last executing test programs: 2m59.709414105s ago: executing program 0 (id=422): syz_io_uring_setup(0x5b14, &(0x7f0000000040)={0x0, 0xf527, 0x4000, 0x1, 0x323}, 0x0, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12011001000000402f170105000000000001090224000100000000090400000103000300092100100101220700090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0xffffffae, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xa, {[@local, @main=@item_012={0x0, 0x0, 0xb, "0e9f"}]}}, 0x0}, 0x0) 2m56.728584232s ago: executing program 0 (id=449): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m56.635593286s ago: executing program 0 (id=450): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x40002, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x4000, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r2, 0xc040583f, &(0x7f0000000040)={{@align=0x4, {0x5, 0x81, 0x7, 0x2}}, {{[0x3, 0xffff7fff, 0x8b82, 0x6]}, 0x0, 0x2, 0x742fbfca, 0x0, &(0x7f00000000c0)=[{{@align=0x6, {0x1, 0x8, 0x6, 0x6}}, 0x5, 0x0, '\x00'}, {{@_ha_fsid={[0x5, 0x3]}, {0x7, 0x800, 0x7f, 0xcdf}}, 0x2, 0x0, '/dev/kvm\x00'}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0xb0000005}) epoll_pwait(r5, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) close_range(r3, r3, 0x0) syz_clone(0x80000000, &(0x7f00000001c0)="385cbb65b28903355577a283fe103c3d1e758cc19337746f23ddb60e8ab32764bf5790569f8dc07bd70734be3bb660a952e0cecb5c5831", 0x37, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="ffbb00ae7b535bb956b963a1bca6809c1b254cebc727886f4d7380800ac3fe9dc470d9f2e9759bbaa16fca2aac0fa795876d4884896e28fe95f323ee61c383a27daaa98ffdaf8b3f93d6d954") ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000480)={0x2, 0x110000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000140)={0x2, 0x0, {[0x2, 0x2, 0x3, 0x2, 0x3, 0x800, 0x6e7, 0x4]}}) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x581000, 0x0) r8 = accept4$inet(r7, &(0x7f0000000300)={0x2, 0x0, @broadcast}, &(0x7f0000000380)=0x10, 0x80000) getsockopt$inet_opts(r8, 0x0, 0x4, &(0x7f00000004c0)=""/95, &(0x7f00000003c0)=0x5f) 2m56.409628858s ago: executing program 0 (id=451): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000010240)={&(0x7f0000000180), 0xc, &(0x7f0000010200)={&(0x7f00000001c0)={0x10, 0x3f7, 0x0, 0x0, 0x0, {0xffff, 0x453, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0'}}, 0x10020}}, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x100, 0x0) openat$incfs(r1, &(0x7f00000000c0)='.pending_reads\x00', 0x101102, 0x5f) 2m56.409358168s ago: executing program 0 (id=452): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text16={0x10, 0x0}], 0x1, 0x9, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040090}, 0x20000000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m56.032222776s ago: executing program 0 (id=454): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newsa={0x13c, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in6=@loopback, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7f}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0x2, 0x1, 0xfe}, [@algo_aead={0x4c, 0x12, {{'aegis128-aesni\x00'}, 0x11, 0x40}}]}, 0x13c}}, 0x804) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040bd28420000000000000109022400010000000009040100020300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000180)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="40121d0000001d0c7ba778cb8f77b829f181d952eeff84d189c27f00000042980585d60f28fb22d568784f0e1c082d88840362f0b7587d3c723adcad7bb7977e34ad4a0000010000000000d45380742c6b974f10570067b2ec3fc10b8cfa3cca631a811ef6498afdd98f9aa23d6e90353fad94ef05c07306fe9b821dead6eb41"], 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x80, 0x7, 0xe9, 0x40, 0x4, 0x2}}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newsa={0x13c, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in6=@loopback, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7f}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0x2, 0x1, 0xfe}, [@algo_aead={0x4c, 0x12, {{'aegis128-aesni\x00'}, 0x11, 0x40}}]}, 0x13c}}, 0x804) (async) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040bd28420000000000000109022400010000000009040100020300000009210000000122070009058103"], 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000180)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="40121d0000001d0c7ba778cb8f77b829f181d952eeff84d189c27f00000042980585d60f28fb22d568784f0e1c082d88840362f0b7587d3c723adcad7bb7977e34ad4a0000010000000000d45380742c6b974f10570067b2ec3fc10b8cfa3cca631a811ef6498afdd98f9aa23d6e90353fad94ef05c07306fe9b821dead6eb41"], 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x80, 0x7, 0xe9, 0x40, 0x4, 0x2}}}, 0x0) (async) 2m55.987185149s ago: executing program 32 (id=454): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newsa={0x13c, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in6=@loopback, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7f}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0x2, 0x1, 0xfe}, [@algo_aead={0x4c, 0x12, {{'aegis128-aesni\x00'}, 0x11, 0x40}}]}, 0x13c}}, 0x804) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040bd28420000000000000109022400010000000009040100020300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000180)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="40121d0000001d0c7ba778cb8f77b829f181d952eeff84d189c27f00000042980585d60f28fb22d568784f0e1c082d88840362f0b7587d3c723adcad7bb7977e34ad4a0000010000000000d45380742c6b974f10570067b2ec3fc10b8cfa3cca631a811ef6498afdd98f9aa23d6e90353fad94ef05c07306fe9b821dead6eb41"], 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x80, 0x7, 0xe9, 0x40, 0x4, 0x2}}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newsa={0x13c, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in6=@loopback, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7f}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0x2, 0x1, 0xfe}, [@algo_aead={0x4c, 0x12, {{'aegis128-aesni\x00'}, 0x11, 0x40}}]}, 0x13c}}, 0x804) (async) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040bd28420000000000000109022400010000000009040100020300000009210000000122070009058103"], 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000180)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="40121d0000001d0c7ba778cb8f77b829f181d952eeff84d189c27f00000042980585d60f28fb22d568784f0e1c082d88840362f0b7587d3c723adcad7bb7977e34ad4a0000010000000000d45380742c6b974f10570067b2ec3fc10b8cfa3cca631a811ef6498afdd98f9aa23d6e90353fad94ef05c07306fe9b821dead6eb41"], 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x80, 0x7, 0xe9, 0x40, 0x4, 0x2}}}, 0x0) (async) 2m42.349894764s ago: executing program 4 (id=597): syz_usb_connect$midi(0x2, 0x32, &(0x7f0000012640)=ANY=[@ANYBLOB="1201100300000010ca1502030109022000010103200009040000010103209c0905010300000000ac052501dab60000000000"], &(0x7f0000012a00)={0x0, 0x0, 0x0, 0x0}) 2m39.372600491s ago: executing program 4 (id=619): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000100)=&(0x7f00000000c0)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8402, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x40000099}]}) ioperm(0xd1df, 0x7, 0x9) remap_file_pages(&(0x7f00005f4000/0x3000)=nil, 0xa00, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}, 0x0) 2m37.562753321s ago: executing program 4 (id=652): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0x9, 0x0, 0x1, 0x40, 0x1, 0x5}}) mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000580)={[0x9, 0x0, 0x0, 0x20, 0x3, 0xffffffff, 0x106c, 0xffff, 0x8000000000003, 0x8000000400087e, 0x0, 0x8, 0x8000000000000001, 0x4, 0x66000000, 0x8004], 0x1, 0x2c6310}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m37.446073497s ago: executing program 4 (id=653): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000000000fa, 0x24600) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x358418, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x1000040, 0x0) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x8) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, 0x0) 2m37.389920979s ago: executing program 4 (id=654): syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d240606000308000000f9a153519a08039e0c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003070005490c240206", @ANYRES8], 0x0) 2m37.358168471s ago: executing program 4 (id=655): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x358, 0xffff8881f6e0effc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000004800010000000000000000000a00806e0805000000000001140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004880) write$selinux_attr(r0, &(0x7f0000000000)='system_u:object_r:fuse_device_t:s0\x00', 0x11) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$inet_icmp(0x2, 0x2, 0x1) recvfrom$inet(r7, &(0x7f0000000200)=""/99, 0x63, 0x40000000, &(0x7f0000000280)={0x2, 0x4e24, @private=0xa010102}, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'vlan0\x00', 0x0}) close_range(r2, r6, 0x0) sendto$packet(r6, &(0x7f0000000080)="3f031c00eeec1400ffff270089e9", 0xe, 0x20000000, &(0x7f0000000040)={0xc9, 0x5, r8}, 0x14) add_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000180)="fce40922cd7b53caaf1380b35f863876126fc14ddee5aae6e7802f2dfb89264822910b029d48c18cc42278c1accc106f2f29c2e37773028a78db36ebc05969ffdd9aa96d5f50da5fa31916501ee7d398439f8ce40d2b29", 0x57, 0xfffffffffffffffe) 2m37.310660453s ago: executing program 33 (id=655): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x358, 0xffff8881f6e0effc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000004800010000000000000000000a00806e0805000000000001140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004880) write$selinux_attr(r0, &(0x7f0000000000)='system_u:object_r:fuse_device_t:s0\x00', 0x11) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$inet_icmp(0x2, 0x2, 0x1) recvfrom$inet(r7, &(0x7f0000000200)=""/99, 0x63, 0x40000000, &(0x7f0000000280)={0x2, 0x4e24, @private=0xa010102}, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'vlan0\x00', 0x0}) close_range(r2, r6, 0x0) sendto$packet(r6, &(0x7f0000000080)="3f031c00eeec1400ffff270089e9", 0xe, 0x20000000, &(0x7f0000000040)={0xc9, 0x5, r8}, 0x14) add_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000180)="fce40922cd7b53caaf1380b35f863876126fc14ddee5aae6e7802f2dfb89264822910b029d48c18cc42278c1accc106f2f29c2e37773028a78db36ebc05969ffdd9aa96d5f50da5fa31916501ee7d398439f8ce40d2b29", 0x57, 0xfffffffffffffffe) 2m0.219243439s ago: executing program 2 (id=1011): syz_clone(0x2280, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @remote}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)={0xa, 0x4e20, 0x7, @mcast1, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1400000000000000290000000b0000000000008d0000f2ff1300000000000000290000000b00000000000009000000001400000000000000"], 0x48}}], 0x2, 0x4840) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x2000, 0x2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') write$P9_RREAD(r4, &(0x7f0000000000)={0x32, 0x75, 0x2, {0x27, "6b7192411fc65c6bf4442aacad6713103505ce01f7a931f842446d64d459643a647d6768d82ef1"}}, 0x32) move_mount(r3, &(0x7f0000000400)='\x00', r4, &(0x7f0000000440)='./file1\x00', 0x256) tgkill(0x0, 0x0, 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r2, 0x32c29000) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000001c0), 0x1, 0x0, 0xe8, 0x20000084}, 0x11) madvise(&(0x7f000012c000/0x3000)=nil, 0x3000, 0xe) ioctl$BLKRRPART(r2, 0x125f, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r5) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f0000000340)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8bd70a7badda035b, 0x0) write$binfmt_format(r7, &(0x7f0000000100)='0\x00', 0x2) accept4$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000700)={0x28, 0x0, &(0x7f0000000480)=[@register_looper, @release, @acquire_done={0x40106309, 0x3}, @decrefs={0x40046307, 0x3}], 0x33, 0x0, &(0x7f00000006c0)="afdc6558706b5f7ecbeb048de73b319844a26c1bda1dcb978dbc8ed17fb8480bc0ef79725f93ebf8d5cb6d9f012efd065eb181"}) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000080)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00') 2m0.183962841s ago: executing program 2 (id=1013): r0 = socket(0x1, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'syz_tun\x00', {0x9}, 0x5}) ioctl$SIOCGETLINKNAME(r0, 0x89e0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @multicast2}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = timerfd_create(0x8, 0x80000) timerfd_settime(r4, 0x1, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) timerfd_settime(r4, 0x0, &(0x7f0000000180)={{0x77359400}}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r5, 0x0) setsockopt$packet_rx_ring(r5, 0x107, 0x5, 0x0, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x8, &(0x7f0000000100)=0xffffffff00040000, 0x112) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001dc0)={0x30, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x1e, 0x0, 0x1, [@nested={0x9, 0x3d, 0x0, 0x1, [@generic="f1df62fd16"]}]}]}]}, 0x30}}, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x8044, @private=0xa010101}, {0x2, 0x4e21, @broadcast}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r8 = socket$xdp(0x2c, 0x3, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) bind$xdp(r8, &(0x7f0000000240)={0x2c, 0x1, r10}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)={0x180, r7, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x110, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8e, 0x4, "d633e0274e4db212fe11a9a6404671d52b402374e2cc853f335c906768aafd24590978bb276a251c6ed1bbaae815688e3e7ae2fe55be59cb0c6e4be546b6c4b1eea5c0220352dd4b3ffa5655a347cb7c8bcc2141c23eeb885df287d85a20818e424e58595f7c96cc5d96211e454be37904cc152eefada269eae618ff053c8275bd41e6c0cc2aed97590e"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_MASK={0x69, 0x5, "53768bcbea70ec2621d2d5d8b875411454d4166a9617169b69b19dece27f51d877389eea8a808c2f8a901f34b2aeb35ebe8492bd3dd3c23363585d55ffa8433158cdb56af036c38db6455bcfdf698c5ba99bd6709a97149eea4a49e2e35baa22cc609d096d"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffe}]}, @ETHTOOL_A_FEATURES_WANTED={0x48, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x41, 0x5, "8bcd25af977f0f7acbead0d0abfe18639f633f4922b5ab6af3e47679c96fc3310a9675aa6ded8f9709adab83c6e451a5d2c67048d9320a4135b4632cc9"}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) 2m0.079963996s ago: executing program 2 (id=1015): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x109001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r0, &(0x7f0000000380)={@void, @void, @eth={@broadcast, @remote, @val={@val={0x88a8, 0x2, 0x1, 0x404}, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x6a, 0x67, 0x0, 0x7, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, "6c7aec6177c1fb9be437a2088b1cfd8f5beb22f5cb4a009119a771ae8c322b83e09350159bd7706998675924b1b7442f7a8941ffe83370028173019c4b3de6a63786ee36147126a206b49f6740428c4949e500000000"}}}}}, 0x80) 1m59.990582861s ago: executing program 2 (id=1018): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r0, &(0x7f0000003240)={0x2020}, 0x2023) getsockopt(r0, 0x5, 0xffffffff, &(0x7f0000000240)=""/27, &(0x7f00000002c0)=0x1b) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001100010000000000000000002000000001"], 0x30}], 0x1}, 0x0) r4 = socket(0x10, 0x3, 0x0) socket(0x9, 0x804, 0x8) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/wireless\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', 0x0, 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000940)='./file0/../file0\x00', 0x1100) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0/../file0\x00', &(0x7f0000000300)={0x2000, 0x0, 0x10}, 0x18) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f0000000800), &(0x7f0000000180)=0x8) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r4], 0x20}}, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r7, 0x10, &(0x7f00000000c0)={0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340), &(0x7f00000003c0)=0xc) ioctl$BINDER_GET_FROZEN_INFO(r7, 0xc00c620f, &(0x7f0000000400)={r8}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r9, 0x4, &(0x7f0000000780)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, r7, &(0x7f0000000440)='m', 0x1, 0x1, 0x0, 0x0, r6}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x12, r1, &(0x7f0000000600)="caa2b0561938d6983644214eb87b5805d2fb32b73a96e3174f45da61dbd27c2b616866725a89fcc1e9f16443a57fc612c4a8462f74343bbe79003f5bec53006f9110063e016aa38a97f25138c7ab91ef163476b171f01faa379c26d20ea8906cb3659c867c120c78b078e8d12f28d2460847aadcadc73ec38737add965626931b54bc766cfb25a53099b1643ff306774d26e35f5d950b84d5ca2fefc5d59a60c", 0xa0, 0x5, 0x0, 0x0, r7}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x2, r4, &(0x7f00000006c0)="af41c342d93c312b3949158463f06640856861020a0d8401242b7502f821b093d08b2cf3a37c3db087cfa2ccbfc656c08b269db58dfc972d2b723a4ce6b98914d3f271239014a77b02f620d9d94d44d91758d0cc52aa", 0x56, 0x7, 0x0, 0x1, r2}]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 1m59.893195395s ago: executing program 2 (id=1021): mount$tmpfs(0x0, &(0x7f0000001880)='.\x00', &(0x7f00000018c0), 0x1, &(0x7f0000000000)={[{@noswap}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x6, &(0x7f00000000c0)={0x11, {{0x29, 0x0, 0x2000000, @empty, 0x3}}}, 0x88) read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x5ecfb203) 1m59.705875085s ago: executing program 2 (id=1024): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_pktinfo(r1, 0x88, 0x8, 0x0, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_io_uring_setup(0x1, &(0x7f0000002740)={0x0, 0xe8a8, 0x8, 0x3, 0x167}, &(0x7f00000027c0), &(0x7f0000002800)) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000140001"], 0x48}}, 0x4000) add_key$fscrypt_provisioning(&(0x7f00000000c0), 0x0, 0x0, 0xfffffffffffffe4e, 0x0) write$vga_arbiter(r0, &(0x7f0000000000), 0xf) 1m59.705714175s ago: executing program 34 (id=1024): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_pktinfo(r1, 0x88, 0x8, 0x0, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_io_uring_setup(0x1, &(0x7f0000002740)={0x0, 0xe8a8, 0x8, 0x3, 0x167}, &(0x7f00000027c0), &(0x7f0000002800)) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000140001"], 0x48}}, 0x4000) add_key$fscrypt_provisioning(&(0x7f00000000c0), 0x0, 0x0, 0xfffffffffffffe4e, 0x0) write$vga_arbiter(r0, &(0x7f0000000000), 0xf) 38.517869913s ago: executing program 3 (id=2011): r0 = epoll_create1(0x80000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x4, 0x94}) r2 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r2, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbff, 0x4080101}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000040)={0x20000004}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r5, &(0x7f0000005b40)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}], 0x20}}], 0x1, 0xc080) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000100)=0x0) capset(&(0x7f0000000140)={0x20071026, r6}, &(0x7f0000000180)={0x8c, 0xfffffffc, 0x10000, 0x3ff, 0x4, 0x6}) ftruncate(r4, 0xee72) sendfile(r5, r4, 0x0, 0x8000fffffffe) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r3, 0x942e, 0x0) mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2) epoll_pwait(r0, &(0x7f0000000340)=[{}], 0x1, 0x12, 0x0, 0x0) 38.457850457s ago: executing program 3 (id=2012): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x8000, 0x0, 0x402226, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}}}}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000780)={0x6, 0x0, [{0x0, 0x72, &(0x7f0000000140)=""/114}, {0xe000, 0xae, &(0x7f00000001c0)=""/174}, {0xd000, 0x8b, &(0x7f00000002c0)=""/139}, {0x100000, 0xc1, &(0x7f0000000440)=""/193}, {0xdddd1000, 0x33, &(0x7f0000000380)=""/51}, {0x8000000, 0xa4, &(0x7f00000005c0)=""/164}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x4008af04, &(0x7f0000000040)) 38.327183033s ago: executing program 3 (id=2014): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x2, 0x0, 0x0, 0xfffffffd}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) 38.259423026s ago: executing program 3 (id=2016): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, 0xffffffffffffffff, 0xe7433000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x80, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x8c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f00000000c0)={0x7, 0xb, 0xf, 0x3, 0x16, "43db932840023bd900"}) r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x40000, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x6, &(0x7f0000000140)=0x40000000, 0x4) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x40106726, &(0x7f00000000c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1}, 0x5e}], 0x1, 0x0, 0x0) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000003c0), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRESDEC=r0], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x4, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, &(0x7f00000042c0), 0x40000f5, 0x40080) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000000)={'ip6tnl0\x00', {0x2, 0x4e23, @multicast2}}) munmap(&(0x7f00005f5000/0x4000)=nil, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace(0x10, r5) tgkill(r5, r5, 0x437) ptrace$peeksig(0x4209, r5, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) readv(r3, &(0x7f0000000280)=[{&(0x7f0000001980)=""/4096, 0x1000}], 0x1) 37.408567998s ago: executing program 3 (id=2023): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = userfaultfd(0x801) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x1}}) write$tun(r2, &(0x7f0000000340)={@void, @void, @eth={@multicast, @remote, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x6, 0x28, 0x64, 0x0, 0x1, 0x6, 0x0, @loopback, @broadcast}, {{0x4e21, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x6}}}}}}}, 0x3e) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES32=r6], 0x48}, 0x1, 0x0, 0x0, 0xc4}, 0x0) 36.693369164s ago: executing program 3 (id=2027): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000000009040000150300000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1a8) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x2, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0xc, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x50, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0x3, 0xd, 0x2bf, 0x5, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2b, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xb8d, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x5, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000001, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x5, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 36.659412246s ago: executing program 35 (id=2027): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000000009040000150300000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1a8) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x2, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0xc, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x50, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0x3, 0xd, 0x2bf, 0x5, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2b, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xb8d, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x5, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000001, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x5, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6.209690503s ago: executing program 7 (id=2428): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x8000, 0x107fff, 0x10, 0x4, 0x9, 0x200000a4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x4, 0x3, 0x3, 0xff, 0x1002, 0xc, 0x3, 0x3, 0x3ff, 0xfffffffa, 0x0, 0x1, 0x4009, 0x2, 0xfffffffc, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xc, 0x40, 0x40bed4, 0x8, 0x6, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0060a, 0x7, 0x0, 0x81, 0x2, 0x17ffff, 0x4003, 0x6f9f, 0x5, 0x9c56, 0x3, 0x403, 0x2, 0x1, 0x9, 0x80000004, 0x7, 0x2004009, 0x80000000, 0x4, 0x100002, 0x8, 0xc, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xffeffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0x100, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x20000008, 0x3be, 0x4, 0x401, 0x66cd, 0xc, 0x8, 0x3, 0x101, 0x1fb, 0xffffffff]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000007c0)=ANY=[@ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000500)={&(0x7f00000002c0)={0x50, 0xffffffffffffffda}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6.204790473s ago: executing program 7 (id=2429): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xa, 0x0, 0x100000}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x24) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000004c0)={0xbc, 0x0, 0x499}) 6.186861944s ago: executing program 7 (id=2430): r0 = socket$inet(0x2, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) r1 = syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0x307d, 0x3000, 0x2, 0x19a}, &(0x7f0000000040), &(0x7f0000000200)) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x103, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xff, 0xc0, 0xc, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x3ff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x40, 0xd0, 0x4, {0xa, 0x25, 0x25, 0x7fff, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xfa, 0x1a, 0x2, {0xa, 0x25, 0x25, 0x4, 0x5, 0x5d}}}}}}}}]}}, 0x0) getpeername$tipc(r2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'veth0_to_team\x00', 0x1}) io_setup(0x7, &(0x7f0000000080)=0x0) io_pgetevents(r3, 0x3, 0x3, &(0x7f00000000c0)=[{}, {}, {}], 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x20}], 0x1, 0x0, 0x0, 0x0) 2.914451136s ago: executing program 7 (id=2453): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d00010700000009040005050300000009210002080122940309058103"], 0x0) syz_usb_connect$uac3(0x4, 0x10f, &(0x7f0000000500)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8002, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfd, 0x3, 0x1, 0x4, 0x0, 0x7, {0x8, 0xb, 0x2, 0x1, 0x1, 0x20, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x5f, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0x3, 0x303, 0x1, 0x2, 0x6, 0xc, 0x0, 0x2, 0x2}, @source_unit={0xc, 0x24, 0xb, 0x4, 0x0, 0x0, 0x7, 0x8001}, @mixer_unit={0x9, 0x24, 0x5, 0x6, 0x1, "e3e6c555"}, @selector_unit={0xc, 0x24, 0xc, 0x0, 0x7, "3ddfa4c55f5854"}, @input_terminal={0x14, 0x24, 0x2, 0x5, 0x202, 0x4, 0x5a, 0xffff, 0x3, 0x4, 0x4, 0x8}, @power_domain={0xd, 0x24, 0x10, 0x28, 0x1ac, 0x8, 0xb, "f5d9881c"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0xa}]}, {{0x9, 0x5, 0x1, 0x9, 0x30, 0x1, 0xd, 0x7f, {0xa, 0x25, 0x25, 0xfff, 0x5, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x3, 0x3, 0xd9, 0x3}, @as_header={0x17, 0x24, 0x1, 0x7, 0x9, 0x0, 0x1001, 0x2, 0x10, 0x6, 0xff}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4c, 0x2, 0x4, 0x2, "", "105550"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0xff, 0xe, 0x81, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x9, 0xd8, 0xc, {0xa, 0x25, 0x25, 0x8, 0x6, 0xe925}}}}}}}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x0, 0x4, 0xd5, 0x8, 0x9}, 0x55, &(0x7f0000000640)={0x5, 0xf, 0x55, 0x1, [@generic={0x50, 0x10, 0x3, "652c484ce63733a2590cd3fc75fd1c7eea1ef26655ce594871e852fc535cdaa424ba3fb0f473ef8e15691323b70248d008c81db00bba5b96277564bba47f6cf638ae7555e364bd6bfbfa586188"}]}, 0x7, [{0x8a, &(0x7f00000006c0)=@string={0x8a, 0x3, "3ae9de8fdf597f971acbf987e43d167afead9193052e73e3a57d1269ee95171010e0d37e231ed0dac80bfc62b03fe6285e972a86f7da26b2fedf4155a84004f1b44cd3ff753553a35a9177ddc8a4de3f3f18563591815407a1598b2f6af7eef6c5ac2b87d9820fa4fe105042ffe03bccda8fed08f41fb5475706b7b4fc1f02783eb516fe76da1ff0"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x42c}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f0000000080)={0x0, 0x8, 0x2d, {0x2d, 0xb, "eb0f6b4288d1766cd7bd2b70966c5b47bfb4ac578ffb46cc12894c196e1b550f0568e50947b4ba919a291c"}}, 0x0}, 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x90, 0x8, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x3, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x80, 0xe0, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x96, 0x3}}]}}}]}}]}}, &(0x7f0000000d40)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x310, 0x1, 0x8, 0x9, 0x8, 0x12}, 0x114, &(0x7f0000000a00)={0x5, 0xf, 0x114, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0x40, 0x80, 0x0, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x8, 0x0, 0x7, 0xf000, 0x8}, @generic={0xf8, 0x10, 0x2, "4ffa919d6b73697c20b6a68873039db509532b8fdadb590ef270de782985e57ac7500a92583be6ba8e64e96b2a3a07bbbe744803ff6953cf580380449f903560812ace48a19edbccc87b3cf47692de6d426c7712245b28f7cfb59a790795d6fe7f10747b45c4fd50c41e3e02380af6b6d3e42109c9fde2cfd9632a026b50968c5a06c93bce467d1df4db0d85203652a5b119253276abe32ae9094fa5261304075d93c64d720a6acd632b6e1e01e27d7e79ed8bf42e3be819942291c828f49d728dd87b2b235a866136c91b690dddece661e6ac65255fb7e8c1996fd7d190258fc9eeee3acaf11ced277671557ff3e5d3d48bf1c4c8"}]}, 0x4, [{0xf3, &(0x7f0000000b40)=@string={0xf3, 0x3, "720100281ac54bda324a55994c490aa97597b73f0ad32a20449c4bb5bf2461bb973cc0d69d2a3ea7ceea6b5237d6974f1db742dc1a0c48a51134b1c616248653e031d7658e944083ec020fb995cf393f4c1f2e7e3d54a1df159fa85690c9e87db4332ba8dce41d8b675bddfd578d42e4744e01a11318e271b1fcbe0f0339ac0349f31416c083bd53877f9d87abbf24383774b18ea182f72159d33f6de236cd2c9f7a19c6e7035eab9c7844d36acd74dd2ff92e9c2f049c597515e42584a53ae7c6a0f394c2fe2837ed3c1a64cd286b724fc0621d2da69a764b164b95fc42749d6c837fecacffc060e14b32cad61874592d"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x3001}}, {0x26, &(0x7f0000000c80)=@string={0x26, 0x3, "23a105c75f5f0fdfbdf6b49675ab999db181841ffb5618f6d9218cb290393f942bb93dc3"}}, {0x5e, &(0x7f0000000cc0)=@string={0x5e, 0x3, "bce0eef751eb98fcee97f762de3caa6b0ccceeccf150ad8c92b0189571f8103998ed6b0096849dd81186767235cd7a9299edc2cd89eba985591c735f61a30bcd38e53f4b88092477476f71f1b8d0e0b2300fad6542b5ebf0c86bbb0e"}}]}) r1 = gettid() ioprio_get$pid(0x3, r1) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 2.525797125s ago: executing program 6 (id=2455): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="30c74dcee8d4e64c6000000000000a00002a0c001980080002000802e600100002800c0002"], 0x30}, 0x1, 0x0, 0x0, 0x400c011}, 0x40000c0) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="30c74dcee8d4e64c6000000000000a00002a0c001980080002000802e600100002800c0002"], 0x30}, 0x1, 0x0, 0x0, 0x400c011}, 0x40000c0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000200100000000000008000f0001000000", 0x24) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) memfd_secret(0x0) r4 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2100, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000000)={'tunl0\x00', r5, 0x20, 0x40, 0x1001000, 0x6, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x67, 0x0, 0xf9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) syz_usb_connect(0x3, 0x36, &(0x7f0000000c40)=ANY=[@ANYBLOB="12010002a2b8d240bb2170200b87010203010902240001a00800040904c81e010103f70909050803ff030406090221072501"], 0x0) 2.456804678s ago: executing program 1 (id=2457): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00eaff10008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="1f043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 2.385755162s ago: executing program 1 (id=2458): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) r3 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) read$usbmon(r3, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000500)={'bridge0\x00', &(0x7f0000000140)=@ethtool_cmd={0xb, 0x0, 0x10000c, 0x4, 0x5, 0xd, 0x8, 0x7, 0x4, 0x1c, 0x101, 0xfffffff9, 0x222, 0x0, 0xa, 0xb701, [0xcf, 0x59c]}}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044090}, 0x4000001) ioctl$MON_IOCG_STATS(r3, 0x80089203, 0x0) flock(0xffffffffffffffff, 0x1) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8880}, 0x4001) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8000000000000001, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000005, 0xfffffffface6e3cd, 0x40000000001c, 0x1, 0xffffffffffffffff, 0xfd]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.269624198s ago: executing program 6 (id=2459): r0 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x1d, 0x0, 0x0, 0x0, 0x9, 0x0, 0x80, 0x4c, 0x7f, 0x8, [0x0, 0x0, 0xfffffffe, 0x9, 0x5, 0x4, 0x0, 0x40000002]}}) 2.140590804s ago: executing program 1 (id=2460): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000002030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000060000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x401, 0xa08, 0xfffffffc, 0xb, 0x441, 0x5, 0x7fff, 0xc, 0x200, 0xd, 0x1fe, 0x10}}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x1000, 0x0, @private2}}}, 0x32) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r3 = getpid() r4 = socket(0x10, 0x2, 0x0) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000dc0)=[{{&(0x7f0000000680)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000740)}, {&(0x7f0000000780)="e99aff2f3498d4f7245e9b04d553fd7ad51301f424848067872e4b07e1e9bbf67f70f4c9097f0785aac166214e1110d408a1ca9b7185a0951ad8ae799dbe2b824d529979732426", 0x47}, {&(0x7f0000000800)="e2ac966e76cdeab2fbe1a82df19cd220dd", 0x11}], 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000001c0000060000000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x40, 0x800}}, {{&(0x7f0000000b40)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000bc0)="900b6b2f7c381060bdf65e2bb6d8bbf17d35cff4a4cb62667e4319ebe98db828c63463302777bcb279a53ecfb0f42bb69c8cb60a7c272d6cef428acaa5f10c6d196909de89", 0x45}, {&(0x7f0000000c40)}], 0x2, &(0x7f0000000d40)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r7, @ANYBLOB="24000000850f00000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r6, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x48, 0x20004000}}], 0x2, 0x0) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r8, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0x80045505, &(0x7f0000000040)=@usbdevfs_disconnect={0xffffffff}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="28000000100001010000000000000000180000000c", @ANYRES8=0x0, @ANYRES8=r8], 0x28}, {&(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0xf4}], 0x2, 0x0, 0x0, 0x42}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000000)=0x1) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, r6, 0xffffd000) ioctl$KVM_SET_PIT2(r11, 0x4070aea0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000280)={0x14, &(0x7f0000000e40)=ANY=[@ANYBLOB="0000880000000e005940b155812de96225acd5dfdbbefe9447189d30a9af160245803ca039f35ad3c505cbccab7ed0733ae5b20534704904a76fb2ea72796b250f2b85fb6fd2ad2f4d3265d7ee697b21a0ed02b189dc86adcd3cfa2e943887f1f67d75805e3c96a1bc4714d8ee14e245a5a6db84494e0a70ea62060066d2f808ab069625ebe859b4521ba33a1c92e5e79f66932850e230420f903645b7229fa900c69c1b9f592f37123d951459859325e61946c9bc3a7788f9b86059a7ad64ef23c98e3e62168b3ee467514afa7ef8a246c4f9"], &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="0012b000000081befb0c5b41d98132540e6ba98ac1f22a73c4374f70bd5fe7deb5997fbe89f68f914caeb856c2ce6b2b7cb3636bd3b13fc21aee790a738aef4568ce4f93e7f04bf9dfc8895fcb4d93a3355cf27b82e728540f15eed15ed7a1d15dba5dd3ff4af115b6568f68b9c4f4b3df34690713e4c7365018d05d3a409b4531f675568f00088e4743b5e984a9fda05ad5795a7e6af397434b83e70dfadacfa7e31898ac80220bd04e33ff5cd3ef57ac12ea8aaba1"], &(0x7f0000000380)={0x0, 0xa, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0xc, 0x5, 0x7, 0x644, 0xfffb, 0x10, 0x20, 0xb29, 0x9, 0xff, 0x7, 0x1}}, &(0x7f0000000440)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000000500)={0x20, 0x83, 0x2}, &(0x7f0000000540)={0x20, 0x87, 0x2, 0x101}, &(0x7f0000000580)={0x20, 0x89, 0x2}}) 2.140126994s ago: executing program 6 (id=2461): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r2 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000976000/0x400000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0x20, 0x6, 0x0, 0xa1}, {0x6}]}) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @host32=0x4c00, 0xfffe000000000000, 0x0, 0x7}}, @nested_vmresume={0x130, 0x18, 0x1}], 0x50}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.03773498s ago: executing program 6 (id=2462): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', @mcast1, 0x5, 0x6, 0x0, 0x0, 0x3, 0x867000c0, r2}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, @private0={0xfc, 0x0, '\x00', 0x3}, 0x1, 0x6, 0x0, 0x0, 0x6, 0x480000, r2}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in=@loopback, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x9, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1235, 0x8210, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x9, 0x0, 0x2, {0x8, 0xb, 0x0, 0x1, 0x1, 0x9, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x20, 0x9, 0x9, 0xfc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x4, 0x5, {0x8, 0x25, 0x1, 0x80, 0x0, 0x1, 0x8f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x6, 0x8, 0x5, {0x8, 0x25, 0x1, 0x80, 0x0, 0xfe, 0xf0}}}}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) sendmsg$nl_xfrm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[], 0xb8}}, 0x20044800) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000500)={0x2c}, 0x8) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 1.397734381s ago: executing program 1 (id=2471): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000300)={[{@metacopy_on}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0xc, 0x0, 0x3}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x44) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) lseek(r2, 0xfe, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000001c0)={0x10000014}) r5 = getpid() r6 = epoll_create1(0x80000) r7 = socket(0x1, 0x80802, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000000c0)={0x10000001}) shutdown(r7, 0x0) epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000140)={0x60000008}) ioctl$sock_bt_hidp_HIDPCONNDEL(r7, 0x400448c9, &(0x7f0000000280)={@none, 0x7}) kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, r3, &(0x7f0000000180)={r4, r3, 0x6}) getpeername$tipc(r0, 0x0, 0x0) 1.293842506s ago: executing program 1 (id=2473): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e0009043ae87a5c72fa86a4"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000340)={0x20, 0xf, 0xa, "057ad73d776f61619fc4"}, 0x0, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x13, 0x6, @random="6dcd1e261c42"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000240)={0x9f7b, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x40, 0x6, 0xa0, {0xa0, 0x31, "535888a04f244179f03bba7eac7e6bbf5633d78bd3f317570b8a529add779c2b1d95a1df63044067d8fbc27b07a62e4c37958e564b1db176edc104a31ff4c31d9c053365dd82b668c150f242e592b89afde99ad784f997ca11d07771e90359dd5db59ed3c2faf825fa343c22867b5f1662908ca18b9cf6ea18ecd371c93842604059523459f0ed219cc8213b16e71d3e8e42e45cedf003fdc85035994d57"}}, &(0x7f00000000c0)={0x0, 0x3, 0x56, @string={0x56, 0x3, "ab49d045221165583a5c5a768332d38486657d16709a149aca90ddbeef1443ff89517c3e0aed18275adfd3ffc97f0f7cbbe4859f60e3bfc88202b04198b3402e5ada1b0f4e108652685a15fc367f91ab35594fe2"}}}, &(0x7f0000000480)={0x44, &(0x7f0000000180)={0x20, 0xe, 0xa2, "dcb80bedb9203745d80c7253d9997fb5a745a282a6c70dbcd19fbad6fe90705d5ec4396723ea966c98f67881dc2b4cd3f17730d1ee69d4c1c6602350a7a9b50916fc2ce6c9a1836ee34a6e82577cd345d2d240ec3da0e37f8e986fb938702177548ea3bbbce89b286cb99852f0bf25d9b83fbf699f585516f71da789e588b43ba7d1c2ab4b4e2088c7b74fb8cc51c4d8df388c46391a3d69e40d6ccb37d3eb5e2146"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000002c0)={0x20, 0x81, 0x2, "9bcf"}, &(0x7f0000000300)={0x20, 0x82, 0x1, '`'}, &(0x7f0000000380)={0x20, 0x83, 0x3, "e29107"}, &(0x7f00000003c0)={0x20, 0x84, 0x2, "cd41"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "ad5605"}}) 1.189639011s ago: executing program 5 (id=2475): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2, 0x0) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x4) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.stat\x00', 0x5000000, 0x0) readv(r3, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4080, 0xff0}], 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) llistxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x14) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0) read$FUSE(r6, &(0x7f0000001cc0)={0x2020}, 0x2020) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) landlock_restrict_self(r7, 0x0) tkill(r5, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_fuse_handle_req(r4, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000140)={0x50, 0x0, 0x1000000000, {0x7, 0x2b, 0x0, 0x10800880, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000001a40)={[0x1a1e]}, 0x8) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) 1.053965738s ago: executing program 7 (id=2476): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$pid(0x3, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0xffffff80, 0x4) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0) getdents(r0, &(0x7f0000000000), 0x0) 997.810141ms ago: executing program 7 (id=2477): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, &(0x7f0000001fc0)=[{0xfffffffffffffffc}], 0x1, 0x9, 0x0, 0x2, 0x0, 0x2}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r3}, 0x10) readv(r2, &(0x7f0000000fc0)=[{&(0x7f0000003880)=""/4102, 0x1006}], 0x1) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000200)=0xd, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x7, 0x1, 0x0, 0x0, "0000000000000003"}, 0x10}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004000) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) open(0x0, 0x4008040, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x9b, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902890002010420040904000001020d0000052406000105240006000d240f0106000000020006000606241a05ed0d0724140e00400005241500001524120004a317a88b045e4f01a607c0ffcb7e392a0c"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 840.259629ms ago: executing program 6 (id=2478): r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc, "0020742010000000000000000000fffb00"}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket(0x25, 0x6, 0x225) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f0000000200)) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) futimesat(r1, &(0x7f0000000300)='./file0\x00', &(0x7f00000003c0)={{0x0, 0xea60}, {r6, r7/1000+10000}}) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010823, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2003, 0x8c) r9 = openat$incfs(r8, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r5, 0xc038943b, &(0x7f00000002c0)={0xffffffffffffffaf, 0x48, '\x00', 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r10 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') close(r3) writev(r10, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x14, r12, 0x701, 0x70bd2c, 0x0, {0x45}}, 0x14}, 0x1, 0x0, 0x0, 0x20000021}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) ioctl$TIOCL_GETKMSGREDIRECT(r9, 0x40106726, &(0x7f00000000c0)) 693.986566ms ago: executing program 6 (id=2480): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000002030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000060000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x401, 0xa08, 0xfffffffc, 0xb, 0x441, 0x5, 0x7fff, 0xc, 0x200, 0xd, 0x1fe, 0x10}}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x1000, 0x0, @private2}}}, 0x32) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r3 = getpid() r4 = socket(0x10, 0x2, 0x0) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000dc0)=[{{&(0x7f0000000680)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000740)}, {&(0x7f0000000780)="e99aff2f3498d4f7245e9b04d553fd7ad51301f424848067872e4b07e1e9bbf67f70f4c9097f0785aac166214e1110d408a1ca9b7185a0951ad8ae799dbe2b824d529979732426", 0x47}, {&(0x7f0000000800)="e2ac966e76cdeab2fbe1a82df19cd220dd", 0x11}], 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000001c0000060000000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x40, 0x800}}, {{&(0x7f0000000b40)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000bc0)="900b6b2f7c381060bdf65e2bb6d8bbf17d35cff4a4cb62667e4319ebe98db828c63463302777bcb279a53ecfb0f42bb69c8cb60a7c272d6cef428acaa5f10c6d196909de89", 0x45}, {&(0x7f0000000c40)}], 0x2, &(0x7f0000000d40)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r7, @ANYBLOB="24000000850f00000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r6, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x48, 0x20004000}}], 0x2, 0x0) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r8, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0x80045505, &(0x7f0000000040)=@usbdevfs_disconnect={0xffffffff}) 541.554783ms ago: executing program 5 (id=2481): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000)=0x3, 0x4) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) close_range(r1, r2, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925001900fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x4, 0xfffffffe}}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xfa, 0x8, 0x7fffffff}]}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.stat\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0xc0, r5, 0x20, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4d56}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xab}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f8000}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xb621}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x943e}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x501000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20000000, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x31, 0x0, 0x0) r9 = dup(r8) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000000)=@x86={0x3, 0x1, 0xfb, 0x0, 0x10005, 0x5, 0x3, 0xd4, 0x7, 0x2, 0x4, 0x1, 0x0, 0x7, 0x3, 0xd6, 0x5, 0x9, 0x6, '\x00', 0x8, 0x1}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r10) sendmsg$TIPC_CMD_SHOW_PORTS(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r11, 0x1, 0x70bd28, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x24048800) r12 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) accept4(r12, &(0x7f0000000480)=@rc={0x1f, @fixed}, &(0x7f0000000500)=0x80, 0x800) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x4000000) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000040)=0x4) 492.222936ms ago: executing program 5 (id=2482): r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x40, 0x0, 0x7, 0x6}, {0x16, 0x0, 0x9b}]}, 0x10) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8880}, 0x4001) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x8000000000000001, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000005, 0xfffffffface6e3cd, 0x40000000001c, 0x1, 0xffffffffffffffff, 0xfd]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 268.873707ms ago: executing program 5 (id=2483): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x109001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000380)={@void, @void, @eth={@broadcast, @remote, @val={@val={0x88a8, 0x2, 0x1, 0x404}, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x55, 0x67, 0x0, 0x7, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, "6c7aec6177c1fb9be437a2088b1cfd8f5beb22f5cb4a009119a771ae8c322b83e09350159bd7706998675924b1b7442f7a8941ffe83370028173019c4b3de6a637"}}}}}, 0x6b) 84.776066ms ago: executing program 5 (id=2484): setresuid(0x0, 0xee00, 0x0) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$UFFDIO_POISON(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000001000/0x3000)=nil, 0x3000}, 0x1}) 9.89885ms ago: executing program 5 (id=2485): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x333840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x27) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f00000001c0)={0x1, 0x0, &(0x7f0000b20000/0x1000)=nil}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) ioctl$XFS_IOC_GETBMAPA(r4, 0xc020582c, &(0x7f0000000200)={0xff, 0x7, 0x88f4, 0x1, 0xd4}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_connect$uac2(0x3, 0x9d, &(0x7f0000000800)=ANY=[@ANYBLOB="12015002000000408616dd0040000102030109028b00030107600b080b010101ff20050904000000010120000924010600031500073652c29102b9434e0087002009040100000102200009040101010102200006240201033e102401050903010000000309000000cd090501090800000c0d08250183330202000904020000010220000904020101010220000905820900000401f3082501030c00018028506600bdb3cb746f6f1c66f8de10f4a201a33ba0aea934e8b6d4ba5effe0a1de94df330c7100236ba9aa122fe9339aeed9743d7bc56bd950d59f1ef658e26a18ec4d54707eaeb4593eda6c125b85e7497f8f5098b7b6f7a251e2afe96b4eac73840d812a346433c30e9cfb0deb2170c226368dc5abfba113e1cb8e945d5e571e6e0faa702f53431eec77a02b095e643e2c5a91dd8d584cc3ac0249d7c6d624141e2ea217a84f"], &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000080)=""/55, 0x0, 0xeeee8000}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f00000007c0)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305829, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x1) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r8, 0x29, 0xc8, 0x0, 0x0) r9 = accept4(r8, 0x0, &(0x7f0000000240), 0x80000) setsockopt$MRT6_FLUSH(r9, 0x29, 0xd4, &(0x7f00000002c0)=0x3, 0x4) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$eventfd(r10, &(0x7f00000001c0), 0x8) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r6, 0x4008af04, &(0x7f0000000040)) 0s ago: executing program 1 (id=2479): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wg2\x00', 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, 0x0, 0x0) lseek(r4, 0x40e3, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000bfd000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000080)={0x0, &(0x7f0000000f40)=[@wrmsr={0x65, 0x20, {0x4000009e, 0x1}}], 0x20}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r6, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000400)=0x6) sendmmsg$inet(r0, &(0x7f0000000980)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000100)="aceba33de31745142580d53a535ea44f5f42c34f72f1ed9b16847039d72862e7fe5498f52a9f16e456c4e81fe696a41d27eed2798f358ab88615c057d59ef6bb31913712d73cddfb36cef39353d9c2db203255ccc22631caf41c9a6dbf2e3856bfabffde6e1415068a3dd0c2a9dd648dd64b8fd2eedb1b4fe86f8357ebe8ab8c536a15a86c38844b497a6cb90703f07c725ba141deef63080d5363043f4a523554fcd8ee61c303eef8544b0e17b0612420bc3b982a701465d3c21cc1d38f477dd1a22e88db0a29810a70e212d55f6871e6d2f60ad70bbb2c74cceb03dd23becc022c0fc4b342ea9259", 0xe9}, {&(0x7f0000000200)="2e11075040cd9650499b2f69b730e2aa14a8dc2931989168dd3a14bfbd9acf6e42a88dc0", 0x24}, {&(0x7f0000000240)="997d9b493d220178bfed2c00268f23d0903c48c58655ced9748fd91f726da766f3b7f523b8b6e7288172d45bb8b3d177b7115be7441e384f0a19f280bf98f2b970d2d031fba27af83e8e68df94ed2403c26f868458a0a126d76f492ed84e544d246023a0867b11aa1ae7119386143dd6ab47ebb4d418da2dbc00bac93b89571e36ba8edc5395ee8c4d8c5cd020586483fc3bf08312c81fe555e15bc9ea6afe292f0d22ae1f05bbd015f09a73f2b08f534751aec2f42ffa6ddd4df606f74877a9d8c8ada0eb1e4c87fb0af1f8c0e3deb093dc8a0c45544bb5bbb232cff5974d42", 0xe0}, {&(0x7f0000000340)="b77665edbef01205dbde74326386534ea9e5dac218e73040e45868df8dc3c3240d246f0e5f30fc361ba04e1a42ed8a73698d8e23289ca9c6", 0x38}, {&(0x7f0000000380)="62bf9cc9a37026ae51a72e5739c1ccfc267d9552b7224ec050b2cf40a6cc2cb0ea47bfb0368b3cc24f851b88c2dc2caa3b309d8718e5567b77b44c9d33b73fd6b17476b45c229adc10dbfdffd2302c2ce64a78c37607f64a643091b18c", 0x5d}, {&(0x7f0000000400)}, {&(0x7f0000000440)="e1d1a33ae9d931025af676facdc16af672988a13228981df274f38f153ae3145236cbb782f628da4831ab1899569dd98442229395dd67d79f254284a3d3f6142236dfdaa63b35158c6f88359615d2016104df9ea668a068efffb6d6a1b84208e8240921a98", 0x65}, {&(0x7f00000004c0)="05056824f16f3ca32d7a26afcbb1fcd5a07329fb9ab0cb8df768b47da7f783ec7678bdb5fa976768ceeda518945220349064a70272452419f846a0dd5a792606c06892a4096c2672deb335cad68876d53f5e8901999277c6308121d97fa3fbc6781ccffec4415224fac5f648d692bec7c31582edac8ad5ad38d1560758f437a2789d594663a742b0be7ae37768b5856ad61e449ed392da016de72fbede72e5a3650c44e28ded9dc7c0c816c27339e34af5dbb50eec86323dc7a4942c8d1bc8104806e326155771a0cca7c55b19563afceeb2f200dde38e3dbce4a9a44a07f1648b86db3c8714eaa92dd8421685907052138f330cb1", 0xf5}, {&(0x7f00000005c0)="a4eda18fd8f2d893ebd01bc6cf9f815c7f06535b397e0d3150cfefd2231b9f4ac6db9a2c6b9bc6ec701466d98beef71d3cba5ce47815d5d0e27d6f062ca46f30156ed8c3651b4e2b2688248be122d801a3058bf4290f35d938905d29f24bd69daa962a9bb7947888db1b3dfe34fc19cb15da67fc9b988b2b075c7538dd5204154908e9665636c3bafedfb5d107ee785f21a25ee42b8090e1681a79b6a922440b532ea091c90fe3dca398ea41c551282cb98f36ef0f904225493139f4ccd5ad4efe4c04d911f8546b0dd108604a1c23ba56acfb0fa442676543ff", 0xda}, {&(0x7f00000006c0)="89cd25fdee42a16cf45339cf1fde1fe7275b51b4c3dbf3087a99a2f0ba4251223e79cb7bd1132befb693ca48898a00ce1b7507732e00c3185ad2ffe224c16e7501e5a4c93b7e82bec622904b0258843c00b4e36cef14f702e815b941985ea319ec301b8b3a65c097ca6e9bc965d6d0644cba7f7d0f583f4e6baa4d2693f3401001b15a41361f24ac78043bdea1b44e982fee0317d146f64cb46a19fc0416d7ae008a1033ca580ef31f8402a4c41170cf45bad202ef207db9776a531fa6e228162c0870a5c180b95e51865149fabe8223cf9423bf89f8761a", 0xd8}], 0xa, &(0x7f00000009c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000a61dc6ca8fafd123c9f0677f13cb3e143e76d041dbb3859907a290dc4331c34bee2eab7531b5a9c9932bbfe1a624b1cef96c3fb9ea24b00b92c8c03e792cce80ed082d3315d6054e1e365e16b7510d503a3443af", @ANYRES32=r1, @ANYBLOB="ac1414bb0a0101010000000058000000000000000000000007000000442c60f3ac14141300000007e0000001000002000a01010100000004ac141428000000047f00000100000004890a3dac075b8edfe16b9404010000860d000000010107e6b803965e140000000000000000000000020000000100000000000000"], 0x90}}], 0x1, 0x40002) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r7, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) kernel console output (not intermixed with test programs): 45] ? __kasan_check_read+0x15/0x20 [ 213.796013][ T5845] dump_stack+0x19/0x20 [ 213.796031][ T5845] should_fail_ex+0x3d7/0x530 [ 213.796051][ T5845] should_fail+0xf/0x20 [ 213.796067][ T5845] should_fail_usercopy+0x1e/0x30 [ 213.796086][ T5845] __kvm_read_guest_page+0x177/0x210 [ 213.796103][ T5845] kvm_vcpu_read_guest_page+0x31a/0x400 [ 213.796119][ T5845] kvm_fetch_guest_virt+0x146/0x190 [ 213.796140][ T5845] ? __cfi_kvm_fetch_guest_virt+0x10/0x10 [ 213.796160][ T5845] __do_insn_fetch_bytes+0x341/0x760 [ 213.796184][ T5845] ? x86_decode_insn+0x5180/0x5180 [ 213.796206][ T5845] ? __asan_memcpy+0x5a/0x80 [ 213.796226][ T5845] x86_decode_insn+0x333/0x5180 [ 213.796251][ T5845] ? __cfi_x86_decode_insn+0x10/0x10 [ 213.796272][ T5845] ? __kasan_check_write+0x18/0x20 [ 213.796290][ T5845] ? vmx_read_guest_seg_ar+0x1c8/0x350 [ 213.796309][ T5845] ? __asan_memset+0x39/0x50 [ 213.796328][ T5845] ? init_decode_cache+0x7c/0x90 [ 213.796350][ T5845] ? init_emulate_ctxt+0x421/0x560 [ 213.796367][ T5845] ? kvm_inject_realmode_interrupt+0x2e0/0x2e0 [ 213.796385][ T5845] x86_decode_emulated_instruction+0x66/0x180 [ 213.796402][ T5845] x86_emulate_instruction+0x2d9/0x1a30 [ 213.796420][ T5845] ? kvm_mmu_do_page_fault+0x4f3/0x660 [ 213.796439][ T5845] handle_ud+0x199/0x330 [ 213.796454][ T5845] ? __cfi_handle_ud+0x10/0x10 [ 213.796468][ T5845] ? unwind_get_return_address+0x51/0x90 [ 213.796487][ T5845] ? __cfi_rcu_note_context_switch+0x10/0x10 [ 213.796506][ T5845] ? clear_bhb_loop+0x50/0xa0 [ 213.796527][ T5845] ? clear_bhb_loop+0x50/0xa0 [ 213.796546][ T5845] ? clear_bhb_loop+0x50/0xa0 [ 213.796564][ T5845] ? clear_bhb_loop+0x50/0xa0 [ 213.796584][ T5845] ? clear_bhb_loop+0x12/0xa0 [ 213.796603][ T5845] handle_exception_nmi+0x194/0xe60 [ 213.796626][ T5845] ? __cfi_handle_exception_nmi+0x10/0x10 [ 213.796648][ T5845] vmx_handle_exit+0x12c0/0x1b10 [ 213.796667][ T5845] ? kvm_deliver_exception_payload+0xd7/0x200 [ 213.796687][ T5845] ? __cfi_vmx_vcpu_run+0x10/0x10 [ 213.796706][ T5845] ? vmx_handle_exit_irqoff+0x401/0x780 [ 213.796727][ T5845] vcpu_run+0x49f7/0x7840 [ 213.796755][ T5845] ? signal_pending+0xc0/0xc0 [ 213.796772][ T5845] ? __kasan_check_write+0x18/0x20 [ 213.796791][ T5845] ? xfd_validate_state+0x68/0x140 [ 213.796810][ T5845] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 213.796827][ T5845] ? __kasan_check_write+0x18/0x20 [ 213.796846][ T5845] ? fpregs_mark_activate+0x68/0x160 [ 213.796863][ T5845] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 [ 213.796885][ T5845] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 213.796902][ T5845] kvm_arch_vcpu_ioctl_run+0x1167/0x1bd0 [ 213.796922][ T5845] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 213.796941][ T5845] ? kstrtoull+0x13b/0x1e0 [ 213.796959][ T5845] ? kstrtouint+0x78/0xf0 [ 213.796975][ T5845] ? ioctl_has_perm+0x1bc/0x500 [ 213.796993][ T5845] ? __asan_memcpy+0x5a/0x80 [ 213.797012][ T5845] ? ioctl_has_perm+0x408/0x500 [ 213.797031][ T5845] ? has_cap_mac_admin+0xd0/0xd0 [ 213.797048][ T5845] ? __kasan_check_write+0x18/0x20 [ 213.797067][ T5845] ? mutex_lock_killable+0x97/0x1d0 [ 213.797083][ T5845] ? __cfi_mutex_lock_killable+0x10/0x10 [ 213.797098][ T5845] ? proc_fail_nth_write+0x184/0x220 [ 213.797116][ T5845] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 213.797135][ T5845] kvm_vcpu_ioctl+0xa48/0x1000 [ 213.797157][ T5845] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 213.797178][ T5845] ? __cfi_vfs_write+0x10/0x10 [ 213.797198][ T5845] ? __kasan_check_write+0x18/0x20 [ 213.797218][ T5845] ? mutex_unlock+0x90/0x240 [ 213.797232][ T5845] ? __cfi_mutex_unlock+0x10/0x10 [ 213.797254][ T5845] ? __fget_files+0x2c5/0x340 [ 213.797277][ T5845] ? __fget_files+0x2c5/0x340 [ 213.797298][ T5845] ? bpf_lsm_file_ioctl+0xd/0x20 [ 213.797314][ T5845] ? security_file_ioctl+0x3e/0x110 [ 213.797333][ T5845] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 213.797353][ T5845] __se_sys_ioctl+0x132/0x1b0 [ 213.797376][ T5845] __x64_sys_ioctl+0x7f/0xa0 [ 213.797397][ T5845] x64_sys_call+0x1878/0x2ee0 [ 213.797422][ T5845] do_syscall_64+0x57/0xf0 [ 213.797441][ T5845] ? clear_bhb_loop+0x50/0xa0 [ 213.797460][ T5845] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 213.797479][ T5845] RIP: 0033:0x7fc4f5f9c799 [ 213.797494][ T5845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.797509][ T5845] RSP: 002b:00007fc4f6e22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 213.797529][ T5845] RAX: ffffffffffffffda RBX: 00007fc4f6215fa0 RCX: 00007fc4f5f9c799 [ 213.797544][ T5845] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 213.797556][ T5845] RBP: 00007fc4f6e22090 R08: 0000000000000000 R09: 0000000000000000 [ 213.797569][ T5845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.797580][ T5845] R13: 00007fc4f6216038 R14: 00007fc4f6215fa0 R15: 00007ffda708eb68 [ 213.797591][ T5845] [ 214.371568][ T5848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.380035][ T5848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.401558][ T5848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.410705][ T5848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.533401][ T36] audit: type=1400 audit(1773837095.894:1071): avc: denied { checkpoint_restore } for pid=5852 comm="syz.6.2039" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 214.704376][ T5859] netlink: 'syz.6.2040': attribute type 58 has an invalid length. [ 214.714124][ T5859] fuse: Bad value for 'group_id' [ 214.719112][ T5859] fuse: Bad value for 'group_id' [ 214.734312][ T5861] overlay: Unknown parameter 'permit_directio' [ 215.001836][ T45] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 215.074536][ T5867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2044'. [ 215.091696][ T5869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2044'. [ 215.101318][ T5867] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2044'. [ 215.161693][ T45] usb 7-1: Using ep0 maxpacket: 16 [ 215.168893][ T45] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.179040][ T45] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 215.189673][ T45] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 215.198808][ T45] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.206829][ T45] usb 7-1: Product: syz [ 215.211011][ T45] usb 7-1: Manufacturer: syz [ 215.215611][ T45] usb 7-1: SerialNumber: syz [ 215.384655][ T5878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.393436][ T5878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.513461][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 215.518620][ T3295] Bluetooth: hci0: command 0x1003 tx timeout [ 215.549591][ T5882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.558288][ T5882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.655731][ T45] usb 7-1: cannot find UAC_HEADER [ 215.664601][ T45] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 215.671695][ T5886] overlayfs: workdir and upperdir must reside under the same mount [ 215.674439][ T45] usb 7-1: USB disconnect, device number 41 [ 215.687051][ T715] udevd[715]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 215.725943][ T36] audit: type=1400 audit(1773837097.001:1072): avc: denied { append } for pid=5889 comm="syz.7.2053" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 215.726633][ T5890] input: syz0 as /devices/virtual/input/input19 [ 215.792211][ T5894] FAULT_INJECTION: forcing a failure. [ 215.792211][ T5894] name failslab, interval 1, probability 0, space 0, times 0 [ 215.804859][ T5894] CPU: 1 UID: 0 PID: 5894 Comm: syz.7.2055 Not tainted syzkaller #0 49aa54d9fff9a118f1e320bc713a86df8a810573 [ 215.804886][ T5894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 215.804898][ T5894] Call Trace: [ 215.804904][ T5894] [ 215.804911][ T5894] __dump_stack+0x21/0x30 [ 215.804936][ T5894] dump_stack_lvl+0x140/0x1c0 [ 215.804955][ T5894] ? __cfi_dump_stack_lvl+0x10/0x10 [ 215.804986][ T5894] dump_stack+0x19/0x20 [ 215.805003][ T5894] should_fail_ex+0x3d7/0x530 [ 215.805024][ T5894] should_failslab+0xac/0x100 [ 215.805041][ T5894] __kmalloc_cache_noprof+0x41/0x470 [ 215.805064][ T5894] ? lockref_get+0x131/0x1c0 [ 215.805090][ T5894] ? inode_doinit_use_xattr+0x6a/0x550 [ 215.805113][ T5894] ? __kasan_check_write+0x18/0x20 [ 215.805127][ T5894] inode_doinit_use_xattr+0x6a/0x550 [ 215.805142][ T5894] inode_doinit_with_dentry+0x770/0xde0 [ 215.805157][ T5894] ? sb_finish_set_opts+0xa40/0xa40 [ 215.805171][ T5894] ? __kasan_slab_free+0x6a/0x80 [ 215.805185][ T5894] selinux_d_instantiate+0x2b/0x40 [ 215.805199][ T5894] security_d_instantiate+0xb8/0xf0 [ 215.805213][ T5894] d_splice_alias+0x71/0x3a0 [ 215.805227][ T5894] ovl_lookup+0x1ba0/0x1d60 [ 215.805239][ T5894] ? __cfi_ovl_lookup+0x10/0x10 [ 215.805249][ T5894] ? __kasan_check_write+0x18/0x20 [ 215.805262][ T5894] ? _raw_spin_lock+0x92/0x120 [ 215.805275][ T5894] ? __cfi__raw_spin_lock+0x10/0x10 [ 215.805288][ T5894] ? d_alloc+0x174/0x1c0 [ 215.805300][ T5894] lookup_one_qstr_excl+0x12c/0x280 [ 215.805315][ T5894] do_rmdir+0x1d2/0x590 [ 215.805326][ T5894] ? __cfi_do_rmdir+0x10/0x10 [ 215.805337][ T5894] ? getname_flags+0x208/0x700 [ 215.805351][ T5894] __x64_sys_unlinkat+0xc9/0xf0 [ 215.805363][ T5894] x64_sys_call+0x2974/0x2ee0 [ 215.805377][ T5894] do_syscall_64+0x57/0xf0 [ 215.805389][ T5894] ? clear_bhb_loop+0x50/0xa0 [ 215.805404][ T5894] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 215.805417][ T5894] RIP: 0033:0x7f1d9c19c799 [ 215.805427][ T5894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.805437][ T5894] RSP: 002b:00007f1d9d0c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 215.805450][ T5894] RAX: ffffffffffffffda RBX: 00007f1d9c415fa0 RCX: 00007f1d9c19c799 [ 215.805459][ T5894] RDX: 0000000000000200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 215.805467][ T5894] RBP: 00007f1d9d0c7090 R08: 0000000000000000 R09: 0000000000000000 [ 215.805474][ T5894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.805481][ T5894] R13: 00007f1d9c416038 R14: 00007f1d9c415fa0 R15: 00007ffc86b77f88 [ 215.805490][ T5894] [ 216.078230][ T423] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 216.239364][ T423] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 216.250388][ T423] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 216.261194][ T423] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 216.274053][ T423] usb 8-1: New USB device found, idVendor=046d, idProduct=c081, bcdDevice= 0.00 [ 216.283208][ T423] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.295367][ T5898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.300953][ T423] usb 8-1: config 0 descriptor?? [ 216.303886][ T5898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.309782][ T5896] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 216.476128][ T36] audit: type=1400 audit(1773837097.714:1073): avc: denied { getopt } for pid=5901 comm="syz.6.2059" laddr=172.20.20.170 lport=8 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 216.632031][ T5908] 9pnet_fd: p9_fd_create_tcp (5908): problem connecting socket to 127.0.0.1 [ 216.752246][ T423] usbhid 8-1:0.0: can't add hid device: -71 [ 216.758252][ T423] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 216.767528][ T423] usb 8-1: USB disconnect, device number 2 [ 216.880001][ C0] blk_print_req_error: 35 callbacks suppressed [ 216.880019][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 216.883455][ T5914] fuse: Bad value for 'user_id' [ 216.886210][ C0] buffer_io_error: 35 callbacks suppressed [ 216.886224][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 216.895965][ T5914] fuse: Bad value for 'user_id' [ 216.900473][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 216.927738][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 216.935991][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 216.945144][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 216.953387][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 216.962510][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 216.970564][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 216.979697][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 217.034747][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 217.043933][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 217.054926][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 217.064073][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 217.072070][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 217.081221][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 217.089281][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 217.098401][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 217.106432][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 217.115555][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 217.316426][ T5931] input: syz0 as /devices/virtual/input/input20 [ 217.591569][ T423] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 217.751406][ T423] usb 8-1: Using ep0 maxpacket: 16 [ 217.757607][ T423] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.767761][ T423] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 217.778066][ T423] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 217.787165][ T423] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.795174][ T423] usb 8-1: Product: syz [ 217.799332][ T423] usb 8-1: Manufacturer: syz [ 217.804182][ T423] usb 8-1: SerialNumber: syz [ 218.023586][ T5933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.032120][ T5933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.041085][ T423] usb 8-1: 0:2 : does not exist [ 218.052189][ T423] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 218.067148][ T423] usb 8-1: USB disconnect, device number 3 [ 218.082085][ T715] udevd[715]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 218.114788][ T5937] fuse: Bad value for 'user_id' [ 218.119632][ T5937] fuse: Bad value for 'user_id' [ 218.209417][ T5948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.218251][ T5948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.253542][ T5952] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 218.325610][ T5954] x_tables: duplicate underflow at hook 1 [ 218.427786][ T5960] fuse: Bad value for 'user_id' [ 218.432716][ T5960] fuse: Bad value for 'user_id' [ 218.569143][ T5970] fuse: Unknown parameter 'group_id00000000000000000000' [ 218.607142][ T36] audit: type=1400 audit(1773837099.713:1074): avc: denied { getopt } for pid=5971 comm="syz.1.2088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 218.660941][ T5975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.673298][ T5975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.674840][ T5977] tipc: Enabling not permitted [ 218.686679][ T5977] tipc: Enabling of bearer rejected, failed to enable media [ 218.699921][ T45] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 218.870701][ T5993] fuse: Unknown parameter 'group_id00000000000000000000' [ 218.884370][ T45] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.900959][ T36] audit: type=1400 audit(1773837099.985:1075): avc: denied { create } for pid=5994 comm="syz.5.2097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 218.903309][ T5975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.923711][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 218.948178][ T5975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.956333][ T45] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 218.978439][ T45] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 218.987596][ T45] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.995689][ T45] usb 7-1: Product: syz [ 219.000637][ T45] usb 7-1: Manufacturer: syz [ 219.005236][ T45] usb 7-1: SerialNumber: syz [ 219.014144][ T45] usb 7-1: config 0 descriptor?? [ 219.129976][ T5999] tipc: Enabling not permitted [ 219.135701][ T5999] tipc: Enabling of bearer rejected, failed to enable media [ 219.166167][ T6001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.175634][ T6001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.185154][ T6001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.194470][ T6001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.205263][ T6001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.215094][ T6001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.284600][ T6008] cgroup: subsys name conflicts with all [ 219.420161][ T6015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.429367][ T6015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.450941][ T45] usb 7-1: USB disconnect, device number 42 [ 219.560873][ T6019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.569386][ T6019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.861201][ T6021] tipc: Enabling not permitted [ 219.866790][ T6021] tipc: Enabling of bearer rejected, failed to enable media [ 219.904925][ T36] audit: type=1326 audit(1773837100.932:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6022 comm="syz.7.2109" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d9c19c799 code=0x0 [ 220.012441][ T6029] tap0: tun_chr_ioctl cmd 1074025672 [ 220.017908][ T6029] tap0: ignored: set checksum enabled [ 220.027469][ T36] audit: type=1400 audit(1773837101.045:1077): avc: denied { mounton } for pid=6030 comm="syz.5.2112" path="/syzcgroup/cpu/syz5/cpuset.cpus" dev="cgroup" ino=321 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 220.040836][ T6029] netlink: 144 bytes leftover after parsing attributes in process `syz.6.2111'. [ 220.133197][ T6042] lo: MTU too low for tipc bearer [ 220.138321][ T6042] tipc: Enabling of bearer rejected, failed to enable media [ 220.157978][ T36] audit: type=1400 audit(1773837101.167:1078): avc: denied { compute_member } for pid=6046 comm="syz.6.2119" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 220.179135][ T334] Bluetooth: hci0: Frame reassembly failed (-84) [ 220.197170][ T6053] FAULT_INJECTION: forcing a failure. [ 220.197170][ T6053] name failslab, interval 1, probability 0, space 0, times 0 [ 220.209866][ T6053] CPU: 0 UID: 0 PID: 6053 Comm: syz.5.2121 Not tainted syzkaller #0 49aa54d9fff9a118f1e320bc713a86df8a810573 [ 220.209894][ T6053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 220.209906][ T6053] Call Trace: [ 220.209913][ T6053] [ 220.209921][ T6053] __dump_stack+0x21/0x30 [ 220.209948][ T6053] dump_stack_lvl+0x140/0x1c0 [ 220.209970][ T6053] ? __cfi_dump_stack_lvl+0x10/0x10 [ 220.209994][ T6053] dump_stack+0x19/0x20 [ 220.210015][ T6053] should_fail_ex+0x3d7/0x530 [ 220.210036][ T6053] should_failslab+0xac/0x100 [ 220.210053][ T6053] __kmalloc_node_noprof+0x6c/0x4f0 [ 220.210075][ T6053] ? crypto_create_tfm_node+0xa5/0x4d0 [ 220.210096][ T6053] ? crypto_alg_extsize+0x1f/0x90 [ 220.210119][ T6053] crypto_create_tfm_node+0xa5/0x4d0 [ 220.210138][ T6053] ? up_read+0x26/0x1c0 [ 220.210159][ T6053] crypto_spawn_tfm2+0x60/0x90 [ 220.210182][ T6053] crypto_authenc_init_tfm+0x71/0x250 [ 220.210204][ T6053] ? crypto_aead_init_tfm+0x107/0x1a0 [ 220.210221][ T6053] ? __cfi_crypto_authenc_init_tfm+0x10/0x10 [ 220.210243][ T6053] crypto_aead_init_tfm+0x11e/0x1a0 [ 220.210260][ T6053] crypto_create_tfm_node+0x198/0x4d0 [ 220.210280][ T6053] ? crypto_alg_mod_lookup+0x3a2/0x5b0 [ 220.210301][ T6053] crypto_alloc_tfm_node+0x169/0x370 [ 220.210322][ T6053] crypto_alloc_aead+0x34/0x40 [ 220.210339][ T6053] esp_init_state+0x63f/0x1290 [ 220.210359][ T6053] ? netlink_sendmsg+0x7fe/0xb10 [ 220.210381][ T6053] ? x64_sys_call+0x2a4c/0x2ee0 [ 220.210405][ T6053] ? __cfi_esp_init_state+0x10/0x10 [ 220.210429][ T6053] ? __xfrm_init_state+0x453/0x1070 [ 220.210452][ T6053] ? __asan_memcpy+0x5a/0x80 [ 220.210475][ T6053] __xfrm_init_state+0xad3/0x1070 [ 220.210506][ T6053] xfrm_add_sa+0x2b62/0x3ed0 [ 220.210527][ T6053] ? selinux_capable+0x38/0x50 [ 220.210551][ T6053] ? __cfi_xfrm_add_sa+0x10/0x10 [ 220.210572][ T6053] xfrm_user_rcv_msg+0x5f6/0x910 [ 220.210592][ T6053] ? __cfi_xfrm_user_rcv_msg+0x10/0x10 [ 220.210616][ T6053] ? __asan_memcpy+0x5a/0x80 [ 220.210638][ T6053] ? avc_has_perm_noaudit+0x28a/0x360 [ 220.210662][ T6053] ? avc_has_perm+0x155/0x240 [ 220.210684][ T6053] netlink_rcv_skb+0x259/0x4f0 [ 220.210704][ T6053] ? __cfi_xfrm_user_rcv_msg+0x10/0x10 [ 220.210725][ T6053] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 220.210746][ T6053] ? __kasan_check_write+0x18/0x20 [ 220.210768][ T6053] ? mutex_lock+0x97/0x1d0 [ 220.210792][ T6053] ? __cfi_mutex_lock+0x10/0x10 [ 220.210816][ T6053] ? netlink_autobind+0x1c0/0x1c0 [ 220.210839][ T6053] xfrm_netlink_rcv+0x76/0x90 [ 220.210859][ T6053] netlink_unicast+0x8c3/0xa60 [ 220.210879][ T6053] netlink_sendmsg+0x7fe/0xb10 [ 220.210901][ T6053] ? __cfi_netlink_sendmsg+0x10/0x10 [ 220.210922][ T6053] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 220.210947][ T6053] ? security_socket_sendmsg+0x3d/0x100 [ 220.210972][ T6053] ? __cfi_netlink_sendmsg+0x10/0x10 [ 220.210992][ T6053] ____sys_sendmsg+0xa8f/0xae0 [ 220.211015][ T6053] ? __import_iovec+0x5ad/0x7c0 [ 220.211032][ T6053] ? __sys_sendmsg_sock+0x50/0x50 [ 220.211055][ T6053] ? import_iovec+0x80/0xb0 [ 220.211072][ T6053] ___sys_sendmsg+0x2a6/0x370 [ 220.211093][ T6053] ? __sys_sendmsg+0x2a0/0x2a0 [ 220.211113][ T6053] ? proc_fail_nth_write+0x184/0x220 [ 220.211133][ T6053] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 220.211158][ T6053] __x64_sys_sendmsg+0x1fb/0x2d0 [ 220.211178][ T6053] ? fput+0x1a4/0x240 [ 220.211197][ T6053] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 220.211218][ T6053] ? ksys_write+0x1f3/0x260 [ 220.211242][ T6053] ? __kasan_check_read+0x15/0x20 [ 220.211263][ T6053] x64_sys_call+0x2a4c/0x2ee0 [ 220.211286][ T6053] do_syscall_64+0x57/0xf0 [ 220.211307][ T6053] ? clear_bhb_loop+0x50/0xa0 [ 220.211331][ T6053] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 220.211352][ T6053] RIP: 0033:0x7fc4f5f9c799 [ 220.211369][ T6053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.211385][ T6053] RSP: 002b:00007fc4f6e22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.211407][ T6053] RAX: ffffffffffffffda RBX: 00007fc4f6215fa0 RCX: 00007fc4f5f9c799 [ 220.211423][ T6053] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 220.211436][ T6053] RBP: 00007fc4f6e22090 R08: 0000000000000000 R09: 0000000000000000 [ 220.211449][ T6053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 220.211460][ T6053] R13: 00007fc4f6216038 R14: 00007fc4f6215fa0 R15: 00007ffda708eb68 [ 220.211477][ T6053] [ 220.438019][ T6058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.651131][ T6058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.661706][ T6060] fuse: Bad value for 'user_id' [ 220.666574][ T6060] fuse: Bad value for 'user_id' [ 220.692030][ T6064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.700481][ T6064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.055198][ T387] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 221.206963][ T6069] input: syz0 as /devices/virtual/input/input22 [ 221.215092][ T387] usb 8-1: Using ep0 maxpacket: 16 [ 221.221590][ T387] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.231716][ T387] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 221.244532][ T387] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 221.254532][ T6073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.265616][ T6075] netlink: 'syz.5.2130': attribute type 1 has an invalid length. [ 221.267582][ T387] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.273790][ T6073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.283949][ T387] usb 8-1: Product: syz [ 221.290794][ T6075] netlink: 'syz.5.2130': attribute type 1 has an invalid length. [ 221.293213][ T387] usb 8-1: Manufacturer: syz [ 221.305558][ T387] usb 8-1: SerialNumber: syz [ 221.316684][ T36] audit: type=1400 audit(1773837102.255:1079): avc: denied { read } for pid=6072 comm="syz.1.2131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 221.347388][ T6079] fuse: Bad value for 'user_id' [ 221.352247][ T6079] fuse: Bad value for 'user_id' [ 221.386146][ T6086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.394615][ T6086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.555143][ T36] audit: type=1326 audit(1773837102.471:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6066 comm="syz.7.2127" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d9c19c799 code=0x20000000 [ 221.813224][ T387] usb 8-1: 0:2 : does not exist [ 221.819958][ T387] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 221.832586][ T387] usb 8-1: USB disconnect, device number 4 [ 222.032021][ T6100] fuse: Bad value for 'fd' [ 222.070618][ T6106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.080147][ T6106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.334093][ T3295] Bluetooth: hci0: command 0x1003 tx timeout [ 222.334128][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 222.389371][ T36] audit: type=1326 audit(1773837103.259:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6113 comm="syz.6.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca939c799 code=0x7ffc0000 [ 222.412982][ T36] audit: type=1326 audit(1773837103.259:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6113 comm="syz.6.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6ca935cfce code=0x7ffc0000 [ 222.436423][ T36] audit: type=1326 audit(1773837103.259:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6113 comm="syz.6.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6ca935cfce code=0x7ffc0000 [ 222.459826][ T36] audit: type=1326 audit(1773837103.259:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6113 comm="syz.6.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca939c799 code=0x7ffc0000 [ 222.483416][ T36] audit: type=1326 audit(1773837103.259:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6113 comm="syz.6.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f6ca939c799 code=0x7ffc0000 [ 222.506746][ T36] audit: type=1326 audit(1773837103.259:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6113 comm="syz.6.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca939c799 code=0x7ffc0000 [ 222.530202][ T36] audit: type=1326 audit(1773837103.259:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6113 comm="syz.6.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6ca939c799 code=0x7ffc0000 [ 222.553578][ T36] audit: type=1326 audit(1773837103.259:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6113 comm="syz.6.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca939c799 code=0x7ffc0000 [ 222.633476][ C0] blk_print_req_error: 185 callbacks suppressed [ 222.633493][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 222.642237][ T6121] fuse: Bad value for 'fd' [ 222.648884][ C0] buffer_io_error: 185 callbacks suppressed [ 222.648900][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 222.670339][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 222.679535][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 222.688142][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 222.697299][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 222.706952][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 222.716116][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 222.724274][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 222.733421][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 222.794170][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 222.803331][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 222.828160][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 222.837327][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 222.848232][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 222.857379][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 222.865353][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 222.874479][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 222.882640][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 222.883722][ T887] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 222.891801][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 222.955036][ T6149] fuse: Bad value for 'fd' [ 223.069438][ T887] usb 7-1: Using ep0 maxpacket: 8 [ 223.075930][ T887] usb 7-1: unable to get BOS descriptor or descriptor too short [ 223.084689][ T887] usb 7-1: config 12 interface 0 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0 [ 223.094779][ T887] usb 7-1: config 12 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 0 [ 223.104581][ T887] usb 7-1: config 12 interface 0 has no altsetting 0 [ 223.112858][ T887] usb 7-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 223.121901][ T887] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.130434][ T887] usb 7-1: Product: syz [ 223.134810][ T887] usb 7-1: Manufacturer: syz [ 223.139407][ T887] usb 7-1: SerialNumber: syz [ 223.361041][ T887] usb 7-1: selecting invalid altsetting 0 [ 223.369430][ T887] snd-usb-audio 7-1:12.0: probe with driver snd-usb-audio failed with error -12 [ 223.379899][ T887] usb 7-1: USB disconnect, device number 43 [ 223.387175][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:12.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 223.948887][ T6164] tipc: Failed to remove unknown binding: 66,0,0/0:157914512/157914514 [ 223.957188][ T6164] tipc: Failed to remove unknown binding: 66,0,0/0:157914512/157914513 [ 223.965931][ T6164] tipc: Failed to remove unknown binding: 66,0,0/0:157914512/157914514 [ 223.974303][ T6164] tipc: Failed to remove unknown binding: 66,0,0/0:157914512/157914513 [ 224.036739][ T6177] fuse: Bad value for 'fd' [ 224.048609][ T6179] erofs: (device loop6): erofs_read_superblock: cannot find valid erofs superblock [ 224.066032][ T6179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6179 comm=syz.6.2174 [ 224.177711][ T6199] fuse: Invalid rootmode [ 224.401579][ T887] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 224.474987][ T6219] netlink: 'syz.1.2191': attribute type 46 has an invalid length. [ 224.484925][ T6219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6219 comm=syz.1.2191 [ 224.506712][ T6224] FAULT_INJECTION: forcing a failure. [ 224.506712][ T6224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.519848][ T6224] CPU: 1 UID: 0 PID: 6224 Comm: syz.1.2192 Not tainted syzkaller #0 49aa54d9fff9a118f1e320bc713a86df8a810573 [ 224.519868][ T6224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 224.519875][ T6224] Call Trace: [ 224.519880][ T6224] [ 224.519885][ T6224] __dump_stack+0x21/0x30 [ 224.519902][ T6224] dump_stack_lvl+0x140/0x1c0 [ 224.519915][ T6224] ? __cfi_dump_stack_lvl+0x10/0x10 [ 224.519928][ T6224] ? __kasan_check_write+0x18/0x20 [ 224.519943][ T6224] ? kvm_arch_vcpu_load+0x683/0x8f0 [ 224.519959][ T6224] dump_stack+0x19/0x20 [ 224.519971][ T6224] should_fail_ex+0x3d7/0x530 [ 224.519983][ T6224] should_fail+0xf/0x20 [ 224.519994][ T6224] should_fail_usercopy+0x1e/0x30 [ 224.520007][ T6224] _copy_from_user+0x20/0xa0 [ 224.520022][ T6224] kvm_arch_vcpu_ioctl+0xa6e/0x2d90 [ 224.520036][ T6224] ? avc_has_perm+0x155/0x240 [ 224.520050][ T6224] ? __cfi_avc_has_perm+0x10/0x10 [ 224.520063][ T6224] ? kasan_save_alloc_info+0x40/0x50 [ 224.520075][ T6224] ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10 [ 224.520090][ T6224] ? selinux_file_open+0x46c/0x630 [ 224.520102][ T6224] ? __cfi_selinux_file_open+0x10/0x10 [ 224.520116][ T6224] ? is_bpf_text_address+0x17b/0x1a0 [ 224.520129][ T6224] ? kernel_text_address+0xa9/0xe0 [ 224.520142][ T6224] ? __kernel_text_address+0x11/0x40 [ 224.520153][ T6224] ? __asan_set_shadow_00+0x12/0x20 [ 224.520172][ T6224] ? do_vfs_ioctl+0x182d/0x2010 [ 224.520182][ T6224] ? arch_stack_walk+0x10a/0x170 [ 224.520196][ T6224] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 224.520211][ T6224] ? _parse_integer_limit+0x195/0x1e0 [ 224.520223][ T6224] ? _parse_integer+0x2e/0x40 [ 224.520234][ T6224] ? kstrtoull+0x13b/0x1e0 [ 224.520245][ T6224] ? kstrtouint+0x78/0xf0 [ 224.520256][ T6224] ? ioctl_has_perm+0x1bc/0x500 [ 224.520268][ T6224] ? __asan_memcpy+0x5a/0x80 [ 224.520280][ T6224] ? ioctl_has_perm+0x408/0x500 [ 224.520292][ T6224] ? has_cap_mac_admin+0xd0/0xd0 [ 224.520304][ T6224] ? __kasan_check_write+0x18/0x20 [ 224.520317][ T6224] ? mutex_lock_killable+0x97/0x1d0 [ 224.520327][ T6224] ? __cfi_mutex_lock_killable+0x10/0x10 [ 224.520337][ T6224] ? proc_fail_nth_write+0x184/0x220 [ 224.520349][ T6224] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 224.520361][ T6224] kvm_vcpu_ioctl+0x7da/0x1000 [ 224.520376][ T6224] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 224.520390][ T6224] ? __cfi_vfs_write+0x10/0x10 [ 224.520404][ T6224] ? __kasan_check_write+0x18/0x20 [ 224.520416][ T6224] ? mutex_unlock+0x90/0x240 [ 224.520426][ T6224] ? __cfi_mutex_unlock+0x10/0x10 [ 224.520441][ T6224] ? __fget_files+0x2c5/0x340 [ 224.520457][ T6224] ? __fget_files+0x2c5/0x340 [ 224.520471][ T6224] ? bpf_lsm_file_ioctl+0xd/0x20 [ 224.520482][ T6224] ? security_file_ioctl+0x3e/0x110 [ 224.520493][ T6224] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 224.520507][ T6224] __se_sys_ioctl+0x132/0x1b0 [ 224.520522][ T6224] __x64_sys_ioctl+0x7f/0xa0 [ 224.520536][ T6224] x64_sys_call+0x1878/0x2ee0 [ 224.520550][ T6224] do_syscall_64+0x57/0xf0 [ 224.520562][ T6224] ? clear_bhb_loop+0x50/0xa0 [ 224.520576][ T6224] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 224.520588][ T6224] RIP: 0033:0x7f365e79c799 [ 224.520598][ T6224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.520608][ T6224] RSP: 002b:00007f365f5ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 224.520620][ T6224] RAX: ffffffffffffffda RBX: 00007f365ea15fa0 RCX: 00007f365e79c799 [ 224.520629][ T6224] RDX: 00002000000000c0 RSI: 000000004004ae86 RDI: 0000000000000005 [ 224.520637][ T6224] RBP: 00007f365f5ce090 R08: 0000000000000000 R09: 0000000000000000 [ 224.520644][ T6224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.520652][ T6224] R13: 00007f365ea16038 R14: 00007f365ea15fa0 R15: 00007ffdf6d60328 [ 224.520661][ T6224] [ 224.935793][ T887] usb 8-1: unable to get BOS descriptor or descriptor too short [ 224.937592][ T6235] fuse: Invalid rootmode [ 224.950188][ T887] usb 8-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 224.960564][ T887] usb 8-1: New USB device found, idVendor=0b95, idProduct=2790, bcdDevice=d8.c6 [ 224.969639][ T887] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.977657][ T887] usb 8-1: Product: syz [ 224.981812][ T887] usb 8-1: Manufacturer: syz [ 224.986398][ T887] usb 8-1: SerialNumber: syz [ 225.028025][ T6246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.036483][ T6246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.105150][ T6251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.113623][ T6251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.210195][ T887] usb 8-1: USB disconnect, device number 5 [ 225.441913][ T6253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.446004][ T387] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 225.450441][ T6253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.469540][ T6253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.478157][ T6253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.616584][ T387] usb 7-1: Using ep0 maxpacket: 16 [ 225.622681][ T387] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.632894][ T387] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 225.643248][ T387] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 225.652421][ T387] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.660422][ T387] usb 7-1: Product: syz [ 225.664567][ T387] usb 7-1: Manufacturer: syz [ 225.669132][ T387] usb 7-1: SerialNumber: syz [ 225.882849][ T6257] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2205'. [ 225.901574][ T6259] fuse: Invalid rootmode [ 225.918298][ T6261] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1309 [ 226.021497][ T423] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 226.069360][ T6275] netlink: 'syz.5.2212': attribute type 12 has an invalid length. [ 226.077264][ T6275] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2212'. [ 226.086939][ T6275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.095478][ T6275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.103152][ T387] usb 7-1: cannot find UAC_HEADER [ 226.113879][ T6275] netlink: 'syz.5.2212': attribute type 4 has an invalid length. [ 226.123375][ T387] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 226.139710][ T387] usb 7-1: USB disconnect, device number 44 [ 226.144482][ T715] udevd[715]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 226.202747][ T423] usb 8-1: Using ep0 maxpacket: 32 [ 226.209657][ T423] usb 8-1: unable to get BOS descriptor or descriptor too short [ 226.224671][ T423] usb 8-1: config 128 has an invalid interface number: 127 but max is 3 [ 226.233004][ T423] usb 8-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 226.245364][ T423] usb 8-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 226.254397][ T423] usb 8-1: config 128 has no interface number 0 [ 226.260783][ T423] usb 8-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 226.272096][ T423] usb 8-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 226.282261][ T423] usb 8-1: config 128 interface 127 has no altsetting 0 [ 226.290819][ T423] usb 8-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 226.300002][ T423] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.308025][ T423] usb 8-1: Product: syz [ 226.312326][ T423] usb 8-1: Manufacturer: syz [ 226.316952][ T423] usb 8-1: SerialNumber: syz [ 226.537646][ T6255] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2204'. [ 226.554438][ T423] usb 8-1: USB disconnect, device number 6 [ 226.566117][ T715] udevd[715]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 226.793621][ T6290] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2216'. [ 226.842512][ T6292] fuse: Bad value for 'rootmode' [ 227.158683][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 227.158699][ T36] audit: type=1400 audit(1773837107.735:1097): avc: denied { map } for pid=6302 comm="syz.1.2220" path="/proc/1324/ns" dev="proc" ino=71668 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 227.228981][ T6321] fuse: Bad value for 'rootmode' [ 227.257111][ T6328] /dev/loop5: Can't open blockdev [ 227.262772][ T6326] fuse: Invalid rootmode [ 227.284674][ T6330] fuse: Unknown parameter 'fä' [ 227.288383][ T6331] fuse: Unknown parameter 'fä' [ 227.305385][ T6336] FAULT_INJECTION: forcing a failure. [ 227.305385][ T6336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.318483][ T6336] CPU: 1 UID: 0 PID: 6336 Comm: syz.7.2232 Not tainted syzkaller #0 49aa54d9fff9a118f1e320bc713a86df8a810573 [ 227.318511][ T6336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 227.318521][ T6336] Call Trace: [ 227.318528][ T6336] [ 227.318537][ T6336] __dump_stack+0x21/0x30 [ 227.318564][ T6336] dump_stack_lvl+0x140/0x1c0 [ 227.318586][ T6336] ? __cfi_dump_stack_lvl+0x10/0x10 [ 227.318609][ T6336] dump_stack+0x19/0x20 [ 227.318629][ T6336] should_fail_ex+0x3d7/0x530 [ 227.318651][ T6336] should_fail+0xf/0x20 [ 227.318670][ T6336] should_fail_usercopy+0x1e/0x30 [ 227.318692][ T6336] _copy_from_user+0x20/0xa0 [ 227.318717][ T6336] __se_sys_mount+0x182/0x480 [ 227.318755][ T6336] ? ksys_write+0x1f3/0x260 [ 227.318777][ T6336] ? __x64_sys_mount+0xf0/0xf0 [ 227.318801][ T6336] __x64_sys_mount+0xc3/0xf0 [ 227.318823][ T6336] x64_sys_call+0x2021/0x2ee0 [ 227.318846][ T6336] do_syscall_64+0x57/0xf0 [ 227.318874][ T6336] ? clear_bhb_loop+0x50/0xa0 [ 227.318898][ T6336] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 227.318919][ T6336] RIP: 0033:0x7f1d9c19c799 [ 227.318935][ T6336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.318950][ T6336] RSP: 002b:00007f1d9d0c7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 227.318971][ T6336] RAX: ffffffffffffffda RBX: 00007f1d9c415fa0 RCX: 00007f1d9c19c799 [ 227.318984][ T6336] RDX: 0000200000000180 RSI: 0000200000000040 RDI: 0000000000000000 [ 227.318998][ T6336] RBP: 00007f1d9d0c7090 R08: 0000200000000280 R09: 0000000000000000 [ 227.319011][ T6336] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000001 [ 227.319024][ T6336] R13: 00007f1d9c416038 R14: 00007f1d9c415fa0 R15: 00007ffc86b77f88 [ 227.319040][ T6336] [ 227.779967][ T387] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 227.837146][ T6354] fuse: Invalid rootmode [ 227.886551][ T423] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 227.939818][ T387] usb 8-1: Using ep0 maxpacket: 32 [ 227.951182][ T387] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.968542][ T387] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.978365][ T387] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 227.992031][ T6359] kvm: kvm [6358]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 228.000798][ T6359] kvm: kvm [6358]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 228.009440][ T387] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.018162][ T387] usb 8-1: config 0 descriptor?? [ 228.049971][ T423] usb 7-1: Using ep0 maxpacket: 16 [ 228.056223][ T423] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.066393][ T423] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 228.078031][ T423] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 228.087188][ T423] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.095294][ T423] usb 7-1: Product: syz [ 228.099493][ T423] usb 7-1: Manufacturer: syz [ 228.104148][ T423] usb 7-1: SerialNumber: syz [ 228.238802][ C0] blk_print_req_error: 125 callbacks suppressed [ 228.238822][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 228.254205][ C0] buffer_io_error: 125 callbacks suppressed [ 228.254219][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 228.268395][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 228.277561][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 228.285708][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 228.294879][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 228.303075][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 228.304524][ T6366] FAULT_INJECTION: forcing a failure. [ 228.304524][ T6366] name failslab, interval 1, probability 0, space 0, times 0 [ 228.312196][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 228.325101][ T6366] CPU: 1 UID: 0 PID: 6366 Comm: syz.5.2243 Not tainted syzkaller #0 49aa54d9fff9a118f1e320bc713a86df8a810573 [ 228.325128][ T6366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 228.325139][ T6366] Call Trace: [ 228.325146][ T6366] [ 228.325154][ T6366] __dump_stack+0x21/0x30 [ 228.325181][ T6366] dump_stack_lvl+0x140/0x1c0 [ 228.325201][ T6366] ? __cfi_dump_stack_lvl+0x10/0x10 [ 228.325222][ T6366] ? ovl_lookup_single+0x8fd/0xb90 [ 228.325242][ T6366] dump_stack+0x19/0x20 [ 228.325262][ T6366] should_fail_ex+0x3d7/0x530 [ 228.325283][ T6366] ? ovl_stack_alloc+0x31/0xb0 [ 228.325301][ T6366] should_failslab+0xac/0x100 [ 228.325319][ T6366] __kmalloc_noprof+0x69/0x500 [ 228.325341][ T6366] ? ovl_lookup_layer+0x355/0x420 [ 228.325359][ T6366] ? ovl_stack_alloc+0x31/0xb0 [ 228.325377][ T6366] ovl_stack_alloc+0x31/0xb0 [ 228.325395][ T6366] ovl_lookup+0x593/0x1d60 [ 228.325414][ T6366] ? security_transition_sid+0x79/0xa0 [ 228.325432][ T6366] ? may_create+0x5f6/0x810 [ 228.325453][ T6366] ? __cfi_ovl_lookup+0x10/0x10 [ 228.325471][ T6366] ? __cfi_ovl_permission+0x10/0x10 [ 228.325495][ T6366] ? __cfi_ovl_permission+0x10/0x10 [ 228.325518][ T6366] ? bpf_lsm_inode_create+0xd/0x20 [ 228.325542][ T6366] ? security_inode_create+0x7e/0x180 [ 228.325568][ T6366] path_openat+0x1315/0x34f0 [ 228.325590][ T6366] ? do_filp_open+0x440/0x440 [ 228.325608][ T6366] do_filp_open+0x1f5/0x440 [ 228.325626][ T6366] ? __cfi_do_filp_open+0x10/0x10 [ 228.325647][ T6366] ? alloc_fd+0x4e6/0x5a0 [ 228.325670][ T6366] do_sys_openat2+0x134/0x1d0 [ 228.325689][ T6366] ? fput+0x1a4/0x240 [ 228.325707][ T6366] ? do_sys_open+0x100/0x100 [ 228.325724][ T6366] ? ksys_write+0x1f3/0x260 [ 228.325746][ T6366] ? __cfi_ksys_write+0x10/0x10 [ 228.325768][ T6366] __x64_sys_openat+0x13a/0x170 [ 228.325795][ T6366] x64_sys_call+0xe69/0x2ee0 [ 228.325817][ T6366] do_syscall_64+0x57/0xf0 [ 228.325838][ T6366] ? clear_bhb_loop+0x50/0xa0 [ 228.325868][ T6366] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 228.325889][ T6366] RIP: 0033:0x7fc4f5f9c799 [ 228.325905][ T6366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.325920][ T6366] RSP: 002b:00007fc4f6e22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 228.325941][ T6366] RAX: ffffffffffffffda RBX: 00007fc4f6215fa0 RCX: 00007fc4f5f9c799 [ 228.325955][ T6366] RDX: 0000000000000040 RSI: 000020000000c380 RDI: ffffffffffffff9c [ 228.325969][ T6366] RBP: 00007fc4f6e22090 R08: 0000000000000000 R09: 0000000000000000 [ 228.325981][ T6366] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 228.325994][ T6366] R13: 00007fc4f6216038 R14: 00007fc4f6215fa0 R15: 00007ffda708eb68 [ 228.326009][ T6366] [ 228.415779][ T66] usb 7-1: USB disconnect, device number 45 [ 228.418540][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 228.616606][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 228.628924][ T387] savu 0003:1E7D:2D5A.001A: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 228.642622][ T36] audit: type=1400 audit(1773837109.115:1098): avc: denied { connect } for pid=6367 comm="syz.5.2244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 228.675625][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 228.684785][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 228.689967][ T6372] syz.5.2245 (6372): attempted to duplicate a private mapping with mremap. This is not supported. [ 228.693061][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 228.706363][ T6372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.712369][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 228.722044][ T6372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.729030][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 228.745271][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 228.753312][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 228.762475][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 228.770491][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 228.779604][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 228.847624][ T387] usb 8-1: USB disconnect, device number 7 [ 228.969970][ T36] audit: type=1326 audit(1773837109.434:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6373 comm="syz.6.2246" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ca939c799 code=0x0 [ 229.078743][ T6375] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 229.300208][ T6380] fuse: Invalid rootmode [ 229.339701][ T6387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.348498][ T6387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.432449][ T6395] netlink: 1072 bytes leftover after parsing attributes in process `syz.7.2255'. [ 229.441655][ T6395] netlink: 280 bytes leftover after parsing attributes in process `syz.7.2255'. [ 229.520878][ T36] audit: type=1326 audit(1773837109.950:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6398 comm="syz.7.2257" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d9c19c799 code=0x0 [ 229.910571][ T6404] fuse: Bad value for 'rootmode' [ 230.365492][ T6423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.374036][ T6423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.382229][ T6423] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2266'. [ 230.892249][ T6428] rust_binder: Error while translating object. [ 230.892277][ T6428] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 230.898594][ T6428] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1084 [ 230.918357][ T6430] bridge0: port 3(veth1_to_team) entered blocking state [ 230.934573][ T6430] bridge0: port 3(veth1_to_team) entered disabled state [ 230.941547][ T6430] veth1_to_team: entered allmulticast mode [ 230.948517][ T6430] veth1_to_team: entered promiscuous mode [ 230.954948][ T6433] fuse: Bad value for 'rootmode' [ 230.977529][ T6436] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 231.093069][ T6450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.102447][ T6450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.141989][ T36] audit: type=1400 audit(1773837111.470:1101): avc: denied { map } for pid=6438 comm="syz.5.2273" path="/proc/1091/net/ip6_mr_vif" dev="proc" ino=4026532955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 231.710170][ T6462] fuse: Bad value for 'rootmode' [ 231.791027][ T6469] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 231.800498][ T6469] overlayfs: failed to get uuid (527/file0, err=-13); falling back to uuid=null. [ 231.826595][ T6467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.835200][ T6467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.937520][ T6479] FAULT_INJECTION: forcing a failure. [ 231.937520][ T6479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.954565][ T6479] CPU: 0 UID: 0 PID: 6479 Comm: syz.1.2289 Not tainted syzkaller #0 49aa54d9fff9a118f1e320bc713a86df8a810573 [ 231.954596][ T6479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 231.954609][ T6479] Call Trace: [ 231.954616][ T6479] [ 231.954623][ T6479] __dump_stack+0x21/0x30 [ 231.954649][ T6479] dump_stack_lvl+0x140/0x1c0 [ 231.954669][ T6479] ? __cfi_dump_stack_lvl+0x10/0x10 [ 231.954689][ T6479] dump_stack+0x19/0x20 [ 231.954707][ T6479] should_fail_ex+0x3d7/0x530 [ 231.954726][ T6479] should_fail+0xf/0x20 [ 231.954743][ T6479] should_fail_usercopy+0x1e/0x30 [ 231.954763][ T6479] _copy_from_iter+0x1a9/0x1510 [ 231.954788][ T6479] ? __cfi__copy_from_iter+0x10/0x10 [ 231.954812][ T6479] ? arch_stack_walk+0x10a/0x170 [ 231.954835][ T6479] packet_sendmsg+0x3603/0x5740 [ 231.954854][ T6479] ? __asan_memcpy+0x5a/0x80 [ 231.954873][ T6479] ? avc_has_perm_noaudit+0x28a/0x360 [ 231.954896][ T6479] ? avc_has_perm+0x155/0x240 [ 231.954919][ T6479] ? kstrtouint_from_user+0x117/0x170 [ 231.954940][ T6479] ? __x64_sys_openat+0x13a/0x170 [ 231.954958][ T6479] ? selinux_socket_sendmsg+0x281/0x380 [ 231.954983][ T6479] ? __cfi_selinux_socket_sendmsg+0x10/0x10 [ 231.955008][ T6479] ? __kasan_check_write+0x18/0x20 [ 231.955029][ T6479] ? proc_fail_nth_write+0x184/0x220 [ 231.955047][ T6479] ? __cfi_packet_sendmsg+0x10/0x10 [ 231.955065][ T6479] ? ilookup5+0x240/0x380 [ 231.955083][ T6479] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 231.955106][ T6479] ? security_socket_sendmsg+0x3d/0x100 [ 231.955132][ T6479] __sys_sendto+0x715/0x790 [ 231.955150][ T6479] ? __cfi___sys_sendto+0x10/0x10 [ 231.955169][ T6479] ? __kasan_check_write+0x18/0x20 [ 231.955191][ T6479] ? __cfi_ksys_write+0x10/0x10 [ 231.955212][ T6479] __x64_sys_sendto+0xe9/0x100 [ 231.955230][ T6479] x64_sys_call+0x2c2c/0x2ee0 [ 231.955253][ T6479] do_syscall_64+0x57/0xf0 [ 231.955273][ T6479] ? clear_bhb_loop+0x50/0xa0 [ 231.955295][ T6479] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 231.955317][ T6479] RIP: 0033:0x7f365e79c799 [ 231.955332][ T6479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.955347][ T6479] RSP: 002b:00007f365f5ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 231.955366][ T6479] RAX: ffffffffffffffda RBX: 00007f365ea15fa0 RCX: 00007f365e79c799 [ 231.955380][ T6479] RDX: 000000000000fc13 RSI: 0000200000000280 RDI: 0000000000000003 [ 231.955393][ T6479] RBP: 00007f365f5ce090 R08: 0000000000000000 R09: 000000000000002f [ 231.955407][ T6479] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 231.955419][ T6479] R13: 00007f365ea16038 R14: 00007f365ea15fa0 R15: 00007ffdf6d60328 [ 231.955435][ T6479] [ 232.254555][ T6484] tipc: Enabling of bearer rejected, failed to enable media [ 232.388433][ T6493] fuse: Unknown parameter 'ÿ0x0000000000000007' [ 232.599022][ T6497] FAULT_INJECTION: forcing a failure. [ 232.599022][ T6497] name failslab, interval 1, probability 0, space 0, times 0 [ 232.611854][ T6497] CPU: 1 UID: 0 PID: 6497 Comm: syz.5.2296 Not tainted syzkaller #0 49aa54d9fff9a118f1e320bc713a86df8a810573 [ 232.611883][ T6497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 232.611895][ T6497] Call Trace: [ 232.611902][ T6497] [ 232.611910][ T6497] __dump_stack+0x21/0x30 [ 232.611936][ T6497] dump_stack_lvl+0x140/0x1c0 [ 232.611956][ T6497] ? __cfi_dump_stack_lvl+0x10/0x10 [ 232.611978][ T6497] dump_stack+0x19/0x20 [ 232.611999][ T6497] should_fail_ex+0x3d7/0x530 [ 232.612021][ T6497] should_failslab+0xac/0x100 [ 232.612038][ T6497] __kmalloc_cache_node_noprof+0x46/0x430 [ 232.612063][ T6497] ? kasan_save_track+0x4f/0x80 [ 232.612086][ T6497] ? __get_vm_area_node+0x14d/0x3d0 [ 232.612106][ T6497] ? __kasan_slab_alloc+0x73/0x90 [ 232.612122][ T6497] ? kmem_cache_alloc_node_noprof+0x1ca/0x420 [ 232.612144][ T6497] ? dup_task_struct+0xc1/0xd80 [ 232.612163][ T6497] __get_vm_area_node+0x14d/0x3d0 [ 232.612184][ T6497] __vmalloc_node_range_noprof+0x30e/0x1480 [ 232.612205][ T6497] ? copy_process+0x55a/0x3290 [ 232.612227][ T6497] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 232.612248][ T6497] ? kasan_save_alloc_info+0x40/0x50 [ 232.612269][ T6497] ? __kasan_slab_alloc+0x73/0x90 [ 232.612285][ T6497] ? arch_dup_task_struct+0x5b/0xe0 [ 232.612308][ T6497] ? __asan_memcpy+0x5a/0x80 [ 232.612330][ T6497] dup_task_struct+0x5d6/0xd80 [ 232.612349][ T6497] ? copy_process+0x55a/0x3290 [ 232.612367][ T6497] ? _raw_spin_lock_irq+0x93/0x120 [ 232.612389][ T6497] ? copy_process+0x3290/0x3290 [ 232.612408][ T6497] ? __kasan_check_write+0x18/0x20 [ 232.612431][ T6497] copy_process+0x55a/0x3290 [ 232.612451][ T6497] ? __cfi_copy_process+0x10/0x10 [ 232.612470][ T6497] ? __kmalloc_cache_noprof+0x23c/0x470 [ 232.612493][ T6497] ? __kasan_check_write+0x18/0x20 [ 232.612515][ T6497] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 232.612534][ T6497] vhost_task_create+0x1f7/0x400 [ 232.612558][ T6497] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 232.612578][ T6497] ? __cfi_vhost_task_create+0x10/0x10 [ 232.612605][ T6497] ? __cfi_vhost_task_fn+0x10/0x10 [ 232.612629][ T6497] ? __kasan_check_write+0x18/0x20 [ 232.612651][ T6497] ? mutex_lock+0x97/0x1d0 [ 232.612674][ T6497] ? __cfi_mutex_lock+0x10/0x10 [ 232.612697][ T6497] ? kernel_text_address+0xa9/0xe0 [ 232.612728][ T6497] kvm_mmu_post_init_vm+0x161/0x300 [ 232.612750][ T6497] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 232.612773][ T6497] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 232.612794][ T6497] ? kstrtoull+0x13b/0x1e0 [ 232.612813][ T6497] ? kstrtouint+0x78/0xf0 [ 232.612832][ T6497] ? ioctl_has_perm+0x1bc/0x500 [ 232.612852][ T6497] ? __asan_memcpy+0x5a/0x80 [ 232.612877][ T6497] ? ioctl_has_perm+0x408/0x500 [ 232.612897][ T6497] ? has_cap_mac_admin+0xd0/0xd0 [ 232.612917][ T6497] ? __kasan_check_write+0x18/0x20 [ 232.612938][ T6497] ? mutex_lock_killable+0x97/0x1d0 [ 232.612955][ T6497] ? __cfi_mutex_lock_killable+0x10/0x10 [ 232.612972][ T6497] ? proc_fail_nth_write+0x184/0x220 [ 232.612993][ T6497] kvm_vcpu_ioctl+0xa48/0x1000 [ 232.613016][ T6497] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 232.613039][ T6497] ? __cfi_vfs_write+0x10/0x10 [ 232.613061][ T6497] ? __kasan_check_write+0x18/0x20 [ 232.613081][ T6497] ? mutex_unlock+0x90/0x240 [ 232.613095][ T6497] ? __cfi_mutex_unlock+0x10/0x10 [ 232.613117][ T6497] ? __fget_files+0x2c5/0x340 [ 232.613142][ T6497] ? __fget_files+0x2c5/0x340 [ 232.613166][ T6497] ? bpf_lsm_file_ioctl+0xd/0x20 [ 232.613184][ T6497] ? security_file_ioctl+0x3e/0x110 [ 232.613205][ T6497] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 232.613228][ T6497] __se_sys_ioctl+0x132/0x1b0 [ 232.613254][ T6497] __x64_sys_ioctl+0x7f/0xa0 [ 232.613277][ T6497] x64_sys_call+0x1878/0x2ee0 [ 232.613301][ T6497] do_syscall_64+0x57/0xf0 [ 232.613322][ T6497] ? clear_bhb_loop+0x50/0xa0 [ 232.613344][ T6497] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 232.613366][ T6497] RIP: 0033:0x7fc4f5f9c799 [ 232.613382][ T6497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.613397][ T6497] RSP: 002b:00007fc4f6e22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 232.613419][ T6497] RAX: ffffffffffffffda RBX: 00007fc4f6215fa0 RCX: 00007fc4f5f9c799 [ 232.613433][ T6497] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 232.613446][ T6497] RBP: 00007fc4f6e22090 R08: 0000000000000000 R09: 0000000000000000 [ 232.613458][ T6497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.613469][ T6497] R13: 00007fc4f6216038 R14: 00007fc4f6215fa0 R15: 00007ffda708eb68 [ 232.613485][ T6497] [ 232.613533][ T6497] warn_alloc: 1 callbacks suppressed [ 232.613545][ T6497] syz.5.2296: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0 [ 233.080902][ T6497] CPU: 0 UID: 0 PID: 6497 Comm: syz.5.2296 Not tainted syzkaller #0 49aa54d9fff9a118f1e320bc713a86df8a810573 [ 233.080930][ T6497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 233.080942][ T6497] Call Trace: [ 233.080949][ T6497] [ 233.080956][ T6497] __dump_stack+0x21/0x30 [ 233.080983][ T6497] dump_stack_lvl+0x140/0x1c0 [ 233.081004][ T6497] ? __cfi_dump_stack_lvl+0x10/0x10 [ 233.081028][ T6497] dump_stack+0x19/0x20 [ 233.081048][ T6497] warn_alloc+0x1e7/0x2c0 [ 233.081068][ T6497] ? __kasan_kmalloc+0x28/0xb0 [ 233.081086][ T6497] ? __cfi_warn_alloc+0x10/0x10 [ 233.081105][ T6497] ? kasan_save_track+0x4f/0x80 [ 233.081128][ T6497] ? dup_task_struct+0xc1/0xd80 [ 233.081148][ T6497] ? __get_vm_area_node+0x3bd/0x3d0 [ 233.081169][ T6497] __vmalloc_node_range_noprof+0x333/0x1480 [ 233.081194][ T6497] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 233.081216][ T6497] ? kasan_save_alloc_info+0x40/0x50 [ 233.081236][ T6497] ? __kasan_slab_alloc+0x73/0x90 [ 233.081253][ T6497] ? arch_dup_task_struct+0x5b/0xe0 [ 233.081276][ T6497] ? __asan_memcpy+0x5a/0x80 [ 233.081298][ T6497] dup_task_struct+0x5d6/0xd80 [ 233.081317][ T6497] ? copy_process+0x55a/0x3290 [ 233.081337][ T6497] ? _raw_spin_lock_irq+0x93/0x120 [ 233.081359][ T6497] ? copy_process+0x3290/0x3290 [ 233.081379][ T6497] ? __kasan_check_write+0x18/0x20 [ 233.081402][ T6497] copy_process+0x55a/0x3290 [ 233.081424][ T6497] ? __cfi_copy_process+0x10/0x10 [ 233.081450][ T6497] ? __kmalloc_cache_noprof+0x23c/0x470 [ 233.081474][ T6497] ? __kasan_check_write+0x18/0x20 [ 233.081496][ T6497] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 233.081515][ T6497] vhost_task_create+0x1f7/0x400 [ 233.081540][ T6497] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 233.081559][ T6497] ? __cfi_vhost_task_create+0x10/0x10 [ 233.081584][ T6497] ? __cfi_vhost_task_fn+0x10/0x10 [ 233.081607][ T6497] ? __kasan_check_write+0x18/0x20 [ 233.081629][ T6497] ? mutex_lock+0x97/0x1d0 [ 233.081653][ T6497] ? __cfi_mutex_lock+0x10/0x10 [ 233.081677][ T6497] ? kernel_text_address+0xa9/0xe0 [ 233.081698][ T6497] kvm_mmu_post_init_vm+0x161/0x300 [ 233.081721][ T6497] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 233.081745][ T6497] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 233.081766][ T6497] ? kstrtoull+0x13b/0x1e0 [ 233.081786][ T6497] ? kstrtouint+0x78/0xf0 [ 233.081806][ T6497] ? ioctl_has_perm+0x1bc/0x500 [ 233.081826][ T6497] ? __asan_memcpy+0x5a/0x80 [ 233.081848][ T6497] ? ioctl_has_perm+0x408/0x500 [ 233.081868][ T6497] ? has_cap_mac_admin+0xd0/0xd0 [ 233.081889][ T6497] ? __kasan_check_write+0x18/0x20 [ 233.081913][ T6497] ? mutex_lock_killable+0x97/0x1d0 [ 233.081930][ T6497] ? __cfi_mutex_lock_killable+0x10/0x10 [ 233.081948][ T6497] ? proc_fail_nth_write+0x184/0x220 [ 233.081971][ T6497] kvm_vcpu_ioctl+0xa48/0x1000 [ 233.081996][ T6497] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 233.082020][ T6497] ? __cfi_vfs_write+0x10/0x10 [ 233.082042][ T6497] ? __kasan_check_write+0x18/0x20 [ 233.082063][ T6497] ? mutex_unlock+0x90/0x240 [ 233.082078][ T6497] ? __cfi_mutex_unlock+0x10/0x10 [ 233.082102][ T6497] ? __fget_files+0x2c5/0x340 [ 233.082128][ T6497] ? __fget_files+0x2c5/0x340 [ 233.082153][ T6497] ? bpf_lsm_file_ioctl+0xd/0x20 [ 233.082171][ T6497] ? security_file_ioctl+0x3e/0x110 [ 233.082191][ T6497] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 233.082214][ T6497] __se_sys_ioctl+0x132/0x1b0 [ 233.082239][ T6497] __x64_sys_ioctl+0x7f/0xa0 [ 233.082262][ T6497] x64_sys_call+0x1878/0x2ee0 [ 233.082284][ T6497] do_syscall_64+0x57/0xf0 [ 233.082305][ T6497] ? clear_bhb_loop+0x50/0xa0 [ 233.082322][ T6497] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 233.082335][ T6497] RIP: 0033:0x7fc4f5f9c799 [ 233.082345][ T6497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.082355][ T6497] RSP: 002b:00007fc4f6e22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 233.082367][ T6497] RAX: ffffffffffffffda RBX: 00007fc4f6215fa0 RCX: 00007fc4f5f9c799 [ 233.082376][ T6497] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 233.082384][ T6497] RBP: 00007fc4f6e22090 R08: 0000000000000000 R09: 0000000000000000 [ 233.082391][ T6497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.082398][ T6497] R13: 00007fc4f6216038 R14: 00007fc4f6215fa0 R15: 00007ffda708eb68 [ 233.082407][ T6497] [ 233.082425][ T6497] Mem-Info: [ 233.509666][ T6497] active_anon:29295 inactive_anon:1 isolated_anon:0 [ 233.509666][ T6497] active_file:24525 inactive_file:2639 isolated_file:0 [ 233.509666][ T6497] unevictable:0 dirty:313 writeback:0 [ 233.509666][ T6497] slab_reclaimable:5992 slab_unreclaimable:73243 [ 233.509666][ T6497] mapped:25307 shmem:20005 pagetables:1344 [ 233.509666][ T6497] sec_pagetables:5 bounce:0 [ 233.509666][ T6497] kernel_misc_reclaimable:0 [ 233.509666][ T6497] free:1483952 free_pcp:7740 free_cma:0 [ 233.554874][ T6497] Node 0 active_anon:117180kB inactive_anon:4kB active_file:98100kB inactive_file:10556kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:101228kB dirty:1252kB writeback:0kB shmem:80020kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6048kB pagetables:5376kB sec_pagetables:20kB all_unreclaimable? no [ 233.587315][ T6497] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963360kB mlocked:0kB bounce:0kB free_pcp:5196kB local_pcp:5128kB free_cma:0kB [ 233.617348][ T6497] lowmem_reserve[]: 0 3921 3921 [ 233.622299][ T6497] Normal free:2977644kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:117180kB inactive_anon:4kB active_file:98100kB inactive_file:10556kB unevictable:0kB writepending:1252kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:25864kB local_pcp:608kB free_cma:0kB [ 233.653923][ T6497] lowmem_reserve[]: 0 0 0 [ 233.658281][ T6497] DMA32: 3*4kB (M) 1*8kB (M) 4*16kB (M) 4*32kB (M) 4*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 233.674018][ T6497] Normal: 311*4kB (UME) 192*8kB (UME) 485*16kB (UME) 146*32kB (UME) 436*64kB (ME) 94*128kB (UME) 64*256kB (UME) 36*512kB (UME) 12*1024kB (UME) 20*2048kB (UME) 692*4096kB (UM) = 2977644kB [ 233.692584][ T6497] 47166 total pagecache pages [ 233.697311][ T6497] 1 pages in swap cache [ 233.701462][ T6497] Free swap = 124664kB [ 233.705776][ T6497] Total swap = 124996kB [ 233.709924][ T6497] 2097051 pages RAM [ 233.713726][ T6497] 0 pages HighMem/MovableOnly [ 233.718654][ T6497] 352245 pages reserved [ 233.724781][ T6497] 0 pages cma reserved [ 233.730734][ T6497] Memory allocations: [ 233.735492][ T6497] 0 B 0 init/main.c:1477 func:do_initcalls [ 233.739532][ T6506] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 233.742741][ T6497] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 233.764940][ T6497] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 233.772642][ T6497] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 233.780598][ T6497] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 233.788529][ T6497] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 233.797313][ T6497] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 233.805244][ T6497] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 233.813260][ T6497] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 233.821161][ T6497] 0 B 0 init/initramfs.c:101 func:find_link [ 233.833333][ T423] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 233.894910][ C0] blk_print_req_error: 85 callbacks suppressed [ 233.894928][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.910230][ C0] buffer_io_error: 85 callbacks suppressed [ 233.910244][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 233.924798][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.933958][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 233.942318][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.947512][ T6516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.951472][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 233.968630][ T6516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.970440][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.985507][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 233.995373][ T6515] fuse: Bad value for 'fd' [ 234.004265][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 234.008387][ T423] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.013409][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 234.032986][ T45] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 234.046499][ T423] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 234.059236][ T423] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 234.070345][ T423] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 234.078317][ T423] usb 7-1: Product: syz [ 234.084314][ T423] usb 7-1: SerialNumber: syz [ 234.195669][ T45] usb 8-1: Using ep0 maxpacket: 16 [ 234.201825][ T45] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 234.210686][ T45] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.220775][ T45] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 234.232028][ T45] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 234.241099][ T45] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.249106][ T45] usb 8-1: Product: syz [ 234.253264][ T45] usb 8-1: Manufacturer: syz [ 234.257848][ T45] usb 8-1: SerialNumber: syz [ 234.478695][ T36] audit: type=1326 audit(1773837114.604:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6503 comm="syz.7.2300" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d9c19c799 code=0x0 [ 234.612099][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 234.621257][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 234.631389][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 234.640555][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 234.648640][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 234.657826][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 234.665919][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 234.675080][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 234.683147][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 234.692286][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 234.735823][ T36] audit: type=1400 audit(1773837114.838:1103): avc: denied { setattr } for pid=6538 comm="syz.5.2312" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 234.760365][ T45] usb 8-1: 0:2 : does not exist [ 234.951730][ T6502] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=6502 comm=syz.6.2298 [ 234.965663][ T6502] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2298'. [ 234.975571][ T6502] hub 1-0:1.0: USB hub found [ 234.980332][ T6502] hub 1-0:1.0: 1 port detected [ 235.019755][ T6546] FAULT_INJECTION: forcing a failure. [ 235.019755][ T6546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.032878][ T6546] CPU: 0 UID: 0 PID: 6546 Comm: syz.5.2314 Not tainted syzkaller #0 49aa54d9fff9a118f1e320bc713a86df8a810573 [ 235.032906][ T6546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 235.032918][ T6546] Call Trace: [ 235.032926][ T6546] [ 235.032935][ T6546] __dump_stack+0x21/0x30 [ 235.032963][ T6546] dump_stack_lvl+0x140/0x1c0 [ 235.032983][ T6546] ? __cfi_dump_stack_lvl+0x10/0x10 [ 235.032999][ T6546] ? folio_add_lru+0x116/0x400 [ 235.033010][ T6546] ? __cfi_folio_add_lru+0x10/0x10 [ 235.033020][ T6546] dump_stack+0x19/0x20 [ 235.033032][ T6546] should_fail_ex+0x3d7/0x530 [ 235.033047][ T6546] should_fail+0xf/0x20 [ 235.033067][ T6546] should_fail_usercopy+0x1e/0x30 [ 235.033089][ T6546] copy_page_from_iter_atomic+0x34b/0x17a0 [ 235.033117][ T6546] ? __cfi_copy_page_from_iter_atomic+0x10/0x10 [ 235.033135][ T6546] ? __kasan_check_read+0x15/0x20 [ 235.033148][ T6546] ? fuse_write_begin+0x3f2/0x5e0 [ 235.033163][ T6546] generic_perform_write+0x582/0x970 [ 235.033176][ T6546] ? __cfi_generic_perform_write+0x10/0x10 [ 235.033189][ T6546] ? generic_write_checks_count+0x428/0x530 [ 235.033207][ T6546] ? file_update_time+0xa3/0x210 [ 235.033228][ T6546] __generic_file_write_iter+0xcf/0x180 [ 235.033249][ T6546] generic_file_write_iter+0x14b/0x550 [ 235.033268][ T6546] ? __cfi_generic_file_write_iter+0x10/0x10 [ 235.033280][ T6546] ? avc_has_perm+0x155/0x240 [ 235.033293][ T6546] ? __cfi_avc_has_perm+0x10/0x10 [ 235.033306][ T6546] ? kasan_save_alloc_info+0x40/0x50 [ 235.033324][ T6546] ? selinux_file_open+0x46c/0x630 [ 235.033341][ T6546] ? __cfi_selinux_file_open+0x10/0x10 [ 235.033363][ T6546] ? setattr_should_drop_suidgid+0x1a1/0x210 [ 235.033386][ T6546] fuse_file_write_iter+0x17bd/0x2830 [ 235.033410][ T6546] ? is_bpf_text_address+0x17b/0x1a0 [ 235.033433][ T6546] ? __cfi_fuse_file_write_iter+0x10/0x10 [ 235.033447][ T6546] ? kernel_text_address+0xa9/0xe0 [ 235.033460][ T6546] ? __kernel_text_address+0x11/0x40 [ 235.033472][ T6546] ? unwind_get_return_address+0x51/0x90 [ 235.033490][ T6546] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 235.033509][ T6546] ? arch_stack_walk+0x10a/0x170 [ 235.033534][ T6546] ? _parse_integer_limit+0x195/0x1e0 [ 235.033557][ T6546] ? kstrtouint_from_user+0x117/0x170 [ 235.033572][ T6546] ? __x64_sys_openat+0x13a/0x170 [ 235.033584][ T6546] ? avc_policy_seqno+0xd/0x30 [ 235.033597][ T6546] ? selinux_file_permission+0x318/0xb60 [ 235.033609][ T6546] ? __cfi_selinux_file_permission+0x10/0x10 [ 235.033621][ T6546] ? __kasan_check_write+0x18/0x20 [ 235.033642][ T6546] ? proc_fail_nth_write+0x184/0x220 [ 235.033663][ T6546] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 235.033685][ T6546] vfs_write+0x764/0xf90 [ 235.033705][ T6546] ? __cfi_vfs_write+0x10/0x10 [ 235.033719][ T6546] ksys_write+0x145/0x260 [ 235.033732][ T6546] ? __cfi_ksys_write+0x10/0x10 [ 235.033745][ T6546] ? __kasan_check_read+0x15/0x20 [ 235.033758][ T6546] __x64_sys_write+0x7f/0x90 [ 235.033775][ T6546] x64_sys_call+0x271c/0x2ee0 [ 235.033798][ T6546] do_syscall_64+0x57/0xf0 [ 235.033821][ T6546] ? clear_bhb_loop+0x50/0xa0 [ 235.033844][ T6546] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 235.033866][ T6546] RIP: 0033:0x7fc4f5f9c799 [ 235.033878][ T6546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.033888][ T6546] RSP: 002b:00007fc4f6e22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 235.033901][ T6546] RAX: ffffffffffffffda RBX: 00007fc4f6215fa0 RCX: 00007fc4f5f9c799 [ 235.033909][ T6546] RDX: 00000000fffffdef RSI: 00002000000000c0 RDI: 0000000000000003 [ 235.033921][ T6546] RBP: 00007fc4f6e22090 R08: 0000000000000000 R09: 0000000000000000 [ 235.033934][ T6546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 235.033946][ T6546] R13: 00007fc4f6216038 R14: 00007fc4f6215fa0 R15: 00007ffda708eb68 [ 235.033963][ T6546] [ 235.469412][ T423] cdc_ncm 7-1:1.0: bind() failure [ 235.498665][ T423] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71 [ 235.506896][ T423] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71 [ 235.518660][ T423] usb 7-1: USB disconnect, device number 46 [ 236.135982][ T6559] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=6559 comm=syz.6.2318 [ 236.476348][ T9] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 236.636202][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 236.642373][ T9] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 236.654784][ T9] usb 7-1: config 179 has no interface number 0 [ 236.661295][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 236.672881][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 236.684318][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 236.695885][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 236.708586][ T9] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 236.722068][ T9] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 236.731170][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.740485][ T6564] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 236.925967][ T6578] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2326'. [ 236.951162][ T45] usb 8-1: USB disconnect, device number 8 [ 236.972496][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input26 [ 236.993936][ T6583] FAULT_INJECTION: forcing a failure. [ 236.993936][ T6583] name failslab, interval 1, probability 0, space 0, times 0 [ 237.006687][ T6583] CPU: 0 UID: 0 PID: 6583 Comm: syz.7.2328 Not tainted syzkaller #0 49aa54d9fff9a118f1e320bc713a86df8a810573 [ 237.006715][ T6583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 237.006727][ T6583] Call Trace: [ 237.006735][ T6583] [ 237.006743][ T6583] __dump_stack+0x21/0x30 [ 237.006769][ T6583] dump_stack_lvl+0x140/0x1c0 [ 237.006789][ T6583] ? __cfi_dump_stack_lvl+0x10/0x10 [ 237.006806][ T6583] dump_stack+0x19/0x20 [ 237.006818][ T6583] should_fail_ex+0x3d7/0x530 [ 237.006831][ T6583] should_failslab+0xac/0x100 [ 237.006842][ T6583] kmem_cache_alloc_noprof+0x42/0x410 [ 237.006855][ T6583] ? __break_lease+0x122/0x15a0 [ 237.006869][ T6583] ? avc_has_perm+0x155/0x240 [ 237.006883][ T6583] __break_lease+0x122/0x15a0 [ 237.006895][ T6583] ? cred_has_capability+0x296/0x3a0 [ 237.006909][ T6583] ? selinux_file_open+0x46c/0x630 [ 237.006921][ T6583] ? __cfi___break_lease+0x10/0x10 [ 237.006934][ T6583] ? __cfi_selinux_file_open+0x10/0x10 [ 237.006947][ T6583] ? bpf_lsm_file_open+0xd/0x20 [ 237.006959][ T6583] do_dentry_open+0x8c6/0x1510 [ 237.006971][ T6583] vfs_open+0x86/0x240 [ 237.006981][ T6583] ? __cfi_vfs_open+0x10/0x10 [ 237.006991][ T6583] ? may_open+0x352/0x430 [ 237.007002][ T6583] path_openat+0x2bb1/0x34f0 [ 237.007012][ T6583] ? stack_depot_save_flags+0x38/0x800 [ 237.007026][ T6583] ? kasan_save_track+0x3e/0x80 [ 237.007040][ T6583] ? kasan_save_alloc_info+0x40/0x50 [ 237.007052][ T6583] ? do_sys_openat2+0xda/0x1d0 [ 237.007064][ T6583] ? __x64_sys_openat+0x13a/0x170 [ 237.007078][ T6583] ? x64_sys_call+0xe69/0x2ee0 [ 237.007091][ T6583] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 237.007106][ T6583] ? do_filp_open+0x440/0x440 [ 237.007117][ T6583] do_filp_open+0x1f5/0x440 [ 237.007127][ T6583] ? __cfi_do_filp_open+0x10/0x10 [ 237.007139][ T6583] ? alloc_fd+0x4e6/0x5a0 [ 237.007153][ T6583] do_sys_openat2+0x134/0x1d0 [ 237.007164][ T6583] ? fput+0x1a4/0x240 [ 237.007174][ T6583] ? do_sys_open+0x100/0x100 [ 237.007185][ T6583] ? ksys_write+0x1f3/0x260 [ 237.007198][ T6583] ? __cfi_ksys_write+0x10/0x10 [ 237.007211][ T6583] __x64_sys_openat+0x13a/0x170 [ 237.007223][ T6583] x64_sys_call+0xe69/0x2ee0 [ 237.007236][ T6583] do_syscall_64+0x57/0xf0 [ 237.007249][ T6583] ? clear_bhb_loop+0x50/0xa0 [ 237.007262][ T6583] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 237.007274][ T6583] RIP: 0033:0x7f1d9c19c799 [ 237.007285][ T6583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.007294][ T6583] RSP: 002b:00007f1d9d0c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 237.007307][ T6583] RAX: ffffffffffffffda RBX: 00007f1d9c415fa0 RCX: 00007f1d9c19c799 [ 237.007315][ T6583] RDX: 0000000000080000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 237.007323][ T6583] RBP: 00007f1d9d0c7090 R08: 0000000000000000 R09: 0000000000000000 [ 237.007330][ T6583] R10: 00000000000000d3 R11: 0000000000000246 R12: 0000000000000001 [ 237.007338][ T6583] R13: 00007f1d9c416038 R14: 00007f1d9c415fa0 R15: 00007ffc86b77f88 [ 237.007347][ T6583] [ 237.309144][ T6564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.317707][ T6564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.369293][ T6585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.377921][ T6585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.388646][ T6585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.397132][ T6585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.546420][ T45] usb 7-1: USB disconnect, device number 47 [ 237.546453][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 237.561457][ C0] dummy_hcd dummy_hcd.6: timer fired with no URBs pending? [ 237.993455][ T6596] FAULT_INJECTION: forcing a failure. [ 237.993455][ T6596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.007483][ T6596] CPU: 0 UID: 0 PID: 6596 Comm: syz.7.2334 Not tainted syzkaller #0 49aa54d9fff9a118f1e320bc713a86df8a810573 [ 238.007511][ T6596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 238.007522][ T6596] Call Trace: [ 238.007529][ T6596] [ 238.007537][ T6596] __dump_stack+0x21/0x30 [ 238.007563][ T6596] dump_stack_lvl+0x140/0x1c0 [ 238.007581][ T6596] ? __cfi_dump_stack_lvl+0x10/0x10 [ 238.007602][ T6596] ? check_stack_object+0x81/0x150 [ 238.007623][ T6596] ? __virt_addr_valid+0x2a6/0x380 [ 238.007642][ T6596] dump_stack+0x19/0x20 [ 238.007660][ T6596] should_fail_ex+0x3d7/0x530 [ 238.007676][ T6596] should_fail+0xf/0x20 [ 238.007687][ T6596] should_fail_usercopy+0x1e/0x30 [ 238.007700][ T6596] _copy_from_user+0x20/0xa0 [ 238.007714][ T6596] memdup_user+0x81/0x170 [ 238.007727][ T6596] ? kvm_arch_vcpu_ioctl+0x1367/0x2d90 [ 238.007743][ T6596] kvm_arch_vcpu_ioctl+0x19a2/0x2d90 [ 238.007757][ T6596] ? avc_has_perm+0x155/0x240 [ 238.007771][ T6596] ? __cfi_avc_has_perm+0x10/0x10 [ 238.007785][ T6596] ? kasan_save_alloc_info+0x40/0x50 [ 238.007797][ T6596] ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10 [ 238.007812][ T6596] ? selinux_file_open+0x46c/0x630 [ 238.007825][ T6596] ? __cfi_selinux_file_open+0x10/0x10 [ 238.007839][ T6596] ? is_bpf_text_address+0x17b/0x1a0 [ 238.007853][ T6596] ? kernel_text_address+0xa9/0xe0 [ 238.007865][ T6596] ? __kernel_text_address+0x11/0x40 [ 238.007877][ T6596] ? __asan_set_shadow_00+0x12/0x20 [ 238.007888][ T6596] ? do_vfs_ioctl+0x182d/0x2010 [ 238.007898][ T6596] ? arch_stack_walk+0x10a/0x170 [ 238.007912][ T6596] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 238.007928][ T6596] ? _parse_integer_limit+0x195/0x1e0 [ 238.007939][ T6596] ? _parse_integer+0x2e/0x40 [ 238.007950][ T6596] ? kstrtoull+0x13b/0x1e0 [ 238.007960][ T6596] ? kstrtouint+0x78/0xf0 [ 238.007971][ T6596] ? ioctl_has_perm+0x1bc/0x500 [ 238.007983][ T6596] ? __asan_memcpy+0x5a/0x80 [ 238.007996][ T6596] ? ioctl_has_perm+0x408/0x500 [ 238.008007][ T6596] ? has_cap_mac_admin+0xd0/0xd0 [ 238.008019][ T6596] ? __kasan_check_write+0x18/0x20 [ 238.008031][ T6596] ? mutex_lock_killable+0x97/0x1d0 [ 238.008042][ T6596] ? __cfi_mutex_lock_killable+0x10/0x10 [ 238.008052][ T6596] ? proc_fail_nth_write+0x184/0x220 [ 238.008063][ T6596] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 238.008075][ T6596] kvm_vcpu_ioctl+0x7da/0x1000 [ 238.008091][ T6596] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 238.008112][ T6596] ? __cfi_vfs_write+0x10/0x10 [ 238.008125][ T6596] ? __kasan_check_write+0x18/0x20 [ 238.008138][ T6596] ? mutex_unlock+0x90/0x240 [ 238.008147][ T6596] ? __cfi_mutex_unlock+0x10/0x10 [ 238.008161][ T6596] ? __fget_files+0x2c5/0x340 [ 238.008177][ T6596] ? __fget_files+0x2c5/0x340 [ 238.008191][ T6596] ? bpf_lsm_file_ioctl+0xd/0x20 [ 238.008202][ T6596] ? security_file_ioctl+0x3e/0x110 [ 238.008214][ T6596] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 238.008227][ T6596] __se_sys_ioctl+0x132/0x1b0 [ 238.008242][ T6596] __x64_sys_ioctl+0x7f/0xa0 [ 238.008256][ T6596] x64_sys_call+0x1878/0x2ee0 [ 238.008270][ T6596] do_syscall_64+0x57/0xf0 [ 238.008282][ T6596] ? clear_bhb_loop+0x50/0xa0 [ 238.008296][ T6596] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 238.008309][ T6596] RIP: 0033:0x7f1d9c19c799 [ 238.008319][ T6596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.008329][ T6596] RSP: 002b:00007f1d9d0c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 238.008345][ T6596] RAX: ffffffffffffffda RBX: 00007f1d9c415fa0 RCX: 00007f1d9c19c799 [ 238.008360][ T6596] RDX: 0000200000000100 RSI: 000000004008ae89 RDI: 0000000000000005 [ 238.008373][ T6596] RBP: 00007f1d9d0c7090 R08: 0000000000000000 R09: 0000000000000000 [ 238.008381][ T6596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.008388][ T6596] R13: 00007f1d9c416038 R14: 00007f1d9c415fa0 R15: 00007ffc86b77f88 [ 238.008398][ T6596] [ 238.463590][ T6605] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 238.474220][ T6605] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 238.482897][ T6605] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 238.490941][ T6605] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 238.547933][ T36] audit: type=1400 audit(1773837118.423:1104): avc: denied { setattr } for pid=6618 comm="syz.1.2344" name="NETLINK" dev="sockfs" ino=76015 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 238.597942][ T6621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.606473][ T6621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.621426][ T6624] fuse: Unknown parameter 'user_i00000000000000000000' [ 238.661102][ T45] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 238.820969][ T45] usb 7-1: Using ep0 maxpacket: 8 [ 238.827047][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.838054][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.847895][ T45] usb 7-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 238.857047][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.865888][ T45] usb 7-1: config 0 descriptor?? [ 238.916852][ T31] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 239.077816][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.088760][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.099290][ T31] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 239.108346][ T31] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 239.116362][ T31] usb 8-1: Manufacturer: syz [ 239.121712][ T31] usb 8-1: config 0 descriptor?? [ 239.302785][ T45] logitech 0003:046D:C20E.001B: rdesc size test failed for formula gp [ 239.311236][ T45] logitech 0003:046D:C20E.001B: unknown main item tag 0x0 [ 239.318381][ T45] logitech 0003:046D:C20E.001B: unknown main item tag 0x0 [ 239.325558][ T45] logitech 0003:046D:C20E.001B: unknown main item tag 0x0 [ 239.332749][ T45] logitech 0003:046D:C20E.001B: unknown main item tag 0x0 [ 239.339924][ T45] logitech 0003:046D:C20E.001B: unknown main item tag 0x0 [ 239.347093][ T45] logitech 0003:046D:C20E.001B: unknown main item tag 0x0 [ 239.354306][ T45] logitech 0003:046D:C20E.001B: unknown main item tag 0x0 [ 239.361441][ T45] logitech 0003:046D:C20E.001B: unknown main item tag 0x0 [ 239.368576][ T45] logitech 0003:046D:C20E.001B: unknown main item tag 0x0 [ 239.375749][ T45] logitech 0003:046D:C20E.001B: unknown main item tag 0x0 [ 239.382869][ T45] logitech 0003:046D:C20E.001B: unknown main item tag 0x0 [ 239.390748][ T45] logitech 0003:046D:C20E.001B: hidraw0: USB HID v0.00 Device [HID 046d:c20e] on usb-dummy_hcd.6-1/input0 [ 239.441851][ T36] audit: type=1400 audit(1773837119.267:1105): avc: denied { create } for pid=6636 comm="syz.1.2351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 239.472451][ C1] blk_print_req_error: 85 callbacks suppressed [ 239.472469][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.487775][ C1] buffer_io_error: 85 callbacks suppressed [ 239.487791][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 239.493779][ T6641] FAULT_INJECTION: forcing a failure. [ 239.493779][ T6641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.514820][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.519332][ T6641] CPU: 0 UID: 0 PID: 6641 Comm: syz.1.2352 Not tainted syzkaller #0 49aa54d9fff9a118f1e320bc713a86df8a810573 [ 239.519360][ T6641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 239.519373][ T6641] Call Trace: [ 239.519380][ T6641] [ 239.519387][ T6641] __dump_stack+0x21/0x30 [ 239.519414][ T6641] dump_stack_lvl+0x140/0x1c0 [ 239.519435][ T6641] ? __cfi_dump_stack_lvl+0x10/0x10 [ 239.519458][ T6641] dump_stack+0x19/0x20 [ 239.519478][ T6641] should_fail_ex+0x3d7/0x530 [ 239.519499][ T6641] should_fail+0xf/0x20 [ 239.519518][ T6641] should_fail_usercopy+0x1e/0x30 [ 239.519539][ T6641] _copy_from_user+0x20/0xa0 [ 239.519563][ T6641] udmabuf_ioctl+0x144/0x310 [ 239.519588][ T6641] ? __fget_files+0x2c5/0x340 [ 239.519611][ T6641] ? __cfi_udmabuf_ioctl+0x10/0x10 [ 239.519636][ T6641] ? __fget_files+0x2c5/0x340 [ 239.519659][ T6641] ? bpf_lsm_file_ioctl+0xd/0x20 [ 239.519678][ T6641] ? security_file_ioctl+0x3e/0x110 [ 239.519697][ T6641] ? __cfi_udmabuf_ioctl+0x10/0x10 [ 239.519720][ T6641] __se_sys_ioctl+0x132/0x1b0 [ 239.519746][ T6641] __x64_sys_ioctl+0x7f/0xa0 [ 239.519770][ T6641] x64_sys_call+0x1878/0x2ee0 [ 239.519792][ T6641] do_syscall_64+0x57/0xf0 [ 239.519813][ T6641] ? clear_bhb_loop+0x50/0xa0 [ 239.519835][ T6641] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 239.519856][ T6641] RIP: 0033:0x7f365e79c799 [ 239.519872][ T6641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.519887][ T6641] RSP: 002b:00007f365f5ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 239.519908][ T6641] RAX: ffffffffffffffda RBX: 00007f365ea15fa0 RCX: 00007f365e79c799 [ 239.519922][ T6641] RDX: 0000200000000180 RSI: 0000000040087543 RDI: 0000000000000003 [ 239.519936][ T6641] RBP: 00007f365f5ce090 R08: 0000000000000000 R09: 0000000000000000 [ 239.519955][ T6641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.519968][ T6641] R13: 00007f365ea16038 R14: 00007f365ea15fa0 R15: 00007ffdf6d60328 [ 239.519984][ T6641] [ 239.570869][ T36] audit: type=1400 audit(1773837119.380:1106): avc: denied { ioctl } for pid=6626 comm="syz.7.2347" path="socket:[75772]" dev="sockfs" ino=75772 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 239.574780][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 239.629301][ T6658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.646148][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.675835][ T9] usb 7-1: USB disconnect, device number 48 [ 239.684037][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 239.701772][ T6658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.709500][ T6652] fuse: Unknown parameter 'user_id00000000000000000000' [ 239.720473][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.746070][ T31] usbhid 8-1:0.0: can't add hid device: -71 [ 239.751604][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 239.759663][ T31] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 239.790907][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.809943][ T31] usb 8-1: USB disconnect, device number 9 [ 239.814248][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 239.895794][ T6666] netlink: 'syz.7.2361': attribute type 13 has an invalid length. [ 240.185156][ T6685] fuse: Unknown parameter 'user_id00000000000000000000' [ 240.261428][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 240.270596][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 240.278967][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 240.288120][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 240.297234][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 240.306378][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 240.315579][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 240.324720][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 240.333519][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 240.342662][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 240.427693][ T6700] FAULT_INJECTION: forcing a failure. [ 240.427693][ T6700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.440878][ T6700] CPU: 0 UID: 0 PID: 6700 Comm: syz.5.2372 Not tainted syzkaller #0 49aa54d9fff9a118f1e320bc713a86df8a810573 [ 240.440914][ T6700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 240.440926][ T6700] Call Trace: [ 240.440933][ T6700] [ 240.440940][ T6700] __dump_stack+0x21/0x30 [ 240.440967][ T6700] dump_stack_lvl+0x140/0x1c0 [ 240.440989][ T6700] ? __cfi_dump_stack_lvl+0x10/0x10 [ 240.441011][ T6700] ? _parse_integer_limit+0x195/0x1e0 [ 240.441032][ T6700] dump_stack+0x19/0x20 [ 240.441052][ T6700] should_fail_ex+0x3d7/0x530 [ 240.441074][ T6700] should_fail+0xf/0x20 [ 240.441094][ T6700] should_fail_usercopy+0x1e/0x30 [ 240.441115][ T6700] _copy_from_user+0x20/0xa0 [ 240.441138][ T6700] input_event_from_user+0xb2/0x290 [ 240.441160][ T6700] ? __cfi_input_event_from_user+0x10/0x10 [ 240.441181][ T6700] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 240.441204][ T6700] ? input_inject_event+0x117/0x130 [ 240.441229][ T6700] evdev_write+0x2c0/0x490 [ 240.441254][ T6700] ? __cfi_evdev_write+0x10/0x10 [ 240.441276][ T6700] ? proc_fail_nth_write+0x184/0x220 [ 240.441296][ T6700] ? bpf_lsm_file_permission+0xd/0x20 [ 240.441314][ T6700] ? __cfi_evdev_write+0x10/0x10 [ 240.441335][ T6700] vfs_write+0x3c5/0xf90 [ 240.441358][ T6700] ? __cfi_vfs_write+0x10/0x10 [ 240.441380][ T6700] ? __fget_files+0x2c5/0x340 [ 240.441406][ T6700] ksys_write+0x145/0x260 [ 240.441425][ T6700] ? __cfi_ksys_write+0x10/0x10 [ 240.441446][ T6700] ? __kasan_check_read+0x15/0x20 [ 240.441467][ T6700] __x64_sys_write+0x7f/0x90 [ 240.441488][ T6700] x64_sys_call+0x271c/0x2ee0 [ 240.441509][ T6700] do_syscall_64+0x57/0xf0 [ 240.441530][ T6700] ? clear_bhb_loop+0x50/0xa0 [ 240.441555][ T6700] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 240.441577][ T6700] RIP: 0033:0x7fc4f5f9c799 [ 240.441593][ T6700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.441610][ T6700] RSP: 002b:00007fc4f6e22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 240.441632][ T6700] RAX: ffffffffffffffda RBX: 00007fc4f6215fa0 RCX: 00007fc4f5f9c799 [ 240.441647][ T6700] RDX: 000000000000ff0f RSI: 0000200000000040 RDI: 0000000000000003 [ 240.441661][ T6700] RBP: 00007fc4f6e22090 R08: 0000000000000000 R09: 0000000000000000 [ 240.441675][ T6700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 240.441687][ T6700] R13: 00007fc4f6216038 R14: 00007fc4f6215fa0 R15: 00007ffda708eb68 [ 240.441704][ T6700] [ 240.709510][ T6712] fuse: Unknown parameter 'user_id00000000000000000000' [ 240.813854][ T31] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 240.850527][ T6724] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2382'. [ 240.932469][ T6733] fuse: Bad value for 'fd' [ 240.943570][ T6735] FAULT_INJECTION: forcing a failure. [ 240.943570][ T6735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.956718][ T6735] CPU: 0 UID: 0 PID: 6735 Comm: syz.1.2387 Not tainted syzkaller #0 49aa54d9fff9a118f1e320bc713a86df8a810573 [ 240.956746][ T6735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 240.956754][ T6735] Call Trace: [ 240.956758][ T6735] [ 240.956763][ T6735] __dump_stack+0x21/0x30 [ 240.956782][ T6735] dump_stack_lvl+0x140/0x1c0 [ 240.956794][ T6735] ? __cfi_dump_stack_lvl+0x10/0x10 [ 240.956808][ T6735] dump_stack+0x19/0x20 [ 240.956824][ T6735] should_fail_ex+0x3d7/0x530 [ 240.956844][ T6735] should_fail+0xf/0x20 [ 240.956861][ T6735] should_fail_usercopy+0x1e/0x30 [ 240.956881][ T6735] _copy_from_user+0x20/0xa0 [ 240.956904][ T6735] udmabuf_ioctl+0x144/0x310 [ 240.956930][ T6735] ? __fget_files+0x2c5/0x340 [ 240.956945][ T6735] ? __cfi_udmabuf_ioctl+0x10/0x10 [ 240.956960][ T6735] ? __fget_files+0x2c5/0x340 [ 240.956975][ T6735] ? bpf_lsm_file_ioctl+0xd/0x20 [ 240.956986][ T6735] ? security_file_ioctl+0x3e/0x110 [ 240.956998][ T6735] ? __cfi_udmabuf_ioctl+0x10/0x10 [ 240.957012][ T6735] __se_sys_ioctl+0x132/0x1b0 [ 240.957027][ T6735] __x64_sys_ioctl+0x7f/0xa0 [ 240.957042][ T6735] x64_sys_call+0x1878/0x2ee0 [ 240.957056][ T6735] do_syscall_64+0x57/0xf0 [ 240.957068][ T6735] ? clear_bhb_loop+0x50/0xa0 [ 240.957082][ T6735] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 240.957106][ T6735] RIP: 0033:0x7f365e79c799 [ 240.957116][ T6735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.957126][ T6735] RSP: 002b:00007f365f5ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 240.957139][ T6735] RAX: ffffffffffffffda RBX: 00007f365ea15fa0 RCX: 00007f365e79c799 [ 240.957147][ T6735] RDX: 0000200000000180 RSI: 0000000040087543 RDI: 0000000000000003 [ 240.957155][ T6735] RBP: 00007f365f5ce090 R08: 0000000000000000 R09: 0000000000000000 [ 240.957163][ T6735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.957170][ T6735] R13: 00007f365ea16038 R14: 00007f365ea15fa0 R15: 00007ffdf6d60328 [ 240.957179][ T6735] [ 240.974842][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.176746][ T887] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 241.184620][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.195405][ T31] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 241.204542][ T31] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 241.212618][ T31] usb 7-1: Manufacturer: syz [ 241.218136][ T31] usb 7-1: config 0 descriptor?? [ 241.219416][ T36] audit: type=1326 audit(1773837120.919:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6741 comm="syz.1.2390" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f365e79c799 code=0x0 [ 241.336062][ T887] usb 8-1: Using ep0 maxpacket: 16 [ 241.342199][ T887] usb 8-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 241.352327][ T887] usb 8-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.363333][ T887] usb 8-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.373080][ T887] usb 8-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 241.385941][ T887] usb 8-1: config 7 interface 0 has no altsetting 0 [ 241.392626][ T887] usb 8-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 241.401908][ T887] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.445042][ T31] uclogic 0003:256C:006D.001C: failed retrieving Huion firmware version: -71 [ 241.454135][ T31] uclogic 0003:256C:006D.001C: failed probing parameters: -71 [ 241.460685][ T6748] netlink: 'syz.6.2391': attribute type 12 has an invalid length. [ 241.461782][ T31] uclogic 0003:256C:006D.001C: probe with driver uclogic failed with error -71 [ 241.482107][ T31] usb 7-1: USB disconnect, device number 49 [ 241.527822][ T6749] SELinux: failed to load policy [ 241.629836][ T36] audit: type=1400 audit(1773837121.313:1108): avc: denied { ioctl } for pid=6750 comm="syz.5.2392" path="socket:[77211]" dev="sockfs" ino=77211 ioctlcmd=0xf50a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 241.747624][ T6759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.756145][ T6759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.841637][ T6719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.850509][ T6719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.074227][ T887] usbhid 8-1:7.0: can't add hid device: -71 [ 242.080237][ T887] usbhid 8-1:7.0: probe with driver usbhid failed with error -71 [ 242.088952][ T887] usb 8-1: USB disconnect, device number 10 [ 242.113337][ T6761] fuse: Bad value for 'fd' [ 242.241493][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2400'. [ 242.303873][ T6772] fuse: Bad value for 'fd' [ 242.374051][ T6782] fuse: Bad value for 'fd' [ 242.401490][ T6787] overlayfs: failed to resolve './bus/file0': -2 [ 242.430847][ T6791] fuse: Unknown parameter '00000000000000000003' [ 242.475772][ T6795] syzkaller1: entered promiscuous mode [ 242.481260][ T6795] syzkaller1: entered allmulticast mode [ 242.545346][ T6803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.554273][ T6803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.564596][ T6803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.573617][ T6803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.582295][ T6803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2414'. [ 242.624490][ T36] audit: type=1400 audit(1773837122.242:1109): avc: denied { shutdown } for pid=6805 comm="syz.7.2415" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 242.654187][ T36] audit: type=1400 audit(1773837122.270:1110): avc: denied { accept } for pid=6807 comm="syz.7.2416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 242.706751][ T6814] fuse: Unknown parameter '00000000000000000003' [ 242.720698][ T6816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=6816 comm=syz.6.2420 [ 242.747013][ T6820] netlink: 228 bytes leftover after parsing attributes in process `syz.6.2422'. [ 243.019939][ T31] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 243.201086][ T31] usb 7-1: Using ep0 maxpacket: 16 [ 243.207230][ T31] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 243.217344][ T31] usb 7-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.228968][ T31] usb 7-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.243532][ T31] usb 7-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 243.256512][ T31] usb 7-1: config 7 interface 0 has no altsetting 0 [ 243.266017][ T6836] fuse: Unknown parameter '00000000000000000003' [ 243.269757][ T6828] kvm: pic: non byte write [ 243.275899][ T31] usb 7-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 243.286188][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.574114][ T423] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 243.723839][ T6824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.732388][ T6824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.733970][ T423] usb 8-1: Using ep0 maxpacket: 16 [ 243.746822][ T423] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 243.758344][ T423] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 243.770927][ T423] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 243.780008][ T423] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.788060][ T423] usb 8-1: Product: syz [ 243.792212][ T423] usb 8-1: Manufacturer: syz [ 243.796782][ T423] usb 8-1: SerialNumber: syz [ 243.959887][ T31] usbhid 7-1:7.0: can't add hid device: -71 [ 243.965881][ T31] usbhid 7-1:7.0: probe with driver usbhid failed with error -71 [ 243.974619][ T31] usb 7-1: USB disconnect, device number 50 [ 244.564236][ T6850] FAULT_INJECTION: forcing a failure. [ 244.564236][ T6850] name failslab, interval 1, probability 0, space 0, times 0 [ 244.576941][ T6850] CPU: 1 UID: 0 PID: 6850 Comm: syz.6.2433 Not tainted syzkaller #0 49aa54d9fff9a118f1e320bc713a86df8a810573 [ 244.576970][ T6850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 244.576983][ T6850] Call Trace: [ 244.576991][ T6850] [ 244.576998][ T6850] __dump_stack+0x21/0x30 [ 244.577016][ T6850] dump_stack_lvl+0x140/0x1c0 [ 244.577035][ T6850] ? __cfi_dump_stack_lvl+0x10/0x10 [ 244.577058][ T6850] ? do_user_addr_fault+0xbbb/0x11e0 [ 244.577083][ T6850] dump_stack+0x19/0x20 [ 244.577103][ T6850] should_fail_ex+0x3d7/0x530 [ 244.577117][ T6850] should_failslab+0xac/0x100 [ 244.577127][ T6850] kmem_cache_alloc_noprof+0x42/0x410 [ 244.577141][ T6850] ? getname_flags+0xc5/0x700 [ 244.577155][ T6850] ? asm_exc_page_fault+0x2b/0x30 [ 244.577171][ T6850] getname_flags+0xc5/0x700 [ 244.577196][ T6850] user_path_at+0x2b/0x60 [ 244.577213][ T6850] __se_sys_mount+0x28a/0x480 [ 244.577236][ T6850] ? ksys_write+0x1f3/0x260 [ 244.577258][ T6850] ? __x64_sys_mount+0xf0/0xf0 [ 244.577272][ T6850] __x64_sys_mount+0xc3/0xf0 [ 244.577285][ T6850] x64_sys_call+0x2021/0x2ee0 [ 244.577299][ T6850] do_syscall_64+0x57/0xf0 [ 244.577315][ T6850] ? clear_bhb_loop+0x50/0xa0 [ 244.577337][ T6850] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 244.577358][ T6850] RIP: 0033:0x7f6ca939c799 [ 244.577375][ T6850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.577391][ T6850] RSP: 002b:00007f6caa172028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 244.577415][ T6850] RAX: ffffffffffffffda RBX: 00007f6ca9615fa0 RCX: 00007f6ca939c799 [ 244.577423][ T6850] RDX: 0000200000000280 RSI: 0000200000000000 RDI: 0000000000000000 [ 244.577431][ T6850] RBP: 00007f6caa172090 R08: 0000200000000180 R09: 0000000000000000 [ 244.577439][ T6850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.577446][ T6850] R13: 00007f6ca9616038 R14: 00007f6ca9615fa0 R15: 00007ffc29efa8a8 [ 244.577470][ T6850] [ 244.846875][ T36] audit: type=1326 audit(1773837124.334:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6851 comm="syz.6.2434" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ca939c799 code=0x0 [ 244.898403][ C0] blk_print_req_error: 45 callbacks suppressed [ 244.898421][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 244.913774][ C0] buffer_io_error: 45 callbacks suppressed [ 244.913791][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 244.927664][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 244.936811][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 244.954198][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 244.963348][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 244.971489][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 244.980614][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 244.988843][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 244.997998][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 245.053579][ T6862] fuse: Unknown parameter '00000000000000000003' [ 245.084449][ T6868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.093769][ T6868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.103565][ T6868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.113674][ T6868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.123240][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.132413][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 245.140452][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.149599][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 245.157893][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.167053][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 245.175183][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.184338][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 245.192423][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.201577][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 245.230503][ T36] audit: type=1400 audit(1773837124.691:1112): avc: denied { append } for pid=6869 comm="syz.5.2441" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 245.337335][ T36] audit: type=1326 audit(1773837124.794:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6873 comm="syz.5.2442" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc4f5f9c799 code=0x0 [ 245.610050][ T6879] input: syz1 as /devices/virtual/input/input27 [ 245.798580][ T6887] fuse: Unknown parameter '00000000000000000003' [ 245.865436][ T9] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 246.006187][ T887] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 246.008930][ T36] audit: type=1400 audit(1773837125.423:1114): avc: denied { map } for pid=6892 comm="syz.1.2449" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 246.014178][ T887] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 246.038541][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 246.059395][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 246.067798][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 246.091753][ T9] usb 7-1: New USB device found, idVendor=0582, idProduct=0456, bcdDevice= 0.41 [ 246.100889][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.108903][ T9] usb 7-1: Product: syz [ 246.115200][ T6894] fido_id[6894]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 246.128733][ T9] usb 7-1: Manufacturer: syz [ 246.136664][ T9] usb 7-1: SerialNumber: syz [ 246.235881][ T6901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.244426][ T6901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.366455][ T6903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.377303][ T6903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.385610][ T9] usb 7-1: MIDIStreaming interface descriptor not found [ 246.404188][ T9] usb 7-1: USB disconnect, device number 51 [ 246.575806][ T423] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 246.589256][ T423] usb 8-1: USB disconnect, device number 11 [ 246.596692][ T715] udevd[715]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 246.899190][ T423] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 247.059045][ T423] usb 8-1: Using ep0 maxpacket: 16 [ 247.069736][ T423] usb 8-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 247.090708][ T423] usb 8-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.134814][ T423] usb 8-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.149179][ T423] usb 8-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 247.168198][ T423] usb 8-1: config 7 interface 0 has no altsetting 0 [ 247.181621][ T423] usb 8-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 247.197594][ T423] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.357081][ T6928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.366383][ T6928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.416344][ T6928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=6928 comm=syz.1.2460 [ 247.428861][ T6928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2460'. [ 247.439466][ T6928] hub 1-0:1.0: USB hub found [ 247.444286][ T6928] hub 1-0:1.0: 1 port detected [ 247.639296][ T6905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.647826][ T6905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.656762][ T423] hid (null): unknown global tag 0xd [ 247.662045][ T423] hid (null): unknown global tag 0xe [ 247.666528][ T887] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 247.678682][ T423] input: HID 0458:5010 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:7.0/0003:0458:5010.001E/input/input28 [ 247.696899][ T423] kye 0003:0458:5010.001E: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.7-1/input0 [ 247.826610][ T887] usb 7-1: Using ep0 maxpacket: 32 [ 247.833386][ T887] usb 7-1: unable to get BOS descriptor or descriptor too short [ 247.841866][ T887] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 247.854694][ T887] usb 7-1: string descriptor 0 read error: -22 [ 247.860905][ T887] usb 7-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 247.869975][ T887] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.879854][ T887] usb 7-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8210); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 247.888405][ T423] usb 8-1: USB disconnect, device number 12 [ 247.895440][ T887] usb 7-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 247.920195][ T887] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 248.096651][ T422] usb 7-1: USB disconnect, device number 52 [ 248.104170][ T6954] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 248.152483][ T6959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.161016][ T6959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.653133][ T36] audit: type=1400 audit(1773837127.900:1115): avc: denied { create } for pid=6971 comm="syz.6.2478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 248.727206][ T423] usb 2-1: USB disconnect, device number 51 [ 248.806878][ T422] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 248.882235][ T6977] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.889269][ T6977] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.896346][ T6977] bridge_slave_0: entered allmulticast mode [ 248.902686][ T6977] bridge_slave_0: entered promiscuous mode [ 248.924413][ T6977] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.931450][ T6977] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.938878][ T6977] bridge_slave_1: entered allmulticast mode [ 248.945190][ T6977] bridge_slave_1: entered promiscuous mode [ 248.951375][ T12] bridge_slave_1: left allmulticast mode [ 248.957026][ T12] bridge_slave_1: left promiscuous mode [ 248.962769][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.970474][ T6982] tipc: Can't bind to reserved service type 1 [ 248.976796][ T12] bridge_slave_0: left allmulticast mode [ 248.982558][ T12] bridge_slave_0: left promiscuous mode [ 248.988201][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.000953][ T422] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 249.012812][ T422] usb 8-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 249.022625][ T422] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 249.052013][ T422] usb 8-1: config 220 has no interface number 2 [ 249.058290][ T422] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 249.071580][ T9] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 249.081644][ T422] usb 8-1: config 220 interface 0 has no altsetting 0 [ 249.088817][ T422] usb 8-1: config 220 interface 76 has no altsetting 0 [ 249.095888][ T422] usb 8-1: config 220 interface 1 has no altsetting 0 [ 249.105477][ T422] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 249.114512][ T422] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.139119][ T422] usb 8-1: Product: syz [ 249.143295][ T422] usb 8-1: Manufacturer: syz [ 249.158617][ T422] usb 8-1: SerialNumber: syz [ 249.167693][ T12] tipc: Left network mode [ 249.177356][ T6977] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.184415][ T6977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.191702][ T6977] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.198717][ T6977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.208857][ T12] veth1_macvtap: left promiscuous mode [ 249.214651][ T12] veth0_vlan: left promiscuous mode [ 249.255549][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.266483][ T9] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 249.293182][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 249.302326][ T9] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 249.310865][ T9] usb 7-1: Product: syz [ 249.315620][ T9] usb 7-1: SerialNumber: syz [ 249.332897][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.341956][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.351714][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.358744][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.368109][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.375174][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.382564][ T422] usb 8-1: Found UVC 7.01 device syz (8086:0b07) [ 249.388918][ T422] usb 8-1: No valid video chain found. [ 249.412572][ T422] usb 8-1: selecting invalid altsetting 0 [ 249.429303][ T6977] veth0_vlan: entered promiscuous mode [ 249.435165][ T422] usb 8-1: USB disconnect, device number 13 [ 249.446024][ T6998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.449754][ T6977] veth1_macvtap: entered promiscuous mode [ 249.457499][ T6998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.586445][ T12] ------------[ cut here ]------------ [ 249.592023][ T12] WARNING: CPU: 1 PID: 12 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 249.601963][ T12] Modules linked in: [ 249.605875][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 49aa54d9fff9a118f1e320bc713a86df8a810573 [ 249.617440][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 249.627510][ T12] Workqueue: netns cleanup_net [ 249.632287][ T12] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 249.638299][ T12] Code: e8 61 09 db fc 4b 83 3c 3e 00 75 19 e8 15 e4 82 fc 49 81 ff f8 07 00 00 74 1b e8 07 e4 82 fc 49 83 c7 08 eb c9 e8 fc e3 82 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 249.657950][ T12] RSP: 0018:ffffc900000c7b90 EFLAGS: 00010293 [ 249.664048][ T12] RAX: ffffffff8504bf54 RBX: ffff88812f4b0000 RCX: ffff888102653900 [ 249.672045][ T12] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888103f7c0b8 [ 249.680016][ T12] RBP: ffffc900000c7bb0 R08: 0000000000000003 R09: 0000000000000004 [ 249.688005][ T12] R10: dffffc0000000000 R11: fffff52000018f04 R12: dffffc0000000000 [ 249.696002][ T12] R13: dffffc0000000000 R14: ffff888103f7c000 R15: 00000000000000b8 [ 249.704019][ T12] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 249.712982][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 249.719567][ T12] CR2: 0000001b33b23ffc CR3: 000000012b502000 CR4: 00000000003526b0 [ 249.727549][ T12] Call Trace: [ 249.730823][ T12] [ 249.733750][ T12] cleanup_net+0x6c0/0xc90 [ 249.738193][ T12] ? __cfi_cleanup_net+0x10/0x10 [ 249.743144][ T12] ? __schedule+0x1357/0x1ea0 [ 249.747862][ T12] ? kick_pool+0xb9/0x550 [ 249.752206][ T12] process_scheduled_works+0x7d4/0x1020 [ 249.757780][ T12] worker_thread+0xc70/0x10b0 [ 249.762472][ T12] kthread+0x2c6/0x370 [ 249.766562][ T12] ? __cfi_worker_thread+0x10/0x10 [ 249.771688][ T12] ? __cfi_kthread+0x10/0x10 [ 249.776280][ T12] ret_from_fork+0x64/0xa0 [ 249.780730][ T12] ? __cfi_kthread+0x10/0x10 [ 249.785321][ T12] ret_from_fork_asm+0x1a/0x30 [ 249.790106][ T12] [ 249.793122][ T12] ---[ end trace 0000000000000000 ]--- [ 249.798787][ T12] ------------[ cut here ]------------ [ 249.804230][ T12] WARNING: CPU: 1 PID: 12 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 249.814280][ T12] Modules linked in: [ 249.818190][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G W syzkaller #0 49aa54d9fff9a118f1e320bc713a86df8a810573 [ 249.831254][ T12] Tainted: [W]=WARN [ 249.835048][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 249.845157][ T12] Workqueue: netns cleanup_net [ 249.849946][ T12] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 249.856045][ T12] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 c0 e3 82 fc 49 81 ff f8 07 00 00 74 1b e8 b2 e3 82 fc 49 83 c7 08 eb c5 e8 a7 e3 82 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 97 e3 82 fc 5b 41 5c 41 5e 41 [ 249.875701][ T12] RSP: 0018:ffffc900000c7b90 EFLAGS: 00010293 [ 249.881771][ T12] RAX: ffffffff8504bfa9 RBX: ffff888103f7c800 RCX: ffff888102653900 [ 249.889777][ T12] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888103f7c808 [ 249.897783][ T12] RBP: ffffc900000c7bb0 R08: 0000000000000003 R09: 0000000000000004 [ 249.905821][ T12] R10: dffffc0000000000 R11: fffff52000018f04 R12: dffffc0000000000 [ 249.913789][ T12] R13: dffffc0000000000 R14: ffff888103f7c000 R15: 0000000000000008 [ 249.921792][ T12] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 249.930757][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 249.937396][ T12] CR2: 0000001b33b23ffc CR3: 000000012b502000 CR4: 00000000003526b0 [ 249.945376][ T12] Call Trace: [ 249.948687][ T12] [ 249.951618][ T12] cleanup_net+0x6c0/0xc90 [ 249.956047][ T12] ? __cfi_cleanup_net+0x10/0x10 [ 249.961046][ T12] ? __schedule+0x1357/0x1ea0 [ 249.965736][ T12] ? kick_pool+0xb9/0x550 [ 249.970113][ T12] process_scheduled_works+0x7d4/0x1020 [ 249.975667][ T12] worker_thread+0xc70/0x10b0 [ 249.980371][ T12] kthread+0x2c6/0x370 [ 249.984440][ T12] ? __cfi_worker_thread+0x10/0x10 [ 249.989541][ T12] ? __cfi_kthread+0x10/0x10 [ 249.994138][ T12] ret_from_fork+0x64/0xa0 [ 249.998565][ T12] ? __cfi_kthread+0x10/0x10 [ 250.003196][ T12] ret_from_fork_asm+0x1a/0x30 [ 250.007971][ T12] [ 250.010984][ T12] ---[ end trace 0000000000000000 ]--- [ 250.019466][ T12] ------------[ cut here ]------------ [ 250.024963][ T12] WARNING: CPU: 1 PID: 12 at net/xfrm/xfrm_state.c:3216 xfrm_state_fini+0x2be/0x310 [ 250.034397][ T12] Modules linked in: [ 250.038289][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G W syzkaller #0 49aa54d9fff9a118f1e320bc713a86df8a810573 [ 250.051379][ T12] Tainted: [W]=WARN [ 250.055213][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 250.065297][ T12] Workqueue: netns cleanup_net [ 250.070070][ T12] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 250.075644][ T12] Code: 3c 20 00 74 08 48 89 df e8 0f d3 f5 fc 48 8b 3b e8 f7 ff e0 fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 88 cb b7 00 cc e8 b2 ad 9d fc <0f> 0b e9 b0 fd ff ff e8 a6 ad 9d fc 0f 0b e9 18 fe ff ff e8 9a ad [ 250.095275][ T12] RSP: 0018:ffffc900000c7b70 EFLAGS: 00010293 [ 250.101384][ T12] RAX: ffffffff84e9f59e RBX: ffff88812f4b0000 RCX: ffff888102653900 [ 250.109375][ T12] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888102653900 [ 250.117353][ T12] RBP: ffffc900000c7b98 R08: ffffffff87d36887 R09: 1ffffffff0fa6d10 [ 250.125340][ T12] R10: dffffc0000000000 R11: fffffbfff0fa6d11 R12: 1ffffffff0fa6a60 [ 250.133461][ T12] R13: dffffc0000000000 R14: ffff88812f4b0c00 R15: dffffc0000000000 [ 250.141473][ T12] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 250.150428][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 250.157013][ T12] CR2: 0000001b33b23ffc CR3: 000000010c3e4000 CR4: 00000000003526b0 [ 250.165027][ T12] Call Trace: [ 250.168302][ T12] [ 250.171238][ T12] xfrm_net_exit+0x31/0x80 [ 250.175656][ T12] cleanup_net+0x6c0/0xc90 [ 250.180064][ T12] ? __cfi_cleanup_net+0x10/0x10 [ 250.185039][ T12] ? __schedule+0x1357/0x1ea0 [ 250.189732][ T12] ? kick_pool+0xb9/0x550 [ 250.194097][ T12] process_scheduled_works+0x7d4/0x1020 [ 250.196447][ T9] cdc_ncm 7-1:1.0: bind() failure [ 250.199660][ T12] worker_thread+0xc70/0x10b0 [ 250.199694][ T12] kthread+0x2c6/0x370 [ 250.209465][ T9] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 250.213449][ T12] ? __cfi_worker_thread+0x10/0x10 [ 250.220800][ T9] cdc_ncm 7-1:1.1: bind() failure [ 250.225366][ T12] ? __cfi_kthread+0x10/0x10 [ 250.225390][ T12] ret_from_fork+0x64/0xa0 [ 250.232843][ T9] usb 7-1: USB disconnect, device number 53 [ 250.234994][ T12] ? __cfi_kthread+0x10/0x10 [ 250.249863][ T12] ret_from_fork_asm+0x1a/0x30 [ 250.254618][ T12] [ 250.257648][ T12] ---[ end trace 0000000000000000 ]---