last executing test programs: 2m38.764509897s ago: executing program 3 (id=460): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0xf39, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000480)=0x0) r1 = dup(0xffffffffffffffff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000380), 0x12) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) syz_ublk_setup_queues(r1, r0, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0xe1}, 0x0, 0x1, 0x0, 0x0) syz_ublk_process_io(0x0, 0x0, 0x9, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r5 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedreceive(r5, &(0x7f0000000840)=""/44, 0x2c, 0x9, &(0x7f0000001980)) write$binfmt_script(r4, &(0x7f0000012700)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap$IORING_OFF_SQ_RING(0x0, 0x7fff, 0x3000009, 0x1010, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) statx(0xffffffffffffff9c, 0x0, 0x100, 0x0, 0x0) write(r6, &(0x7f0000000200)='base=0x20000000 size=0x20000 type=write-back', 0x2c) ioctl(r6, 0x40104d06, &(0x7f0000000a00)="000002000000000000000200") mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, 0x0, &(0x7f00000000c0)) 2m37.836736993s ago: executing program 3 (id=468): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x17, 0x1, 0x70bd26, 0x25dfdbfd, {0x8}, [@typed={0x8, 0x5, 0x0, 0x0, @u32=0x7}]}, 0xff2e}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYRES8, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc"], 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x40090) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16a", 0x5, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m37.180648243s ago: executing program 3 (id=469): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000040)=0x8, 0x4) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x48, 0x0, &(0x7f0000000440)=[@enter_looper, @clear_death={0x400c630f, 0x3, 0x1}, @decrefs, @exit_looper, @free_buffer, @free_buffer, @request_freeze={0x400c6313, 0x2, 0x1}], 0x0, 0x0, 0x0}) dup3(r2, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0xd, &(0x7f0000000380)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r3, 0x0}]) 2m37.026047565s ago: executing program 3 (id=470): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49db, 0x0, 0xfff9, 0xbfff, 0x12, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="bd78ef47de7f0f54279f"], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0xffefef7c, 0x0, 0x2, 0x10, "1b09000440800000000004e678000003101000"}) r1 = syz_open_pts(r0, 0x20800) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x44) 2m36.501110591s ago: executing program 3 (id=471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000013c0)=ANY=[@ANYRESDEC=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4004051) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) setxattr$security_ima(&(0x7f00000000c0)='./proc\x00', &(0x7f0000000100), &(0x7f0000000300)=@sha1={0x1, "eefaf97f87ea90786376320d39fc0e181bd0e8c5"}, 0x15, 0x665e99e99143d765) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0x221, 0x1030, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001180)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x218018, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./proc/net/can/rcvlist_all\x00', 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) prctl$PR_MCE_KILL(0x35, 0x0, 0x2) ioctl(r6, 0x404c4701, &(0x7f0000000100)="0100000000000000000000000000000100000000000000000000000040000000400000000000000001") sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000001300)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1, 0x4}}], 0x48}, 0x0) read(r4, &(0x7f0000000100)=""/4096, 0x1000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1020, 0x1, 0x11, r3, 0x2000) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001340)=ANY=[@ANYBLOB="600000000207010100000078c2a97adaac0a00000000000100000a080005400000000524000780080001400000000908000140000000010800024000000002080001400000d0350c000240000000000000000608000540000000020c00064000f5acfe83652c67"], 0x60}, 0x1, 0x0, 0x0, 0x20048004}, 0x4) r7 = syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2) pivot_root(&(0x7f00000011c0)='./tracing/per_cpu/cpu0/trace_pipe_raw/file0\x00', &(0x7f0000001240)='./tracing\x00') ioctl$VIDIOC_G_MODULATOR(r7, 0xc0445636, &(0x7f0000000080)={0x10, "00722ce54292280c9e3d7a95c564c62c7ca5fc0f20c991265ba973821afdba1c", 0x4, 0x8, 0x7, 0x10, 0x3}) 2m36.302453859s ago: executing program 3 (id=472): openat$vnet(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) r1 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r1, &(0x7f00000091c0)=""/16384, 0x4000) write$binfmt_script(r0, 0x0, 0x0) 2m20.92131153s ago: executing program 32 (id=472): openat$vnet(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) r1 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r1, &(0x7f00000091c0)=""/16384, 0x4000) write$binfmt_script(r0, 0x0, 0x0) 1m32.042774832s ago: executing program 2 (id=827): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) open_by_handle_at(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0xc041) 1m31.659724485s ago: executing program 2 (id=830): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x38, 0xa, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x38}}, 0x0) 1m31.554323552s ago: executing program 2 (id=831): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x44, 0xa, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}]}]}, 0x44}}, 0x0) 1m31.433758699s ago: executing program 2 (id=832): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) (fail_nth: 2) 1m31.157953669s ago: executing program 2 (id=833): r0 = syz_open_dev$admmidi(&(0x7f00000001c0), 0x20, 0x0) unshare(0x22020600) readv(r0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x0) 1m30.966496377s ago: executing program 2 (id=834): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x3c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x19, 0x6, "bd7b959954f07e27e4b0c29c8c38769443cbe4b2d6"}]}, @NFT_MSG_DELCHAIN={0xc4, 0x5, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_CHAIN_USERDATA={0x3e, 0xc, "af42ea3267b71fe938d7aac698084ba0e36822faefbcf3637f768ed6c453ff936b9fbed844aebdf423afe010526c743a4b8fb30cfe5dbf7e1673"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_USERDATA={0x3a, 0xc, "d27ec5b6042f4015d03bb3e0aa871223c4dce0e7d644be16271e6d49bd20c44d22cca704b21ce425b6793a956c805f1135a72f48d609"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3e}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x9}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x27}]}], {0x14}}, 0x1cc}, 0x1, 0x0, 0x0, 0x40000}, 0x10) ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f00000002c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x134, r2, 0x8, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x134}, 0x1, 0x0, 0x0, 0x48005}, 0x4040882) unshare(0x20000000) syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r1) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r1) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)={0x148, r3, 0x614, 0x70bd29, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x148}, 0x1, 0x0, 0x0, 0x80841}, 0x2008000) r4 = syz_open_dev$ndb(&(0x7f0000000840), 0x0, 0x101) ioctl$IOC_PR_REGISTER(r4, 0x401870c8, &(0x7f0000000880)={0x0, 0x5, 0x1}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$XFS_IOC_GETBMAPX(r5, 0xc0205838, &(0x7f00000008c0)={0x2, 0x8, 0x6, 0x5, 0x3, 0x14}) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000900)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x518, 0x2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x88, 0xd7, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x1, 0x2, {0x9, 0x21, 0x50, 0x9, 0x1, {0x22, 0xb27}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4f, 0x0, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x3, 0xd, 0x1}}]}}}]}}]}}, &(0x7f0000000d80)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x201, 0x13, 0x6, 0x6, 0x20, 0xfc}, 0x4f, &(0x7f0000000980)={0x5, 0xf, 0x4f, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "c59f2f02037df0868a682407fcdae3a2"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "f2fcb2eab20868f6278a55df8b1f48c6"}, @ssp_cap={0x14, 0x10, 0xa, 0xe, 0x2, 0x5, 0xff00, 0x7, [0x3f00, 0x3ff0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x0, 0x6}]}, 0x8, [{0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x420}}, {0x5b, &(0x7f0000000a80)=@string={0x5b, 0x3, "21159c2e91caef04ca9e81e80e5c33039097179d918145fcaa5bd24b0bd7b2c3d91f5b12280c14211a78da4f286c84876e61a945b15458ec87e768615ced77d32d3e58279cc2a6c882b37edda2cd15f373949044f9b53eefd7"}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x406}}, {0xec, &(0x7f0000000b40)=@string={0xec, 0x3, "32ec8ae12f06e3d0eedcf13c00bb1be14ce1f8d585de3b346c15ecf2ab90edde937d5ea592d77139035209dba94f1c6b40de85c1d073f7e494ce8128eddbf220f7009f7135fdb6c14f99de5816c79420fbfd8ed6c041de646c815506a2fbc03fb4aa4c31165af3d24c35497a07c26295d628647da1d828c452e0b76831265cb400fef774dbbba53dd8361d9ade4696c489b229957edddcb5d66191406c8ab3b94911654b50cfa7be5361305f955c175c03c33d6d84cdc7b92f3d0c994caeb599c9f7f1741b6dbc50dee7d6ab65eda9a778996bada505c910d1d9011cdd7c2af38e202f94cac7b3ee6899"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0xc0a}}, {0xa6, &(0x7f0000000cc0)=@string={0xa6, 0x3, "add4f11cfa991a52f3be9e1839ff7ee505b5ac58c2fb2be2ac279bb0970634cda20e0f44826c76302572fffa680988834658757c8da72c94da29b212e394cd59a1a6673f92597a3f0ccccbacb79bd2d2cf922e9c287704af8c9d2a839f3c00e875a63919f30640184cf7045422290bb1570a1fec46ca1dcf532ef03d96ce29666ae336a08ec8c924166753e190ba7a6a0c47bd46a47a6b77177ab3588bd7ae36eeba885d"}}]}) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000ec0)={&(0x7f0000000e00), 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x30, 0xe, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x10000000}, 0x4000081) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000f00)={0xffffffffffffffff}) socket$inet_mptcp(0x2, 0x1, 0x106) r7 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r7) r8 = syz_io_uring_complete(0x0, 0x0) read$dsp(r8, &(0x7f0000000f40)=""/168, 0xa8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001080)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000010c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r9, &(0x7f00000011c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x48, r10, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008805) ioctl$KVM_RUN(r8, 0xae80, 0x0) recvmsg(r6, &(0x7f0000001380)={&(0x7f0000001200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001340)=[{&(0x7f0000001280)=""/46, 0x2e}, {&(0x7f00000012c0)=""/23, 0x17}, {&(0x7f0000001300)=""/45, 0x2d}], 0x3}, 0x14e00c8c8b254cb) 1m19.862284994s ago: executing program 0 (id=896): socket$nl_netfilter(0x10, 0x3, 0xc) mount(0x0, 0x0, 0x0, 0x0, 0x0) setns(0xc9, 0x0) r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/x86/topo/domains\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x20) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) socketpair(0x28, 0x3, 0x820, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x9c}, 0x1, 0x0, 0x0, 0x20008841}, 0x4000) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) 1m19.609758104s ago: executing program 0 (id=897): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r0, &(0x7f0000000000)='270', 0x3) r1 = syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x2) ioctl$BLKPG(r1, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x10000, 0x1}}) 1m19.076402748s ago: executing program 0 (id=898): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000800)={{{@in6=@mcast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000900)=0xe8) mount$nfs4(&(0x7f00000004c0)='devtmpfs\x00', &(0x7f0000000780)='./dev/mapper/control\x00', &(0x7f00000007c0), 0x84400, &(0x7f0000000940)={[{}], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/kvm\x00'}}, {@euid_eq={'euid', 0x3d, r2}}, {@context={'context', 0x3d, 'staff_u'}}, {@uid_gt={'uid>', 0xee01}}]}) ioctl(r1, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") ioctl(r1, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000a00100003801000001") 1m19.019639527s ago: executing program 0 (id=899): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000a00)="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", 0x17c}], 0x1, 0x0, 0x0, 0x900}}], 0x1, 0x20004080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000240)={{0xd000, 0x80a0000, 0x8, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0xf9}, {0xffff1000, 0x10000, 0x4, 0x0, 0x3, 0x0, 0x20, 0x0, 0x7, 0xff, 0x0, 0xd}, {0xeeee0000, 0xeeee1000, 0xc, 0xb, 0x7, 0xc4, 0x0, 0x1, 0x48, 0x3, 0x1, 0x3}, {0x1, 0xffff1000, 0x9, 0x0, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4, 0xd}, {0x100000, 0xffff1000, 0x3, 0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x40}, {0x50000, 0x4, 0x9, 0x74, 0x5, 0x2, 0xa, 0x9, 0x0, 0x2, 0x5}, {0x0, 0xeeee8000, 0x8, 0x4, 0x0, 0x2, 0xa1, 0x20, 0x0, 0x82}, {0x0, 0x6000, 0x10, 0xfc, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x1}, {0xeeef0000, 0x3}, {0x6000, 0x400}, 0x5df8ffe2, 0x0, 0x0, 0x400, 0x0, 0xf801, 0x0, [0x80000002, 0x2, 0x1]}) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r5, 0xc0106412, &(0x7f00000000c0)={0x0, 0x0}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r6, 0x3ba0, &(0x7f00000013c0)={0x48, 0x16, 0xffffffffffffffff, 0x0, 0x80000001, 0x0, 0x0, 0x1}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x101200, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x10003, 0x1, 0xeee90000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000880)={{0xd000, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0x40}, {0xffffffff, 0x10000, 0xa, 0x3, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0xe6ee2000, 0x3000, 0xc, 0x0, 0x8, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0xeeef0000, 0xeee96000, 0xa, 0x0, 0x1, 0xa6, 0x9, 0x0, 0x8, 0x10, 0x7, 0x4}, {0xf000, 0xffff1000, 0xe, 0x0, 0x0, 0x4, 0x0, 0xfd, 0x0, 0x3c}, {0x8000000, 0x0, 0xb, 0x78, 0x5, 0x83, 0x0, 0x0, 0x3, 0xff, 0x1}, {0x1ffe, 0xeeee0000, 0xa, 0x4, 0x0, 0x5, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x81a0002, 0x6000, 0xb, 0x0, 0x0, 0x5, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x41000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x134, 0xd, 0x0, 0x0, [0x80000005, 0x8, 0x1]}) sendto(r1, &(0x7f0000000140)="bbf0d8791ab96285ffe27a81397574d420b51a607bbe15fff5d2ac24cafec3547a257bb301dede1c11d938328649ace64230663f87552b7e174e0cc5609faf7847", 0x41, 0x8080, &(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x3, 0x1, 0x0, {0xa, 0x4e24, 0xdc, @local, 0x2}}}, 0x80) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/apparmor/.access\x00', 0x2, 0x0) write(r9, &(0x7f00000002c0)='profile\x00&', 0xfef) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$XFS_IOC_COMMIT_RANGE(r1, 0x40585883, &(0x7f00000006c0)={r6, 0x0, 0x5, 0x7, 0x3aa80, 0x7, [0x0, 0x177, 0xa, 0x5f, 0x7d1, 0x7ff]}) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x103496, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1m18.66727123s ago: executing program 0 (id=901): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4e", 0xc8}, {&(0x7f00000009c0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c505f1678a3165181261067da7d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff", 0xd2}, {&(0x7f0000000ac0)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000000b80)="3b3d07b7091f697381965e2e7909f9f6f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910baf212596b2a4a23aab8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f63a26492042b663d8c955bfad12d47e8", 0x80}], 0x4}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d80)="d51927d7b27f39aa725cb19a990f66ac9aae2f7d92045a4c05e60f4dc5dc6c4e4ac8449b9915fb289bf1692a4c7d9440950ee716b680274b3c53048b6a2aeca47c5e6987db6b4fb364fa1e1709caa0696b9e02eabc8757ef2dd6a17f3efa", 0x5e}, {&(0x7f0000000e00)="96bc7002996addfa3b96a5e4de4cf18b08fa24022c9eb8cd8932ada8710619787de0", 0x22}, {0x0}], 0x3}}], 0x3, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000100)={0xc, 0x0, 0x0, 0xfdfd}) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0286415, &(0x7f0000000000)={&(0x7f0000a08000/0x2000)=nil, 0x8, 0x4, 0x5}) 1m18.428147301s ago: executing program 0 (id=902): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, 0x0) (fail_nth: 2) 1m18.176225001s ago: executing program 33 (id=902): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, 0x0) (fail_nth: 2) 1m15.761534002s ago: executing program 34 (id=834): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x3c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x19, 0x6, "bd7b959954f07e27e4b0c29c8c38769443cbe4b2d6"}]}, @NFT_MSG_DELCHAIN={0xc4, 0x5, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_CHAIN_USERDATA={0x3e, 0xc, "af42ea3267b71fe938d7aac698084ba0e36822faefbcf3637f768ed6c453ff936b9fbed844aebdf423afe010526c743a4b8fb30cfe5dbf7e1673"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_USERDATA={0x3a, 0xc, "d27ec5b6042f4015d03bb3e0aa871223c4dce0e7d644be16271e6d49bd20c44d22cca704b21ce425b6793a956c805f1135a72f48d609"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3e}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x9}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x27}]}], {0x14}}, 0x1cc}, 0x1, 0x0, 0x0, 0x40000}, 0x10) ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f00000002c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x134, r2, 0x8, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x134}, 0x1, 0x0, 0x0, 0x48005}, 0x4040882) unshare(0x20000000) syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r1) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r1) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)={0x148, r3, 0x614, 0x70bd29, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x148}, 0x1, 0x0, 0x0, 0x80841}, 0x2008000) r4 = syz_open_dev$ndb(&(0x7f0000000840), 0x0, 0x101) ioctl$IOC_PR_REGISTER(r4, 0x401870c8, &(0x7f0000000880)={0x0, 0x5, 0x1}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$XFS_IOC_GETBMAPX(r5, 0xc0205838, &(0x7f00000008c0)={0x2, 0x8, 0x6, 0x5, 0x3, 0x14}) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000900)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x518, 0x2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x88, 0xd7, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x1, 0x2, {0x9, 0x21, 0x50, 0x9, 0x1, {0x22, 0xb27}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4f, 0x0, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x3, 0xd, 0x1}}]}}}]}}]}}, &(0x7f0000000d80)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x201, 0x13, 0x6, 0x6, 0x20, 0xfc}, 0x4f, &(0x7f0000000980)={0x5, 0xf, 0x4f, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "c59f2f02037df0868a682407fcdae3a2"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "f2fcb2eab20868f6278a55df8b1f48c6"}, @ssp_cap={0x14, 0x10, 0xa, 0xe, 0x2, 0x5, 0xff00, 0x7, [0x3f00, 0x3ff0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x0, 0x6}]}, 0x8, [{0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x420}}, {0x5b, &(0x7f0000000a80)=@string={0x5b, 0x3, "21159c2e91caef04ca9e81e80e5c33039097179d918145fcaa5bd24b0bd7b2c3d91f5b12280c14211a78da4f286c84876e61a945b15458ec87e768615ced77d32d3e58279cc2a6c882b37edda2cd15f373949044f9b53eefd7"}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x406}}, {0xec, &(0x7f0000000b40)=@string={0xec, 0x3, "32ec8ae12f06e3d0eedcf13c00bb1be14ce1f8d585de3b346c15ecf2ab90edde937d5ea592d77139035209dba94f1c6b40de85c1d073f7e494ce8128eddbf220f7009f7135fdb6c14f99de5816c79420fbfd8ed6c041de646c815506a2fbc03fb4aa4c31165af3d24c35497a07c26295d628647da1d828c452e0b76831265cb400fef774dbbba53dd8361d9ade4696c489b229957edddcb5d66191406c8ab3b94911654b50cfa7be5361305f955c175c03c33d6d84cdc7b92f3d0c994caeb599c9f7f1741b6dbc50dee7d6ab65eda9a778996bada505c910d1d9011cdd7c2af38e202f94cac7b3ee6899"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0xc0a}}, {0xa6, &(0x7f0000000cc0)=@string={0xa6, 0x3, "add4f11cfa991a52f3be9e1839ff7ee505b5ac58c2fb2be2ac279bb0970634cda20e0f44826c76302572fffa680988834658757c8da72c94da29b212e394cd59a1a6673f92597a3f0ccccbacb79bd2d2cf922e9c287704af8c9d2a839f3c00e875a63919f30640184cf7045422290bb1570a1fec46ca1dcf532ef03d96ce29666ae336a08ec8c924166753e190ba7a6a0c47bd46a47a6b77177ab3588bd7ae36eeba885d"}}]}) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000ec0)={&(0x7f0000000e00), 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x30, 0xe, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x10000000}, 0x4000081) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000f00)={0xffffffffffffffff}) socket$inet_mptcp(0x2, 0x1, 0x106) r7 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r7) r8 = syz_io_uring_complete(0x0, 0x0) read$dsp(r8, &(0x7f0000000f40)=""/168, 0xa8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001080)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000010c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r9, &(0x7f00000011c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x48, r10, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008805) ioctl$KVM_RUN(r8, 0xae80, 0x0) recvmsg(r6, &(0x7f0000001380)={&(0x7f0000001200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001340)=[{&(0x7f0000001280)=""/46, 0x2e}, {&(0x7f00000012c0)=""/23, 0x17}, {&(0x7f0000001300)=""/45, 0x2d}], 0x3}, 0x14e00c8c8b254cb) 58.628872916s ago: executing program 6 (id=985): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYRES16=r0], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000002c0)={0x6, 0x80000, r0}) mkdirat(r1, &(0x7f0000000180)='./sys\x00', 0x196) setns(0xc9, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bond0/bonding/mode\x00', 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001840000010203040506070800000c00020006002000884800000c00030008000c0004"]}, 0x58}}, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x100a, 0x1, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x14}, @fda={0x66646185, 0x0, 0x1, 0x7}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r8, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000200)=0x274f, 0x2b) sendmmsg$inet6(r8, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r8, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0x7f}], 0x1, 0x12023, 0x0) write(r2, &(0x7f0000000480)='-', 0x1) 58.313104852s ago: executing program 6 (id=987): mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) eventfd2(0x0, 0x0) (async) r0 = eventfd2(0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x501300, 0x0) r3 = eventfd(0x40) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000240)={0x8, 0x4, 0x2, r3, 0x1}) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) eventfd2(0x0, 0x80000) (async) r5 = eventfd2(0x0, 0x80000) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000001340)={0x0, 0x0, 0x2, r5, 0x3}) r6 = eventfd2(0x8, 0x80800) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0x1, 0x0, r6}) (async) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0x1, 0x0, r6}) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000000)={0xe, 0xeeee8000, 0x43b41fd011ab5c12, r0, 0xf}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./lower2\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() (async) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) (async) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r8, &(0x7f0000000000)='3', 0x4e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8923, &(0x7f00000000c0)={'veth0_vlan\x00', @random="0135014010ff"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./upper\x00', 0x1ff) r10 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r10, 0xc0405602, &(0x7f0000000040)={0xc, 0x1, 0x0, "3b3ad6f32e978900d10052d0002000000000000000f3ffff05000000ff00ffe8", 0x31435750}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./work\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./work\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000280)='./lower1/file1\x00', 0x42, 0x1ff) socket$inet_smc(0x2b, 0x1, 0x0) 57.750065803s ago: executing program 6 (id=990): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0) writev(r0, &(0x7f0000000900), 0x0) 57.260240469s ago: executing program 6 (id=991): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000180)='./file0/../file0/file0\x00') 57.051793047s ago: executing program 6 (id=994): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0x9, @empty, 0x10}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) 56.70245802s ago: executing program 6 (id=996): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0x9, @empty, 0x10}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) (fail_nth: 2) 56.178461529s ago: executing program 35 (id=996): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0x9, @empty, 0x10}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) (fail_nth: 2) 8.102286428s ago: executing program 7 (id=1310): socket$packet(0x11, 0x2, 0x300) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x0) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000d00)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) (fail_nth: 2) close_range(r0, 0xffffffffffffffff, 0x0) 7.59831494s ago: executing program 7 (id=1312): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0xaaaaaaaaaaaac8f, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000011000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x48, 0x0, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.060013611s ago: executing program 5 (id=1314): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000040), 0x10) sendmsg$netlink(r2, &(0x7f0000005d80)={&(0x7f0000000440)=@proc={0x10, 0x0, 0x25dfdbff, 0x80000}, 0x7, &(0x7f0000005cc0)=[{&(0x7f0000001380)=ANY=[], 0x38}], 0x1, 0x0, 0x0, 0x44011}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0xaaaaaaaaaaaac8f, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000011000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x48, 0x0, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.952965667s ago: executing program 7 (id=1315): socket$nl_route(0x10, 0x3, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r1, &(0x7f00000001c0)="6e051b86ab85757e75aa0900e08fd4abb4ac94ccafce02bce17820cd1c1fc2b1e0b64451533b6b994c8ff4e551f41fec67d16e768c9fb5e6ec9ff7dbc516f16bc6dcb3d5e1308bdc8619387533484a1f12ca9f15e8a5ef47a81aaa9ea2a8fddec4795bb0d5936fc8d477acbb59b3786ddae2fcac992cefb05a87a45e9670055f1c2658882b02c1516f3d2593f5e1c4061111105a7a8510c92a8c49ca94a13c63b07846e19f88f0ebf74c3398c94985b37e20390d814b9046faa58b9f2d42d6ce4332f3a2c81e461d955e31b29ebb6e7bcad95ee593be323d1cbc8f7cea10326c12", 0xe1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x3, 0x92040) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', 0x41}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES8=r4, @ANYRES64=r2, @ANYRES64=r6], 0x38}, 0x1, 0x0, 0x0, 0xc884}, 0x0) write(r4, &(0x7f0000000500)="ffffffffffff00000000000188ca4f4000281000000000000000010000010100000100"/54, 0x36) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045520, 0x0) 5.641606317s ago: executing program 5 (id=1318): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0, 0xfffffffffffffe3c}], 0x1, 0xd, 0x0, 0x0) dup(0xffffffffffffffff) write$tun(0xffffffffffffffff, &(0x7f0000000200)={@val={0xa, 0x9000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, '\x00\x00\b', 0x91, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8000, {0xb, 0x6, "8b98a1", 0x26e5, 0x29, 0x0, @remote, @remote, [], "536d4261acbe81b786"}}}}}}}}, 0x73) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.024402916s ago: executing program 5 (id=1321): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000240)={{0xd000, 0x80a0000, 0x8, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0xf9}, {0xffff1000, 0x10000, 0x4, 0x0, 0x3, 0x0, 0x20, 0x0, 0x7, 0xff, 0x0, 0xd}, {0xeeee0000, 0xeeee1000, 0xc, 0xb, 0x7, 0xc4, 0x0, 0x1, 0x48, 0x3, 0x1, 0x3}, {0x1, 0xffff1000, 0x9, 0x0, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4, 0xd}, {0x100000, 0xffff1000, 0x3, 0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x40}, {0x50000, 0x4, 0x9, 0x74, 0x5, 0x2, 0xa, 0x9, 0x0, 0x2, 0x5}, {0x0, 0xeeee8000, 0x8, 0x4, 0x0, 0x2, 0xa1, 0x20, 0x0, 0x82}, {0x0, 0x6000, 0x10, 0xfc, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x1}, {0xeeef0000, 0x3}, {0x6000, 0x400}, 0x5df8ffe2, 0x0, 0x0, 0x400, 0x0, 0xf801, 0x0, [0x80000002, 0x2, 0x1]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/apparmor/.access\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)='profile\x00&', 0xfef) 4.576033792s ago: executing program 5 (id=1324): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xfff, 0xcf8, 0x30314247, 0x2, 0xfffffffe, 0x4000, 0xa, 0x5, 0x0, 0x2}}) r1 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000200)={0x1, 0x0, @auto=[0x1, 0x14, 0x1a, 0x35]}, 0xc, 0xfffffffffffffff9) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000240)={r1, 0xdf, 0x42}, &(0x7f0000000400)={'enc=', 'oaep', ' hash=', {'sha3-224\x00'}}, &(0x7f0000000580)="105baca13bcad5795f904f57e153ac4da680ebc87446ee7e46a56874d39f6ccdf4ba89754b6ee850cf839525ab372b226fd45b6f1252518aa50d05f812386324e8e9ee47a7859909bbca8ac1412d70e9a3f2f23f79a1e961b0aad7823187fda4bc870a5929bf8badd2f2aca28e2df64ffd6ab4c82d7a37aa4e2a6baf43a20e63b1523edf5c26ece0014e0e9952a8c12dd745fb4b0799c0a0a98cee27be6025fc48d5b9121c43c4abd713a4a9284f04edb85b853a9be30ec4def65b1eef0fa28c54aa87902dd49a40b1d5fdb82d119c8ba0fecc1dd277040b4bd549e2c89823", &(0x7f0000000340)=""/66) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000480)={0x7ff, 0x4, 0x1, {0x6, @raw_data="6e160b4fb44765329a4a8109df51f9ac1dcaccee128297cce05771abce8ea6ad68c53cacc4b8df939b2cc597f41e7cf8abbfa383de699982df6a5b787097798f2da7cab4b8f296f65ab2a6299a51b9e894281d09a3c55280521d8c04cc2d8f080829d233c2c2cfb1f4307ff65c92211d95712ca8b5cc0343e370e868f3df245d7f30f93c06491293710166ea9521f2aacca4841401707d2daf049b4d0a98fb9c2a16975fe15d61781ddd59284c4356a25d176c71b1b19c49482bd6161f81c016933c11d192a35ad0"}, 0x7ff}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001500)=""/184, 0x0, 0xffff1000}) r3 = socket$inet(0x2, 0x3, 0x32) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000004c0)='ip6_vti0\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x2004082c, &(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0xfffffffe) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x200000000) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x5, 0x8a, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x763, 0x2003, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x3, 0x1, 0x9, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x5, 0x9, 0x5, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x78, 0x8, 0xba, {0x7, 0x25, 0x1, 0x8, 0x4, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xfc, 0x3, 0x8, 0x1}, @as_header={0x7, 0x24, 0x1, 0x8, 0x5, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0x2, 0x1, {0x7, 0x25, 0x1, 0x0, 0xe, 0x3}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 4.274251241s ago: executing program 1 (id=1326): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000000)="360f7883b81e2626660fc7350ff4650666b95c030010dada32f4656df30f09e3650f01ef66b9720500000f32f8000f0d35", 0x31}], 0x1, 0x2, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x36, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000580)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x40000}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 2) 3.741979347s ago: executing program 7 (id=1327): recvmmsg(0xffffffffffffffff, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000001c40)=[{0x0}, {&(0x7f0000001940)=""/226, 0xe2}], 0x2}, 0x9}], 0x1, 0x2100, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002140)="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", 0x2000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl(r3, 0x4048aec9, &(0x7f0000000300)="01") ioctl(r4, 0x4048aecb, &(0x7f0000001000)="070000000000000001000000ffffffff") r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) listen(r0, 0x9) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0xa, 0x801, 0x84) r8 = socket$inet(0xa, 0x801, 0x84) listen(r8, 0x8) listen(r7, 0xfffffffd) r9 = socket$netlink(0x10, 0x3, 0x4) listen(r6, 0x8200002) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r9) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r11, &(0x7f0000000040)="790ee710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r11, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 3.665407541s ago: executing program 1 (id=1328): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0x7000, 0x100000}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c697000140007800800064000000200080008"], 0x60}, 0x1, 0x0, 0x0, 0x404c014}, 0x40480) clock_gettime(0x0, &(0x7f0000000b80)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r9, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r10, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x4ffe6, 0x0) 3.487232339s ago: executing program 5 (id=1329): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x4, @empty, 0x2}, 0x1c) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0, 0xfffffffffffffe3c}], 0x1, 0xd, 0x0, 0x0) dup(0xffffffffffffffff) write$tun(0xffffffffffffffff, &(0x7f0000000200)={@val={0xa, 0x9000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, '\x00\x00\b', 0x91, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8000, {0xb, 0x6, "8b98a1", 0x26e5, 0x29, 0x0, @remote, @remote, [], "536d4261acbe81b786"}}}}}}}}, 0x73) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.637229715s ago: executing program 7 (id=1332): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000240)={{0xd000, 0x80a0000, 0x8, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0xf9}, {0xffff1000, 0x10000, 0x4, 0x0, 0x3, 0x0, 0x20, 0x0, 0x7, 0xff, 0x0, 0xd}, {0xeeee0000, 0xeeee1000, 0xc, 0xb, 0x7, 0xc4, 0x0, 0x1, 0x48, 0x3, 0x1, 0x3}, {0x1, 0xffff1000, 0x9, 0x0, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4, 0xd}, {0x100000, 0xffff1000, 0x3, 0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x40}, {0x50000, 0x4, 0x9, 0x74, 0x5, 0x2, 0xa, 0x9, 0x0, 0x2, 0x5}, {0x0, 0xeeee8000, 0x8, 0x4, 0x0, 0x2, 0xa1, 0x20, 0x0, 0x82}, {0x0, 0x6000, 0x10, 0xfc, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x1}, {0xeeef0000, 0x3}, {0x6000, 0x400}, 0x5df8ffe2, 0x0, 0x0, 0x400, 0x0, 0xf801, 0x0, [0x80000002, 0x2, 0x1]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/apparmor/.access\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)='profile\x00&', 0xfef) 2.630231707s ago: executing program 1 (id=1333): syz_80211_inject_frame(&(0x7f0000000840), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x3, @private0, 0x3ce}]}, &(0x7f0000000080)=0x10) syz_80211_inject_frame(&(0x7f0000001480)=@device_b, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000001f40)={0x0, 0x0}) nanosleep(&(0x7f0000001f80)={r1, r2+60000000}, 0x0) syz_80211_inject_frame(&(0x7f0000002000)=@broadcast, 0x0, 0x0) 2.435166841s ago: executing program 7 (id=1334): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000040)=[0x1389, 0x4, 0x40005002, 0xffff32eb, 0x2, 0xffffdff9, 0x2d7b, 0x401, 0x0, 0x3, 0x0, 0x3, 0xfe09, 0xd2, 0x80000002], 0x0, 0x4000003}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="20ad12b09f927fe512ca409333d0e03818d98f61b9f0920e318dbd", @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x4010841}, 0x9590f6cc3ea3d542) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000040)='\\\xcb6@\x00L\xa4\xa6@U\xd7\x96\xf11l\x04\x00\xef\xecx', 0x0) fallocate(r3, 0x0, 0x10065b, 0xa) lseek(r3, 0x0, 0x4) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42480, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 2.015371808s ago: executing program 4 (id=1335): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}, {0xa4, 0x51, 0x7b, 0x40000}, {0x6, 0xe5, 0x4, 0xfdfffffd}]}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) dup3(r1, r0, 0x0) ioctl(r1, 0x78, &(0x7f00000001c0)) 1.825842291s ago: executing program 4 (id=1336): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dri/128/name\x00', 0x0, 0x0) read(r1, &(0x7f0000000100), 0x100) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001800d0001007564703a73797a30000000002c0004001400010002004e207f00000100000000000000001400020002"], 0x54}}, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(r0, 0x80186e84, &(0x7f00000000c0)={&(0x7f0000000000)=[{0xb8d, 0x2}, {0xb, 0x9, 0x1}], 0x2, 0x10, 0xb}) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x28, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40810}, 0x0) 1.669406356s ago: executing program 4 (id=1337): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xfff, 0xcf8, 0x30314247, 0x2, 0xfffffffe, 0x4000, 0xa, 0x5, 0x0, 0x2}}) r1 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000200)={0x1, 0x0, @auto=[0x1, 0x14, 0x1a, 0x35]}, 0xc, 0xfffffffffffffff9) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000240)={r1, 0xdf, 0x42}, &(0x7f0000000400)={'enc=', 'oaep', ' hash=', {'sha3-224\x00'}}, &(0x7f0000000580)="105baca13bcad5795f904f57e153ac4da680ebc87446ee7e46a56874d39f6ccdf4ba89754b6ee850cf839525ab372b226fd45b6f1252518aa50d05f812386324e8e9ee47a7859909bbca8ac1412d70e9a3f2f23f79a1e961b0aad7823187fda4bc870a5929bf8badd2f2aca28e2df64ffd6ab4c82d7a37aa4e2a6baf43a20e63b1523edf5c26ece0014e0e9952a8c12dd745fb4b0799c0a0a98cee27be6025fc48d5b9121c43c4abd713a4a9284f04edb85b853a9be30ec4def65b1eef0fa28c54aa87902dd49a40b1d5fdb82d119c8ba0fecc1dd277040b4bd549e2c89823", &(0x7f0000000340)=""/66) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000480)={0x7ff, 0x4, 0x1, {0x6, @raw_data="6e160b4fb44765329a4a8109df51f9ac1dcaccee128297cce05771abce8ea6ad68c53cacc4b8df939b2cc597f41e7cf8abbfa383de699982df6a5b787097798f2da7cab4b8f296f65ab2a6299a51b9e894281d09a3c55280521d8c04cc2d8f080829d233c2c2cfb1f4307ff65c92211d95712ca8b5cc0343e370e868f3df245d7f30f93c06491293710166ea9521f2aacca4841401707d2daf049b4d0a98fb9c2a16975fe15d61781ddd59284c4356a25d176c71b1b19c49482bd6161f81c016933c11d192a35ad0"}, 0x7ff}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001500)=""/184, 0x0, 0xffff1000}) r3 = socket$inet(0x2, 0x3, 0x32) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000004c0)='ip6_vti0\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x2004082c, &(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0xfffffffe) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x200000000) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x5, 0x8a, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x763, 0x2003, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x3, 0x1, 0x9, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x5, 0x9, 0x5, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x78, 0x8, 0xba, {0x7, 0x25, 0x1, 0x8, 0x4, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xfc, 0x3, 0x8, 0x1}, @as_header={0x7, 0x24, 0x1, 0x8, 0x5, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0x2, 0x1, {0x7, 0x25, 0x1, 0x0, 0xe, 0x3}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 1.447191377s ago: executing program 5 (id=1338): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4e", 0xc8}, {&(0x7f00000009c0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c505f1678a3165181261067da7d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff", 0xd2}, {&(0x7f0000000ac0)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000000b80)="3b3d07b7091f697381965e2e7909f9f6f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910baf212596b2a4a23aab8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f63a26492042b663d8c955bfad12d47e8", 0x80}], 0x4}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d80)="d51927d7b27f39aa725cb19a990f66ac9aae2f7d92045a4c05e60f4dc5dc6c4e4ac8449b9915fb289bf1692a4c7d9440950ee716b680274b3c53048b6a2aeca47c5e6987db6b4fb364fa1e1709caa0696b9e02eabc8757ef2dd6a17f3efa", 0x5e}, {&(0x7f0000000e80)="048dc9fb57afe301fd6f4184903098607627504035b7aa74e71b85eaa192909644d18f5695718d3c3532f6ed73c2422e87d6d3032447f236426269422e70740455409baf", 0x44}], 0x2}}], 0x3, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000100)={0xc, 0x0, 0x0, 0xfdfd}) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0286415, &(0x7f0000000000)={&(0x7f0000a08000/0x2000)=nil, 0x8, 0x4, 0x5}) 1.064630453s ago: executing program 1 (id=1339): syz_io_uring_setup(0x2959, &(0x7f0000000140)={0x0, 0xd008, 0x80, 0x1, 0x397}, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)) write(0xffffffffffffffff, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00mirror\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00core 2 1024 nosync 2', 0x3c) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000a00100003801000001") 895.505916ms ago: executing program 1 (id=1340): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x20000037, 0x2, 0x4d6, 0x0, 0x2, 0x10, 0x3cfdc84c, 0x100000001, 0x5, 0x7, 0x7a, 0x47244453, 0x8003, 0x202, 0xed3, 0x90000000bd9], 0x60000}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x101fe, 0x1, 0x9000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x3, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 481.595984ms ago: executing program 1 (id=1341): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0x7000, 0x100000}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c697000140007800800064000000200080008"], 0x60}, 0x1, 0x0, 0x0, 0x404c014}, 0x40480) clock_gettime(0x0, &(0x7f0000000b80)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r9, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r10, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x4ffe6, 0x0) 335.919413ms ago: executing program 4 (id=1342): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000240)={{0xd000, 0x80a0000, 0x8, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0xf9}, {0xffff1000, 0x10000, 0x4, 0x0, 0x3, 0x0, 0x20, 0x0, 0x7, 0xff, 0x0, 0xd}, {0xeeee0000, 0xeeee1000, 0xc, 0xb, 0x7, 0xc4, 0x0, 0x1, 0x48, 0x3, 0x1, 0x3}, {0x1, 0xffff1000, 0x9, 0x0, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4, 0xd}, {0x100000, 0xffff1000, 0x3, 0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x40}, {0x50000, 0x4, 0x9, 0x74, 0x5, 0x2, 0xa, 0x9, 0x0, 0x2, 0x5}, {0x0, 0xeeee8000, 0x8, 0x4, 0x0, 0x2, 0xa1, 0x20, 0x0, 0x82}, {0x0, 0x6000, 0x10, 0xfc, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x1}, {0xeeef0000, 0x3}, {0x6000, 0x400}, 0x5df8ffe2, 0x0, 0x0, 0x400, 0x0, 0xf801, 0x0, [0x80000002, 0x2, 0x1]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/apparmor/.access\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)='profile\x00&', 0xfef) 124.903983ms ago: executing program 4 (id=1343): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x3f5, 0x0) (async) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000001000)="04000000320000000000000038010000") fadvise64(0xffffffffffffffff, 0x92, 0x7, 0x1) (async, rerun: 32) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./dev/mapper/control\x00', &(0x7f0000000040), &(0x7f0000000080)={0x0, 0xfb, 0x99, 0x5, 0x6, "704b7017cbb26a91ef2c21d47933a8a6", "cccb51f566c6efc2e1cbfe25aa37e461ad33056f18c283d7ba3aa1f86831afd157385eb069694043fe025b3d38b63f0d6710fa42073bd725f7d9a6988bccc36724ba8a4aed2bc1f42341d0159a736d80a1f10db6050aaab70089ec8f915aef0468e8697080c740dbb31ff81a9aaf04de658e21236edcc420498cd2387d9b19e7d51dfb7e"}, 0x99, 0x0) (rerun: 32) ioctl(r0, 0xc138fd01, &(0x7f0000002000)="0400000032000000000000006c01") 0s ago: executing program 4 (id=1344): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a78000000060a0b040000020000000000020100004c000480480001800a0001006d61746368000000380002800e000100636f6e6e62797465730000001c0003004cb4fc4ba7906e8f58c20508000000000003007521cf85ee08000240000000000900010073797a30000000000900020073797a32"], 0xa0}}, 0x0) setns(0xc9, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x10f) r2 = socket$inet(0x2, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e0007000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, &(0x7f0000000100), 0x12) listen(r4, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r7 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f00000001c0)=0x1, 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r6, 0x2, 0x2000, 0x100002, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0xffff}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x7f}]}, 0x24}, 0x1, 0x0, 0x0, 0x20085}, 0x2000c000) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000000)='jfs\x00', 0x2008002, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB], 0x28}, 0x1, 0x6c00}, 0x0) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b"], 0x88) r10 = accept(r4, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x80) kernel console output (not intermixed with test programs): t: 16 [ 269.423410][ T9158] usb 2-1: unable to get BOS descriptor or descriptor too short [ 269.423464][ T9158] usb 2-1: New USB device found: idVendor=0763, idProduct=2003, bcdDevice=0.40 [ 269.425929][ T9158] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 269.463339][ T9158] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.463369][ T9158] usb 2-1: Product: syz [ 269.463386][ T9158] usb 2-1: Manufacturer: syz [ 269.463403][ T9158] usb 2-1: SerialNumber: syz [ 269.486839][ T5273] 8021q: adding VLAN 0 to HW filter on device eth10 [ 269.718102][ T9158] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 269.718865][ T9158] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 269.718895][ T9158] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 269.800974][ T9158] usb 2-1: USB disconnect, device number 41 [ 269.851695][ T5876] udevd[5876]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 270.204230][ T9413] FAULT_INJECTION: forcing a failure. [ 270.204230][ T9413] name failslab, interval 1, probability 0, space 0, times 0 [ 270.204270][ T9413] CPU: 0 UID: 0 PID: 9413 Comm: syz.4.1043 Tainted: G L syzkaller #0 PREEMPT(full) [ 270.204304][ T9413] Tainted: [L]=SOFTLOCKUP [ 270.204315][ T9413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 270.204331][ T9413] Call Trace: [ 270.204341][ T9413] [ 270.204353][ T9413] dump_stack_lvl+0xe8/0x150 [ 270.204388][ T9413] should_fail_ex+0x3eb/0x540 [ 270.204420][ T9413] should_failslab+0xa8/0x100 [ 270.204448][ T9413] __kmalloc_noprof+0xf9/0x710 [ 270.204475][ T9413] ? tomoyo_encode+0x2ad/0x570 [ 270.204498][ T9413] ? tomoyo_encode+0x2ad/0x570 [ 270.204532][ T9413] tomoyo_encode+0x2ad/0x570 [ 270.204562][ T9413] tomoyo_realpath_from_path+0x5fa/0x640 [ 270.204597][ T9413] ? tomoyo_path_number_perm+0x219/0x5f0 [ 270.204625][ T9413] tomoyo_path_number_perm+0x246/0x5f0 [ 270.204657][ T9413] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 270.204681][ T9413] ? __lock_acquire+0x747/0x2de0 [ 270.204755][ T9413] ? __fget_files+0x2a/0x420 [ 270.204784][ T9413] ? __fget_files+0x2a/0x420 [ 270.204809][ T9413] ? __fget_files+0x2a/0x420 [ 270.204839][ T9413] security_file_ioctl+0xc3/0x2a0 [ 270.204870][ T9413] __se_sys_ioctl+0x47/0x170 [ 270.204899][ T9413] do_syscall_64+0x166/0x520 [ 270.204922][ T9413] ? trace_irq_disable+0x3b/0x140 [ 270.204945][ T9413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.204971][ T9413] ? clear_bhb_loop+0x70/0xc0 [ 270.204999][ T9413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.205025][ T9413] RIP: 0033:0x7fcaa999e199 [ 270.205053][ T9413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.205075][ T9413] RSP: 002b:00007fcaaa917028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 270.205103][ T9413] RAX: ffffffffffffffda RBX: 00007fcaa9c25fa0 RCX: 00007fcaa999e199 [ 270.205122][ T9413] RDX: 0000200000001040 RSI: 00000000000089f1 RDI: 0000000000000003 [ 270.205139][ T9413] RBP: 00007fcaaa917090 R08: 0000000000000000 R09: 0000000000000000 [ 270.205155][ T9413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.205171][ T9413] R13: 00007fcaa9c26038 R14: 00007fcaa9c25fa0 R15: 00007ffc533e26b8 [ 270.205221][ T9413] [ 270.207747][ T9410] jffs2: notice: (9410) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 270.259443][ T9413] ERROR: Out of memory at tomoyo_realpath_from_path. [ 270.716379][ T5273] 8021q: adding VLAN 0 to HW filter on device eth11 [ 271.117683][ T9443] device-mapper: table: 248:0: mirror: Invalid number of mirrors (-EINVAL) [ 271.117712][ T9443] device-mapper: ioctl: error adding target to table [ 271.183167][ T9448] FAULT_INJECTION: forcing a failure. [ 271.183167][ T9448] name failslab, interval 1, probability 0, space 0, times 0 [ 271.183202][ T9448] CPU: 1 UID: 0 PID: 9448 Comm: syz.1.1051 Tainted: G L syzkaller #0 PREEMPT(full) [ 271.183233][ T9448] Tainted: [L]=SOFTLOCKUP [ 271.183242][ T9448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 271.183256][ T9448] Call Trace: [ 271.183265][ T9448] [ 271.183275][ T9448] dump_stack_lvl+0xe8/0x150 [ 271.183305][ T9448] should_fail_ex+0x3eb/0x540 [ 271.183333][ T9448] should_failslab+0xa8/0x100 [ 271.183360][ T9448] __kmalloc_noprof+0xf9/0x710 [ 271.183383][ T9448] ? tomoyo_encode+0x2ad/0x570 [ 271.183403][ T9448] ? tomoyo_encode+0x2ad/0x570 [ 271.183432][ T9448] tomoyo_encode+0x2ad/0x570 [ 271.183460][ T9448] tomoyo_realpath_from_path+0x5fa/0x640 [ 271.183503][ T9448] ? tomoyo_path_number_perm+0x219/0x5f0 [ 271.183527][ T9448] tomoyo_path_number_perm+0x246/0x5f0 [ 271.183554][ T9448] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 271.183576][ T9448] ? __lock_acquire+0x747/0x2de0 [ 271.183639][ T9448] ? __fget_files+0x2a/0x420 [ 271.183663][ T9448] ? __fget_files+0x2a/0x420 [ 271.183684][ T9448] ? __fget_files+0x2a/0x420 [ 271.183710][ T9448] security_file_ioctl+0xc3/0x2a0 [ 271.183735][ T9448] __se_sys_ioctl+0x47/0x170 [ 271.183761][ T9448] do_syscall_64+0x166/0x520 [ 271.183782][ T9448] ? trace_irq_disable+0x3b/0x140 [ 271.183802][ T9448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.183825][ T9448] ? clear_bhb_loop+0x70/0xc0 [ 271.183851][ T9448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.183873][ T9448] RIP: 0033:0x7f8ab079e199 [ 271.183894][ T9448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.183913][ T9448] RSP: 002b:00007f8ab1737028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 271.183937][ T9448] RAX: ffffffffffffffda RBX: 00007f8ab0a25fa0 RCX: 00007f8ab079e199 [ 271.183954][ T9448] RDX: 0000200000000040 RSI: 0000000000008b1b RDI: 0000000000000003 [ 271.183970][ T9448] RBP: 00007f8ab1737090 R08: 0000000000000000 R09: 0000000000000000 [ 271.183984][ T9448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.183998][ T9448] R13: 00007f8ab0a26038 R14: 00007f8ab0a25fa0 R15: 00007ffd6e4c6518 [ 271.184034][ T9448] [ 271.184081][ T9448] ERROR: Out of memory at tomoyo_realpath_from_path. [ 271.759364][ T9459] syzkaller1: entered promiscuous mode [ 271.759388][ T9459] syzkaller1: entered allmulticast mode [ 271.932605][ T5698] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 272.088882][ T5698] usb 2-1: Using ep0 maxpacket: 16 [ 272.091784][ T5698] usb 2-1: unable to get BOS descriptor or descriptor too short [ 272.091838][ T5698] usb 2-1: New USB device found: idVendor=0763, idProduct=2003, bcdDevice=0.40 [ 272.093322][ T5698] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 272.139535][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.139569][ T5698] usb 2-1: Product: syz [ 272.139588][ T5698] usb 2-1: Manufacturer: syz [ 272.139607][ T5698] usb 2-1: SerialNumber: syz [ 272.361387][ T9475] netlink: 'syz.5.1058': attribute type 10 has an invalid length. [ 272.411010][ T5698] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 272.412904][ T5698] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 272.412941][ T5698] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 272.508954][ T9476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.525499][ T9476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.558716][ T5698] usb 2-1: USB disconnect, device number 42 [ 272.629102][ T5876] udevd[5876]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 272.681334][ T5273] 8021q: adding VLAN 0 to HW filter on device eth12 [ 272.823294][ T9482] FAULT_INJECTION: forcing a failure. [ 272.823294][ T9482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.823329][ T9482] CPU: 0 UID: 0 PID: 9482 Comm: syz.7.1060 Tainted: G L syzkaller #0 PREEMPT(full) [ 272.823368][ T9482] Tainted: [L]=SOFTLOCKUP [ 272.823376][ T9482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 272.823390][ T9482] Call Trace: [ 272.823399][ T9482] [ 272.823409][ T9482] dump_stack_lvl+0xe8/0x150 [ 272.823439][ T9482] should_fail_ex+0x3eb/0x540 [ 272.823467][ T9482] strncpy_from_user+0x36/0x2c0 [ 272.823495][ T9482] do_getname+0x77/0x250 [ 272.823522][ T9482] __getname_maybe_null+0x7e/0x210 [ 272.823552][ T9482] __se_sys_move_mount+0x203/0x510 [ 272.823579][ T9482] ? __pfx___se_sys_move_mount+0x10/0x10 [ 272.823601][ T9482] ? __pfx_ksys_write+0x10/0x10 [ 272.823630][ T9482] ? __x64_sys_move_mount+0x20/0xc0 [ 272.823655][ T9482] do_syscall_64+0x166/0x520 [ 272.823678][ T9482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.823701][ T9482] ? clear_bhb_loop+0x70/0xc0 [ 272.823726][ T9482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.823750][ T9482] RIP: 0033:0x7fe31cb9e199 [ 272.823770][ T9482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.823790][ T9482] RSP: 002b:00007fe31db0e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 272.823815][ T9482] RAX: ffffffffffffffda RBX: 00007fe31ce25fa0 RCX: 00007fe31cb9e199 [ 272.823832][ T9482] RDX: ffffffffffffff9c RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 272.823849][ T9482] RBP: 00007fe31db0e090 R08: 0000000000000243 R09: 0000000000000000 [ 272.823864][ T9482] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 272.823880][ T9482] R13: 00007fe31ce26038 R14: 00007fe31ce25fa0 R15: 00007ffc17658118 [ 272.823916][ T9482] [ 273.229858][ T9486] device-mapper: table: 248:0: mirror: Invalid number of mirrors (-EINVAL) [ 273.229883][ T9486] device-mapper: ioctl: error adding target to table [ 273.348642][ T9497] FAULT_INJECTION: forcing a failure. [ 273.348642][ T9497] name failslab, interval 1, probability 0, space 0, times 0 [ 273.348679][ T9497] CPU: 1 UID: 0 PID: 9497 Comm: syz.7.1064 Tainted: G L syzkaller #0 PREEMPT(full) [ 273.348709][ T9497] Tainted: [L]=SOFTLOCKUP [ 273.348718][ T9497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 273.348732][ T9497] Call Trace: [ 273.348742][ T9497] [ 273.348752][ T9497] dump_stack_lvl+0xe8/0x150 [ 273.348783][ T9497] should_fail_ex+0x3eb/0x540 [ 273.348811][ T9497] should_failslab+0xa8/0x100 [ 273.348836][ T9497] __kmalloc_cache_noprof+0x9e/0x600 [ 273.348861][ T9497] ? sctp_association_new+0x89/0x25d0 [ 273.348884][ T9497] ? sctp_association_new+0x89/0x25d0 [ 273.348907][ T9497] ? sctp_has_association+0x2f/0x1f0 [ 273.348935][ T9497] sctp_association_new+0x89/0x25d0 [ 273.348957][ T9497] ? sctp_has_association+0x2f/0x1f0 [ 273.348981][ T9497] ? __ipv6_addr_type+0x23d/0x2f0 [ 273.349009][ T9497] sctp_connect_new_asoc+0x2e4/0x6b0 [ 273.349037][ T9497] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 273.349061][ T9497] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 273.349085][ T9497] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 273.349106][ T9497] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 273.349130][ T9497] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 273.349151][ T9497] ? security_sctp_bind_connect+0x7e/0x2c0 [ 273.349177][ T9497] sctp_sendmsg+0x159b/0x2d00 [ 273.349211][ T9497] ? kstrtouint+0x6e/0xe0 [ 273.349233][ T9497] ? __pfx_sctp_sendmsg+0x10/0x10 [ 273.349254][ T9497] ? lock_acquire+0x115/0x350 [ 273.349300][ T9497] ? aa_sock_msg_perm+0xf5/0x210 [ 273.349320][ T9497] ? sock_rps_record_flow+0x19/0x350 [ 273.349346][ T9497] ? inet_sendmsg+0x298/0x320 [ 273.349366][ T9497] ? apparmor_socket_sendmsg+0x98/0x360 [ 273.349394][ T9497] ? __pfx_inet_sendmsg+0x10/0x10 [ 273.349417][ T9497] sock_sendmsg_nosec+0x10f/0x190 [ 273.349440][ T9497] __sys_sendto+0x408/0x5a0 [ 273.349459][ T9497] ? ksys_write+0x1e6/0x270 [ 273.349485][ T9497] ? __pfx___sys_sendto+0x10/0x10 [ 273.349501][ T9497] ? __mutex_unlock_slowpath+0x731/0x900 [ 273.349536][ T9497] ? fdget+0x1ac/0x250 [ 273.349565][ T9497] ? __pfx_ksys_write+0x10/0x10 [ 273.349587][ T9497] __x64_sys_sendto+0xde/0x100 [ 273.349608][ T9497] do_syscall_64+0x166/0x520 [ 273.349624][ T9497] ? trace_irq_disable+0x3b/0x140 [ 273.349641][ T9497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.349660][ T9497] ? clear_bhb_loop+0x70/0xc0 [ 273.349680][ T9497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.349703][ T9497] RIP: 0033:0x7fe31cb9e199 [ 273.349724][ T9497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.349742][ T9497] RSP: 002b:00007fe31db0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 273.349767][ T9497] RAX: ffffffffffffffda RBX: 00007fe31ce25fa0 RCX: 00007fe31cb9e199 [ 273.349785][ T9497] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 273.349800][ T9497] RBP: 00007fe31db0e090 R08: 0000200000000140 R09: 000000000000001c [ 273.349815][ T9497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.349830][ T9497] R13: 00007fe31ce26038 R14: 00007fe31ce25fa0 R15: 00007ffc17658118 [ 273.349865][ T9497] [ 273.806449][ T9501] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input20 [ 273.947278][ T9508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.241318][ T9518] device-mapper: table: 248:0: mirror: Invalid number of mirrors (-EINVAL) [ 274.241339][ T9518] device-mapper: ioctl: error adding target to table [ 274.371787][ T9527] FAULT_INJECTION: forcing a failure. [ 274.371787][ T9527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.371815][ T9527] CPU: 0 UID: 0 PID: 9527 Comm: syz.4.1075 Tainted: G L syzkaller #0 PREEMPT(full) [ 274.371837][ T9527] Tainted: [L]=SOFTLOCKUP [ 274.371843][ T9527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 274.371854][ T9527] Call Trace: [ 274.371861][ T9527] [ 274.371868][ T9527] dump_stack_lvl+0xe8/0x150 [ 274.371890][ T9527] should_fail_ex+0x3eb/0x540 [ 274.371909][ T9527] _copy_from_user+0x2d/0xb0 [ 274.371932][ T9527] sctp_getsockopt_context+0xbc/0x4b0 [ 274.371953][ T9527] ? __pfx_sctp_getsockopt_context+0x10/0x10 [ 274.371968][ T9527] ? sctp_getsockopt+0x12f/0xb90 [ 274.371986][ T9527] ? __local_bh_enable_ip+0xd6/0x140 [ 274.372006][ T9527] sctp_getsockopt+0x49a/0xb90 [ 274.372021][ T9527] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 274.372039][ T9527] do_sock_getsockopt+0x4aa/0x640 [ 274.372061][ T9527] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 274.372088][ T9527] ? __fget_files+0x3a2/0x420 [ 274.372103][ T9527] ? __fget_files+0x2a/0x420 [ 274.372123][ T9527] __x64_sys_getsockopt+0x1a4/0x240 [ 274.372146][ T9527] do_syscall_64+0x166/0x520 [ 274.372160][ T9527] ? trace_irq_disable+0x3b/0x140 [ 274.372174][ T9527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.372191][ T9527] ? clear_bhb_loop+0x70/0xc0 [ 274.372208][ T9527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.372224][ T9527] RIP: 0033:0x7fcaa999e199 [ 274.372238][ T9527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.372252][ T9527] RSP: 002b:00007fcaaa917028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 274.372269][ T9527] RAX: ffffffffffffffda RBX: 00007fcaa9c25fa0 RCX: 00007fcaa999e199 [ 274.372281][ T9527] RDX: 0000000000000011 RSI: 0000000000000084 RDI: 0000000000000003 [ 274.372291][ T9527] RBP: 00007fcaaa917090 R08: 0000200000000080 R09: 0000000000000000 [ 274.372306][ T9527] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.372317][ T9527] R13: 00007fcaa9c26038 R14: 00007fcaa9c25fa0 R15: 00007ffc533e26b8 [ 274.372343][ T9527] [ 274.409454][ T9158] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 274.568805][ T9158] usb 2-1: Using ep0 maxpacket: 16 [ 274.577754][ T9158] usb 2-1: unable to get BOS descriptor or descriptor too short [ 274.592228][ T9158] usb 2-1: New USB device found: idVendor=0763, idProduct=2003, bcdDevice=0.40 [ 274.618921][ T9158] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 274.648118][ T9158] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.648201][ T9158] usb 2-1: Product: syz [ 274.648244][ T9158] usb 2-1: Manufacturer: syz [ 274.648294][ T9158] usb 2-1: SerialNumber: syz [ 274.904811][ T9158] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 274.906824][ T9158] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 274.906857][ T9158] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 274.993083][ T9158] usb 2-1: USB disconnect, device number 43 [ 275.066609][ T5876] udevd[5876]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 275.146295][ T9544] device-mapper: table: 248:0: mirror: Invalid number of mirrors (-EINVAL) [ 275.146315][ T9544] device-mapper: ioctl: error adding target to table [ 276.123700][ T9576] FAULT_INJECTION: forcing a failure. [ 276.123700][ T9576] name failslab, interval 1, probability 0, space 0, times 0 [ 276.123736][ T9576] CPU: 0 UID: 0 PID: 9576 Comm: syz.5.1093 Tainted: G L syzkaller #0 PREEMPT(full) [ 276.123766][ T9576] Tainted: [L]=SOFTLOCKUP [ 276.123775][ T9576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 276.123790][ T9576] Call Trace: [ 276.123800][ T9576] [ 276.123810][ T9576] dump_stack_lvl+0xe8/0x150 [ 276.123850][ T9576] should_fail_ex+0x3eb/0x540 [ 276.123878][ T9576] should_failslab+0xa8/0x100 [ 276.123903][ T9576] __kmalloc_noprof+0xf9/0x710 [ 276.123927][ T9576] ? tomoyo_encode+0x2ad/0x570 [ 276.123948][ T9576] ? tomoyo_encode+0x2ad/0x570 [ 276.123977][ T9576] tomoyo_encode+0x2ad/0x570 [ 276.124006][ T9576] tomoyo_realpath_from_path+0x5fa/0x640 [ 276.124040][ T9576] ? tomoyo_path_number_perm+0x219/0x5f0 [ 276.124065][ T9576] tomoyo_path_number_perm+0x246/0x5f0 [ 276.124092][ T9576] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 276.124114][ T9576] ? __lock_acquire+0x747/0x2de0 [ 276.124179][ T9576] ? __fget_files+0x2a/0x420 [ 276.124204][ T9576] ? __fget_files+0x2a/0x420 [ 276.124226][ T9576] ? __fget_files+0x2a/0x420 [ 276.124252][ T9576] security_file_ioctl+0xc3/0x2a0 [ 276.124279][ T9576] __se_sys_ioctl+0x47/0x170 [ 276.124305][ T9576] do_syscall_64+0x166/0x520 [ 276.124326][ T9576] ? trace_irq_disable+0x3b/0x140 [ 276.124347][ T9576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.124372][ T9576] ? clear_bhb_loop+0x70/0xc0 [ 276.124397][ T9576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.124421][ T9576] RIP: 0033:0x7f35a7f9e199 [ 276.124441][ T9576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.124461][ T9576] RSP: 002b:00007f35a61f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 276.124486][ T9576] RAX: ffffffffffffffda RBX: 00007f35a8225fa0 RCX: 00007f35a7f9e199 [ 276.124503][ T9576] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 276.124517][ T9576] RBP: 00007f35a61f6090 R08: 0000000000000000 R09: 0000000000000000 [ 276.124533][ T9576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.124547][ T9576] R13: 00007f35a8226038 R14: 00007f35a8225fa0 R15: 00007ffe16a2a698 [ 276.124583][ T9576] [ 276.124606][ T9576] ERROR: Out of memory at tomoyo_realpath_from_path. [ 276.592918][ T9585] qnx4: no qnx4 filesystem (no root dir). [ 276.687958][ T27] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 276.847961][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 276.850142][ T27] usb 2-1: unable to get BOS descriptor or descriptor too short [ 276.850193][ T27] usb 2-1: New USB device found: idVendor=0763, idProduct=2003, bcdDevice=0.40 [ 276.851430][ T27] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 276.854721][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.854750][ T27] usb 2-1: Product: syz [ 276.854767][ T27] usb 2-1: Manufacturer: syz [ 276.854784][ T27] usb 2-1: SerialNumber: syz [ 277.032865][ T9595] FAULT_INJECTION: forcing a failure. [ 277.032865][ T9595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.032907][ T9595] CPU: 0 UID: 0 PID: 9595 Comm: syz.5.1100 Tainted: G L syzkaller #0 PREEMPT(full) [ 277.032940][ T9595] Tainted: [L]=SOFTLOCKUP [ 277.032949][ T9595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 277.032963][ T9595] Call Trace: [ 277.032972][ T9595] [ 277.032981][ T9595] dump_stack_lvl+0xe8/0x150 [ 277.033014][ T9595] should_fail_ex+0x3eb/0x540 [ 277.033033][ T9595] _copy_from_user+0x2d/0xb0 [ 277.033050][ T9595] sctp_setsockopt+0x1c4/0x12c0 [ 277.033086][ T9595] ? sock_common_setsockopt+0x36/0xc0 [ 277.033113][ T9595] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 277.033138][ T9595] do_sock_setsockopt+0x17c/0x1b0 [ 277.033166][ T9595] __x64_sys_setsockopt+0x13d/0x1b0 [ 277.033193][ T9595] do_syscall_64+0x166/0x520 [ 277.033219][ T9595] ? trace_irq_disable+0x3b/0x140 [ 277.033248][ T9595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.033273][ T9595] ? clear_bhb_loop+0x70/0xc0 [ 277.033296][ T9595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.033318][ T9595] RIP: 0033:0x7f35a7f9e199 [ 277.033356][ T9595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.033377][ T9595] RSP: 002b:00007f35a61f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 277.033401][ T9595] RAX: ffffffffffffffda RBX: 00007f35a8225fa0 RCX: 00007f35a7f9e199 [ 277.033418][ T9595] RDX: 0000000000000079 RSI: 0000000000000084 RDI: 0000000000000003 [ 277.033432][ T9595] RBP: 00007f35a61f6090 R08: 0000000000000008 R09: 0000000000000000 [ 277.033446][ T9595] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 277.033461][ T9595] R13: 00007f35a8226038 R14: 00007f35a8225fa0 R15: 00007ffe16a2a698 [ 277.033495][ T9595] [ 277.242614][ T27] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 277.243426][ T27] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 277.243457][ T27] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 277.320179][ T27] usb 2-1: USB disconnect, device number 44 [ 277.402361][ T5876] udevd[5876]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 277.871291][ T27] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 277.903744][ T9612] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 277.903894][ T9612] block device autoloading is deprecated and will be removed. [ 277.924808][ T9613] netlink: NAT attribute has 4 unknown bytes [ 277.925896][ T9613] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.991760][ T9618] FAULT_INJECTION: forcing a failure. [ 277.991760][ T9618] name failslab, interval 1, probability 0, space 0, times 0 [ 277.991788][ T9618] CPU: 1 UID: 0 PID: 9618 Comm: syz.1.1107 Tainted: G L syzkaller #0 PREEMPT(full) [ 277.991810][ T9618] Tainted: [L]=SOFTLOCKUP [ 277.991817][ T9618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 277.991827][ T9618] Call Trace: [ 277.991833][ T9618] [ 277.991844][ T9618] dump_stack_lvl+0xe8/0x150 [ 277.991866][ T9618] should_fail_ex+0x3eb/0x540 [ 277.991887][ T9618] should_failslab+0xa8/0x100 [ 277.991904][ T9618] __kmalloc_noprof+0xf9/0x710 [ 277.991921][ T9618] ? tomoyo_encode+0x2ad/0x570 [ 277.991936][ T9618] ? tomoyo_encode+0x2ad/0x570 [ 277.991956][ T9618] tomoyo_encode+0x2ad/0x570 [ 277.991976][ T9618] tomoyo_realpath_from_path+0x5fa/0x640 [ 277.992000][ T9618] ? tomoyo_path_number_perm+0x219/0x5f0 [ 277.992017][ T9618] tomoyo_path_number_perm+0x246/0x5f0 [ 277.992036][ T9618] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 277.992051][ T9618] ? __lock_acquire+0x747/0x2de0 [ 277.992095][ T9618] ? __fget_files+0x2a/0x420 [ 277.992112][ T9618] ? __fget_files+0x2a/0x420 [ 277.992127][ T9618] ? __fget_files+0x2a/0x420 [ 277.992145][ T9618] security_file_ioctl+0xc3/0x2a0 [ 277.992163][ T9618] __se_sys_ioctl+0x47/0x170 [ 277.992180][ T9618] do_syscall_64+0x166/0x520 [ 277.992197][ T9618] ? trace_irq_disable+0x3b/0x140 [ 277.992211][ T9618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.992228][ T9618] ? clear_bhb_loop+0x70/0xc0 [ 277.992246][ T9618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.992261][ T9618] RIP: 0033:0x7f8ab079e199 [ 277.992276][ T9618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.992290][ T9618] RSP: 002b:00007f8ab1737028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 277.992308][ T9618] RAX: ffffffffffffffda RBX: 00007f8ab0a25fa0 RCX: 00007f8ab079e199 [ 277.992320][ T9618] RDX: 00002000000000c0 RSI: 00000000c040565e RDI: 0000000000000003 [ 277.992330][ T9618] RBP: 00007f8ab1737090 R08: 0000000000000000 R09: 0000000000000000 [ 277.992341][ T9618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.992351][ T9618] R13: 00007f8ab0a26038 R14: 00007f8ab0a25fa0 R15: 00007ffd6e4c6518 [ 277.992376][ T9618] [ 277.992504][ T9618] ERROR: Out of memory at tomoyo_realpath_from_path. [ 278.049177][ T27] usb 5-1: Using ep0 maxpacket: 32 [ 278.059209][ T27] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 278.120622][ T27] usb 5-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.120661][ T27] usb 5-1: config 1 interface 0 altsetting 64 bulk endpoint 0x82 has invalid maxpacket 16 [ 278.120694][ T27] usb 5-1: config 1 interface 0 altsetting 64 endpoint 0x3 has invalid wMaxPacketSize 0 [ 278.120717][ T27] usb 5-1: config 1 interface 0 altsetting 64 bulk endpoint 0x3 has invalid maxpacket 0 [ 278.120741][ T27] usb 5-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 278.120770][ T27] usb 5-1: config 1 interface 0 has no altsetting 0 [ 278.151769][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 278.151799][ T27] usb 5-1: SerialNumber: syz [ 278.314794][ T9607] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 278.350883][ T27] hub 5-1:1.0: bad descriptor, ignoring hub [ 278.350912][ T27] hub 5-1:1.0: probe with driver hub failed with error -5 [ 278.351553][ T27] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 278.352627][ T27] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 278.479489][ T9623] FAULT_INJECTION: forcing a failure. [ 278.479489][ T9623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.479525][ T9623] CPU: 1 UID: 0 PID: 9623 Comm: syz.7.1110 Tainted: G L syzkaller #0 PREEMPT(full) [ 278.479555][ T9623] Tainted: [L]=SOFTLOCKUP [ 278.479564][ T9623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 278.479577][ T9623] Call Trace: [ 278.479587][ T9623] [ 278.479597][ T9623] dump_stack_lvl+0xe8/0x150 [ 278.479627][ T9623] should_fail_ex+0x3eb/0x540 [ 278.479656][ T9623] _copy_to_user+0x31/0xb0 [ 278.479682][ T9623] simple_read_from_buffer+0xe1/0x170 [ 278.479712][ T9623] proc_fail_nth_read+0x1bb/0x230 [ 278.479739][ T9623] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 278.479767][ T9623] ? rw_verify_area+0x24a/0x4c0 [ 278.479792][ T9623] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 278.479815][ T9623] vfs_read+0x213/0xa80 [ 278.479843][ T9623] ? __pfx___mutex_lock+0x10/0x10 [ 278.479867][ T9623] ? __pfx_vfs_read+0x10/0x10 [ 278.479891][ T9623] ? __fget_files+0x2a/0x420 [ 278.479912][ T9623] ? __fget_files+0x3a2/0x420 [ 278.479933][ T9623] ? __fget_files+0x2a/0x420 [ 278.479959][ T9623] ? fdget+0x1ac/0x250 [ 278.479989][ T9623] ksys_read+0x150/0x270 [ 278.480015][ T9623] ? __pfx_ksys_read+0x10/0x10 [ 278.480050][ T9623] do_syscall_64+0x166/0x520 [ 278.480072][ T9623] ? trace_irq_disable+0x3b/0x140 [ 278.480092][ T9623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.480116][ T9623] ? clear_bhb_loop+0x70/0xc0 [ 278.480141][ T9623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.480164][ T9623] RIP: 0033:0x7fe31cb5e9ce [ 278.480186][ T9623] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 278.480206][ T9623] RSP: 002b:00007fe31db0dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 278.480231][ T9623] RAX: ffffffffffffffda RBX: 00007fe31db0e6c0 RCX: 00007fe31cb5e9ce [ 278.480248][ T9623] RDX: 000000000000000f RSI: 00007fe31db0e0a0 RDI: 0000000000000004 [ 278.480267][ T9623] RBP: 00007fe31db0e090 R08: 0000000000000000 R09: 0000000000000000 [ 278.480282][ T9623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.480297][ T9623] R13: 00007fe31ce26038 R14: 00007fe31ce25fa0 R15: 00007ffc17658118 [ 278.480333][ T9623] [ 278.649276][ T9626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.650527][ T9626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.747816][ T9626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.764496][ T9626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.813895][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.814042][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.814161][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.814279][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.814394][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.814519][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.814635][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.814754][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.814870][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.814984][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.815096][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.815696][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.815817][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.815939][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.816052][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.816166][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.816279][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.816394][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.816519][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.816633][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.816745][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.816891][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.817093][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.817221][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.817336][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.817451][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.817572][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.817691][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.817807][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.826424][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.826559][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.826677][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.826789][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.826900][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.930604][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.930985][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.931281][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.931590][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.964847][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.965135][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.965457][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.965774][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.966079][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.966391][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.980339][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.980657][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.980952][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.981094][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.981209][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.981324][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 278.981457][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 279.019320][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 279.019722][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 279.019971][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 279.020245][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 279.063083][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 279.063470][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 279.063768][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 279.064083][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 279.064415][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 279.090147][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 279.114244][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 279.114650][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 279.114974][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 279.115346][ T9607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000a40 undefined [ 279.479975][ T7553] usb 5-1: USB disconnect, device number 20 [ 279.828016][ T7553] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 279.978584][ T7553] usb 2-1: Using ep0 maxpacket: 16 [ 279.981352][ T7553] usb 2-1: unable to get BOS descriptor or descriptor too short [ 279.981389][ T7553] usb 2-1: New USB device found: idVendor=0763, idProduct=2003, bcdDevice=0.40 [ 279.982449][ T7553] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 279.984632][ T7553] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.984658][ T7553] usb 2-1: Product: syz [ 279.984675][ T7553] usb 2-1: Manufacturer: syz [ 279.984695][ T7553] usb 2-1: SerialNumber: syz [ 280.263873][ T7553] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 280.265624][ T7553] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 280.265654][ T7553] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 280.364573][ T7553] usb 2-1: USB disconnect, device number 45 [ 280.444436][ T5876] udevd[5876]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 280.614894][ T9662] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1119'. [ 280.615111][ T9669] syzkaller1: entered promiscuous mode [ 280.615129][ T9669] syzkaller1: entered allmulticast mode [ 280.676244][ T9668] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1119'. [ 280.865526][ T9672] device-mapper: table: 248:0: mirror: Invalid number of mirrors (-EINVAL) [ 280.865554][ T9672] device-mapper: ioctl: error adding target to table [ 281.366934][ T9686] netlink: 'syz.1.1127': attribute type 10 has an invalid length. [ 281.413469][ T9686] team0: Port device dummy0 added [ 281.416373][ T9686] netlink: 'syz.1.1127': attribute type 10 has an invalid length. [ 281.456775][ T9686] team0: Port device dummy0 removed [ 281.506633][ T9695] netlink: 'syz.1.1127': attribute type 10 has an invalid length. [ 281.528069][ T9697] netlink: 'syz.1.1127': attribute type 10 has an invalid length. [ 281.942605][ T9704] device-mapper: table: 248:0: mirror: Invalid number of mirrors (-EINVAL) [ 281.942625][ T9704] device-mapper: ioctl: error adding target to table [ 282.097978][ T27] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 282.247980][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 282.251050][ T27] usb 2-1: unable to get BOS descriptor or descriptor too short [ 282.251100][ T27] usb 2-1: New USB device found: idVendor=0763, idProduct=2003, bcdDevice=0.40 [ 282.253458][ T27] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 282.255671][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.255698][ T27] usb 2-1: Product: syz [ 282.255715][ T27] usb 2-1: Manufacturer: syz [ 282.255731][ T27] usb 2-1: SerialNumber: syz [ 282.263599][ T5722] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 282.458038][ T5722] usb 5-1: Using ep0 maxpacket: 16 [ 282.458891][ T5722] usb 5-1: New USB device found: idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 282.460237][ T5722] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.460287][ T5722] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 282.460344][ T5722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.460373][ T5722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.466239][ T5722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.466260][ T5722] usb 5-1: Product: syz [ 282.466271][ T5722] usb 5-1: Manufacturer: syz [ 282.466283][ T5722] usb 5-1: SerialNumber: syz [ 282.552323][ T5722] usb 5-1: config 0 descriptor?? [ 282.565109][ T5722] appledisplay 5-1:0.0: Submitting URB failed [ 282.565288][ T5722] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -5 [ 282.588240][ T27] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 282.589235][ T27] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 282.589266][ T27] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 282.665860][ T27] usb 2-1: USB disconnect, device number 46 [ 282.721853][ T5876] udevd[5876]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 282.846957][ T5722] usb 5-1: USB disconnect, device number 21 [ 283.096878][ T9735] netlink: 822 bytes leftover after parsing attributes in process `syz.5.1138'. [ 283.213814][ T9739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.214645][ T9739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.251641][ T9739] Bluetooth: hci5: Frame reassembly failed (-84) [ 283.277234][ T1224] Bluetooth: hci5: Frame reassembly failed (-84) [ 283.366610][ T9742] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 283.570664][ T9749] device-mapper: table: 248:0: mirror: Invalid number of mirrors (-EINVAL) [ 283.570692][ T9749] device-mapper: ioctl: error adding target to table [ 284.829684][ T9778] FAULT_INJECTION: forcing a failure. [ 284.829684][ T9778] name failslab, interval 1, probability 0, space 0, times 0 [ 284.829721][ T9778] CPU: 0 UID: 0 PID: 9778 Comm: syz.1.1149 Tainted: G L syzkaller #0 PREEMPT(full) [ 284.829752][ T9778] Tainted: [L]=SOFTLOCKUP [ 284.829760][ T9778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 284.829774][ T9778] Call Trace: [ 284.829784][ T9778] [ 284.829795][ T9778] dump_stack_lvl+0xe8/0x150 [ 284.829826][ T9778] should_fail_ex+0x3eb/0x540 [ 284.829856][ T9778] should_failslab+0xa8/0x100 [ 284.829879][ T9778] __kmalloc_noprof+0xf9/0x710 [ 284.829904][ T9778] ? tomoyo_encode+0x2ad/0x570 [ 284.829925][ T9778] ? tomoyo_encode+0x2ad/0x570 [ 284.829954][ T9778] tomoyo_encode+0x2ad/0x570 [ 284.829983][ T9778] tomoyo_realpath_from_path+0x5fa/0x640 [ 284.830018][ T9778] ? tomoyo_path_number_perm+0x219/0x5f0 [ 284.830043][ T9778] tomoyo_path_number_perm+0x246/0x5f0 [ 284.830070][ T9778] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 284.830093][ T9778] ? __lock_acquire+0x747/0x2de0 [ 284.830156][ T9778] ? __fget_files+0x2a/0x420 [ 284.830182][ T9778] ? __fget_files+0x2a/0x420 [ 284.830203][ T9778] ? __fget_files+0x2a/0x420 [ 284.830229][ T9778] security_file_ioctl+0xc3/0x2a0 [ 284.830255][ T9778] __se_sys_ioctl+0x47/0x170 [ 284.830281][ T9778] do_syscall_64+0x166/0x520 [ 284.830302][ T9778] ? trace_irq_disable+0x3b/0x140 [ 284.830323][ T9778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.830347][ T9778] ? clear_bhb_loop+0x70/0xc0 [ 284.830373][ T9778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.830396][ T9778] RIP: 0033:0x7f8ab079e199 [ 284.830418][ T9778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.830438][ T9778] RSP: 002b:00007f8ab1737028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 284.830463][ T9778] RAX: ffffffffffffffda RBX: 00007f8ab0a25fa0 RCX: 00007f8ab079e199 [ 284.830481][ T9778] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 284.830496][ T9778] RBP: 00007f8ab1737090 R08: 0000000000000000 R09: 0000000000000000 [ 284.830511][ T9778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.830526][ T9778] R13: 00007f8ab0a26038 R14: 00007f8ab0a25fa0 R15: 00007ffd6e4c6518 [ 284.830563][ T9778] [ 284.830584][ T9778] ERROR: Out of memory at tomoyo_realpath_from_path. [ 285.107974][ T5698] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 285.258812][ T5698] usb 5-1: Using ep0 maxpacket: 16 [ 285.260928][ T5698] usb 5-1: unable to get BOS descriptor or descriptor too short [ 285.260990][ T5698] usb 5-1: New USB device found: idVendor=0763, idProduct=2003, bcdDevice=0.40 [ 285.262364][ T5698] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 285.264438][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.264466][ T5698] usb 5-1: Product: syz [ 285.264483][ T5698] usb 5-1: Manufacturer: syz [ 285.264500][ T5698] usb 5-1: SerialNumber: syz [ 285.338619][ T5628] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 285.338671][ T5623] Bluetooth: hci5: command 0x1003 tx timeout [ 285.545123][ T5698] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 285.545942][ T5698] usb 5-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 285.545973][ T5698] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 285.617297][ T5698] usb 5-1: USB disconnect, device number 22 [ 285.686678][ T5876] udevd[5876]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 285.925769][ T9801] device-mapper: table: 248:0: mirror: Invalid number of mirrors (-EINVAL) [ 285.925796][ T9801] device-mapper: ioctl: error adding target to table [ 286.258063][ T9817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.258426][ T9817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.259796][ T9819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.260257][ T9819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.437981][ T7553] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 286.611145][ T7553] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 286.612370][ T7553] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.615314][ T7553] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.615343][ T7553] usb 5-1: Product: syz [ 286.615360][ T7553] usb 5-1: Manufacturer: syz [ 286.615377][ T7553] usb 5-1: SerialNumber: syz [ 287.233299][ T9843] device-mapper: table: 248:0: mirror: Invalid number of mirrors (-EINVAL) [ 287.233348][ T9843] device-mapper: ioctl: error adding target to table [ 287.302480][ T9846] misc userio: Begin command sent, but we're already running [ 287.694783][ T7553] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 287.694837][ T7553] cdc_ncm 5-1:1.0: dwNtbInMaxSize=11 is too small. Using 2048 [ 287.694863][ T7553] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 287.797996][ T9] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 287.968022][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 287.975830][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 287.975884][ T9] usb 2-1: New USB device found: idVendor=0763, idProduct=2003, bcdDevice=0.40 [ 287.977328][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 287.997551][ T9810] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 288.020174][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.020257][ T9] usb 2-1: Product: syz [ 288.020356][ T9] usb 2-1: Manufacturer: syz [ 288.020422][ T9] usb 2-1: SerialNumber: syz [ 288.111684][ T7553] cdc_ncm 5-1:1.0: setting tx_max = 88 [ 288.162903][ T7553] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 288.184716][ T7553] usb 5-1: USB disconnect, device number 23 [ 288.186195][ T7553] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 288.224683][ T9862] netlink: 14546 bytes leftover after parsing attributes in process `syz.5.1165'. [ 288.321242][ T9] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 288.324299][ T9] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 288.332755][ T9] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 288.437067][ T9] usb 2-1: USB disconnect, device number 47 [ 288.482270][ T5876] udevd[5876]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 288.542652][ T1701] block nbd2: Possible stuck request ffff8880282d4b40: control (read@0,1024B). Runtime 150 seconds [ 288.745348][ T9873] device-mapper: table: 248:0: mirror: Invalid number of mirrors (-EINVAL) [ 288.745373][ T9873] device-mapper: ioctl: error adding target to table [ 288.883691][ T9879] .: renamed from bond0 (while UP) [ 288.884235][ T9879] FAULT_INJECTION: forcing a failure. [ 288.884235][ T9879] name failslab, interval 1, probability 0, space 0, times 0 [ 288.884259][ T9879] CPU: 0 UID: 0 PID: 9879 Comm: syz.1.1171 Tainted: G L syzkaller #0 PREEMPT(full) [ 288.884282][ T9879] Tainted: [L]=SOFTLOCKUP [ 288.884289][ T9879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 288.884299][ T9879] Call Trace: [ 288.884306][ T9879] [ 288.884313][ T9879] dump_stack_lvl+0xe8/0x150 [ 288.884336][ T9879] should_fail_ex+0x3eb/0x540 [ 288.884356][ T9879] ? __alloc_skb+0x1db/0x7a0 [ 288.884377][ T9879] should_failslab+0xa8/0x100 [ 288.884415][ T9879] ? __alloc_skb+0x1db/0x7a0 [ 288.884436][ T9879] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 288.884461][ T9879] ? __alloc_skb+0x18d/0x7a0 [ 288.884484][ T9879] ? __alloc_skb+0x1db/0x7a0 [ 288.884513][ T9879] __alloc_skb+0x1db/0x7a0 [ 288.884532][ T9879] rtmsg_ifinfo_build_skb+0x7f/0x260 [ 288.884556][ T9879] rtnetlink_event+0x1b7/0x270 [ 288.884576][ T9879] notifier_call_chain+0x1a5/0x3d0 [ 288.884599][ T9879] netif_change_name+0x5ee/0x970 [ 288.884619][ T9879] ? dev_change_name+0x101/0x220 [ 288.884639][ T9879] ? __pfx_netif_change_name+0x10/0x10 [ 288.884654][ T9879] ? full_name_hash+0x92/0xe0 [ 288.884673][ T9879] ? __dev_get_by_name+0xe5/0x130 [ 288.884693][ T9879] dev_change_name+0x101/0x220 [ 288.884712][ T9879] dev_ioctl+0x5ec/0x1150 [ 288.884731][ T9879] sock_do_ioctl+0x23e/0x320 [ 288.884749][ T9879] ? __pfx_sock_do_ioctl+0x10/0x10 [ 288.884764][ T9879] ? do_futex+0x3e7/0x4e0 [ 288.884791][ T9879] sock_ioctl+0x57a/0x7e0 [ 288.884807][ T9879] ? __fget_files+0x2a/0x420 [ 288.884822][ T9879] ? __pfx_sock_ioctl+0x10/0x10 [ 288.884838][ T9879] ? __fget_files+0x2a/0x420 [ 288.884854][ T9879] ? __fget_files+0x2a/0x420 [ 288.884872][ T9879] ? bpf_lsm_file_ioctl+0x9/0x20 [ 288.884891][ T9879] ? __pfx_sock_ioctl+0x10/0x10 [ 288.884906][ T9879] __se_sys_ioctl+0xfc/0x170 [ 288.884924][ T9879] do_syscall_64+0x166/0x520 [ 288.884940][ T9879] ? trace_irq_disable+0x3b/0x140 [ 288.884955][ T9879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.884972][ T9879] ? clear_bhb_loop+0x70/0xc0 [ 288.884990][ T9879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.885007][ T9879] RIP: 0033:0x7f8ab079e199 [ 288.885022][ T9879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.885036][ T9879] RSP: 002b:00007f8ab1737028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 288.885054][ T9879] RAX: ffffffffffffffda RBX: 00007f8ab0a25fa0 RCX: 00007f8ab079e199 [ 288.885067][ T9879] RDX: 0000200000000040 RSI: 0000000000008923 RDI: 000000000000000b [ 288.885078][ T9879] RBP: 00007f8ab0835888 R08: 0000000000000000 R09: 0000000000000000 [ 288.885089][ T9879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.885099][ T9879] R13: 00007f8ab0a26038 R14: 00007f8ab0a25fa0 R15: 00007ffd6e4c6518 [ 288.885125][ T9879] [ 289.078485][ T9880] FAULT_INJECTION: forcing a failure. [ 289.078485][ T9880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.078580][ T9880] CPU: 0 UID: 0 PID: 9880 Comm: syz.4.1170 Tainted: G L syzkaller #0 PREEMPT(full) [ 289.078657][ T9880] Tainted: [L]=SOFTLOCKUP [ 289.078687][ T9880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 289.078722][ T9880] Call Trace: [ 289.078755][ T9880] [ 289.078785][ T9880] dump_stack_lvl+0xe8/0x150 [ 289.078865][ T9880] should_fail_ex+0x3eb/0x540 [ 289.078957][ T9880] _copy_to_iter+0x1e4/0x19c0 [ 289.079041][ T9880] ? irqentry_exit+0x218/0x920 [ 289.079105][ T9880] ? lockdep_hardirqs_on+0x7b/0x110 [ 289.079188][ T9880] ? __pfx__copy_to_iter+0x10/0x10 [ 289.079316][ T9880] seq_read_iter+0xaae/0xca0 [ 289.079432][ T9880] proc_reg_read_iter+0x1b7/0x280 [ 289.079507][ T9880] vfs_read+0x595/0xa80 [ 289.079585][ T9880] ? __pfx_vfs_read+0x10/0x10 [ 289.079658][ T9880] ? __fget_files+0x3a2/0x420 [ 289.079712][ T9880] ? __fget_files+0x2a/0x420 [ 289.079777][ T9880] ? fdget+0x1ac/0x250 [ 289.079865][ T9880] ksys_read+0x150/0x270 [ 289.079931][ T9880] ? __pfx_ksys_read+0x10/0x10 [ 289.080027][ T9880] do_syscall_64+0x166/0x520 [ 289.080082][ T9880] ? trace_irq_disable+0x3b/0x140 [ 289.080136][ T9880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.080200][ T9880] ? clear_bhb_loop+0x70/0xc0 [ 289.080276][ T9880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.080353][ T9880] RIP: 0033:0x7fcaa999e199 [ 289.080425][ T9880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.080477][ T9880] RSP: 002b:00007fcaaa8d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 289.080542][ T9880] RAX: ffffffffffffffda RBX: 00007fcaa9c26180 RCX: 00007fcaa999e199 [ 289.080585][ T9880] RDX: 00000000000000b2 RSI: 00002000000001c0 RDI: 0000000000000004 [ 289.080626][ T9880] RBP: 00007fcaaa8d5090 R08: 0000000000000000 R09: 0000000000000000 [ 289.080668][ T9880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.080702][ T9880] R13: 00007fcaa9c26218 R14: 00007fcaa9c26180 R15: 00007ffc533e26b8 [ 289.080799][ T9880] [ 289.471002][ T33] audit: type=1326 audit(1791473561.220:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9883 comm="syz.7.1172" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe31cb9e199 code=0x0 [ 289.794599][ T9898] device-mapper: table: 248:0: mirror: Invalid number of mirrors (-EINVAL) [ 289.794634][ T9898] device-mapper: ioctl: error adding target to table [ 289.813676][ T5722] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 289.901921][ T9901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.903124][ T9901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.968847][ T5722] usb 2-1: New USB device found: idVendor=1e7d, idProduct=2cf6, bcdDevice=0.00 [ 289.969796][ T5722] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.969820][ T5722] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.969848][ T5722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.973348][ T5722] usb 2-1: config 0 descriptor?? [ 290.382026][ T9887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.382980][ T9887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.405713][ T5722] usbhid 2-1:0.0: can't add hid device: -32 [ 290.405828][ T5722] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 290.454616][ T7553] usb 2-1: USB disconnect, device number 48 [ 290.510188][ T9919] FAULT_INJECTION: forcing a failure. [ 290.510188][ T9919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.510225][ T9919] CPU: 0 UID: 0 PID: 9919 Comm: syz.5.1185 Tainted: G L syzkaller #0 PREEMPT(full) [ 290.510256][ T9919] Tainted: [L]=SOFTLOCKUP [ 290.510265][ T9919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 290.510280][ T9919] Call Trace: [ 290.510289][ T9919] [ 290.510299][ T9919] dump_stack_lvl+0xe8/0x150 [ 290.510330][ T9919] should_fail_ex+0x3eb/0x540 [ 290.510358][ T9919] _copy_to_user+0x31/0xb0 [ 290.510384][ T9919] tracing_buffers_read+0x981/0xaf0 [ 290.510406][ T9919] ? lockdep_hardirqs_on+0x7b/0x110 [ 290.510442][ T9919] ? __pfx_tracing_buffers_read+0x10/0x10 [ 290.510475][ T9919] ? __pfx_tracing_buffers_read+0x10/0x10 [ 290.510503][ T9919] vfs_read+0x213/0xa80 [ 290.510532][ T9919] ? __pfx___mutex_lock+0x10/0x10 [ 290.510555][ T9919] ? __pfx_vfs_read+0x10/0x10 [ 290.510580][ T9919] ? __fget_files+0x2a/0x420 [ 290.510601][ T9919] ? __fget_files+0x3a2/0x420 [ 290.510621][ T9919] ? __fget_files+0x2a/0x420 [ 290.510647][ T9919] ? fdget+0x1ac/0x250 [ 290.510676][ T9919] ksys_read+0x150/0x270 [ 290.510702][ T9919] ? __pfx_ksys_read+0x10/0x10 [ 290.510738][ T9919] do_syscall_64+0x166/0x520 [ 290.510759][ T9919] ? trace_irq_disable+0x3b/0x140 [ 290.510779][ T9919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.510804][ T9919] ? clear_bhb_loop+0x70/0xc0 [ 290.510828][ T9919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.510852][ T9919] RIP: 0033:0x7f35a7f9e199 [ 290.510874][ T9919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.510893][ T9919] RSP: 002b:00007f35a61f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 290.510917][ T9919] RAX: ffffffffffffffda RBX: 00007f35a8225fa0 RCX: 00007f35a7f9e199 [ 290.510936][ T9919] RDX: 0000000000000090 RSI: 0000200000000540 RDI: 0000000000000003 [ 290.510951][ T9919] RBP: 00007f35a61f6090 R08: 0000000000000000 R09: 0000000000000000 [ 290.510966][ T9919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.510980][ T9919] R13: 00007f35a8226038 R14: 00007f35a8225fa0 R15: 00007ffe16a2a698 [ 290.511019][ T9919] [ 290.821090][ T9923] device-mapper: table: 248:0: mirror: Too few mirror arguments (-EINVAL) [ 290.821116][ T9923] device-mapper: ioctl: error adding target to table [ 291.158979][ T33] audit: type=1326 audit(1791473562.910:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9935 comm="syz.4.1191" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcaa999e199 code=0x0 [ 291.579779][ T9951] FAULT_INJECTION: forcing a failure. [ 291.579779][ T9951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.579816][ T9951] CPU: 0 UID: 0 PID: 9951 Comm: syz.7.1194 Tainted: G L syzkaller #0 PREEMPT(full) [ 291.579846][ T9951] Tainted: [L]=SOFTLOCKUP [ 291.579856][ T9951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 291.579870][ T9951] Call Trace: [ 291.579880][ T9951] [ 291.579890][ T9951] dump_stack_lvl+0xe8/0x150 [ 291.579920][ T9951] should_fail_ex+0x3eb/0x540 [ 291.579949][ T9951] _copy_from_user+0x2d/0xb0 [ 291.579973][ T9951] kstrtouint_from_user+0xd6/0x180 [ 291.580001][ T9951] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 291.580035][ T9951] ? lock_acquire+0x115/0x350 [ 291.580063][ T9951] proc_fail_nth_write+0x8e/0x210 [ 291.580087][ T9951] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 291.580120][ T9951] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 291.580142][ T9951] vfs_write+0x296/0xba0 [ 291.580182][ T9951] ? __pfx_vfs_write+0x10/0x10 [ 291.580207][ T9951] ? __fget_files+0x2a/0x420 [ 291.580227][ T9951] ? __fget_files+0x3a2/0x420 [ 291.580246][ T9951] ? __fget_files+0x2a/0x420 [ 291.580272][ T9951] ? fdget+0x1ac/0x250 [ 291.580305][ T9951] ksys_write+0x150/0x270 [ 291.580325][ T9951] ? __pfx_filldir+0x10/0x10 [ 291.580349][ T9951] ? __pfx_ksys_write+0x10/0x10 [ 291.580383][ T9951] do_syscall_64+0x166/0x520 [ 291.580406][ T9951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.580430][ T9951] ? clear_bhb_loop+0x70/0xc0 [ 291.580455][ T9951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.580477][ T9951] RIP: 0033:0x7fe31cb5e9ce [ 291.580497][ T9951] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 291.580516][ T9951] RSP: 002b:00007fe31dacbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 291.580541][ T9951] RAX: ffffffffffffffda RBX: 00007fe31dacc6c0 RCX: 00007fe31cb5e9ce [ 291.580558][ T9951] RDX: 0000000000000001 RSI: 00007fe31dacc0a0 RDI: 0000000000000005 [ 291.580573][ T9951] RBP: 00007fe31dacc090 R08: 0000000000000000 R09: 0000000000000000 [ 291.580587][ T9951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.580601][ T9951] R13: 00007fe31ce26218 R14: 00007fe31ce26180 R15: 00007ffc17658118 [ 291.580638][ T9951] [ 291.628244][ T9] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 291.810687][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 291.852041][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 291.852079][ T9] usb 2-1: New USB device found: idVendor=0763, idProduct=2003, bcdDevice=0.40 [ 291.854704][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 291.889792][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.889825][ T9] usb 2-1: Product: syz [ 291.889842][ T9] usb 2-1: Manufacturer: syz [ 291.889858][ T9] usb 2-1: SerialNumber: syz [ 292.104210][ T9961] device-mapper: table: 248:0: mirror: Too few mirror arguments (-EINVAL) [ 292.104235][ T9961] device-mapper: ioctl: error adding target to table [ 292.147464][ T9] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 292.152229][ T9] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 292.152260][ T9] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 292.224691][ T9964] sctp: [Deprecated]: syz.4.1197 (pid 9964) Use of int in max_burst socket option. [ 292.224691][ T9964] Use struct sctp_assoc_value instead [ 292.365563][ T9] usb 2-1: USB disconnect, device number 49 [ 292.459390][ T5876] udevd[5876]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 292.682204][ T9979] FAULT_INJECTION: forcing a failure. [ 292.682204][ T9979] name failslab, interval 1, probability 0, space 0, times 0 [ 292.682237][ T9979] CPU: 0 UID: 0 PID: 9979 Comm: syz.7.1203 Tainted: G L syzkaller #0 PREEMPT(full) [ 292.682260][ T9979] Tainted: [L]=SOFTLOCKUP [ 292.682266][ T9979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 292.682277][ T9979] Call Trace: [ 292.682284][ T9979] [ 292.682291][ T9979] dump_stack_lvl+0xe8/0x150 [ 292.682312][ T9979] should_fail_ex+0x3eb/0x540 [ 292.682332][ T9979] should_failslab+0xa8/0x100 [ 292.682349][ T9979] __kmalloc_noprof+0xf9/0x710 [ 292.682365][ T9979] ? tomoyo_encode+0x2ad/0x570 [ 292.682379][ T9979] ? tomoyo_encode+0x2ad/0x570 [ 292.682401][ T9979] tomoyo_encode+0x2ad/0x570 [ 292.682421][ T9979] tomoyo_realpath_from_path+0x5fa/0x640 [ 292.682445][ T9979] ? tomoyo_path_number_perm+0x219/0x5f0 [ 292.682462][ T9979] tomoyo_path_number_perm+0x246/0x5f0 [ 292.682481][ T9979] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 292.682497][ T9979] ? __lock_acquire+0x747/0x2de0 [ 292.682541][ T9979] ? __fget_files+0x2a/0x420 [ 292.682558][ T9979] ? __fget_files+0x2a/0x420 [ 292.682573][ T9979] ? __fget_files+0x2a/0x420 [ 292.682591][ T9979] security_file_ioctl+0xc3/0x2a0 [ 292.682609][ T9979] __se_sys_ioctl+0x47/0x170 [ 292.682627][ T9979] do_syscall_64+0x166/0x520 [ 292.682642][ T9979] ? trace_irq_disable+0x3b/0x140 [ 292.682656][ T9979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.682673][ T9979] ? clear_bhb_loop+0x70/0xc0 [ 292.682690][ T9979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.682706][ T9979] RIP: 0033:0x7fe31cb9e199 [ 292.682721][ T9979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.682734][ T9979] RSP: 002b:00007fe31db0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 292.682751][ T9979] RAX: ffffffffffffffda RBX: 00007fe31ce25fa0 RCX: 00007fe31cb9e199 [ 292.682776][ T9979] RDX: 0000200000000140 RSI: 000000004400ae8f RDI: 0000000000000005 [ 292.682787][ T9979] RBP: 00007fe31db0e090 R08: 0000000000000000 R09: 0000000000000000 [ 292.682796][ T9979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.682805][ T9979] R13: 00007fe31ce26038 R14: 00007fe31ce25fa0 R15: 00007ffc17658118 [ 292.682829][ T9979] [ 292.682843][ T9979] ERROR: Out of memory at tomoyo_realpath_from_path. [ 293.150815][ T9986] device-mapper: table: 248:0: mirror: Too few mirror arguments (-EINVAL) [ 293.150842][ T9986] device-mapper: ioctl: error adding target to table [ 293.307223][ T9990] FAULT_INJECTION: forcing a failure. [ 293.307223][ T9990] name failslab, interval 1, probability 0, space 0, times 0 [ 293.307263][ T9990] CPU: 1 UID: 0 PID: 9990 Comm: syz.5.1208 Tainted: G L syzkaller #0 PREEMPT(full) [ 293.307297][ T9990] Tainted: [L]=SOFTLOCKUP [ 293.307307][ T9990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 293.307323][ T9990] Call Trace: [ 293.307333][ T9990] [ 293.307344][ T9990] dump_stack_lvl+0xe8/0x150 [ 293.307375][ T9990] should_fail_ex+0x3eb/0x540 [ 293.307413][ T9990] should_failslab+0xa8/0x100 [ 293.307439][ T9990] __kmalloc_cache_noprof+0x9e/0x600 [ 293.307466][ T9990] ? __se_sys_mincore+0x10a/0x830 [ 293.307488][ T9990] ? __se_sys_mincore+0x10a/0x830 [ 293.307518][ T9990] __se_sys_mincore+0x10a/0x830 [ 293.307551][ T9990] do_syscall_64+0x166/0x520 [ 293.307574][ T9990] ? trace_irq_disable+0x3b/0x140 [ 293.307594][ T9990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.307619][ T9990] ? clear_bhb_loop+0x70/0xc0 [ 293.307645][ T9990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.307669][ T9990] RIP: 0033:0x7f35a7f9e199 [ 293.307691][ T9990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.307712][ T9990] RSP: 002b:00007f35a61f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000001b [ 293.307742][ T9990] RAX: ffffffffffffffda RBX: 00007f35a8225fa0 RCX: 00007f35a7f9e199 [ 293.307760][ T9990] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 000020000000e000 [ 293.307777][ T9990] RBP: 00007f35a8035888 R08: 0000000000000000 R09: 0000000000000000 [ 293.307792][ T9990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.307807][ T9990] R13: 00007f35a8226038 R14: 00007f35a8225fa0 R15: 00007ffe16a2a698 [ 293.307843][ T9990] [ 293.614571][ T9997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.615001][ T9997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.661828][T10000] gadgetfs: bound to dummy_udc driver [ 293.898282][ T9] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 293.898539][ C0] gadgetfs: connected [ 293.902434][ T9] gadgetfs: disconnected [ 294.035508][T10017] device-mapper: table: 248:0: mirror: Invalid number of mirrors (-EINVAL) [ 294.035528][T10017] device-mapper: ioctl: error adding target to table [ 294.294620][T10030] netlink: 'syz.1.1222': attribute type 10 has an invalid length. [ 294.323082][T10030] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode [ 294.362048][T10030] team0: Port device wlan0 added [ 294.525004][T10037] device-mapper: table: 248:0: mirror: Invalid number of mirrors (-EINVAL) [ 294.525036][T10037] device-mapper: ioctl: error adding target to table [ 294.948906][ T7553] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 295.099577][ T7553] usb 5-1: Using ep0 maxpacket: 16 [ 295.103705][ T7553] usb 5-1: unable to get BOS descriptor or descriptor too short [ 295.103759][ T7553] usb 5-1: New USB device found: idVendor=0763, idProduct=2003, bcdDevice=0.40 [ 295.106533][ T7553] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 295.125436][ T7553] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.125521][ T7553] usb 5-1: Product: syz [ 295.125604][ T7553] usb 5-1: Manufacturer: syz [ 295.125656][ T7553] usb 5-1: SerialNumber: syz [ 295.260476][T10059] FAULT_INJECTION: forcing a failure. [ 295.260476][T10059] name failslab, interval 1, probability 0, space 0, times 0 [ 295.260512][T10059] CPU: 0 UID: 0 PID: 10059 Comm: syz.5.1234 Tainted: G L syzkaller #0 PREEMPT(full) [ 295.260543][T10059] Tainted: [L]=SOFTLOCKUP [ 295.260552][T10059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 295.260566][T10059] Call Trace: [ 295.260578][T10059] [ 295.260589][T10059] dump_stack_lvl+0xe8/0x150 [ 295.260620][T10059] should_fail_ex+0x3eb/0x540 [ 295.260647][T10059] ? __alloc_skb+0x1db/0x7a0 [ 295.260669][T10059] should_failslab+0xa8/0x100 [ 295.260694][T10059] ? __alloc_skb+0x1db/0x7a0 [ 295.260713][T10059] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 295.260737][T10059] ? __alloc_skb+0x18d/0x7a0 [ 295.260758][T10059] ? __alloc_skb+0x1db/0x7a0 [ 295.260786][T10059] __alloc_skb+0x1db/0x7a0 [ 295.260813][T10059] netlink_sendmsg+0x577/0xae0 [ 295.260843][T10059] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.260874][T10059] ? apparmor_socket_sendmsg+0x98/0x360 [ 295.260901][T10059] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.260922][T10059] sock_sendmsg_nosec+0x14e/0x190 [ 295.260950][T10059] ____sys_sendmsg+0x54e/0x850 [ 295.260979][T10059] ? __pfx_____sys_sendmsg+0x10/0x10 [ 295.261012][T10059] ? import_iovec+0x73/0xa0 [ 295.261039][T10059] ___sys_sendmsg+0x2a5/0x360 [ 295.261060][T10059] ? __lock_acquire+0x747/0x2de0 [ 295.261087][T10059] ? __pfx____sys_sendmsg+0x10/0x10 [ 295.261149][T10059] ? __fget_files+0x3a2/0x420 [ 295.261170][T10059] ? __fget_files+0x2a/0x420 [ 295.261202][T10059] __x64_sys_sendmsg+0x1b1/0x290 [ 295.261228][T10059] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 295.261275][T10059] do_syscall_64+0x166/0x520 [ 295.261297][T10059] ? trace_irq_disable+0x3b/0x140 [ 295.261318][T10059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.261342][T10059] ? clear_bhb_loop+0x70/0xc0 [ 295.261367][T10059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.261398][T10059] RIP: 0033:0x7f35a7f9e199 [ 295.261420][T10059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.261440][T10059] RSP: 002b:00007f35a61f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.261465][T10059] RAX: ffffffffffffffda RBX: 00007f35a8225fa0 RCX: 00007f35a7f9e199 [ 295.261482][T10059] RDX: 0000000004004850 RSI: 0000200000000340 RDI: 0000000000000003 [ 295.261497][T10059] RBP: 00007f35a61f6090 R08: 0000000000000000 R09: 0000000000000000 [ 295.261512][T10059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.261526][T10059] R13: 00007f35a8226038 R14: 00007f35a8225fa0 R15: 00007ffe16a2a698 [ 295.261562][T10059] [ 295.467461][ T7553] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 295.489913][ T7553] usb 5-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 295.490007][ T7553] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 295.706620][ T7553] usb 5-1: USB disconnect, device number 24 [ 295.871933][T10066] device-mapper: table: 248:0: mirror: Invalid number of mirrors (-EINVAL) [ 295.871964][T10066] device-mapper: ioctl: error adding target to table [ 296.078690][ T33] audit: type=1400 audit(1791473567.820:18): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="//o" pid=10069 comm="syz.5.1239" name="//o" offset=71 [ 297.016632][T10097] FAULT_INJECTION: forcing a failure. [ 297.016632][T10097] name failslab, interval 1, probability 0, space 0, times 0 [ 297.016667][T10097] CPU: 1 UID: 0 PID: 10097 Comm: syz.5.1247 Tainted: G L syzkaller #0 PREEMPT(full) [ 297.016701][T10097] Tainted: [L]=SOFTLOCKUP [ 297.016709][T10097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 297.016732][T10097] Call Trace: [ 297.016741][T10097] [ 297.016751][T10097] dump_stack_lvl+0xe8/0x150 [ 297.016780][T10097] should_fail_ex+0x3eb/0x540 [ 297.016808][T10097] should_failslab+0xa8/0x100 [ 297.016832][T10097] __kmalloc_noprof+0xf9/0x710 [ 297.016854][T10097] ? tomoyo_encode+0x2ad/0x570 [ 297.016874][T10097] ? tomoyo_encode+0x2ad/0x570 [ 297.016901][T10097] tomoyo_encode+0x2ad/0x570 [ 297.016928][T10097] tomoyo_realpath_from_path+0x5fa/0x640 [ 297.016962][T10097] ? tomoyo_path_number_perm+0x219/0x5f0 [ 297.016984][T10097] tomoyo_path_number_perm+0x246/0x5f0 [ 297.017010][T10097] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 297.017032][T10097] ? __lock_acquire+0x747/0x2de0 [ 297.017093][T10097] ? __fget_files+0x2a/0x420 [ 297.017125][T10097] ? __fget_files+0x2a/0x420 [ 297.017146][T10097] ? __fget_files+0x2a/0x420 [ 297.017172][T10097] security_file_ioctl+0xc3/0x2a0 [ 297.017197][T10097] __se_sys_ioctl+0x47/0x170 [ 297.017221][T10097] do_syscall_64+0x166/0x520 [ 297.017243][T10097] ? trace_irq_disable+0x3b/0x140 [ 297.017262][T10097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.017285][T10097] ? clear_bhb_loop+0x70/0xc0 [ 297.017310][T10097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.017332][T10097] RIP: 0033:0x7f35a7f9e199 [ 297.017352][T10097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.017371][T10097] RSP: 002b:00007f35a61d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 297.017417][T10097] RAX: ffffffffffffffda RBX: 00007f35a8226090 RCX: 00007f35a7f9e199 [ 297.017432][T10097] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 297.017445][T10097] RBP: 00007f35a61d5090 R08: 0000000000000000 R09: 0000000000000000 [ 297.017458][T10097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.017472][T10097] R13: 00007f35a8226128 R14: 00007f35a8226090 R15: 00007ffe16a2a698 [ 297.017507][T10097] [ 297.267995][T10097] ERROR: Out of memory at tomoyo_realpath_from_path. [ 297.648014][ T7553] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 297.783690][T10112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.785407][T10112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.798657][ T7553] usb 5-1: Using ep0 maxpacket: 16 [ 297.813769][ T7553] usb 5-1: unable to get BOS descriptor or descriptor too short [ 297.813866][ T7553] usb 5-1: New USB device found: idVendor=0763, idProduct=2003, bcdDevice=0.40 [ 297.820833][ T7553] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 297.842912][ T7553] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.843019][ T7553] usb 5-1: Product: syz [ 297.843055][ T7553] usb 5-1: Manufacturer: syz [ 297.843114][ T7553] usb 5-1: SerialNumber: syz [ 297.901190][T10112] wusb3801 0-0004: supply vbus not found, using dummy regulator [ 297.960666][T10113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.972877][T10113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.134342][ T7553] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 298.136868][ T7553] usb 5-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 298.136900][ T7553] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 298.193483][T10112] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x04 [ 298.266739][ T7553] usb 5-1: USB disconnect, device number 25 [ 298.384262][ T5876] udevd[5876]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 298.798206][T10125] FAULT_INJECTION: forcing a failure. [ 298.798206][T10125] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 298.798245][T10125] CPU: 1 UID: 0 PID: 10125 Comm: syz.4.1258 Tainted: G L syzkaller #0 PREEMPT(full) [ 298.798278][T10125] Tainted: [L]=SOFTLOCKUP [ 298.798288][T10125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 298.798316][T10125] Call Trace: [ 298.798326][T10125] [ 298.798336][T10125] dump_stack_lvl+0xe8/0x150 [ 298.798371][T10125] should_fail_ex+0x3eb/0x540 [ 298.798401][T10125] prepare_alloc_pages+0x21e/0x5f0 [ 298.798434][T10125] __alloc_frozen_pages_noprof+0x17a/0x400 [ 298.798459][T10125] ? __lock_acquire+0x1511/0x2de0 [ 298.798485][T10125] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 298.798520][T10125] ? policy_nodemask+0x2cc/0x8e0 [ 298.798559][T10125] alloc_pages_mpol+0x21e/0x390 [ 298.798589][T10125] alloc_pages_noprof+0xb1/0x2b0 [ 298.798615][T10125] get_free_pages_noprof+0xf/0x80 [ 298.798639][T10125] __kasan_populate_vmalloc+0x38/0x1c0 [ 298.798662][T10125] ? do_raw_spin_unlock+0xf5/0x200 [ 298.798690][T10125] alloc_vmap_area+0xd10/0x1410 [ 298.798729][T10125] ? __pfx_alloc_vmap_area+0x10/0x10 [ 298.798750][T10125] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 298.798775][T10125] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 298.798797][T10125] ? __get_vm_area_node+0x155/0x2f0 [ 298.798825][T10125] __get_vm_area_node+0x200/0x2f0 [ 298.798857][T10125] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 298.798879][T10125] ? write_ldt+0x4f7/0x930 [ 298.798955][T10125] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 298.798984][T10125] ? __kasan_kmalloc+0x93/0xb0 [ 298.799008][T10125] ? __kmalloc_cache_noprof+0x31c/0x600 [ 298.799035][T10125] ? write_ldt+0x4f7/0x930 [ 298.799054][T10125] __vmalloc_noprof+0xd2/0x120 [ 298.799078][T10125] ? write_ldt+0x4f7/0x930 [ 298.799103][T10125] write_ldt+0x4f7/0x930 [ 298.799125][T10125] ? __se_sys_futex+0x3a8/0x450 [ 298.799153][T10125] ? __pfx_write_ldt+0x10/0x10 [ 298.799178][T10125] ? rcu_is_watching+0x16/0xb0 [ 298.799210][T10125] __se_sys_modify_ldt+0x6c/0x310 [ 298.799238][T10125] do_syscall_64+0x166/0x520 [ 298.799260][T10125] ? trace_irq_disable+0x3b/0x140 [ 298.799281][T10125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.799306][T10125] ? clear_bhb_loop+0x70/0xc0 [ 298.799332][T10125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.799357][T10125] RIP: 0033:0x7fcaa999e199 [ 298.799379][T10125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.799400][T10125] RSP: 002b:00007fcaaa917028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 298.799425][T10125] RAX: ffffffffffffffda RBX: 00007fcaa9c25fa0 RCX: 00007fcaa999e199 [ 298.799443][T10125] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000001 [ 298.799459][T10125] RBP: 00007fcaa9a35888 R08: 0000000000000000 R09: 0000000000000000 [ 298.799474][T10125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.799489][T10125] R13: 00007fcaa9c26038 R14: 00007fcaa9c25fa0 R15: 00007ffc533e26b8 [ 298.799527][T10125] [ 298.946599][T10125] syz.4.1258: vmalloc error: size 65536, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 298.947059][T10125] CPU: 0 UID: 0 PID: 10125 Comm: syz.4.1258 Tainted: G L syzkaller #0 PREEMPT(full) [ 298.947146][T10125] Tainted: [L]=SOFTLOCKUP [ 298.947176][T10125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 298.947218][T10125] Call Trace: [ 298.947241][T10125] [ 298.947272][T10125] dump_stack_lvl+0xe8/0x150 [ 298.947358][T10125] warn_alloc+0x24d/0x270 [ 298.947424][T10125] ? lockdep_hardirqs_on+0x7b/0x110 [ 298.947500][T10125] ? __pfx_warn_alloc+0x10/0x10 [ 298.947610][T10125] ? kfree+0x1c5/0x650 [ 298.947698][T10125] ? __get_vm_area_node+0x219/0x2f0 [ 298.947791][T10125] __vmalloc_node_range_noprof+0x396/0x16f0 [ 298.947947][T10125] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 298.948022][T10125] ? __kasan_kmalloc+0x93/0xb0 [ 298.948096][T10125] ? __kmalloc_cache_noprof+0x31c/0x600 [ 298.948170][T10125] ? write_ldt+0x4f7/0x930 [ 298.948232][T10125] __vmalloc_noprof+0xd2/0x120 [ 298.948288][T10125] ? write_ldt+0x4f7/0x930 [ 298.948354][T10125] write_ldt+0x4f7/0x930 [ 298.948415][T10125] ? __se_sys_futex+0x3a8/0x450 [ 298.948481][T10125] ? __pfx_write_ldt+0x10/0x10 [ 298.948553][T10125] ? rcu_is_watching+0x16/0xb0 [ 298.948642][T10125] __se_sys_modify_ldt+0x6c/0x310 [ 298.948708][T10125] do_syscall_64+0x166/0x520 [ 298.948769][T10125] ? trace_irq_disable+0x3b/0x140 [ 298.948823][T10125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.948887][T10125] ? clear_bhb_loop+0x70/0xc0 [ 298.948965][T10125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.949043][T10125] RIP: 0033:0x7fcaa999e199 [ 298.949113][T10125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.949159][T10125] RSP: 002b:00007fcaaa917028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 298.949240][T10125] RAX: ffffffffffffffda RBX: 00007fcaa9c25fa0 RCX: 00007fcaa999e199 [ 298.949286][T10125] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000001 [ 298.949328][T10125] RBP: 00007fcaa9a35888 R08: 0000000000000000 R09: 0000000000000000 [ 298.949370][T10125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.949411][T10125] R13: 00007fcaa9c26038 R14: 00007fcaa9c25fa0 R15: 00007ffc533e26b8 [ 298.949507][T10125] [ 298.981402][T10125] Mem-Info: [ 298.981464][T10125] active_anon:34353 inactive_anon:0 isolated_anon:0 [ 298.981464][T10125] active_file:0 inactive_file:61879 isolated_file:0 [ 298.981464][T10125] unevictable:0 dirty:535 writeback:0 [ 298.981464][T10125] slab_reclaimable:11637 slab_unreclaimable:97480 [ 298.981464][T10125] mapped:32686 shmem:27536 pagetables:1561 [ 298.981464][T10125] sec_pagetables:0 bounce:0 [ 298.981464][T10125] kernel_misc_reclaimable:0 [ 298.981464][T10125] free:1264045 free_pcp:15874 free_cma:0 [ 298.981682][T10125] Node 0 active_anon:137412kB inactive_anon:0kB active_file:0kB inactive_file:247316kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:130744kB dirty:2136kB writeback:0kB shmem:110144kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13120kB pagetables:6084kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 298.981851][T10125] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 298.982013][T10125] Node 0 DMA free:15356kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 298.982202][T10125] lowmem_reserve[]: 0 2462 2464 2464 2464 [ 298.982313][T10125] Node 0 DMA32 free:1111448kB boost:0kB min:33920kB low:42400kB high:50880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:137412kB inactive_anon:0kB active_file:0kB inactive_file:247316kB unevictable:0kB writepending:2136kB zspages:0kB present:3129332kB managed:2521936kB mlocked:0kB bounce:0kB free_pcp:63488kB local_pcp:13704kB free_cma:0kB [ 298.982506][T10125] lowmem_reserve[]: 0 0 1 1 1 [ 298.982546][T10125] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1412kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 299.096013][T10125] lowmem_reserve[]: 0 0 0 0 0 [ 299.096187][T10125] Node 1 Normal free:3929356kB boost:0kB min:55960kB low:69948kB high:83936kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 299.096367][T10125] lowmem_reserve[]: 0 0 0 0 0 [ 299.096516][T10125] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 299.097044][T10125] Node 0 DMA32: 114*4kB (UE) 212*8kB (UME) 45*16kB (UE) 7*32kB (UME) 2*64kB (UE) 2*128kB (UM) 0*256kB 2*512kB (E) 5*1024kB (U) 4*2048kB (U) 267*4096kB (UM) = 1111448kB [ 299.117258][T10125] Node 0 Normal: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 299.117626][T10125] Node 1 Normal: 3*4kB (UM) 8*8kB (UM) 8*16kB (UM) 8*32kB (UM) 11*64kB (UM) 7*128kB (UM) 7*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 957*4096kB (UM) = 3929356kB [ 299.125147][T10125] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 299.125608][T10125] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 299.125672][T10125] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 299.125727][T10125] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 299.125787][T10125] 89198 total pagecache pages [ 299.125827][T10125] 0 pages in swap cache [ 299.125857][T10125] Free swap = 124996kB [ 299.125888][T10125] Total swap = 124996kB [ 299.125919][T10125] 2097051 pages RAM [ 299.125941][T10125] 0 pages HighMem/MovableOnly [ 299.125972][T10125] 434598 pages reserved [ 299.125994][T10125] 0 pages cma reserved [ 300.035981][T10141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.036552][T10141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.348106][ T5691] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 300.367984][ T5698] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 300.508898][ T5691] usb 2-1: Using ep0 maxpacket: 16 [ 300.510912][ T5691] usb 2-1: unable to get BOS descriptor or descriptor too short [ 300.510963][ T5691] usb 2-1: New USB device found: idVendor=0763, idProduct=2003, bcdDevice=0.40 [ 300.512110][ T5691] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 300.514209][ T5691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.514235][ T5691] usb 2-1: Product: syz [ 300.514251][ T5691] usb 2-1: Manufacturer: syz [ 300.514266][ T5691] usb 2-1: SerialNumber: syz [ 300.519769][ T5698] usb 5-1: Using ep0 maxpacket: 32 [ 300.540474][ T5698] usb 5-1: New USB device found: idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 300.544650][ T5698] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 300.544715][ T5698] usb 5-1: config 0 has no interface number 0 [ 300.544882][ T5698] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 300.545027][ T5698] usb 5-1: config 0 interface 85 has no altsetting 0 [ 300.552669][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.552735][ T5698] usb 5-1: Product: syz [ 300.552778][ T5698] usb 5-1: Manufacturer: syz [ 300.552820][ T5698] usb 5-1: SerialNumber: syz [ 300.580139][ T5698] usb 5-1: config 0 descriptor?? [ 300.739259][ T5691] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 300.740197][ T5691] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 300.740253][ T5691] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 300.831176][ T5691] usb 2-1: USB disconnect, device number 50 [ 300.929933][ T5876] udevd[5876]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 300.932087][T10150] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1267'. [ 301.009910][T10150] gretap0: entered promiscuous mode [ 301.097033][ T5698] appletouch 5-1:0.85: Failed to read mode from device. [ 301.097233][ T5698] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 301.390865][ T5698] usb 5-1: USB disconnect, device number 26 [ 301.445053][T10163] FAULT_INJECTION: forcing a failure. [ 301.445053][T10163] name failslab, interval 1, probability 0, space 0, times 0 [ 301.445089][T10163] CPU: 1 UID: 0 PID: 10163 Comm: syz.1.1271 Tainted: G L syzkaller #0 PREEMPT(full) [ 301.445119][T10163] Tainted: [L]=SOFTLOCKUP [ 301.445128][T10163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 301.445142][T10163] Call Trace: [ 301.445150][T10163] [ 301.445161][T10163] dump_stack_lvl+0xe8/0x150 [ 301.445192][T10163] should_fail_ex+0x3eb/0x540 [ 301.445219][T10163] should_failslab+0xa8/0x100 [ 301.445242][T10163] __kmalloc_noprof+0xf9/0x710 [ 301.445266][T10163] ? tomoyo_encode+0x2ad/0x570 [ 301.445286][T10163] ? tomoyo_encode+0x2ad/0x570 [ 301.445314][T10163] tomoyo_encode+0x2ad/0x570 [ 301.445343][T10163] tomoyo_realpath_from_path+0x5fa/0x640 [ 301.445377][T10163] ? tomoyo_path_number_perm+0x219/0x5f0 [ 301.445401][T10163] tomoyo_path_number_perm+0x246/0x5f0 [ 301.445429][T10163] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 301.445451][T10163] ? __lock_acquire+0x747/0x2de0 [ 301.445515][T10163] ? __fget_files+0x2a/0x420 [ 301.445540][T10163] ? __fget_files+0x2a/0x420 [ 301.445578][T10163] ? __fget_files+0x2a/0x420 [ 301.445604][T10163] security_file_ioctl+0xc3/0x2a0 [ 301.445629][T10163] __se_sys_ioctl+0x47/0x170 [ 301.445654][T10163] do_syscall_64+0x166/0x520 [ 301.445676][T10163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.445699][T10163] ? clear_bhb_loop+0x70/0xc0 [ 301.445725][T10163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.445747][T10163] RIP: 0033:0x7f8ab079e199 [ 301.445767][T10163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.445786][T10163] RSP: 002b:00007f8ab1737028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 301.445810][T10163] RAX: ffffffffffffffda RBX: 00007f8ab0a25fa0 RCX: 00007f8ab079e199 [ 301.445826][T10163] RDX: 0000200000000300 RSI: 00000000c020662a RDI: 0000000000000004 [ 301.445841][T10163] RBP: 00007f8ab1737090 R08: 0000000000000000 R09: 0000000000000000 [ 301.445856][T10163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.445869][T10163] R13: 00007f8ab0a26038 R14: 00007f8ab0a25fa0 R15: 00007ffd6e4c6518 [ 301.445904][T10163] [ 301.445962][T10163] ERROR: Out of memory at tomoyo_realpath_from_path. [ 302.284738][T10188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.285279][T10188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.478040][ T9] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 302.628473][T10191] FAULT_INJECTION: forcing a failure. [ 302.628473][T10191] name failslab, interval 1, probability 0, space 0, times 0 [ 302.628512][T10191] CPU: 1 UID: 0 PID: 10191 Comm: syz.1.1280 Tainted: G L syzkaller #0 PREEMPT(full) [ 302.628555][T10191] Tainted: [L]=SOFTLOCKUP [ 302.628565][T10191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 302.628581][T10191] Call Trace: [ 302.628592][T10191] [ 302.628603][T10191] dump_stack_lvl+0xe8/0x150 [ 302.628636][T10191] should_fail_ex+0x3eb/0x540 [ 302.628669][T10191] should_failslab+0xa8/0x100 [ 302.628697][T10191] __kmalloc_noprof+0xf9/0x710 [ 302.628725][T10191] ? tomoyo_encode+0x2ad/0x570 [ 302.628749][T10191] ? tomoyo_encode+0x2ad/0x570 [ 302.628782][T10191] tomoyo_encode+0x2ad/0x570 [ 302.628815][T10191] tomoyo_realpath_from_path+0x5fa/0x640 [ 302.628854][T10191] ? tomoyo_path_number_perm+0x219/0x5f0 [ 302.628881][T10191] tomoyo_path_number_perm+0x246/0x5f0 [ 302.628925][T10191] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 302.628948][T10191] ? __lock_acquire+0x747/0x2de0 [ 302.629018][T10191] ? __fget_files+0x2a/0x420 [ 302.629045][T10191] ? __fget_files+0x2a/0x420 [ 302.629068][T10191] ? __fget_files+0x2a/0x420 [ 302.629096][T10191] security_file_ioctl+0xc3/0x2a0 [ 302.629124][T10191] __se_sys_ioctl+0x47/0x170 [ 302.629150][T10191] do_syscall_64+0x166/0x520 [ 302.629181][T10191] ? trace_irq_disable+0x3b/0x140 [ 302.629201][T10191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.629227][T10191] ? clear_bhb_loop+0x70/0xc0 [ 302.629274][T10191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.629299][T10191] RIP: 0033:0x7f8ab079e199 [ 302.629326][T10191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.629370][T10191] RSP: 002b:00007f8ab1737028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 302.629399][T10191] RAX: ffffffffffffffda RBX: 00007f8ab0a25fa0 RCX: 00007f8ab079e199 [ 302.629418][T10191] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 302.629433][T10191] RBP: 00007f8ab1737090 R08: 0000000000000000 R09: 0000000000000000 [ 302.629450][T10191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.629465][T10191] R13: 00007f8ab0a26038 R14: 00007f8ab0a25fa0 R15: 00007ffd6e4c6518 [ 302.629512][T10191] [ 302.629594][T10191] ERROR: Out of memory at tomoyo_realpath_from_path. [ 302.631869][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 302.632604][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 302.632647][ T9] usb 5-1: New USB device found: idVendor=1235, idProduct=0010, bcdDevice=0.40 [ 302.637667][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.637715][ T9] usb 5-1: Product: syz [ 302.637740][ T9] usb 5-1: Manufacturer: syz [ 302.637763][ T9] usb 5-1: SerialNumber: syz [ 302.783044][ T9] usb 5-1: selecting invalid altsetting 1 [ 302.798168][ T9] usb 5-1: selecting invalid altsetting 1 [ 302.818098][ T9] usb 5-1: selecting invalid altsetting 1 [ 303.068178][ T9] usb 5-1: USB disconnect, device number 27 [ 303.141307][ T5876] udevd[5876]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 303.174209][T10200] overlayfs: failed to resolve 'lower': -2 [ 303.667947][T10226] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1289'. [ 303.817981][ T5691] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 303.954725][ T33] audit: type=1326 audit(1791473575.700:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10221 comm="syz.5.1289" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a7f9e199 code=0x7fc00000 [ 303.955142][ T33] audit: type=1326 audit(1791473575.700:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10221 comm="syz.5.1289" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f35a7f9e199 code=0x7fc00000 [ 303.955296][ T33] audit: type=1326 audit(1791473575.700:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10221 comm="syz.5.1289" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a7f9e199 code=0x7fc00000 [ 303.955448][ T33] audit: type=1326 audit(1791473575.700:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10221 comm="syz.5.1289" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a7f9e199 code=0x7fc00000 [ 303.955607][ T33] audit: type=1326 audit(1791473575.700:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10221 comm="syz.5.1289" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a7f9e199 code=0x7fc00000 [ 303.955741][ T33] audit: type=1326 audit(1791473575.700:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10221 comm="syz.5.1289" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a7f9e199 code=0x7fc00000 [ 303.955921][ T33] audit: type=1326 audit(1791473575.700:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10221 comm="syz.5.1289" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a7f9e199 code=0x7fc00000 [ 303.956302][ T33] audit: type=1326 audit(1791473575.700:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10221 comm="syz.5.1289" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a7f9e199 code=0x7fc00000 [ 303.956351][ T33] audit: type=1326 audit(1791473575.700:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10221 comm="syz.5.1289" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a7f9e199 code=0x7fc00000 [ 304.013159][ T5691] usb 5-1: Using ep0 maxpacket: 16 [ 304.199017][ T5691] usb 5-1: unable to get BOS descriptor or descriptor too short [ 304.199170][ T5691] usb 5-1: New USB device found: idVendor=0763, idProduct=2003, bcdDevice=0.40 [ 304.204891][ T5691] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 304.233882][ T5691] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.233912][ T5691] usb 5-1: Product: syz [ 304.233936][ T5691] usb 5-1: Manufacturer: syz [ 304.233948][ T5691] usb 5-1: SerialNumber: syz [ 304.453071][T10236] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 304.473671][ T5691] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 304.475289][ T5691] usb 5-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 304.475317][ T5691] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 304.563353][ T5691] usb 5-1: USB disconnect, device number 28 [ 304.643447][ T5876] udevd[5876]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 304.772603][T10245] FAULT_INJECTION: forcing a failure. [ 304.772603][T10245] name failslab, interval 1, probability 0, space 0, times 0 [ 304.772639][T10245] CPU: 1 UID: 0 PID: 10245 Comm: syz.1.1296 Tainted: G L syzkaller #0 PREEMPT(full) [ 304.772670][T10245] Tainted: [L]=SOFTLOCKUP [ 304.772679][T10245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 304.772693][T10245] Call Trace: [ 304.772702][T10245] [ 304.772711][T10245] dump_stack_lvl+0xe8/0x150 [ 304.772737][T10245] should_fail_ex+0x3eb/0x540 [ 304.772760][T10245] should_failslab+0xa8/0x100 [ 304.772780][T10245] __kmalloc_noprof+0xf9/0x710 [ 304.772797][T10245] ? __kmalloc_cache_noprof+0x148/0x600 [ 304.772814][T10245] ? alloc_pipe_info+0x1f4/0x4c0 [ 304.772830][T10245] ? alloc_pipe_info+0x1f4/0x4c0 [ 304.772852][T10245] alloc_pipe_info+0x1f4/0x4c0 [ 304.772872][T10245] splice_direct_to_actor+0xa41/0xcb0 [ 304.772899][T10245] ? lock_acquire+0x115/0x350 [ 304.772917][T10245] ? __pfx_aa_file_perm+0x10/0x10 [ 304.772936][T10245] ? __pfx_direct_splice_actor+0x10/0x10 [ 304.772954][T10245] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 304.772981][T10245] do_splice_direct+0x195/0x290 [ 304.773000][T10245] ? __pfx_do_splice_direct+0x10/0x10 [ 304.773020][T10245] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 304.773044][T10245] ? rw_verify_area+0x203/0x4c0 [ 304.773061][T10245] ? fdget+0x1ac/0x250 [ 304.773079][T10245] do_sendfile+0x52e/0x7c0 [ 304.773107][T10245] ? __pfx_do_sendfile+0x10/0x10 [ 304.773128][T10245] ? fdget+0x1ac/0x250 [ 304.773150][T10245] __se_sys_sendfile64+0x144/0x1a0 [ 304.773171][T10245] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 304.773199][T10245] do_syscall_64+0x166/0x520 [ 304.773216][T10245] ? trace_irq_disable+0x3b/0x140 [ 304.773233][T10245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.773251][T10245] ? clear_bhb_loop+0x70/0xc0 [ 304.773270][T10245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.773288][T10245] RIP: 0033:0x7f8ab079e199 [ 304.773306][T10245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.773322][T10245] RSP: 002b:00007f8ab1737028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 304.773341][T10245] RAX: ffffffffffffffda RBX: 00007f8ab0a25fa0 RCX: 00007f8ab079e199 [ 304.773355][T10245] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 304.773366][T10245] RBP: 00007f8ab1737090 R08: 0000000000000000 R09: 0000000000000000 [ 304.773377][T10245] R10: 0000000008000002 R11: 0000000000000246 R12: 0000000000000001 [ 304.773389][T10245] R13: 00007f8ab0a26038 R14: 00007f8ab0a25fa0 R15: 00007ffd6e4c6518 [ 304.773416][T10245] [ 305.128762][T10251] FAULT_INJECTION: forcing a failure. [ 305.128762][T10251] name failslab, interval 1, probability 0, space 0, times 0 [ 305.128799][T10251] CPU: 1 UID: 0 PID: 10251 Comm: syz.4.1299 Tainted: G L syzkaller #0 PREEMPT(full) [ 305.128832][T10251] Tainted: [L]=SOFTLOCKUP [ 305.128841][T10251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 305.128856][T10251] Call Trace: [ 305.128866][T10251] [ 305.128876][T10251] dump_stack_lvl+0xe8/0x150 [ 305.128906][T10251] should_fail_ex+0x3eb/0x540 [ 305.128935][T10251] should_failslab+0xa8/0x100 [ 305.128981][T10251] ? security_inode_alloc+0x39/0x310 [ 305.129007][T10251] kmem_cache_alloc_noprof+0x9c/0x600 [ 305.129030][T10251] ? make_kgid+0x1d1/0x6a0 [ 305.129054][T10251] ? security_inode_alloc+0x39/0x310 [ 305.129085][T10251] security_inode_alloc+0x39/0x310 [ 305.129110][T10251] inode_init_always_gfp+0x97e/0xd30 [ 305.129142][T10251] alloc_inode+0x82/0x1b0 [ 305.129166][T10251] alloc_anon_inode+0x1e/0x330 [ 305.129194][T10251] anon_inode_make_secure_inode+0x7b/0x180 [ 305.129220][T10251] ? do_raw_spin_unlock+0xf5/0x200 [ 305.129244][T10251] ? __pfx_anon_inode_make_secure_inode+0x10/0x10 [ 305.129270][T10251] ? _raw_spin_unlock+0x28/0x50 [ 305.129302][T10251] __anon_inode_getfile+0xce/0x200 [ 305.129330][T10251] new_userfaultfd+0x1fb/0x3b0 [ 305.129357][T10251] __x64_sys_userfaultfd+0x81/0xa0 [ 305.129381][T10251] do_syscall_64+0x166/0x520 [ 305.129403][T10251] ? trace_irq_disable+0x3b/0x140 [ 305.129425][T10251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.129450][T10251] ? clear_bhb_loop+0x70/0xc0 [ 305.129484][T10251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.129509][T10251] RIP: 0033:0x7fcaa999e199 [ 305.129531][T10251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.129552][T10251] RSP: 002b:00007fcaaa917028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 305.129577][T10251] RAX: ffffffffffffffda RBX: 00007fcaa9c25fa0 RCX: 00007fcaa999e199 [ 305.129596][T10251] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000801 [ 305.129611][T10251] RBP: 00007fcaa9a35888 R08: 0000000000000000 R09: 0000000000000000 [ 305.129626][T10251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.129640][T10251] R13: 00007fcaa9c26038 R14: 00007fcaa9c25fa0 R15: 00007ffc533e26b8 [ 305.129676][T10251] [ 305.662863][T10265] FAULT_INJECTION: forcing a failure. [ 305.662863][T10265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.662890][T10265] CPU: 0 UID: 0 PID: 10265 Comm: syz.5.1303 Tainted: G L syzkaller #0 PREEMPT(full) [ 305.662913][T10265] Tainted: [L]=SOFTLOCKUP [ 305.662920][T10265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 305.662930][T10265] Call Trace: [ 305.662937][T10265] [ 305.662946][T10265] dump_stack_lvl+0xe8/0x150 [ 305.662968][T10265] should_fail_ex+0x3eb/0x540 [ 305.662988][T10265] _copy_from_iter+0x1d3/0x1890 [ 305.663016][T10265] ? __pfx__copy_from_iter+0x10/0x10 [ 305.663030][T10265] ? trace_kmalloc+0x2a/0xf0 [ 305.663048][T10265] ? __kmalloc_noprof+0x387/0x710 [ 305.663062][T10265] ? __kmalloc_noprof+0x1a6/0x710 [ 305.663077][T10265] ? kernfs_fop_write_iter+0x157/0x540 [ 305.663098][T10265] kernfs_fop_write_iter+0x19a/0x540 [ 305.663118][T10265] vfs_write+0x612/0xba0 [ 305.663140][T10265] ? __pfx_vfs_write+0x10/0x10 [ 305.663157][T10265] ? __fget_files+0x3a2/0x420 [ 305.663172][T10265] ? __fget_files+0x2a/0x420 [ 305.663189][T10265] ? fdget+0x1ac/0x250 [ 305.663208][T10265] ksys_write+0x150/0x270 [ 305.663225][T10265] ? __pfx_ksys_write+0x10/0x10 [ 305.663251][T10265] do_syscall_64+0x166/0x520 [ 305.663267][T10265] ? trace_irq_disable+0x3b/0x140 [ 305.663281][T10265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.663298][T10265] ? clear_bhb_loop+0x70/0xc0 [ 305.663315][T10265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.663331][T10265] RIP: 0033:0x7f35a7f9e199 [ 305.663346][T10265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.663360][T10265] RSP: 002b:00007f35a61f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 305.663376][T10265] RAX: ffffffffffffffda RBX: 00007f35a8225fa0 RCX: 00007f35a7f9e199 [ 305.663388][T10265] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000003 [ 305.663398][T10265] RBP: 00007f35a61f6090 R08: 0000000000000000 R09: 0000000000000000 [ 305.663408][T10265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.663418][T10265] R13: 00007f35a8226038 R14: 00007f35a8225fa0 R15: 00007ffe16a2a698 [ 305.663449][T10265] [ 306.140571][T10275] EXT4-fs warning (device sda1): __ext4_ioctl:1564: Setting inode version is not supported with metadata_csum enabled. [ 306.608554][ T5705] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 306.725464][T10294] FAULT_INJECTION: forcing a failure. [ 306.725464][T10294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.725501][T10294] CPU: 0 UID: 0 PID: 10294 Comm: syz.7.1310 Tainted: G L syzkaller #0 PREEMPT(full) [ 306.725532][T10294] Tainted: [L]=SOFTLOCKUP [ 306.725541][T10294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 306.725555][T10294] Call Trace: [ 306.725565][T10294] [ 306.725576][T10294] dump_stack_lvl+0xe8/0x150 [ 306.725606][T10294] should_fail_ex+0x3eb/0x540 [ 306.725635][T10294] _copy_from_user+0x2d/0xb0 [ 306.725659][T10294] memdup_user+0x5e/0xd0 [ 306.725682][T10294] strndup_user+0x68/0xd0 [ 306.725705][T10294] __se_sys_mount+0x9d/0x420 [ 306.725735][T10294] ? __pfx___se_sys_mount+0x10/0x10 [ 306.725764][T10294] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 306.725788][T10294] ? __x64_sys_mount+0x20/0xc0 [ 306.725814][T10294] do_syscall_64+0x166/0x520 [ 306.725835][T10294] ? trace_irq_disable+0x3b/0x140 [ 306.725856][T10294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.725880][T10294] ? clear_bhb_loop+0x70/0xc0 [ 306.725906][T10294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.725929][T10294] RIP: 0033:0x7fe31cb9e199 [ 306.725951][T10294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.725974][T10294] RSP: 002b:00007fe31db0e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 306.725999][T10294] RAX: ffffffffffffffda RBX: 00007fe31ce25fa0 RCX: 00007fe31cb9e199 [ 306.726016][T10294] RDX: 00002000000006c0 RSI: 0000200000000680 RDI: 0000200000000640 [ 306.726032][T10294] RBP: 00007fe31db0e090 R08: 0000200000000d00 R09: 0000000000000000 [ 306.726049][T10294] R10: 0000000000008010 R11: 0000000000000246 R12: 0000000000000001 [ 306.726063][T10294] R13: 00007fe31ce26038 R14: 00007fe31ce25fa0 R15: 00007ffc17658118 [ 306.726099][T10294] [ 306.895711][ T5705] usb 2-1: Using ep0 maxpacket: 16 [ 306.930540][ T5705] usb 2-1: unable to get BOS descriptor or descriptor too short [ 306.930595][ T5705] usb 2-1: New USB device found: idVendor=0763, idProduct=2003, bcdDevice=0.40 [ 306.931835][ T5705] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 306.934254][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.934282][ T5705] usb 2-1: Product: syz [ 306.934300][ T5705] usb 2-1: Manufacturer: syz [ 306.934317][ T5705] usb 2-1: SerialNumber: syz [ 307.203220][ T5705] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 307.205623][ T5705] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 307.205652][ T5705] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 307.285706][ T5705] usb 2-1: USB disconnect, device number 51 [ 307.370547][ T5876] udevd[5876]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 308.138072][ T5705] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 308.298956][ T5705] usb 2-1: New USB device found: idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 308.302948][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.302978][ T5705] usb 2-1: Product: syz [ 308.302995][ T5705] usb 2-1: Manufacturer: syz [ 308.303011][ T5705] usb 2-1: SerialNumber: syz [ 308.307663][ T5705] usb 2-1: config 0 descriptor?? [ 308.553490][T10312] FAULT_INJECTION: forcing a failure. [ 308.553490][T10312] name failslab, interval 1, probability 0, space 0, times 0 [ 308.553528][T10312] CPU: 0 UID: 0 PID: 10312 Comm: syz.1.1316 Tainted: G L syzkaller #0 PREEMPT(full) [ 308.553559][T10312] Tainted: [L]=SOFTLOCKUP [ 308.553569][T10312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 308.553583][T10312] Call Trace: [ 308.553593][T10312] [ 308.553603][T10312] dump_stack_lvl+0xe8/0x150 [ 308.553634][T10312] should_fail_ex+0x3eb/0x540 [ 308.553663][T10312] should_failslab+0xa8/0x100 [ 308.553688][T10312] __kmalloc_noprof+0xf9/0x710 [ 308.553728][T10312] ? tomoyo_encode+0x2ad/0x570 [ 308.553749][T10312] ? tomoyo_encode+0x2ad/0x570 [ 308.553778][T10312] tomoyo_encode+0x2ad/0x570 [ 308.553808][T10312] tomoyo_realpath_from_path+0x5fa/0x640 [ 308.553843][T10312] ? tomoyo_path_number_perm+0x219/0x5f0 [ 308.553868][T10312] tomoyo_path_number_perm+0x246/0x5f0 [ 308.553895][T10312] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 308.553917][T10312] ? __lock_acquire+0x747/0x2de0 [ 308.553982][T10312] ? __fget_files+0x2a/0x420 [ 308.554008][T10312] ? __fget_files+0x2a/0x420 [ 308.554030][T10312] ? __fget_files+0x2a/0x420 [ 308.554057][T10312] security_file_ioctl+0xc3/0x2a0 [ 308.554084][T10312] __se_sys_ioctl+0x47/0x170 [ 308.554109][T10312] do_syscall_64+0x166/0x520 [ 308.554131][T10312] ? trace_irq_disable+0x3b/0x140 [ 308.554151][T10312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.554177][T10312] ? clear_bhb_loop+0x70/0xc0 [ 308.554204][T10312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.554227][T10312] RIP: 0033:0x7f8ab079e199 [ 308.554249][T10312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.554269][T10312] RSP: 002b:00007f8ab1737028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 308.554293][T10312] RAX: ffffffffffffffda RBX: 00007f8ab0a25fa0 RCX: 00007f8ab079e199 [ 308.554311][T10312] RDX: 0000000000000000 RSI: 00000000c0045520 RDI: 0000000000000004 [ 308.554325][T10312] RBP: 00007f8ab1737090 R08: 0000000000000000 R09: 0000000000000000 [ 308.554340][T10312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.554355][T10312] R13: 00007f8ab0a26038 R14: 00007f8ab0a25fa0 R15: 00007ffd6e4c6518 [ 308.554392][T10312] [ 308.554414][T10312] ERROR: Out of memory at tomoyo_realpath_from_path. [ 308.684896][ T9158] usb 2-1: USB disconnect, device number 52 [ 308.799457][T10318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1317'. [ 308.865901][T10317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1317'. [ 310.402544][T10339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.403019][T10339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.554397][T10344] FAULT_INJECTION: forcing a failure. [ 310.554397][T10344] name failslab, interval 1, probability 0, space 0, times 0 [ 310.554432][T10344] CPU: 0 UID: 0 PID: 10344 Comm: syz.1.1326 Tainted: G L syzkaller #0 PREEMPT(full) [ 310.554463][T10344] Tainted: [L]=SOFTLOCKUP [ 310.554472][T10344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 310.554486][T10344] Call Trace: [ 310.554495][T10344] [ 310.554505][T10344] dump_stack_lvl+0xe8/0x150 [ 310.554535][T10344] should_fail_ex+0x3eb/0x540 [ 310.554562][T10344] should_failslab+0xa8/0x100 [ 310.554597][T10344] __kmalloc_noprof+0xf9/0x710 [ 310.554621][T10344] ? tomoyo_encode+0x2ad/0x570 [ 310.554641][T10344] ? tomoyo_encode+0x2ad/0x570 [ 310.554670][T10344] tomoyo_encode+0x2ad/0x570 [ 310.554698][T10344] tomoyo_realpath_from_path+0x5fa/0x640 [ 310.554732][T10344] ? tomoyo_path_number_perm+0x219/0x5f0 [ 310.554756][T10344] tomoyo_path_number_perm+0x246/0x5f0 [ 310.554784][T10344] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 310.554806][T10344] ? __lock_acquire+0x747/0x2de0 [ 310.554870][T10344] ? __fget_files+0x2a/0x420 [ 310.554895][T10344] ? __fget_files+0x2a/0x420 [ 310.554916][T10344] ? __fget_files+0x2a/0x420 [ 310.554943][T10344] security_file_ioctl+0xc3/0x2a0 [ 310.554969][T10344] __se_sys_ioctl+0x47/0x170 [ 310.554994][T10344] do_syscall_64+0x166/0x520 [ 310.555016][T10344] ? trace_irq_disable+0x3b/0x140 [ 310.555036][T10344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.555061][T10344] ? clear_bhb_loop+0x70/0xc0 [ 310.555086][T10344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.555109][T10344] RIP: 0033:0x7f8ab079e199 [ 310.555129][T10344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.555148][T10344] RSP: 002b:00007f8ab1737028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 310.555170][T10344] RAX: ffffffffffffffda RBX: 00007f8ab0a25fa0 RCX: 00007f8ab079e199 [ 310.555187][T10344] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 310.555201][T10344] RBP: 00007f8ab1737090 R08: 0000000000000000 R09: 0000000000000000 [ 310.555215][T10344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.555229][T10344] R13: 00007f8ab0a26038 R14: 00007f8ab0a25fa0 R15: 00007ffd6e4c6518 [ 310.555266][T10344] [ 310.555287][T10344] ERROR: Out of memory at tomoyo_realpath_from_path. [ 311.242969][T10352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1328'. [ 311.294874][T10353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1328'. [ 311.584117][T10356] FAULT_INJECTION: forcing a failure. [ 311.584117][T10356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.584150][T10356] CPU: 0 UID: 0 PID: 10356 Comm: syz.4.1330 Tainted: G L syzkaller #0 PREEMPT(full) [ 311.584179][T10356] Tainted: [L]=SOFTLOCKUP [ 311.584187][T10356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 311.584201][T10356] Call Trace: [ 311.584210][T10356] [ 311.584221][T10356] dump_stack_lvl+0xe8/0x150 [ 311.584246][T10356] should_fail_ex+0x3eb/0x540 [ 311.584268][T10356] _copy_from_user+0x2d/0xb0 [ 311.584287][T10356] kstrtouint_from_user+0xd6/0x180 [ 311.584308][T10356] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 311.584334][T10356] ? lock_acquire+0x115/0x350 [ 311.584357][T10356] proc_fail_nth_write+0x8e/0x210 [ 311.584376][T10356] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 311.584402][T10356] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 311.584421][T10356] vfs_write+0x296/0xba0 [ 311.584449][T10356] ? __pfx_vfs_write+0x10/0x10 [ 311.584469][T10356] ? __fget_files+0x2a/0x420 [ 311.584488][T10356] ? __fget_files+0x3a2/0x420 [ 311.584515][T10356] ? __fget_files+0x2a/0x420 [ 311.584539][T10356] ? fdget+0x1ac/0x250 [ 311.584563][T10356] ksys_write+0x150/0x270 [ 311.584584][T10356] ? __pfx_ksys_write+0x10/0x10 [ 311.584614][T10356] do_syscall_64+0x166/0x520 [ 311.584638][T10356] ? trace_irq_disable+0x3b/0x140 [ 311.584656][T10356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.584678][T10356] ? clear_bhb_loop+0x70/0xc0 [ 311.584699][T10356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.584717][T10356] RIP: 0033:0x7fcaa995e9ce [ 311.584736][T10356] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 311.584754][T10356] RSP: 002b:00007fcaaa8f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 311.584776][T10356] RAX: ffffffffffffffda RBX: 00007fcaaa8f66c0 RCX: 00007fcaa995e9ce [ 311.584793][T10356] RDX: 0000000000000001 RSI: 00007fcaaa8f60a0 RDI: 0000000000000008 [ 311.584806][T10356] RBP: 00007fcaaa8f6090 R08: 0000000000000000 R09: 0000000000000000 [ 311.584820][T10356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.584834][T10356] R13: 00007fcaa9c26128 R14: 00007fcaa9c26090 R15: 00007ffc533e26b8 [ 311.584870][T10356] [ 312.168407][T10363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.286719][T10364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.359442][T10367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.505969][T10359] null_blk: disk nullb1 created [ 312.872901][T10372] tipc: Started in network mode [ 312.872938][T10372] tipc: Node identity 7f000001, cluster identity 4711 [ 312.873742][T10372] tipc: New replicast peer: 0.0.0.0 [ 312.875038][T10372] tipc: Enabled bearer , priority 10 [ 312.879256][T10372] tipc: Disabling bearer [ 313.359318][ T9158] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 313.509386][ T9158] usb 5-1: Using ep0 maxpacket: 16 [ 313.511577][ T9158] usb 5-1: unable to get BOS descriptor or descriptor too short [ 313.511635][ T9158] usb 5-1: New USB device found: idVendor=0763, idProduct=2003, bcdDevice=0.40 [ 313.516325][ T9158] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 313.553007][ T9158] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.553038][ T9158] usb 5-1: Product: syz [ 313.553056][ T9158] usb 5-1: Manufacturer: syz [ 313.553073][ T9158] usb 5-1: SerialNumber: syz [ 313.689933][T10381] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 313.769979][ T9158] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 313.771088][ T9158] usb 5-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 313.771116][ T9158] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 313.854174][ T9158] usb 5-1: USB disconnect, device number 29 [ 313.919380][ T5876] udevd[5876]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 314.397331][T10387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1341'. [ 314.461624][T10389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1341'. [ 314.602239][T10393] device-mapper: ioctl: name not supplied when creating device [ 314.849648][T10397] virtio_net virtio1 eth0: entered promiscuous mode [ 314.973160][T10401] /dev/nullb0: Can't open blockdev [ 314.975521][T10401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1344'. [ 315.590672][T10410] FAULT_INJECTION: forcing a failure. [ 315.590672][T10410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.590710][T10410] CPU: 0 UID: 0 PID: 10410 Comm: syz.1.1345 Tainted: G L syzkaller #0 PREEMPT(full) [ 315.590750][T10410] Tainted: [L]=SOFTLOCKUP [ 315.590760][T10410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 315.590774][T10410] Call Trace: [ 315.590785][T10410] [ 315.590795][T10410] dump_stack_lvl+0xe8/0x150 [ 315.590826][T10410] should_fail_ex+0x3eb/0x540 [ 315.590855][T10410] _copy_from_user+0x2d/0xb0 [ 315.590879][T10410] kstrtouint_from_user+0xd6/0x180 [ 315.590907][T10410] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 315.590941][T10410] ? lock_acquire+0x115/0x350 [ 315.590968][T10410] proc_fail_nth_write+0x8e/0x210 [ 315.590994][T10410] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 315.591026][T10410] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 315.591049][T10410] vfs_write+0x296/0xba0 [ 315.591080][T10410] ? __pfx_vfs_write+0x10/0x10 [ 315.591104][T10410] ? __fget_files+0x2a/0x420 [ 315.591125][T10410] ? __fget_files+0x3a2/0x420 [ 315.591145][T10410] ? __fget_files+0x2a/0x420 [ 315.591170][T10410] ? fdget+0x1ac/0x250 [ 315.591199][T10410] ksys_write+0x150/0x270 [ 315.591224][T10410] ? __pfx_ksys_write+0x10/0x10 [ 315.591257][T10410] do_syscall_64+0x166/0x520 [ 315.591282][T10410] ? trace_irq_disable+0x3b/0x140 [ 315.591301][T10410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.591326][T10410] ? clear_bhb_loop+0x70/0xc0 [ 315.591351][T10410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.591374][T10410] RIP: 0033:0x7f8ab075e9ce [ 315.591395][T10410] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 315.591413][T10410] RSP: 002b:00007f8ab1715fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 315.591437][T10410] RAX: ffffffffffffffda RBX: 00007f8ab17166c0 RCX: 00007f8ab075e9ce [ 315.591453][T10410] RDX: 0000000000000001 RSI: 00007f8ab17160a0 RDI: 0000000000000007 [ 315.591468][T10410] RBP: 00007f8ab1716090 R08: 0000000000000000 R09: 0000000000000000 [ 315.591483][T10410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.591496][T10410] R13: 00007f8ab0a26128 R14: 00007f8ab0a26090 R15: 00007ffd6e4c6518 [ 315.591530][T10410] [ 316.261773][ T7553] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 316.294233][T10429] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 316.408057][ T7553] usb 5-1: Using ep0 maxpacket: 16 [ 316.408813][ T7553] usb 5-1: New USB device found: idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 316.410114][ T7553] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.455513][ T7553] usb 5-1: config 0 descriptor?? [ 316.472775][ T7553] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 316.898802][ T5705] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 317.059388][ T5705] usb 2-1: not running at top speed; connect to a high speed hub [ 317.059427][ T5705] usb 2-1: New USB device found: idVendor=1b80, idProduct=e309, bcdDevice=1f.40 [ 317.061526][ T5705] usb 2-1: config 1 has an invalid interface number: 167 but max is 0 [ 317.061557][ T5705] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.061580][ T5705] usb 2-1: config 1 has no interface number 0 [ 317.061650][ T5705] usb 2-1: config 1 interface 167 altsetting 167 endpoint 0x8A has an invalid bInterval 0, changing to 4 [ 317.061689][ T5705] usb 2-1: config 1 interface 167 altsetting 167 endpoint 0x8A has invalid wMaxPacketSize 0 [ 317.061715][ T5705] usb 2-1: config 1 interface 167 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 317.061771][ T5705] usb 2-1: config 1 interface 167 has no altsetting 0 [ 317.067245][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.067274][ T5705] usb 2-1: Product: syz [ 317.067291][ T5705] usb 2-1: Manufacturer: syz [ 317.067337][ T5705] usb 2-1: SerialNumber: syz [ 317.344515][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.922967][ T5628] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 318.476253][T10463] loop9: detected capacity change from 0 to 255852544 [ 318.629016][ T1701] block nbd2: Possible stuck request ffff8880282d4b40: control (read@0,1024B). Runtime 180 seconds [ 318.947991][ T7553] gspca_sonixj: i2c_w8 err -71 [ 318.948115][ T7553] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 318.955612][ T7553] usb 5-1: USB disconnect, device number 30 [ 319.365541][ T5705] em28xx 2-1:1.167: New device syz syz @ 12 Mbps (1b80:e309, interface 167, class 167) [ 319.365585][ T5705] em28xx 2-1:1.167: Device initialization failed. [ 319.365601][ T5705] em28xx 2-1:1.167: Device must be connected to a high-speed USB 2.0 port. [ 319.406784][ T5705] usb 2-1: USB disconnect, device number 53 [ 319.849874][ T5705] usb 2-1: new low-speed USB device number 54 using dummy_hcd [ 320.040114][ T5705] usb 2-1: New USB device found: idVendor=0925, idProduct=8888, bcdDevice=0.00 [ 320.042054][ T5705] usb 2-1: too many endpoints for config 0 interface 0 altsetting 5: 254, using maximum allowed: 30 [ 320.042109][ T5705] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 320.042145][ T5705] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 320.042178][ T5705] usb 2-1: config 0 interface 0 has no altsetting 0 [ 320.042218][ T5705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.112482][ T5705] usb 2-1: config 0 descriptor?? [ 320.531559][ T5705] usbhid 2-1:0.0: can't add hid device: -71 [ 320.531702][ T5705] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 320.556743][ T5705] usb 2-1: USB disconnect, device number 54 [ 323.629108][ T4978] udevd[4978]: worker [5881] /devices/virtual/block/nbd2 timeout; kill it [ 323.633520][ T4978] udevd[4978]: seq 11131 '/devices/virtual/block/nbd2' killed [ 345.018154][ T5628] Bluetooth: hci3: command 0x0406 tx timeout [ 348.698545][ T1701] block nbd2: Possible stuck request ffff8880282d4b40: control (read@0,1024B). Runtime 210 seconds [ 360.378054][ T5623] Bluetooth: hci0: command 0x0c1a tx timeout [ 369.828192][ T34] INFO: task syz.2.834:8378 blocked for more than 143 seconds. [ 369.828225][ T34] Tainted: G L syzkaller #0 [ 369.828238][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 369.828250][ T34] task:syz.2.834 state:D stack:25960 pid:8378 tgid:8377 ppid:5619 task_flags:0x400140 flags:0x00080002 [ 369.828317][ T34] Call Trace: [ 369.828326][ T34] [ 369.828342][ T34] __schedule+0x1b47/0x5b40 [ 369.828402][ T34] ? __pfx___schedule+0x10/0x10 [ 369.828436][ T34] ? schedule+0x90/0x2b0 [ 369.828463][ T34] schedule+0x164/0x2b0 [ 369.828489][ T34] schedule_preempt_disabled+0x13/0x30 [ 369.828513][ T34] __mutex_lock+0x7c4/0x15a0 [ 369.828541][ T34] ? __mutex_lock+0x5cd/0x15a0 [ 369.828568][ T34] ? bdev_open+0xde/0xd70 [ 369.828593][ T34] ? __pfx___mutex_lock+0x10/0x10 [ 369.828632][ T34] ? disk_block_events+0xab/0x120 [ 369.828663][ T34] ? bdev_open+0xb0/0xd70 [ 369.828688][ T34] bdev_open+0xde/0xd70 [ 369.828722][ T34] blkdev_open+0x461/0x600 [ 369.828749][ T34] ? __pfx_blkdev_open+0x10/0x10 [ 369.828771][ T34] do_dentry_open+0x80e/0x1360 [ 369.828807][ T34] vfs_open_consume+0x4a/0x350 [ 369.828828][ T34] ? path_openat+0x148a/0x1da0 [ 369.828854][ T34] path_openat+0x14a6/0x1da0 [ 369.828900][ T34] do_file_open+0x23e/0x4a0 [ 369.828929][ T34] ? __pfx_do_file_open+0x10/0x10 [ 369.828976][ T34] ? _raw_spin_unlock+0x28/0x50 [ 369.828998][ T34] ? alloc_fd+0x6af/0x760 [ 369.829033][ T34] do_sys_openat2+0x115/0x200 [ 369.829056][ T34] ? __se_sys_futex+0x3a8/0x450 [ 369.829079][ T34] ? __pfx_do_sys_openat2+0x10/0x10 [ 369.829106][ T34] ? __pfx___se_sys_futex+0x10/0x10 [ 369.829137][ T34] __x64_sys_openat+0x138/0x170 [ 369.829164][ T34] do_syscall_64+0x166/0x520 [ 369.829184][ T34] ? trace_irq_disable+0x3b/0x140 [ 369.829206][ T34] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.829230][ T34] ? clear_bhb_loop+0x70/0xc0 [ 369.829255][ T34] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.829280][ T34] RIP: 0033:0x7f3222b5e9ce [ 369.829301][ T34] RSP: 002b:00007f3223b1cb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 369.829325][ T34] RAX: ffffffffffffffda RBX: 00007f3223b1d6c0 RCX: 00007f3222b5e9ce [ 369.829343][ T34] RDX: 0000000000000101 RSI: 00007f3223b1cc00 RDI: ffffffffffffff9c [ 369.829359][ T34] RBP: 00007f3223b1cc00 R08: 0000000000000000 R09: 0000000000000000 [ 369.829374][ T34] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 369.829390][ T34] R13: 00007f3222e26038 R14: 00007f3222e25fa0 R15: 00007fff63291208 [ 369.829427][ T34] [ 369.829563][ T34] [ 369.829563][ T34] Showing all locks held in the system: [ 369.829579][ T34] locks held by khungtaskd/34: 1, last CPU#1: [ 369.829598][ T34] #0: ffffffff9015a2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 369.829693][ T34] locks held by getty/5368: 2, on CPU#1: [ 369.829716][ T34] #0: ffff888036a660a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 369.829756][ T34] #1: ffffc9000323b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 369.829795][ T34] locks held by kworker/u9:6/5628: 3, on CPU#1: [ 369.829807][ T34] #0: ffff888078ccf948 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 369.829846][ T34] #1: ffffc90003b97c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 369.829885][ T34] #2: ffff88807cf34ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430 [ 369.829926][ T34] locks held by udevd/5881: 1, on CPU#1: [ 369.829937][ T34] #0: ffff8880237cb350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 369.829975][ T34] locks held by syz.2.834/8378: 1, on CPU#0: [ 369.829987][ T34] #0: ffff8880237cb350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 369.830025][ T34] [ 369.830030][ T34] ============================================= [ 369.830030][ T34] [ 369.830044][ T34] NMI backtrace for cpu 1 [ 369.830058][ T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 369.830083][ T34] Tainted: [L]=SOFTLOCKUP [ 369.830089][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 369.830099][ T34] Call Trace: [ 369.830106][ T34] [ 369.830112][ T34] dump_stack_lvl+0xe8/0x150 [ 369.830131][ T34] nmi_cpu_backtrace+0x274/0x2d0 [ 369.830149][ T34] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 369.830168][ T34] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 369.830187][ T34] sys_info+0x135/0x170 [ 369.830201][ T34] watchdog+0x1073/0x10f0 [ 369.830222][ T34] ? watchdog+0x209/0x10f0 [ 369.830242][ T34] kthread+0x38b/0x480 [ 369.830257][ T34] ? __pfx_watchdog+0x10/0x10 [ 369.830270][ T34] ? __pfx_kthread+0x10/0x10 [ 369.830286][ T34] ret_from_fork+0x514/0xb70 [ 369.830304][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 369.830319][ T34] ? __switch_to+0xc78/0x1410 [ 369.830337][ T34] ? __pfx_kthread+0x10/0x10 [ 369.830353][ T34] ret_from_fork_asm+0x1a/0x30 [ 369.830379][ T34] [ 369.830386][ T34] Sending NMI from CPU 1 to CPUs 0: [ 369.830426][ C0] NMI backtrace for cpu 0 [ 369.830443][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 369.830470][ C0] Tainted: [L]=SOFTLOCKUP [ 369.830484][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 369.830496][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 369.830518][ C0] Code: db a8 02 e9 03 18 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 cd 28 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 369.830535][ C0] RSP: 0018:ffffffff8fe07ca0 EFLAGS: 00000242 [ 369.830551][ C0] RAX: 00000000001f243d RBX: ffffffff819c5fb0 RCX: 8000000000000001 [ 369.830567][ C0] RDX: 0000000000000001 RSI: ffffffff8e7c6508 RDI: ffffffff8c8f7480 [ 369.830581][ C0] RBP: ffffffff8fe07d78 R08: ffff8880b8233e5b R09: 1ffff110170467cb [ 369.830596][ C0] R10: dffffc0000000000 R11: ffffed10170467cc R12: 0000000000000000 [ 369.830610][ C0] R13: 1ffffffff1fd1df8 R14: 1ffffffff1fc0f9c R15: dffffc0000000000 [ 369.830626][ C0] FS: 0000000000000000(0000) GS:ffff88812342e000(0000) knlGS:0000000000000000 [ 369.830642][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 369.830657][ C0] CR2: 00007fba28c81e9c CR3: 000000000ff48000 CR4: 00000000003526f0 [ 369.830674][ C0] Call Trace: [ 369.830682][ C0] [ 369.830689][ C0] default_idle+0x9/0x20 [ 369.830706][ C0] default_idle_call+0x72/0xb0 [ 369.830724][ C0] do_idle+0x2e0/0x540 [ 369.830744][ C0] ? __pfx_do_idle+0x10/0x10 [ 369.830766][ C0] cpu_startup_entry+0x43/0x60 [ 369.830784][ C0] rest_init+0x378/0x3a0 [ 369.830801][ C0] ? __pfx_rest_init+0x10/0x10 [ 369.830823][ C0] ? __pfx_kernel_init+0x10/0x10 [ 369.830842][ C0] ? __pfx_acpi_hw_get_mode+0x10/0x10 [ 369.830868][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 369.830887][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 369.830907][ C0] ? acpi_enable_subsystem+0x286/0x3c0 [ 369.830930][ C0] start_kernel+0x397/0x3e0 [ 369.830953][ C0] x86_64_start_reservations+0x24/0x30 [ 369.830973][ C0] x86_64_start_kernel+0x137/0x1b0 [ 369.830991][ C0] common_startup_64+0x13e/0x157 [ 369.831019][ C0] [ 369.831440][ T34] Kernel panic - not syncing: hung_task: blocked tasks [ 370.545223][ T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 370.556031][ T34] Tainted: [L]=SOFTLOCKUP [ 370.560395][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 370.570478][ T34] Call Trace: [ 370.573804][ T34] [ 370.576782][ T34] vpanic+0x26f/0x710 [ 370.580811][ T34] panic+0xc5/0xd0 [ 370.584559][ T34] ? __pfx_panic+0x10/0x10 [ 370.588998][ T34] ? preempt_schedule_common+0x7f/0xd0 [ 370.594493][ T34] ? preempt_schedule_thunk+0x16/0x40 [ 370.599897][ T34] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 370.606114][ T34] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 370.612299][ T34] watchdog+0x10e7/0x10f0 [ 370.616665][ T34] ? watchdog+0x209/0x10f0 [ 370.621144][ T34] kthread+0x38b/0x480 [ 370.625249][ T34] ? __pfx_watchdog+0x10/0x10 [ 370.629980][ T34] ? __pfx_kthread+0x10/0x10 [ 370.634611][ T34] ret_from_fork+0x514/0xb70 [ 370.639248][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 370.644408][ T34] ? __switch_to+0xc78/0x1410 [ 370.649121][ T34] ? __pfx_kthread+0x10/0x10 [ 370.653748][ T34] ret_from_fork_asm+0x1a/0x30 [ 370.658574][ T34] [ 370.662218][ T34] Kernel Offset: disabled [ 370.666574][ T34] Rebooting in 86400 seconds..