pid=7051 comm="syz.3.1429" path="/321/hugetlb.2MB.rsvd.usage_in_bytes" dev="tmpfs" ino=63039 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 323.746034][ T1402] usb 1-1: device descriptor read/64, error 18 [ 323.767153][ T7056] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 323.932744][ T7061] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=74 sclass=netlink_tcpdiag_socket pid=7061 comm=syz.3.1430 [ 324.016814][ T1402] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 324.089782][ T7063] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1431'. [ 324.102826][ T7063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7063 comm=syz.4.1431 [ 324.117579][ T7066] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000000,minixdf,,errors=continue [ 324.131621][ T7066] ext4 filesystem being mounted at /248/bus supports timestamps until (%ptR?) (0x7fffffff) [ 324.151292][ T23] audit: type=1400 audit(1740774907.529:339): avc: denied { shutdown } for pid=7064 comm="syz.2.1432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 324.203121][ T7072] cgroup1: No subsys list or none specified [ 324.209495][ T7072] Invalid mount options [ 324.295957][ T1402] usb 1-1: device descriptor read/64, error 18 [ 324.357657][ T7087] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 324.420556][ T23] audit: type=1400 audit(1740774907.799:340): avc: denied { mount } for pid=7091 comm="syz.2.1441" name="/" dev="ramfs" ino=63197 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 324.449993][ T23] audit: type=1400 audit(1740774907.829:341): avc: denied { unmount } for pid=355 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 324.745996][ T1076] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 324.762481][ T7096] FAT-fs (loop2): Unrecognized mount option "g" or missing value [ 324.770611][ T1402] usb 1-1: device descriptor read/64, error 18 [ 324.783659][ T7101] cgroup1: No subsys list or none specified [ 324.792119][ T7101] Invalid mount options [ 324.891423][ T7103] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1445'. [ 324.896102][ T1402] usb usb1-port1: attempt power cycle [ 324.900738][ T7103] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7103 comm=syz.3.1445 [ 324.985954][ T1076] usb 5-1: Using ep0 maxpacket: 32 [ 325.094432][ T7106] device syzkaller0 entered promiscuous mode [ 325.106140][ T1076] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 325.114171][ T1076] usb 5-1: config 0 has an invalid descriptor of length 148, skipping remainder of the config [ 325.124476][ T1076] usb 5-1: config 0 has no interface number 0 [ 325.130491][ T1076] usb 5-1: config 0 interface 67 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 325.296079][ T1076] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 325.304960][ T1076] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.313181][ T1076] usb 5-1: Product: syz [ 325.316026][ T1402] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 325.317296][ T1076] usb 5-1: Manufacturer: syz [ 325.329005][ T1076] usb 5-1: SerialNumber: syz [ 325.334032][ T1076] usb 5-1: config 0 descriptor?? [ 325.496027][ T1402] usb 1-1: device descriptor read/8, error -61 [ 325.524666][ T23] audit: type=1400 audit(1740774908.899:342): avc: denied { mount } for pid=7111 comm="syz.2.1448" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 325.746354][ T1076] smsc95xx v1.0.6 [ 325.749858][ T1076] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 325.759985][ T1076] smsc95xx: probe of 5-1:0.67 failed with error -22 [ 325.767633][ T1076] usb 5-1: USB disconnect, device number 42 [ 325.799261][ T1402] usb 1-1: device descriptor read/8, error -61 [ 326.379401][ T7126] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 326.387560][ T7126] EXT4-fs (loop4): invalid journal inode [ 326.394000][ T7126] EXT4-fs (loop4): can't get journal size [ 326.400872][ T7126] EXT4-fs (loop4): 1 truncate cleaned up [ 326.406350][ T7126] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 326.422372][ T7126] EXT4-fs warning (device loop4): verify_group_input:147: Cannot add at group 6 (only 1 groups) [ 326.577157][ T7133] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 326.741649][ T7138] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=74 sclass=netlink_tcpdiag_socket pid=7138 comm=syz.2.1454 [ 326.865724][ T7140] cgroup1: No subsys list or none specified [ 326.872233][ T7140] Invalid mount options [ 326.983163][ T7142] EXT4-fs (loop1): dax option not supported [ 327.128696][ T7145] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7145 comm=syz.0.1457 [ 327.147982][ T7148] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 327.506526][ T7158] FAT-fs (loop4): Unrecognized mount option "g" or missing value [ 327.775964][ T443] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 327.786028][ T1402] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 327.996990][ T7170] FAULT_INJECTION: forcing a failure. [ 327.996990][ T7170] name failslab, interval 1, probability 0, space 0, times 0 [ 328.009535][ T7170] CPU: 1 PID: 7170 Comm: syz.1.1464 Not tainted 5.4.290-syzkaller-00017-g6b07fcd94a6a #0 [ 328.019129][ T7170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 328.029019][ T7170] Call Trace: [ 328.032153][ T7170] dump_stack+0x1d8/0x241 [ 328.036318][ T7170] ? panic+0x89d/0x89d [ 328.040226][ T7170] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 328.045951][ T7170] should_fail+0x71f/0x880 [ 328.050201][ T7170] ? setup_fault_attr+0x3d0/0x3d0 [ 328.055059][ T7170] ? netlink_dump+0x2e3/0x1340 [ 328.059659][ T7170] should_failslab+0x5/0x20 [ 328.063998][ T7170] __kmalloc_track_caller+0x4f/0x2b0 [ 328.069119][ T7170] ? kmem_cache_alloc+0xd9/0x250 [ 328.073891][ T7170] ? netlink_dump+0x2e3/0x1340 [ 328.078495][ T7170] __alloc_skb+0xb4/0x4d0 [ 328.082660][ T7170] netlink_dump+0x2e3/0x1340 [ 328.087096][ T7170] ? __nla_validate_parse+0x1af2/0x2180 [ 328.092479][ T7170] ? refcount_inc+0x80/0x80 [ 328.096806][ T7170] ? __module_get+0x130/0x130 [ 328.101406][ T7170] ? __netlink_lookup+0x369/0x390 [ 328.106354][ T7170] __netlink_dump_start+0x59b/0x790 [ 328.111428][ T7170] rtnetlink_rcv_msg+0xb65/0xc70 [ 328.116176][ T7170] ? rtnl_getlink+0xc90/0xc90 [ 328.120683][ T7170] ? rtnetlink_bind+0x80/0x80 [ 328.125190][ T7170] ? __kernel_text_address+0x94/0x100 [ 328.130431][ T7170] ? avc_has_perm+0xd2/0x260 [ 328.134839][ T7170] ? avc_has_perm+0x16f/0x260 [ 328.139340][ T7170] ? rtnl_getlink+0xc90/0xc90 [ 328.143877][ T7170] ? avc_has_perm_noaudit+0x3d0/0x3d0 [ 328.149067][ T7170] ? iov_iter_advance+0x258/0xb20 [ 328.153920][ T7170] netlink_rcv_skb+0x1d5/0x420 [ 328.158530][ T7170] ? rtnetlink_bind+0x80/0x80 [ 328.163032][ T7170] ? nla_put_string+0x30/0x30 [ 328.167557][ T7170] ? __netlink_lookup+0x369/0x390 [ 328.172417][ T7170] netlink_unicast+0x936/0xb20 [ 328.177007][ T7170] ? netlink_detachskb+0x90/0x90 [ 328.181785][ T7170] ? __virt_addr_valid+0x20e/0x2a0 [ 328.186725][ T7170] netlink_sendmsg+0xa18/0xcf0 [ 328.191328][ T7170] ? netlink_getsockopt+0x550/0x550 [ 328.196358][ T7170] ? import_iovec+0x1bb/0x380 [ 328.200874][ T7170] ? security_socket_sendmsg+0x7d/0xa0 [ 328.206305][ T7170] ? netlink_getsockopt+0x550/0x550 [ 328.211418][ T7170] ____sys_sendmsg+0x5ac/0x8f0 [ 328.215999][ T7170] ? __sys_sendmsg_sock+0x2b0/0x2b0 [ 328.221164][ T7170] ? proc_fail_nth_read+0x210/0x210 [ 328.226363][ T7170] __sys_sendmsg+0x28b/0x380 [ 328.230785][ T7170] ? ____sys_sendmsg+0x8f0/0x8f0 [ 328.235821][ T7170] ? check_preemption_disabled+0x9f/0x320 [ 328.241460][ T7170] ? fput_many+0x15e/0x1b0 [ 328.245704][ T7170] ? check_preemption_disabled+0x153/0x320 [ 328.251346][ T7170] ? fput_many+0x15e/0x1b0 [ 328.255608][ T7170] do_syscall_64+0xca/0x1c0 [ 328.259941][ T7170] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 328.265669][ T7170] RIP: 0033:0x7f6d983e1169 [ 328.269925][ T7170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.290280][ T7170] RSP: 002b:00007f6d96a4b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.298526][ T7170] RAX: ffffffffffffffda RBX: 00007f6d985f9fa0 RCX: 00007f6d983e1169 [ 328.306341][ T7170] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000003 [ 328.314269][ T7170] RBP: 00007f6d96a4b090 R08: 0000000000000000 R09: 0000000000000000 [ 328.322072][ T7170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.329880][ T7170] R13: 0000000000000000 R14: 00007f6d985f9fa0 R15: 00007ffd45c8aeb8 [ 328.346140][ T443] usb 3-1: device descriptor read/64, error 18 [ 328.349603][ T1402] usb 1-1: Using ep0 maxpacket: 32 [ 328.408534][ T7181] cgroup1: No subsys list or none specified [ 328.414992][ T7181] Invalid mount options [ 328.476020][ T1402] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 328.482603][ T7183] FAT-fs (loop1): Directory bread(block 162) failed [ 328.485003][ T1402] usb 1-1: config 0 has an invalid descriptor of length 148, skipping remainder of the config [ 328.490486][ T7183] FAT-fs (loop1): Directory bread(block 163) failed [ 328.500931][ T1402] usb 1-1: config 0 has no interface number 0 [ 328.512963][ T7183] FAT-fs (loop1): Directory bread(block 164) failed [ 328.513213][ T1402] usb 1-1: config 0 interface 67 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 328.519634][ T7183] FAT-fs (loop1): Directory bread(block 165) failed [ 328.538861][ T7183] FAT-fs (loop1): Directory bread(block 166) failed [ 328.545298][ T7183] FAT-fs (loop1): Directory bread(block 167) failed [ 328.551795][ T7183] FAT-fs (loop1): Directory bread(block 168) failed [ 328.558303][ T7183] FAT-fs (loop1): Directory bread(block 169) failed [ 328.670469][ T7187] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 328.680261][ T7187] EXT4-fs (loop3): The Hurd can't support 64-bit file systems [ 328.682933][ T7183] FAT-fs (loop1): Directory bread(block 162) failed [ 328.694528][ T7183] FAT-fs (loop1): Directory bread(block 163) failed [ 328.755949][ T443] usb 3-1: device descriptor read/64, error 18 [ 328.802291][ T7191] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 328.884746][ T1402] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 328.894048][ T1402] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.902010][ T1402] usb 1-1: Product: syz [ 328.906315][ T1402] usb 1-1: Manufacturer: syz [ 328.910709][ T1402] usb 1-1: SerialNumber: syz [ 328.920223][ T1402] usb 1-1: config 0 descriptor?? [ 329.013561][ T7199] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=74 sclass=netlink_tcpdiag_socket pid=7199 comm=syz.3.1471 [ 329.084091][ T7194] F2FS-fs (loop1): invalid crc value [ 329.133407][ T7194] F2FS-fs (loop1): Found nat_bits in checkpoint [ 329.158204][ T7194] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 329.164921][ T7194] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 329.195994][ T443] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 329.336230][ T1402] smsc95xx v1.0.6 [ 329.339700][ T1402] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 329.350102][ T1402] smsc95xx: probe of 1-1:0.67 failed with error -22 [ 329.360733][ T1402] usb 1-1: USB disconnect, device number 51 [ 329.373349][ T7209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7209 comm=syz.1.1472 [ 329.475978][ T443] usb 3-1: device descriptor read/64, error 18 [ 329.565996][ T13] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 329.627262][ T7213] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 329.945469][ T7227] kvm [7226]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010005 data 0x0 [ 329.966140][ T13] usb 5-1: Invalid ep0 maxpacket: 512 [ 329.985987][ T443] usb 3-1: device descriptor read/64, error 18 [ 330.002758][ T7234] cgroup1: No subsys list or none specified [ 330.009340][ T7234] Invalid mount options [ 330.013601][ T7227] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,resgid=0x0000000000000000,,errors=continue [ 330.028319][ T7227] ext4 filesystem being mounted at /331/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 330.041722][ T23] audit: type=1400 audit(1740774913.429:343): avc: denied { create } for pid=7226 comm="syz.3.1477" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 330.069875][ T7238] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz.0.1480: bg 0: block 248: padding at end of block bitmap is not set [ 330.097881][ T7238] Quota error (device loop0): write_blk: dquota write failed [ 330.106217][ T443] usb usb3-port1: attempt power cycle [ 330.109899][ T7238] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 330.121696][ T7238] EXT4-fs (loop0): 1 truncate cleaned up [ 330.127205][ T7238] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 330.136012][ T7238] ext4 filesystem being mounted at /286/bus supports timestamps until (%ptR?) (0x7fffffff) [ 330.166073][ T13] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 330.208199][ T7243] FAT-fs (loop3): Directory bread(block 162) failed [ 330.211323][ T7245] EXT4-fs error (device loop0): ext4_lookup:1821: inode #2: comm syz.0.1480: deleted inode referenced: 12 [ 330.214910][ T7243] FAT-fs (loop3): Directory bread(block 163) failed [ 330.232515][ T7243] FAT-fs (loop3): Directory bread(block 164) failed [ 330.234237][ T23] audit: type=1400 audit(1740774913.609:344): avc: denied { shutdown } for pid=7237 comm="syz.0.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 330.238995][ T7243] FAT-fs (loop3): Directory bread(block 165) failed [ 330.258600][ T23] audit: type=1400 audit(1740774913.609:345): avc: denied { mount } for pid=7237 comm="syz.0.1480" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 330.265336][ T7243] FAT-fs (loop3): Directory bread(block 166) failed [ 330.292864][ T7243] FAT-fs (loop3): Directory bread(block 167) failed [ 330.299383][ T7243] FAT-fs (loop3): Directory bread(block 168) failed [ 330.305689][ T7243] FAT-fs (loop3): Directory bread(block 169) failed [ 330.316194][ T7243] FAULT_INJECTION: forcing a failure. [ 330.316194][ T7243] name failslab, interval 1, probability 0, space 0, times 0 [ 330.328744][ T7243] CPU: 1 PID: 7243 Comm: syz.3.1481 Not tainted 5.4.290-syzkaller-00017-g6b07fcd94a6a #0 [ 330.338341][ T7243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 330.348234][ T7243] Call Trace: [ 330.351358][ T7243] dump_stack+0x1d8/0x241 [ 330.355513][ T7243] ? panic+0x89d/0x89d [ 330.359423][ T7243] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 330.365066][ T7243] ? unwind_next_frame+0x176a/0x1ea0 [ 330.370184][ T7243] should_fail+0x71f/0x880 [ 330.374437][ T7243] ? setup_fault_attr+0x3d0/0x3d0 [ 330.379351][ T7243] ? is_bpf_text_address+0x24c/0x260 [ 330.384420][ T7243] ? mls_compute_context_len+0x74b/0x790 [ 330.389887][ T7243] ? context_struct_to_string+0x441/0x8a0 [ 330.395440][ T7243] should_failslab+0x5/0x20 [ 330.399790][ T7243] __kmalloc+0x51/0x2e0 [ 330.403772][ T7243] ? unwind_get_return_address+0x49/0x80 [ 330.409292][ T7243] context_struct_to_string+0x441/0x8a0 [ 330.414625][ T7243] ? security_bounded_transition+0x560/0x560 [ 330.420439][ T7243] ? stack_trace_snprint+0x170/0x170 [ 330.425574][ T7243] context_add_hash+0x141/0x270 [ 330.430268][ T7243] ? security_sid_to_context_inval+0x40/0x40 [ 330.436059][ T7243] ? mls_convert_context+0x6c0/0x6c0 [ 330.441178][ T7243] ? mls_context_isvalid+0xa4/0x380 [ 330.446224][ T7243] ? policydb_context_isvalid+0x1bc/0x410 [ 330.451769][ T7243] security_compute_sid+0x11a7/0x1d60 [ 330.456978][ T7243] ? security_transition_sid+0x90/0x90 [ 330.462336][ T7243] ? avc_denied+0x1d0/0x1d0 [ 330.466754][ T7243] ? avc_has_perm_noaudit+0x3d0/0x3d0 [ 330.471936][ T7243] security_transition_sid+0x78/0x90 [ 330.477026][ T7243] may_create+0x607/0x970 [ 330.481295][ T7243] ? show_sid+0x250/0x250 [ 330.485457][ T7243] ? from_kgid+0x1a3/0x730 [ 330.489709][ T7243] ? __d_lookup+0x4cd/0x540 [ 330.494049][ T7243] ? generic_permission+0x141/0x3e0 [ 330.499615][ T7243] security_inode_create+0xa4/0x100 [ 330.504646][ T7243] path_openat+0x1284/0x34b0 [ 330.509070][ T7243] ? do_filp_open+0x450/0x450 [ 330.513581][ T7243] ? do_sys_open+0x357/0x810 [ 330.518004][ T7243] ? do_syscall_64+0xca/0x1c0 [ 330.522539][ T7243] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 330.528434][ T7243] do_filp_open+0x20b/0x450 [ 330.532769][ T7243] ? vfs_tmpfile+0x2c0/0x2c0 [ 330.537659][ T7243] ? _raw_spin_unlock+0x49/0x60 [ 330.542342][ T7243] ? __alloc_fd+0x4c5/0x570 [ 330.546680][ T7243] do_sys_open+0x39c/0x810 [ 330.551026][ T7243] ? check_preemption_disabled+0x153/0x320 [ 330.556771][ T7243] ? file_open_root+0x490/0x490 [ 330.561461][ T7243] do_syscall_64+0xca/0x1c0 [ 330.565795][ T7243] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 330.571524][ T7243] RIP: 0033:0x7f98d6efe169 [ 330.575878][ T7243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.595319][ T7243] RSP: 002b:00007f98d5568038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 330.603566][ T7243] RAX: ffffffffffffffda RBX: 00007f98d7116fa0 RCX: 00007f98d6efe169 [ 330.611374][ T7243] RDX: 0000000000000000 RSI: 000000000000015d RDI: 0000400000000300 [ 330.619189][ T7243] RBP: 00007f98d5568090 R08: 0000000000000000 R09: 0000000000000000 [ 330.626997][ T7243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.634816][ T7243] R13: 0000000000000000 R14: 00007f98d7116fa0 R15: 00007ffccfc8f518 [ 330.646450][ T7243] FAT-fs (loop3): Directory bread(block 162) failed [ 330.657247][ T7243] FAT-fs (loop3): Directory bread(block 163) failed [ 330.696725][ T13] usb 5-1: Invalid ep0 maxpacket: 512 [ 330.702073][ T13] usb usb5-port1: attempt power cycle [ 331.057244][ T7255] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 331.145421][ T7263] binder: 7256:7263 ioctl 4018620d 0 returned -22 [ 331.290729][ T13] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 331.299121][ T7248] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 331.311878][ T7248] EXT4-fs (loop2): failed to open journal device unknown-block(0,4): -6 [ 331.386109][ T13] usb 5-1: Invalid ep0 maxpacket: 512 [ 331.535958][ T13] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 331.636010][ T13] usb 5-1: Invalid ep0 maxpacket: 512 [ 331.641390][ T13] usb usb5-port1: unable to enumerate USB device [ 331.787221][ T7265] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=74 sclass=netlink_tcpdiag_socket pid=7265 comm=syz.0.1485 [ 331.921415][ T7272] FAT-fs (loop1): Unrecognized mount option "g" or missing value [ 331.966620][ T13] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 332.092302][ T7277] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7277 comm=syz.0.1488 [ 332.206015][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 332.283437][ T7282] cgroup1: No subsys list or none specified [ 332.290194][ T7282] Invalid mount options [ 332.326123][ T13] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 332.334577][ T13] usb 4-1: config 0 has an invalid descriptor of length 148, skipping remainder of the config [ 332.344971][ T13] usb 4-1: config 0 has no interface number 0 [ 332.352363][ T13] usb 4-1: config 0 interface 67 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 332.453186][ T7293] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 332.536056][ T13] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 332.545031][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.552777][ T13] usb 4-1: Product: syz [ 332.556807][ T379] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 332.564137][ T13] usb 4-1: Manufacturer: syz [ 332.568601][ T13] usb 4-1: SerialNumber: syz [ 332.573605][ T13] usb 4-1: config 0 descriptor?? [ 332.863120][ T7303] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,nombcache,dioread_lock,norecovery,barrier=0x000000000000004c,lazytime,init_itable=0x0000000000000005,usrquota,errors=continue,,errors=continue [ 332.976581][ T379] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.995047][ T379] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 333.023481][ T379] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 333.051694][ T379] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.096588][ T13] smsc95xx v1.0.6 [ 333.100175][ T13] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 333.116452][ T379] usb 3-1: config 0 descriptor?? [ 333.133695][ T13] smsc95xx: probe of 4-1:0.67 failed with error -22 [ 333.163731][ T13] usb 4-1: USB disconnect, device number 39 [ 333.311195][ T7309] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 333.527863][ T7321] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=74 sclass=netlink_tcpdiag_socket pid=7321 comm=syz.1.1498 [ 333.657439][ T7315] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,nombcache,dioread_lock,norecovery,barrier=0x000000000000004c,lazytime,init_itable=0x0000000000000005,usrquota,errors=continue,,errors=continue [ 333.755605][ T23] audit: type=1400 audit(1740774917.129:346): avc: denied { map } for pid=7323 comm="syz.4.1501" path="pipe:[12346]" dev="pipefs" ino=12346 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 333.782942][ T7324] x_tables: duplicate underflow at hook 1 [ 333.817002][ T7334] cgroup1: No subsys list or none specified [ 333.818914][ T7330] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7330 comm=syz.3.1502 [ 333.827357][ T7334] Invalid mount options [ 333.853847][ T7336] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1505'. [ 333.863522][ T7336] IPv6: NLM_F_REPLACE set, but no existing node found! [ 333.871946][ T9] tipc: Left network mode [ 333.921698][ T23] audit: type=1400 audit(1740774917.299:347): avc: denied { validate_trans } for pid=7339 comm="syz.0.1506" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 333.933261][ T352] syz-executor (352) used greatest stack depth: 20280 bytes left [ 334.019018][ T7344] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,nombcache,dioread_lock,inode_readahead_blks=0x0000000000200000,barrier=0x000000000000004c,lazytime,max_batch_time=0x0000000000000009,usrquota,errors=continue,,errors=continue [ 334.057620][ T7346] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 334.066441][ T23] audit: type=1400 audit(1740774917.439:348): avc: denied { nlmsg_tty_audit } for pid=7342 comm="syz.0.1508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 334.096562][ T7346] ext4 filesystem being mounted at /336/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 334.122901][ T7350] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.134172][ T7350] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.141834][ T7350] device bridge_slave_0 entered promiscuous mode [ 334.149026][ T7350] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.155904][ T7350] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.163624][ T7350] device bridge_slave_1 entered promiscuous mode [ 334.218602][ T23] audit: type=1400 audit(1740774917.599:349): avc: denied { map } for pid=7343 comm="syz.3.1509" path="/336/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 334.249635][ T1053] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 334.255897][ T23] audit: type=1400 audit(1740774917.599:350): avc: denied { execute } for pid=7343 comm="syz.3.1509" path="/336/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 334.274463][ T1053] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 334.318935][ T1053] EXT4-fs (loop3): This should not happen!! Data will be lost [ 334.318935][ T1053] [ 334.328743][ T1053] EXT4-fs (loop3): Total free blocks count 0 [ 334.334524][ T1053] EXT4-fs (loop3): Free/Dirty block details [ 334.341217][ T1053] EXT4-fs (loop3): free_blocks=4293918720 [ 334.347008][ T1053] EXT4-fs (loop3): dirty_blocks=16 [ 334.351979][ T1053] EXT4-fs (loop3): Block reservation details [ 334.357991][ T1053] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 334.367099][ T7350] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.373948][ T7350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.381091][ T7350] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.387834][ T7350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.435127][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 334.443787][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.451760][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.469407][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 334.477834][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.484678][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.492893][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 334.502936][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.509782][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.526493][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 334.543533][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 334.596098][ T443] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 334.645111][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 334.666605][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 334.686842][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 334.704700][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 334.713439][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 334.754885][ T7371] cgroup1: No subsys list or none specified [ 334.786690][ T7371] Invalid mount options [ 334.845982][ T443] usb 2-1: Using ep0 maxpacket: 32 [ 334.851862][ T7373] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 334.986102][ T443] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 334.994642][ T443] usb 2-1: config 0 has an invalid descriptor of length 148, skipping remainder of the config [ 335.007366][ T7380] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:455: comm syz.3.1516: Invalid block bitmap block 0 in block_group 0 [ 335.206927][ T7380] __quota_error: 3 callbacks suppressed [ 335.206945][ T7380] Quota error (device loop3): write_blk: dquota write failed [ 335.216274][ T443] usb 2-1: config 0 has no interface number 0 [ 335.230575][ T443] usb 2-1: config 0 interface 67 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 335.233346][ T7380] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 335.254072][ T7380] EXT4-fs error (device loop3): ext4_free_blocks:4795: comm syz.3.1516: Freeing blocks not in datazone - block = 0, count = 4096 [ 335.267944][ T7380] EXT4-fs error (device loop3): ext4_read_inode_bitmap:134: comm syz.3.1516: Invalid inode bitmap blk 0 in block_group 0 [ 335.280977][ T7380] EXT4-fs error (device loop3) in ext4_free_inode:352: Corrupt filesystem [ 335.289707][ T7] Quota error (device loop3): remove_tree: Getting block too big (0 >= 9) [ 335.293551][ T7380] EXT4-fs (loop3): 1 orphan inode deleted [ 335.304988][ T372] usb 3-1: USB disconnect, device number 45 [ 335.310071][ T7380] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; ,errors=continue [ 335.406366][ T443] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 335.424418][ T443] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.433994][ T443] usb 2-1: Product: syz [ 335.434724][ T7376] EXT4-fs (loop3): re-mounted. Opts: (null) [ 335.438275][ T443] usb 2-1: Manufacturer: syz [ 335.449577][ T443] usb 2-1: SerialNumber: syz [ 335.462935][ T443] usb 2-1: config 0 descriptor?? [ 335.707628][ T7385] EXT4-fs (loop0): mounted filesystem without journal. Opts: acl,,errors=continue [ 335.707888][ T7392] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 335.726392][ T7392] ext4 filesystem being mounted at /263/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 335.767949][ T7398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7398 comm=syz.3.1520 [ 335.780459][ T7] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 335.795261][ T7] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 335.807397][ T7] EXT4-fs (loop2): This should not happen!! Data will be lost [ 335.807397][ T7] [ 335.817982][ T7] EXT4-fs (loop2): Total free blocks count 0 [ 335.823781][ T7] EXT4-fs (loop2): Free/Dirty block details [ 335.829585][ T7] EXT4-fs (loop2): free_blocks=4293918720 [ 335.835240][ T7] EXT4-fs (loop2): dirty_blocks=16 [ 335.837896][ T7407] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 335.840207][ T7] EXT4-fs (loop2): Block reservation details [ 335.854787][ T7] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 335.886440][ T443] smsc95xx v1.0.6 [ 335.890011][ T443] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 335.901790][ T443] smsc95xx: probe of 2-1:0.67 failed with error -22 [ 335.911817][ T443] usb 2-1: USB disconnect, device number 41 [ 336.092049][ T7420] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=74 sclass=netlink_tcpdiag_socket pid=7420 comm=syz.5.1522 [ 336.243262][ T7417] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 336.252245][ T7417] ext4 filesystem being mounted at /265/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 336.396116][ T379] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 336.464371][ T7428] cgroup1: Unknown subsys name 'nofavordynmods' [ 336.471543][ T7428] Invalid mount options [ 336.755965][ T372] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 336.806203][ T379] usb 4-1: unable to get BOS descriptor or descriptor too short [ 336.886043][ T379] usb 4-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 32 [ 336.895722][ T379] usb 4-1: config 1 interface 0 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 336.908667][ T379] usb 4-1: config 1 interface 0 has no altsetting 0 [ 337.005987][ T443] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 337.066039][ T379] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 337.074870][ T379] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.082843][ T379] usb 4-1: Product: syz [ 337.086836][ T379] usb 4-1: Manufacturer: syz [ 337.091224][ T379] usb 4-1: SerialNumber: syz [ 337.116071][ T7414] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 337.122673][ T7414] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 337.129314][ T372] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.139616][ T372] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 337.148494][ T372] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 337.157490][ T372] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.166143][ T372] usb 2-1: config 0 descriptor?? [ 337.247158][ T7441] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 337.376226][ T443] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 337.390621][ T443] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.401030][ T443] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 337.415251][ T443] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 337.424467][ T443] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.435566][ T443] usb 6-1: config 0 descriptor?? [ 337.440888][ T379] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 337.456316][ T379] usb 4-1: USB disconnect, device number 40 [ 337.930053][ T7454] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7454 comm=syz.3.1535 [ 338.039954][ T7451] F2FS-fs (loop2): QUOTA feature is enabled, so ignore qf_name [ 338.049084][ T7451] F2FS-fs (loop2): invalid crc value [ 338.100395][ T7451] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 338.166747][ T7463] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1537'. [ 338.247052][ T7472] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 338.456022][ T443] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 338.547164][ T23] audit: type=1400 audit(1740774921.929:354): avc: denied { append } for pid=7480 comm="syz.2.1538" name="ppp" dev="devtmpfs" ino=9491 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 338.585813][ T7483] cgroup1: Unknown subsys name 'nofavordynmods' [ 338.595099][ T23] audit: type=1400 audit(1740774921.949:355): avc: denied { shutdown } for pid=7480 comm="syz.2.1538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 338.617259][ T7483] Invalid mount options [ 338.755350][ T443] usb 4-1: Using ep0 maxpacket: 32 [ 338.886029][ T443] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 338.896899][ T443] usb 4-1: config 0 has an invalid descriptor of length 148, skipping remainder of the config [ 338.909959][ T7476] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=74 sclass=netlink_tcpdiag_socket pid=7476 comm=syz.0.1540 [ 338.929739][ T443] usb 4-1: config 0 has no interface number 0 [ 338.935638][ T443] usb 4-1: config 0 interface 67 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 339.146092][ T443] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 339.154303][ T7492] FAULT_INJECTION: forcing a failure. [ 339.154303][ T7492] name failslab, interval 1, probability 0, space 0, times 0 [ 339.163824][ T443] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.177909][ T443] usb 4-1: Product: syz [ 339.182089][ T443] usb 4-1: Manufacturer: syz [ 339.185974][ T7492] CPU: 1 PID: 7492 Comm: syz.0.1544 Not tainted 5.4.290-syzkaller-00017-g6b07fcd94a6a #0 [ 339.186875][ T443] usb 4-1: SerialNumber: syz [ 339.196116][ T7492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 339.196121][ T7492] Call Trace: [ 339.196141][ T7492] dump_stack+0x1d8/0x241 [ 339.196148][ T7492] ? panic+0x89d/0x89d [ 339.196155][ T7492] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 339.196164][ T7492] should_fail+0x71f/0x880 [ 339.196172][ T7492] ? setup_fault_attr+0x3d0/0x3d0 [ 339.196182][ T7492] ? legacy_init_fs_context+0x4d/0xb0 [ 339.196198][ T7492] should_failslab+0x5/0x20 [ 339.206125][ T443] usb 4-1: config 0 descriptor?? [ 339.210458][ T7492] kmem_cache_alloc_trace+0x28/0x260 [ 339.210471][ T7492] legacy_init_fs_context+0x4d/0xb0 [ 339.210485][ T7492] alloc_fs_context+0x551/0x660 [ 339.266283][ T7492] do_new_mount+0x162/0x570 [ 339.270611][ T7492] ? do_move_mount_old+0x160/0x160 [ 339.275559][ T7492] ? security_capable+0x86/0xb0 [ 339.280246][ T7492] do_mount+0x688/0xe10 [ 339.284237][ T7492] ? copy_mount_string+0x30/0x30 [ 339.289012][ T7492] ? copy_mount_options+0x1c6/0x300 [ 339.294060][ T7492] ? copy_mount_options+0x29a/0x300 [ 339.299108][ T7492] ksys_mount+0xc2/0xf0 [ 339.303095][ T7492] __x64_sys_mount+0xb1/0xc0 [ 339.307589][ T7492] do_syscall_64+0xca/0x1c0 [ 339.311928][ T7492] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 339.317652][ T7492] RIP: 0033:0x7f63482cc169 [ 339.321908][ T7492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.341548][ T7492] RSP: 002b:00007f6346936038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 339.349877][ T7492] RAX: ffffffffffffffda RBX: 00007f63484e4fa0 RCX: 00007f63482cc169 [ 339.357685][ T7492] RDX: 0000400000000180 RSI: 0000400000000000 RDI: 0000000000000000 [ 339.365492][ T7492] RBP: 00007f6346936090 R08: 0000400000000240 R09: 0000000000000000 [ 339.373342][ T7492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.381114][ T7492] R13: 0000000000000000 R14: 00007f63484e4fa0 R15: 00007ffe8829d468 [ 339.487134][ T7498] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue [ 339.492520][ T372] usb 2-1: USB disconnect, device number 42 [ 339.522861][ T23] audit: type=1400 audit(1740774922.899:356): avc: denied { write } for pid=7497 comm="syz.0.1546" name="work" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 339.544851][ T23] audit: type=1400 audit(1740774922.899:357): avc: denied { rmdir } for pid=356 comm="syz-executor" name="work" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 339.551880][ T356] EXT4-fs error (device loop0): ext4_lookup:1821: inode #2: comm syz-executor: deleted inode referenced: 11 [ 339.580071][ T356] EXT4-fs error (device loop0): ext4_lookup:1821: inode #2: comm syz-executor: deleted inode referenced: 11 [ 339.597937][ T7503] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 339.598118][ T23] audit: type=1400 audit(1740774922.929:358): avc: denied { unlink } for pid=356 comm="syz-executor" name="file1" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 339.677489][ T443] smsc95xx v1.0.6 [ 339.683873][ T443] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 339.694867][ T443] smsc95xx: probe of 4-1:0.67 failed with error -22 [ 339.703756][ T7] tipc: Left network mode [ 339.706233][ T443] usb 4-1: USB disconnect, device number 41 [ 339.958057][ T379] usb 6-1: USB disconnect, device number 2 [ 340.099312][ T7523] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 340.102702][ T7525] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.116328][ T7525] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.123884][ T7525] device bridge_slave_0 entered promiscuous mode [ 340.131656][ T7525] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.138772][ T7525] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.146446][ T7525] device bridge_slave_1 entered promiscuous mode [ 340.208852][ T7525] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.215692][ T7525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.222840][ T7525] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.229741][ T7525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.298236][ T7533] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=74 sclass=netlink_tcpdiag_socket pid=7533 comm=syz.2.1555 [ 340.439073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 340.447083][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.454181][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.477551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 340.485879][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.492756][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.500467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 340.509092][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.516413][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.531960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 340.548924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 340.570050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 340.585683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 340.729941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 340.755510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 340.804711][ T7543] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:455: comm syz.3.1557: Invalid block bitmap block 0 in block_group 0 [ 340.818527][ T7543] Quota error (device loop3): write_blk: dquota write failed [ 340.825727][ T7543] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 340.835682][ T7543] EXT4-fs error (device loop3): ext4_free_blocks:4795: comm syz.3.1557: Freeing blocks not in datazone - block = 0, count = 4096 [ 340.850208][ T7543] EXT4-fs error (device loop3): ext4_read_inode_bitmap:134: comm syz.3.1557: Invalid inode bitmap blk 0 in block_group 0 [ 340.858360][ T103] Quota error (device loop3): remove_tree: Getting block too big (0 >= 9) [ 340.862801][ T7543] EXT4-fs error (device loop3) in ext4_free_inode:352: Corrupt filesystem [ 340.879446][ T7543] EXT4-fs (loop3): 1 orphan inode deleted [ 340.884974][ T7543] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; sysvgroups,stripe=0x0000000000000000,auto_da_alloc,quota,nogrpid,norecovery,bsddf,bsdgroups,,errors=continue [ 340.938169][ T372] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 340.947323][ T6510] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 340.971699][ T6510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 340.976792][ T7550] cgroup1: Unknown subsys name 'nofavordynmods' [ 340.985220][ T6510] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 340.988362][ T7550] Invalid mount options [ 340.994015][ T6510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 341.146979][ T7552] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7552 comm=syz.5.1561 [ 341.231764][ T7559] F2FS-fs (loop6): invalid crc value [ 341.242380][ T7559] F2FS-fs (loop6): Found nat_bits in checkpoint [ 341.283983][ T7559] F2FS-fs (loop6): Start checkpoint disabled! [ 341.290640][ T7559] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 341.366094][ T372] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.376363][ T372] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 341.385130][ T372] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 341.394694][ T372] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.406909][ T372] usb 2-1: config 0 descriptor?? [ 341.467954][ T7570] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 341.884884][ T7575] attempt to access beyond end of device [ 341.884884][ T7575] loop6: rw=2049, want=45104, limit=40427 [ 342.085962][ T7567] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 342.096358][ T7567] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 342.106351][ T7567] F2FS-fs (loop2): Unrecognized mount option "00000000000000000000004" or missing value [ 342.265086][ T23] audit: type=1400 audit(1740774925.639:359): avc: denied { setopt } for pid=7566 comm="syz.2.1565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 342.292302][ T1053] attempt to access beyond end of device [ 342.292302][ T1053] loop6: rw=2049, want=40992, limit=40427 [ 342.497407][ T7588] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 342.545225][ T1252] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 342.663569][ T7597] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=74 sclass=netlink_tcpdiag_socket pid=7597 comm=syz.5.1569 [ 342.795982][ T1252] usb 4-1: Using ep0 maxpacket: 32 [ 342.916050][ T1252] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 342.924333][ T1252] usb 4-1: config 0 has an invalid descriptor of length 148, skipping remainder of the config [ 342.934633][ T1252] usb 4-1: config 0 has no interface number 0 [ 342.940857][ T1252] usb 4-1: config 0 interface 67 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 342.991830][ T7606] cgroup1: No subsys list or none specified [ 342.998280][ T7606] Invalid mount options [ 343.056275][ T74] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 343.126133][ T1252] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 343.135042][ T1252] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.143544][ T1252] usb 4-1: Product: syz [ 343.147472][ T1252] usb 4-1: Manufacturer: syz [ 343.151950][ T1252] usb 4-1: SerialNumber: syz [ 343.157233][ T1252] usb 4-1: config 0 descriptor?? [ 343.178210][ T7614] input: syz1 as /devices/virtual/input/input11 [ 343.402405][ T7621] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7621 comm=syz.6.1577 [ 343.498005][ T23] audit: type=1400 audit(1740774926.859:360): avc: denied { rename } for pid=7619 comm="syz.5.1578" name="#1" dev="tmpfs" ino=68215 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 343.521553][ T74] usb 3-1: unable to get BOS descriptor or descriptor too short [ 343.537801][ T23] audit: type=1400 audit(1740774926.869:361): avc: denied { unlink } for pid=7619 comm="syz.5.1578" name="file1" dev="tmpfs" ino=68215 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 343.576076][ T74] usb 3-1: not running at top speed; connect to a high speed hub [ 343.583841][ T74] usb 3-1: no configurations [ 343.588430][ T74] usb 3-1: can't read configurations, error -22 [ 343.589335][ T1076] usb 2-1: USB disconnect, device number 43 [ 343.656389][ T1252] smsc95xx v1.0.6 [ 343.657567][ T7627] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 343.659850][ T1252] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 343.659929][ T1252] smsc95xx: probe of 4-1:0.67 failed with error -22 [ 343.694729][ T1252] usb 4-1: USB disconnect, device number 42 [ 343.746071][ T74] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 343.775975][ T7632] attempt to access beyond end of device [ 343.775975][ T7632] loop6: rw=2049, want=268, limit=256 [ 343.806855][ T517] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 344.042673][ T7639] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 344.051770][ T7639] ext4 filesystem being mounted at /12/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 344.102894][ T7643] netlink: 124 bytes leftover after parsing attributes in process `syz.6.1583'. [ 344.111892][ T7643] FAULT_INJECTION: forcing a failure. [ 344.111892][ T7643] name failslab, interval 1, probability 0, space 0, times 0 [ 344.124514][ T7643] CPU: 1 PID: 7643 Comm: syz.6.1583 Not tainted 5.4.290-syzkaller-00017-g6b07fcd94a6a #0 [ 344.134105][ T7643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 344.144006][ T7643] Call Trace: [ 344.147135][ T7643] dump_stack+0x1d8/0x241 [ 344.151299][ T7643] ? panic+0x89d/0x89d [ 344.155211][ T7643] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 344.160854][ T7643] should_fail+0x71f/0x880 [ 344.165103][ T7643] ? setup_fault_attr+0x3d0/0x3d0 [ 344.179664][ T7643] ? netlink_ack+0x2cc/0xa70 [ 344.184082][ T7643] should_failslab+0x5/0x20 [ 344.196748][ T7643] __kmalloc_track_caller+0x4f/0x2b0 [ 344.201845][ T7643] ? kmem_cache_alloc+0xd9/0x250 [ 344.206616][ T7643] ? netlink_ack+0x2cc/0xa70 [ 344.211044][ T7643] __alloc_skb+0xb4/0x4d0 [ 344.215212][ T7643] netlink_ack+0x2cc/0xa70 [ 344.219610][ T7643] ? avc_has_perm+0xd2/0x260 [ 344.224029][ T7643] ? avc_has_perm+0x16f/0x260 [ 344.228548][ T7643] ? netlink_dump+0x1340/0x1340 [ 344.228959][ T23] audit: type=1400 audit(1740774927.509:362): avc: denied { getopt } for pid=7644 comm="syz.3.1584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 344.233235][ T7643] ? avc_has_perm_noaudit+0x3d0/0x3d0 [ 344.257464][ T7647] cgroup1: No subsys list or none specified [ 344.258609][ T7643] ? iov_iter_advance+0x258/0xb20 [ 344.265450][ T7647] Invalid mount options [ 344.269169][ T7643] netlink_rcv_skb+0x252/0x420 [ 344.269180][ T7643] ? rtnetlink_bind+0x80/0x80 [ 344.269188][ T7643] ? nla_put_string+0x30/0x30 [ 344.269202][ T7643] ? __netlink_lookup+0x369/0x390 [ 344.291638][ T7643] netlink_unicast+0x936/0xb20 [ 344.296231][ T7643] ? netlink_detachskb+0x90/0x90 [ 344.301011][ T7643] ? __virt_addr_valid+0x20e/0x2a0 [ 344.305973][ T7643] netlink_sendmsg+0xa18/0xcf0 [ 344.310561][ T7643] ? netlink_getsockopt+0x550/0x550 [ 344.315579][ T7643] ? import_iovec+0x1bb/0x380 [ 344.320096][ T7643] ? security_socket_sendmsg+0x7d/0xa0 [ 344.325511][ T7643] ? netlink_getsockopt+0x550/0x550 [ 344.330559][ T7643] ____sys_sendmsg+0x5ac/0x8f0 [ 344.335143][ T7643] ? __sys_sendmsg_sock+0x2b0/0x2b0 [ 344.340177][ T7643] ? proc_fail_nth_read+0x210/0x210 [ 344.345221][ T7643] __sys_sendmsg+0x28b/0x380 [ 344.349642][ T7643] ? ____sys_sendmsg+0x8f0/0x8f0 [ 344.354417][ T7643] ? check_preemption_disabled+0x9f/0x320 [ 344.359971][ T7643] ? fput_many+0x15e/0x1b0 [ 344.364306][ T7643] ? check_preemption_disabled+0x153/0x320 [ 344.369948][ T7643] ? __do_page_fault+0x725/0xbb0 [ 344.374717][ T7643] do_syscall_64+0xca/0x1c0 [ 344.379057][ T7643] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 344.384806][ T7643] RIP: 0033:0x7f5dcd17c169 [ 344.389035][ T7643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.408476][ T7643] RSP: 002b:00007f5dcb7e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.416723][ T7643] RAX: ffffffffffffffda RBX: 00007f5dcd394fa0 RCX: 00007f5dcd17c169 [ 344.424533][ T7643] RDX: 0000000000000000 RSI: 0000400000000280 RDI: 0000000000000003 [ 344.432344][ T7643] RBP: 00007f5dcb7e6090 R08: 0000000000000000 R09: 0000000000000000 [ 344.440159][ T7643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.448101][ T7643] R13: 0000000000000000 R14: 00007f5dcd394fa0 R15: 00007ffe531857b8 [ 344.553733][ T74] usb 3-1: unable to get BOS descriptor or descriptor too short [ 344.561292][ T517] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.572210][ T517] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 344.585519][ T517] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.603294][ T517] usb 6-1: config 0 descriptor?? [ 344.608143][ T74] usb 3-1: not running at top speed; connect to a high speed hub [ 344.615793][ T74] usb 3-1: no configurations [ 344.620596][ T74] usb 3-1: can't read configurations, error -22 [ 344.627016][ T74] usb usb3-port1: attempt power cycle [ 344.744102][ T7660] EXT4-fs (loop3): orphan cleanup on readonly fs [ 344.754326][ T7660] EXT4-fs (loop3): 1 orphan inode deleted [ 344.760469][ T7660] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 344.784107][ T7656] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 344.793655][ T7658] EXT4-fs (loop3): re-mounted. Opts: (null) [ 344.801418][ T7658] EXT4-fs (loop3): re-mounted. Opts: [ 344.826272][ T23] audit: type=1400 audit(1740774928.179:363): avc: denied { remount } for pid=7657 comm="syz.3.1589" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 344.890531][ T23] audit: type=1400 audit(1740774928.259:364): avc: denied { append } for pid=7657 comm="syz.3.1589" name="001" dev="devtmpfs" ino=10675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 345.408499][ T354] EXT4-fs error (device loop3): ext4_lookup:1821: inode #2: comm syz-executor: deleted inode referenced: 16 [ 345.420184][ T354] EXT4-fs error (device loop3): ext4_lookup:1821: inode #2: comm syz-executor: deleted inode referenced: 16 [ 345.479030][ T1555] ================================================================== [ 345.486916][ T1555] BUG: KASAN: use-after-free in kthread_stop+0x37/0x4a0 [ 345.493678][ T1555] Write of size 4 at addr ffff8881dde13f20 by task syz.3.212/1555 [ 345.501309][ T1555] [ 345.503488][ T1555] CPU: 0 PID: 1555 Comm: syz.3.212 Not tainted 5.4.290-syzkaller-00017-g6b07fcd94a6a #0 [ 345.513030][ T1555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 345.522925][ T1555] Call Trace: [ 345.526058][ T1555] dump_stack+0x1d8/0x241 [ 345.530219][ T1555] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 345.535868][ T1555] ? printk+0xd1/0x111 [ 345.540202][ T1555] ? kthread_stop+0x37/0x4a0 [ 345.544626][ T1555] print_address_description+0x8c/0x600 [ 345.545964][ T74] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 345.550028][ T1555] ? kthread_stop+0x37/0x4a0 [ 345.550036][ T1555] ? kthread_stop+0x37/0x4a0 [ 345.550050][ T1555] __kasan_report+0xf3/0x120 [ 345.570670][ T1555] ? kthread_stop+0x37/0x4a0 [ 345.575089][ T1555] kasan_report+0x30/0x60 [ 345.579262][ T1555] check_memory_region+0x272/0x280 [ 345.584206][ T1555] kthread_stop+0x37/0x4a0 [ 345.588460][ T1555] ext4_put_super+0x790/0xbb0 [ 345.592968][ T1555] ? ext4_drop_inode+0x1f0/0x1f0 [ 345.597747][ T1555] generic_shutdown_super+0x120/0x300 [ 345.602958][ T1555] kill_block_super+0x7a/0xe0 [ 345.607471][ T1555] deactivate_locked_super+0xa8/0x110 [ 345.612670][ T1555] deactivate_super+0x1e2/0x2a0 [ 345.617357][ T1555] ? deactivate_locked_super+0x110/0x110 [ 345.622824][ T1555] ? fast_dput+0x7a/0x280 [ 345.626997][ T1555] cleanup_mnt+0x44e/0x500 [ 345.631251][ T1555] task_work_run+0x140/0x170 [ 345.635672][ T1555] do_exit+0xcaf/0x2bc0 [ 345.639664][ T1555] ? __schedule+0xb0d/0x1320 [ 345.644089][ T1555] ? put_task_struct+0x80/0x80 [ 345.649301][ T1555] ? is_mmconf_reserved+0x430/0x430 [ 345.654332][ T1555] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 345.659280][ T1555] do_group_exit+0x138/0x300 [ 345.663705][ T1555] ? cgroup_leave_frozen+0x13c/0x290 [ 345.668831][ T1555] get_signal+0xdb1/0x1440 [ 345.673081][ T1555] do_signal+0xb0/0x11f0 [ 345.677159][ T1555] ? hrtimer_nanosleep+0x10b/0x450 [ 345.682115][ T1555] ? hrtimer_nanosleep+0x277/0x450 [ 345.687053][ T1555] ? nanosleep_copyout+0x120/0x120 [ 345.692102][ T1555] ? signal_fault+0x1e0/0x1e0 [ 345.696618][ T1555] ? timespec64_add_safe+0x220/0x220 [ 345.701748][ T1555] ? up_read+0x6f/0x1b0 [ 345.705736][ T1555] ? __se_sys_clock_nanosleep+0x33c/0x3d0 [ 345.711289][ T1555] ? __x64_sys_clock_nanosleep+0xa0/0xa0 [ 345.716755][ T1555] exit_to_usermode_loop+0xc0/0x1a0 [ 345.721788][ T1555] prepare_exit_to_usermode+0x199/0x200 [ 345.727168][ T1555] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 345.732895][ T1555] RIP: 0033:0x7f98d6f30a25 [ 345.737148][ T1555] Code: Bad RIP value. [ 345.741061][ T1555] RSP: 002b:00007f98d5546f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 345.749298][ T1555] RAX: fffffffffffffdfc RBX: 00007f98d7117080 RCX: 00007f98d6f30a25 [ 345.757113][ T1555] RDX: 00007f98d5546fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 345.764930][ T1555] RBP: 00007f98d6f7f2a0 R08: 0000000000000000 R09: 0000000000000000 [ 345.772731][ T1555] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 345.780542][ T1555] R13: 0000000000000000 R14: 00007f98d7117080 R15: 00007ffccfc8f518 [ 345.788354][ T1555] [ 345.790519][ T1555] Allocated by task 2: [ 345.794438][ T1555] __kasan_kmalloc+0x171/0x210 [ 345.799123][ T1555] kmem_cache_alloc+0xd9/0x250 [ 345.803721][ T1555] dup_task_struct+0x4f/0x600 [ 345.806019][ T74] usb 3-1: unable to get BOS descriptor or descriptor too short [ 345.808243][ T1555] copy_process+0x56d/0x3230 [ 345.808256][ T1555] _do_fork+0x197/0x900 [ 345.824115][ T1555] kernel_thread+0x16a/0x1d0 [ 345.828561][ T1555] kthreadd+0x3b1/0x4f0 [ 345.832639][ T1555] ret_from_fork+0x1f/0x30 [ 345.836973][ T1555] [ 345.839143][ T1555] Freed by task 23: [ 345.842821][ T1555] __kasan_slab_free+0x1b5/0x270 [ 345.846026][ T74] usb 3-1: not running at top speed; connect to a high speed hub [ 345.847570][ T1555] kmem_cache_free+0x10b/0x2c0 [ 345.847578][ T1555] rcu_do_batch+0x492/0xa00 [ 345.847590][ T1555] rcu_core+0x4c8/0xcb0 [ 345.855179][ T74] usb 3-1: no configurations [ 345.859726][ T1555] __do_softirq+0x23b/0x6b7 [ 345.859728][ T1555] [ 345.859735][ T1555] The buggy address belongs to the object at ffff8881dde13f00 [ 345.859735][ T1555] which belongs to the cache task_struct of size 3904 [ 345.859742][ T1555] The buggy address is located 32 bytes inside of [ 345.859742][ T1555] 3904-byte region [ffff8881dde13f00, ffff8881dde14e40) [ 345.859744][ T1555] The buggy address belongs to the page: [ 345.859765][ T1555] page:ffffea0007778400 refcount:1 mapcount:0 mapping:ffff8881f5cf1900 index:0x0 compound_mapcount: 0 [ 345.859771][ T1555] flags: 0x8000000000010200(slab|head) [ 345.859786][ T1555] raw: 8000000000010200 0000000000000000 0000000600000001 ffff8881f5cf1900 [ 345.865261][ T74] usb 3-1: can't read configurations, error -22 [ 345.868052][ T1555] raw: 0000000000000000 0000000080080008 00000001ffffffff 0000000000000000 [ 345.868055][ T1555] page dumped because: kasan: bad access detected [ 345.868067][ T1555] page_owner tracks the page as allocated [ 345.868076][ T1555] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC) [ 345.868095][ T1555] prep_new_page+0x18f/0x370 [ 345.982361][ T1555] get_page_from_freelist+0x2d13/0x2d90 [ 345.987736][ T1555] __alloc_pages_nodemask+0x393/0x840 [ 345.992949][ T1555] alloc_slab_page+0x39/0x3c0 [ 345.997455][ T1555] new_slab+0x97/0x440 [ 346.001360][ T1555] ___slab_alloc+0x2fe/0x490 [ 346.005786][ T1555] __slab_alloc+0x62/0xa0 [ 346.009955][ T1555] kmem_cache_alloc+0x109/0x250 [ 346.014727][ T1555] dup_task_struct+0x4f/0x600 [ 346.016000][ T74] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 346.019292][ T1555] copy_process+0x56d/0x3230 [ 346.019300][ T1555] _do_fork+0x197/0x900 [ 346.019307][ T1555] __x64_sys_clone+0x26b/0x2c0 [ 346.019321][ T1555] do_syscall_64+0xca/0x1c0 [ 346.044068][ T1555] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 346.049797][ T1555] page last free stack trace: [ 346.054307][ T1555] __free_pages_ok+0x847/0x950 [ 346.059018][ T1555] __free_pages+0x91/0x140 [ 346.063298][ T1555] put_task_stack+0x212/0x260 [ 346.067778][ T1555] finish_task_switch+0x24a/0x590 [ 346.072638][ T1555] __schedule+0xb0d/0x1320 [ 346.076897][ T1555] schedule_idle+0x50/0x80 [ 346.081147][ T1555] do_idle+0x609/0x660 [ 346.085050][ T1555] cpu_startup_entry+0x14/0x20 [ 346.089660][ T1555] start_kernel+0x6d9/0x81d [ 346.094004][ T1555] secondary_startup_64+0xa4/0xb0 [ 346.098843][ T1555] [ 346.101011][ T1555] Memory state around the buggy address: [ 346.106627][ T1555] ffff8881dde13e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 346.114523][ T1555] ffff8881dde13e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 346.122529][ T1555] >ffff8881dde13f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 346.130441][ T1555] ^ [ 346.135363][ T1555] ffff8881dde13f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 346.143379][ T1555] ffff8881dde14000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 346.151255][ T1555] ================================================================== [ 346.159156][ T1555] Disabling lock debugging due to kernel taint [ 346.216910][ T1555] ------------[ cut here ]------------ [ 346.222284][ T1555] refcount_t: addition on 0; use-after-free. [ 346.228617][ T1555] WARNING: CPU: 0 PID: 1555 at lib/refcount.c:25 refcount_warn_saturate+0x132/0x1a0 [ 346.230471][ T1053] attempt to access beyond end of device [ 346.230471][ T1053] loop6: rw=1, want=242, limit=128 [ 346.237775][ T1555] Modules linked in: [ 346.237788][ T1555] CPU: 0 PID: 1555 Comm: syz.3.212 Tainted: G B 5.4.290-syzkaller-00017-g6b07fcd94a6a #0 [ 346.237792][ T1555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 346.237806][ T1555] RIP: 0010:refcount_warn_saturate+0x132/0x1a0 [ 346.237814][ T1555] Code: 04 01 48 c7 c7 e0 1f fa 84 e8 ba 8b 0d ff 0f 0b eb a9 e8 c1 e9 36 ff c6 05 96 0d 1d 04 01 48 c7 c7 60 20 fa 84 e8 9e 8b 0d ff <0f> 0b eb 8d e8 a5 e9 36 ff c6 05 7b 0d 1d 04 01 48 c7 c7 c0 20 fa [ 346.237818][ T1555] RSP: 0018:ffff8881ec3ef790 EFLAGS: 00010246 [ 346.237825][ T1555] RAX: 01b2f41d3b19fd00 RBX: 0000000000000002 RCX: ffff8881dde16e40 [ 346.237829][ T1555] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 346.237834][ T1555] RBP: 0000000000000002 R08: ffffffff814d6db2 R09: ffffed103edca9b8 [ 346.237838][ T1555] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 346.237843][ T1555] R13: ffff8881dde13f00 R14: dffffc0000000000 R15: ffff8881dde13f20 [ 346.237851][ T1555] FS: 00007f98d55476c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 346.237856][ T1555] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 346.237861][ T1555] CR2: 00007fa691dc2d58 CR3: 00000001eccec000 CR4: 00000000003406b0 [ 346.237869][ T1555] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 346.237874][ T1555] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 346.237876][ T1555] Call Trace: [ 346.237887][ T1555] ? __warn+0x162/0x250 [ 346.237897][ T1555] ? report_bug+0x3a1/0x4e0 [ 346.237905][ T1555] ? refcount_warn_saturate+0x132/0x1a0 [ 346.237914][ T1555] ? refcount_warn_saturate+0x132/0x1a0 [ 346.237923][ T1555] ? do_invalid_op+0x6e/0x110 [ 346.237931][ T1555] ? invalid_op+0x1e/0x30 [ 346.237941][ T1555] ? wake_up_klogd+0xb2/0xf0 [ 346.237950][ T1555] ? refcount_warn_saturate+0x132/0x1a0 [ 346.237958][ T1555] kthread_stop+0x1a5/0x4a0 [ 346.237970][ T1555] ext4_put_super+0x790/0xbb0 [ 346.237980][ T1555] ? ext4_drop_inode+0x1f0/0x1f0 [ 346.237987][ T1555] generic_shutdown_super+0x120/0x300 [ 346.237995][ T1555] kill_block_super+0x7a/0xe0 [ 346.238004][ T1555] deactivate_locked_super+0xa8/0x110 [ 346.238012][ T1555] deactivate_super+0x1e2/0x2a0 [ 346.238021][ T1555] ? deactivate_locked_super+0x110/0x110 [ 346.238029][ T1555] ? fast_dput+0x7a/0x280 [ 346.238038][ T1555] cleanup_mnt+0x44e/0x500 [ 346.238050][ T1555] task_work_run+0x140/0x170 [ 346.474369][ T1555] do_exit+0xcaf/0x2bc0 [ 346.478354][ T1555] ? __schedule+0xb0d/0x1320 [ 346.482775][ T1555] ? put_task_struct+0x80/0x80 [ 346.487379][ T1555] ? is_mmconf_reserved+0x430/0x430 [ 346.492414][ T1555] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 346.497366][ T1555] do_group_exit+0x138/0x300 [ 346.501789][ T1555] ? cgroup_leave_frozen+0x13c/0x290 [ 346.506917][ T1555] get_signal+0xdb1/0x1440 [ 346.511159][ T1555] do_signal+0xb0/0x11f0 [ 346.515239][ T1555] ? hrtimer_nanosleep+0x10b/0x450 [ 346.520187][ T1555] ? hrtimer_nanosleep+0x277/0x450 [ 346.525132][ T1555] ? nanosleep_copyout+0x120/0x120 [ 346.530074][ T1555] ? signal_fault+0x1e0/0x1e0 [ 346.534587][ T1555] ? timespec64_add_safe+0x220/0x220 [ 346.539708][ T1555] ? up_read+0x6f/0x1b0 [ 346.543703][ T1555] ? __se_sys_clock_nanosleep+0x33c/0x3d0 [ 346.549256][ T1555] ? __x64_sys_clock_nanosleep+0xa0/0xa0 [ 346.554724][ T1555] exit_to_usermode_loop+0xc0/0x1a0 [ 346.559760][ T1555] prepare_exit_to_usermode+0x199/0x200 [ 346.565146][ T1555] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 346.570869][ T1555] RIP: 0033:0x7f98d6f30a25 [ 346.575131][ T1555] Code: Bad RIP value. [ 346.579023][ T1555] RSP: 002b:00007f98d5546f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 346.587273][ T1555] RAX: fffffffffffffdfc RBX: 00007f98d7117080 RCX: 00007f98d6f30a25 [ 346.595078][ T1555] RDX: 00007f98d5546fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 346.602890][ T1555] RBP: 00007f98d6f7f2a0 R08: 0000000000000000 R09: 0000000000000000 [ 346.610701][ T1555] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 346.618519][ T1555] R13: 0000000000000000 R14: 00007f98d7117080 R15: 00007ffccfc8f518 [ 346.626951][ T1555] ---[ end trace 5c52b2344fbadab9 ]--- [ 346.736401][ T517] usbhid 6-1:0.0: can't add hid device: -71 [ 346.806989][ T1252] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 346.814554][ T517] usbhid: probe of 6-1:0.0 failed with error -71 [ 346.822340][ T517] usb 6-1: USB disconnect, device number 3 [ 346.855990][ T74] usb 3-1: unable to get BOS descriptor or descriptor too short [ 346.915997][ T74] usb 3-1: no configurations [ 346.920415][ T74] usb 3-1: can't read configurations, error -22 [ 346.926789][ T74] usb usb3-port1: unable to enumerate USB device [ 347.176144][ T1252] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.186868][ T1252] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.196386][ T1252] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 347.209053][ T1252] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 347.217952][ T1252] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.226804][ T1252] usb 2-1: config 0 descriptor?? [ 347.697159][ T1252] plantronics 0003:047F:FFFF.0049: unknown main item tag 0xd [ 347.704707][ T1252] plantronics 0003:047F:FFFF.0049: No inputs registered, leaving [ 347.714262][ T1252] plantronics 0003:047F:FFFF.0049: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 349.166005][ T1252] usb 2-1: reset high-speed USB device number 44 using dummy_hcd [ 349.376012][ T1252] usb 2-1: device descriptor read/64, error -32 [ 350.376356][ T517] usb 2-1: USB disconnect, device number 44