last executing test programs: 1m10.368057166s ago: executing program 0 (id=2594): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r4, 0x4734}}, 0x10) socket$netlink(0x10, 0x3, 0x0) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r1, r2, 0x25, 0x4, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r2, {0x0, 0x7}, {0xf, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) close(r5) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000540)={&(0x7f0000000000)="219436aed637535696d242922ae0fca124c1fb102eb75853e755166e916216c5daa74f386a50585a7c56abbfa4afecafad209017", &(0x7f00000000c0)=""/200, &(0x7f00000003c0)="17f51dfa6b8d95258c829d966ef96330c4826ec4d11613430323653e40ddaaaeb0929d92361b573a33a472d5b68cd2f9756ed0a0386eb9de9bbf150f52bd4f603bff9fe3848f9c6988db8fe541438dc015e388f9768f45c5895763db73dbbe016540bfc7017093e14adfde6721397b27282dcc1b79aa75896843050e2a787a5c3be357c94e13a49a49433734e3dda7b2a89524082ce926676c8a31189d04ce837a34033723417b9723a369", &(0x7f0000000480)="c6476fe143ef53e7a0f648897fc56dcd4e429b639f53263a30f54f9f85e126ecb4b9c1243e01b8ee7201ae3e114c2ad72cc5bc9c6571bf78ab2359c62ccc7afc8953d38924546f80a86e1270cbe8e251f500f2f9292fd6a5d80a828cc120dc11d8e2c614da590296db6f4f5387895768619ac9350e4c103669dab8f81f45ab26a96a301b17009ba8", 0x93, r6, 0x4}, 0x38) 1m10.157111948s ago: executing program 0 (id=2596): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f00000001c0)=0x58, 0x80000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001b40)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001f80)=0x0) sendmmsg$nfc_llcp(r1, &(0x7f0000003540)=[{&(0x7f0000000240)={0x27, 0x0, 0x0, 0x6, 0xff, 0x5, "545932c3708d2ab3e11c0ef8483aa538c985b7719f714a4eec62a01e53b6c8d88dde3b04a745159290cd686897155104ff56dcd010063875aaa46f03d17046", 0x21}, 0x58, &(0x7f00000005c0)=[{&(0x7f00000002c0)="c286ad5f35f0bcdbca3aac182d422d56d5d5f5575bd0b65a74a62ccdbb764575889159fedca67de5b09eaa86530b94dcbcd90fa504d0070fd5accd1bfe2cb793353c393878845f31baa7dc7cb11e98c8ea48d3336fb57d9f1ad5363c0fbe9314b16ee45d0ee9050b6010523cca54d6e13f5d2500cfebf39fbb16e678764932b77a85f507e452b75bb3b05a4f0070b67cfe7a56fc", 0x94}, {&(0x7f0000000380)="ded4122b607ea624f801db589a3b3b68f13498481e6f1081cdf1585ce8c5df638357b69fb0e745033fb399d8769c3ca7b52412501577d6d6afa9609f82a6fd542403abeb1516bb53c3ca688dcbfb55d824f0128514bc0d1cc8246c98f31850ca00cdd9a2393fe52278b0a98426a0178ebe10ed4146de7ef08074f306c98fdceafd9bc29d1bb8b7bc31b6c4ab2d182acd653d7d27ae3c96355dcc6db87cd1d3dff4fae767c6d476132c54cf7e80801d8475a23caf1e7b22e1b0a8464adad09d5a41dbaa16d3eaf6cbcac7dc4861d3c40e68abd3ad5a9c", 0xd6}, {&(0x7f0000000480)="b36368161e388ad69923b424016c1caab074ce2e959e2bfa53577da4455ea93c39546af9f5f47322138bfd8983b475a83fd692942c2a04bae428d2d27c5f9a411b75568886587d5c4f301a470c7ddca28231bdf4e1a5212cbbc6cef8ac6678ee5eeee471b060dbbdb9d85e4bd67aa187ca1f8fcc8501eb29917f4df49b9c33ebbcc4b6413c006ff2ffefdbcc38bfee4f6919f147af5f98017f1e2a8e56e4fb7f7be43bd980d3dafe4b3aa12363ed7738ba1a2bcf4f464d896fe6118a7d58d60fe87e9c390c532e75aa520fb77ca5fecd721d71b7d2aea3f0fa335c116b4479e59c9a588c4fb1", 0xe6}, {&(0x7f0000000580)="8038b10395b7a33655a57fcb8d78247c88c24416174da0a0bc34a3328a1e820ed7a169d0e130dd780c6144bc9c1e", 0x2e}], 0x4, &(0x7f0000000600)={0xbc, 0x10e, 0x37bdce80, "00a621727bd0fdf1de79738de27e55262ecaef07afa81c7c5ff0120a024aaac91e901a65e29010744bafffd264728c64dd6ca16ce49ce35f1bffa7318cdfd445dd42a23e4542df1df37454f5c8c368bb8e6e14285ebb8cf7a001201b757a5ce0c03bbddfcb9ac09435c7145ef17ca4f2a38b470e4adcba8ddfa7c602b62713e2efb71ece11d45a23ae19545bd8152789fe119b5019fa399c2099599dd2cda46b50355afb2745d01ba078754a978e"}, 0xbc, 0x4}, {&(0x7f00000006c0)={0x27, 0x0, 0xffffffffffffffff, 0x7, 0x8, 0x2a, "1630f4152c973d1f345bb58b14e61aa37bfcd24903654be94cceffef5c003686deff063ffd4a308933189c901822db0a7e7d43c29da801409af08312503d55", 0x5}, 0x58, &(0x7f00000019c0)=[{&(0x7f0000000740)="e1c3f1a673e7433c3873dec6591275f23d75019de5f727af1716f19cfc62fe0121c66e50b88d1090ced5c72b0bcf9834bf4784a4eb1b5748de4eebbd378ace196c9eac123034367694b5479f7f17c5e80e8f5c2b3401afaa1d9de54afa0041d3a58f1bc8b85c0f1065bae35c483f9eb586177b784c49829dfec50b38f1e543d76fe726949cc06740282622d4b8cdfdcf824e97c379bcd8652fb78698fed7770e64fc9f8bb2e7d63c2b52c0e9a09e2e8ff42bc380f20d380dcafa41cd7edcbbf066932a04a82ccf46c30d6f7ba93ffafbf7a420d4d2e23182", 0xd8}, {&(0x7f0000000840)="a0fc7599ae0fee0283fed4b21abbe85ce1bb8c8b4c7fed75c2f7295e38008e8f4b955940d1750743835555e4f0c94319ebf8fd138a9b25d909f314870070dca568e4dc214c93a745e3cec26f34105cd28dbb37d742aa29f604999111d0aaa1d464d90b75b9a73b188196c994cad5c1cc40e36554be211b46c98e902549819600f1689da7df4ef1206c9f80b0af7c810f71afd86de340892bff28d45cb742f19ab8a1268140f3cc595b9540bdd693c78973f37f545800cda2b38b3cc2885b9da07fb47809baaf4ee95858ae83ecc420332b8aa162bf1daed85a18928e9c3fe279d3cb90564d5e06ff1da4a1268c69a21069567ded57407f8e64a0c9c528e395da13e6fa7555f61feaf1f0735aa7cc9913da191bfec915dcb39af0220ebd2b46f1fa902c5628b91ce3037f20b87ff9fa326dbc4a1eb0988c37379882ed2210fe9fcf760ce32e2d1621ab52f679d3eabdaaa55841dc58d371a74c22cc0ca0be43746f1dd45ab24c28a63ac6363a1310449257762a49cbf996d9ca2f30ee58183241a4d7e43d358113c1bab0d2cc5ebc5f5c5904dd90e5544f8f0563c72fc8c56d1e0cd4add98fa9afd9e48d38642a8d091da5883a5a408878704576ec889c247e84c0fec298c0f6acdfd3e7c1b3563da33d1f977961174a0b7a1d590859a08aa96a2e2bcc75074f387791b728a3f357233ec2126945dc64d97e4c67263e255274db014f9a555c3f67132a250809ee4e066a93e0e3c9f8a48ee363adc8d8895e533211b1912a62c5b5676682c75e3a0feb2f9298bfbc4a537c9dd610b82e837a3bc7b049783b8444c290df6468c8b02f7f79490e7007dbd24eeaf38e84797b57e05ea71bf1efec46d6f5a620d4e6c8891a2530fca820daa0c2eb9e63256e3aa1a09027b1b7fbbed23d192f201421b89c311e39a1eb6ed85a5b1cb4ce37d33c3b62c84136262a238c9a335ec8d3fc402598fbd944abef84b8a0b373769e080fcc616df6b1fdf4027ba0f9070f0bb75d5df0bf67265280badb3d756e630d0a34ec3d95a6bd3f59af096a78199d0ab7d6229a1b190699afb6907a379f6614dfe5e5f1dce0e893aa39a9be35148d24fcd2ecdbe8cf81a3f25529e11a9e67e790648cef861e0bea9e79478de63b1231b49daa927ebcb3145048109e1080f811649e1c89befa22ef0c1a50539a4177374497268aa51e2e36cf7b03d32731a82a90ac450a93604383c5fefbbd3fda66e82c46146bbb77c219bb05c8f971e6c82f91110e7b14b65d52d1d9f683c56abe1ca56734d30d4c72cf67934b0975b2b10d3631b63b00944685199cef7c076fab480bbdf9e5082082127efe9534e6552ad474ba83990719ad9e5e3cac5fda7aa9b0b118545eb9e420fac9ee98546a2938fd64cf909f95964c648802cd9df726412f6bc79449979a844d24aeff9870dce0cdd27c4440a6efc7df2959656a5fc4d7cb3f6def0397641a43d432b21a03ab0116c02150709ce6911a64e80209b502601a3ece07c90e1d976d01e885c1aa40446cd23f4715c1aa89291ba0818730c7a89c05bcc15b4cd16468cc71f4cea00167b65c970b018cf4b883930fe316fe4c39b119dfb3af9d74440d7c6a8dde21eda23f728b9a467c6d08ed7b81bb3060f3ad2769a1fd3e0dad75199c2455935ad622ec9f1fa3fb8456c4ad53ac56dbe9da1a7abd66b130840f054e61ecead96f95f325c3629d578c241272ffc5d48ada072a109dfed5a9c903c2cd78feff98fd3d9f17eb53b8e5866a9b1cb99c2bb2848b3d59b50001afd93782bb3ce25de952c65e146ca72a5d8acdc0ae71b14932f738afdc0df8153f19ea9bb664e1f919ddd563e0da0bcf5df948620e464fd3ab2113b7b8741e1210d8c23812d440267878180f6b4f2b0c9d6fcc5cf11c0b53fdda484afb42f4d9622fc74438dfac1ab82796dc8882eaad9d3b34650fa2753029e32d2664884873f4d00d98abd8bdf1feb56534ca16a5cf39cea95ee286c3f7741a331f57dc1d1d18032f8159358c1fccb0590412c5862bbc382f9d8233ec78f0d5d10d6784c6a9481ab28d9429577f7e0d9104ab2603704490c893cb4c5ca92ab3d67d206bd8cd59cf4f3dce77c7bf4671a236bb22ac79e95f265593a76f82c502bb5a457f1f26c632f93903b004a6a0653598748b6c3c02431fbd9b572b5f6458fd0f69d1668c337e0de03fad07e53087210d249791911c58c789f9f31141d493878514f82e6a88411a422bfcdfa43dd559111c8804bda8a72427c115a1dd1e9eb9487b33e474a337f319819f1ba4c3d9bb151d7886348052f6a76d924517797dfe611bf671ee440255783941548f34d5e444e686d9b90fda6227fd94dbc6a600167f72981e6fdd5766165fcb0b84a1b45ea0f1962432dec28c599df9b6144f9459f509ce87e1778d9d9869f427bb18f13d886aff8fc8353dd23620a30d6d7dca46431e8bdab30db8d4d50f35d93bca185516f0ab061f4ac6d73cb94f33f71f391ec9a05d20ea8697d540f2b8fc03dc9b25a8fa64231bab1df7a78daf06e08f7b7faf55da3c9cc111496d1f884205cef94c23d2cc6fbe1957907fdf058192c037b132aa226c3a5b201a9502f7f2a93e12339f7167b114f1f2dc36fbc7279128c813b3c71c89b497e029df63a4738a30e4fcceb5225d42ff71f8a28b32e84d9bfc899823158dc64e6bedad0b4f8b5ef54fe1de3c26c5cee78d6463be881500b1478d9db80598ea91d21375fb3dba533fbf1081cf9da4bbdea9b457336b1e095eeafe59e2e6708661a607c53849146f3be670e277f47c241cacf2ac3ade24519e4617a110b272839943d57d0fde940b23e3ff105ac35a1481b616b75bd22c4e55fe38adf30ec91e227a473172456effa8783e308f2689dc22b6345773de30edd8ada98d2cc00d6b365eaa8cd1e42f85ed217f2ad6594b802d89a514ba7c316db8a5776d8fab9ac88d69945ef7a6c4c803636e6d55569b56998276ae3c7279b8acfa6c781f908e7746eb2bdfe7006dc8f75d61873e33598cf7b79dc5378f03d8e32df366a01baf90c00d51374f921818d5bc09ae2fb4a7aa1e16f4e7a01c9060f27cd5f5d76b914d1002cf90609e2d52d50b58a925bcc34091b5f9d48b9c1bd8f2f9078cb4b41248f3d2c335f74f0fe2e31aff1cd2691af0d9574e74577e618eed3a478bd8e8e2c12671252bee8f6e5826838afe28ea6c825efb6ad211eaa53b0c3a6371a97832386be7cd76826756ce02b39e29431740a8e1afd3e42b285abe94016e48ff16070169c04f9e4c9b9a49df1636138cbc8843a80894cb30de52ad5033649eb6b00c5839015eb44a94b7fc860ebc681895cae48e65a64ead2b9ee401212c0ecb754122ed6fc2686639755653d1a266dc42ac3a953d92b88feee0fd44760db7627bd01a9e4125bd4d7a95d2d13051c6320fdac9e7508c313cd124d95087efb4d09cee02ca39abf7de93c6ce72261c465d897f823fed39cb578830551be8be1fc5af715a21ba955d78fe274bbdefc7bdaf12f612b9eb744e68e09caadf6db222315f2f695cc7055ac3e3dc56ddce1884b29db7ca4e8bd5e4b4038f1f9fb3204203c0d4fd5471716510cc3de4fa1dbb320f4e3411e2203f00e2a170b5b8010d800fb49ea24ee8740c2e3f9895a404e3e53d7b3b23ad5c6c897c70ec3890f7b846c6fe4021867e86a3aac5ea75904f44bf6110c58d0f50b9b98776e20cfbbebcaf76e1b3ec5fd69718941c2b465c4052bc35545164d922c6354797264e03fc5fcf26eaade29940c9639dbf73cd1ec4a1e310adfcfda34356df397fe74e77499de071cdd867327caf84d80199283cbff5440b6cf2888441e7e769584b72c9de9e3bd7ec01c56d6bcd20cbc55127b37d70fd531e3b6911be80cded7bd60b79b05567d85fa2b61f0b22c4e181f97267e81be2d7d80a4d7f50aea5765443cfd2b2c4f0ef43eac8cc1d1b3582e156652af85c46ffc60165b34e45fc022ba42fdd02aa70e6229627e4a555374ff18453cfb81ddfea2aa578fa9c5dcb8a8fce85d0ec8fbcce203c6295d3885b19ebc913bc1bf5e03132809e1df151988e4f00f6aff4c1ee3794483175ddc73b21de45e4c099e8ffc7b789959b33bbc241eedbbf48ca8951d23c55bb2428c013d1e1e00564390feb8bae2e56eb2e0bf942ef6cc300836257941c0635ff02f8a073f17c6d5d34b2b5753bb267cdd8ca5daf76e59b4a69cdc0b94c8fe0f746a94e20deae9f446b457b7d8427960300245c0eabc3959dc034d3792339daaa367ccd47824da83bca778877b2288a06ab3c5f96065a4afa579cec7ec6dbd5872a488d393d22b5f5eef822796ec62ab505e973bdb237724de91722f57021222048acbefb2976611fa5bf5982dc34501259f4bd17ec9c63c082db4f3e1994013ffff721af67e5ac53e870425986ea8aed6ab73c5ea80a68c7dc5df9a0062fd5108e566164cb33fb136b26d13c6ca52a51b5dda9dd9193fee6cd1af8b4655ad87e103fe902d98480c32cb0c6cd0e60031791b23d83be1a71fc1c80d5e9ccd0b5d572d2b5be2c64fd124542c36759aa1685b8bc7f1756fe772b19e329972928113e64f15e7adabc42dc9d2502150bb06802be7cf1e5462db29ba33b6b662b67c0d6cd64c11c8178e1593fa344817520dd1d0016b54d2ed1c5f2d8aae955501a5b06b63014602f2e9609ef9ba858704e5f166f12b1e685afec94942ad00e7a3434958226b4380ed9eaefbde66a4131d932e1a1159a39d134f012740c98b92593535b351dd63e115f044bdc64b22848671352eea56d75f236b85e18d96085434eb7a808a0391eb40e346124235dbfa26be224558b598d09fb11fdbedc0df3d2938ad0a6ec2d9a61e563b603ac042359dd5475dbdbc978d05f546d53e87ee60970f5d6a0eccb284cd1d68cf1fcb2076a6beda7260a6005bf2214f1d4337a58b08a1ff34df3dd5e5c3bbe101419abe121bec444f927324d559a050d65eff83f6ac6d490c3d14dd2c64c92ecab8ec71a958252eee2c6a6b089447965bb96386087aa1fdf16a08aa6c99c2ef9a48e1f2407b7e834d113df8b46cb78ffd6b055f4e85046a5c0bd32909524f357d910a75435113734badf3460fca377aa2390608e7b0b84695d6e5d1d877a70ba89fd834be2b099ff9895b3dc985b595be8c8e279031eee3e9a7cdfab98a82ca7573a53ce4c6e04bd917b5dec55265b1e784618cee1c58c2bd1148782046a1ab6bd185eea2722a6e3c564041a36c4a6e59252eb1db75a1d546cfd8b315e7cb33ddd954104d1945e608edc4a7433b598b3eaeb9db8373f7b7cfd886f2c38ba368018a570e6fedadcd5d1f6d06ff15a218b2b0ccd103bf93cd484e2290cd1d55d31bd2bbc069f6ede654301550bec3748af6d817893ea4b57c5c09885d2158657bfa77ffe910a9e30d79b96b7e0a440c847ddcd26484d19f54d25308dba4788a71525d9c560a450530521b1a279be47c096934577d3bbf6e704997bfbb5d9ddfcb64e6811d5ae5829848013bb8bee4c6c49657352d3663db6502facf6e30b2f6449f7902153c862345d504b63645a843dc0d12849cd03800387e346b46cc640161905e3884aa814a62d416b4d59b7f47d8fc256d1847d7a7edc009ba315793a10824a457b3485cbac0cfada727d6817dbcb163e1b8553883d6600c8fbff826816bdd647ab40241964d1085615782849b8f55c2698427a88ab82c1ff90325455112438302f26ee906f17b04e5bfa6b2542b1193c12c67795447e510e29a2ddc3c33aab1f89e2fed8f27dd0", 0x1000}, {&(0x7f0000001840)="f52a782bf322d7ae1c2a927dcb79f4141b6351dc6088ae4707115eef74587de3544c950c041d19302779e116d76e8368c550346c255a5f0d550ee4c9cb3f2c85fa5342b8", 0x44}, {&(0x7f00000018c0)="9980ce373f250ab985271c4610d784975a8b4e7188630f373cae842e3bf94c8509a40f08f41b83dcf8894edc16d1797c7fdf3ab5bd6617a7b00f3deb3aaa657103562c7d049c9e88d5d327ae078c46a1b33417791671b4783c70d396f94a2cbe7e5273094689d9850b2694be3305690c67f35746cee25eb45026de868f03ef168c05b14535e58fd919e342ff750dbb11bf65216b70e7c619c7f6fa3aa477244ee7800ce4db153b7fba771e6320465a40e35ad5f5d25b9c835c577677ad2549d8c0227954f0063f4d", 0xc8}], 0x4, &(0x7f0000001a00)={0x10c, 0x116, 0x5, "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"}, 0x10c, 0x4010004}, {&(0x7f0000001b80)={0x27, r2, 0x0, 0x4, 0x4, 0xc, "9b4ee284303441ce57346348abc1777fec234b2aa3c6ff95086c847d050d0ef835feca2f714dc9f107c216ccc3ad8d46d4f5d2700fee35d41ecc5b619f712e", 0x32}, 0x58, &(0x7f0000001e40)=[{&(0x7f0000001c00)="74b60acabc56a1455a900b8e66e7c8d3d1c440c16a56baee94bfd608d1dd5293685148981139a6566273cbb7fba446089a1016da0f752495e97becdd6ee5c82e6d7a2609d8ce164a9cb54541bd47dab77b76a2f0e49090eb1eb07b252908bcb9bd675e096d9273a6b3fa6f2184c74d679800c6b1a871ab46bb73a3b93b93df7c9087efe46bc9d4ebb2661e554fa7c2e44bfd373d0b5d8ead1fbc30ec21359cb81f2d2fc2c9280ba5c8a462887dccc4377524d94cfaffd4955f8c70d0b0e710efd71caaf2d02de17143b5dfccb79e26ceab106ef49937a266783b30e313d5953517164d6916e3812dfe2e", 0xea}, {&(0x7f0000001d00)="af5f44b193b5f146778718dbb442ae53848dd14aae996095e68ddb81612618139bc6d0e916a4a7b807ae4e18fff25ca1a8f31ae6bc", 0x35}, {&(0x7f0000001d40)="3e8e6c946794b3f330a342f68d2f4666f6ad27f1f92bbc817b699ba2ee25d58739cf1caa1222aad908251313dcd66f560f43dd8aebefa80f3dd6e6abb5185e2b05ec0f9d1cc7d34fa02afc29d1e23d2375835f0e5cbdd7b808322284258a32322f52321816068ff71b2342d121e33f1b7bb1cccadc7cb51fca38ffdcd770c377cafd3a8ca65c63d5b243fd8ae2f90d015762efa335b0ed6410ceccb3fa0ecca5cdb101ae3e42f88997b964d9517b0dd2649a79ad3a503668bd639501f9053f7e961229b1d5834c9c88f44c561eceb60f9941b5a9c091a8db72ea", 0xda}], 0x3, &(0x7f0000001e80)={0xf4, 0x10c, 0x4, "6f4723f88835e13ee3e73134705fb19568e76acf291995d71c27a52afa78bcc6f1f2a9147897ecc90a840f3d589b05b55ea5faf2b90eba3abd8c3bec7f9801e86191a047c4fd415f53c55ddc0c2b96ab4cd19bf399ca1ea792c5f8559e6e96795590d711a7abeb7683b5e6f380ce732598b1a133934d726af377c9cce6d2d914b87cff10cd339b009aa857c53bae04f37474c04a91bdf82bbb0d32c64e810f1e39fdf982b4757ec7555407b61cea07cb866c926b0165e9eb67a075fe15e9135634b4b17867cc7aacb73d50146d7551f77e8b68144aebc935e6d6a7504ddfcb8fa0dd2aa2af"}, 0xf4, 0x4004004}, {&(0x7f0000001fc0)={0x27, r3, 0x1, 0x1, 0x5, 0x2, "78263f7e4d070e397b3a87897154ca0ca236a9a0d9c687df2c8fe556dfee053d3b873e12ea0d043ea44cc4ac81351454c834daaf3be51e71927396a1f53a52", 0x11}, 0x58, &(0x7f0000003400)=[{&(0x7f0000002040)="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", 0x1000}, {&(0x7f0000003040)="d5a8f92950a567ade834e4ed7f98b7831948658bcf230957c8ec7ca695ce2e255e10b4bad1201588e7648cc1c91a808c8c8aaa4c6067765b706779bef30f6159823e2dd4acea5e70e674aff3c3bd5c1a4abb2a30dfda8f2ce7cf348d5056ba90fe550533bd91d390202639fe947cea9ac42d02f10e2495bbb7ad3270e2ae6ce37f", 0x81}, {&(0x7f0000003100)="d223fd83485be60bb3dae8b2b25b3f65351650b881328dc83bd6188c685b9c2b8c22eecb541e77ca277884b568c9726b69927dc463ade279c72ba47d49daed80e6fc5af4f2180aa0dde5b23ba90226edd3b660cf934b21455a1ad60cef5750c9c83945b379fd466bd79628c345fc0a738fb750771797fe9331aefa1d368553437973", 0x82}, {&(0x7f00000031c0)="5b0b0647e36c8226f4f50841f64ecd68a3f765f33a0175e8377824ea9890d31ca6d9911c7ba26db6349c41f8c81b3187553d", 0x32}, {&(0x7f0000003200)="d48acf2fd608a3aef94419b14880dff077ee47bcab7bf019626c90d3a58c5534e7e7750d043653fd0ccea752ee3d274f430c764a47490d6f7a930a100950dec7a2ae04ad6f7d088655b522428f630f0e4ee01232c1a1e062f3a213c3b5b9c85719d87ce865c63057108475689804db7703def16a41afb2baffca67e48643", 0x7e}, {&(0x7f0000008340)}, {&(0x7f0000003300)="8ae9", 0x2}, {&(0x7f0000003340)="339488f1dea128824d7f4c831c01c30cb70bf4be23949d7292ad92878e5e14895c034f54146959f0fe506f639b0c5aacb67370786f8d7b2853833e95ff724d9741e6fb2057c74ba174c025250cb70130db99d35a5d55d5ba23f9830c5675a11c2b05186a23f762f897d1d26a5f532e38affad0e47ee1c61c9b0183727168d11e40076d8b3fd2d917c3b7787625726494a71845a1bf84f754aa", 0x99}], 0x8, &(0x7f0000003440)={0xfc, 0x107, 0xfffffc01, "a0e21abf75e81f6dd8fc002d8f35b68ac3f62dd8dd6f22a46f07bfe8dc971d6e3510ced91850d1ef1d31e3bd009e5f24dc382f5e496c993c12771630e47023d882a5a782c4e4637ae67b2461b2e1d3f2939ae4e6b7862326699eb3a8ccc56ab93c633be73d250228bf21683f51ad3473a492d9665929f01b5d80d32e04d60e9bb9fe8528af51a41193d09306a58c80f1ee92821e5db842dffff9ede43e02c0d7345aca21018299418c4a28f16f252fef99dab46026819f38a8ff836cea30727b94b415ffaec32bd5b86cfee085547fb73586e2513ee9235e0fb79e7edec3fa77641be073ea60af8dc9bbf787eeac63ad"}, 0xfc, 0x2004c404}], 0x4, 0x8004) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r7, r8, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000035c0)={{0x1, 0x1, 0x18, r1, {r7, 0xee01}}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000003600)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xfffffffc, 0x0, 0xfffffe00, 0xc, 0xda}, &(0x7f00000036c0)=0x98) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f0000003700)={r10, @in6={{0xa, 0x4e23, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}, [0x4, 0x0, 0xfffffffffffffff2, 0x4, 0x2, 0x2, 0xfff, 0xe8, 0x1, 0x2, 0x9, 0x3, 0x10, 0x1ff, 0x6]}, &(0x7f0000003800)=0xfc) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'wg1\x00', @ifru_ivalue=0x8}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8949, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r11, &(0x7f0000000480)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000540)={0x11, 0x5, r12}, 0x14) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f0000000040)) r14 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r14, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 1m9.951124315s ago: executing program 0 (id=2598): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000ffec00450000780000000000119078d60000010000000000004e2000649078020000000300000004000000d465c833e62fb9ae6d3bfe4f782fff81f92dceeb4be0846a8988178bedd8a367fd865b8ee41acb30749c72f62a3c626e5fd9b2c513c19f4533db241f1b007d1078e1eb8f893c171eb092d4e2495ac227"], 0x0) epoll_create1(0x80000) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x121201, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0xffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x4, 0x84, 0x3, 0x8, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2={0xff, 0x5}, 0x20, 0x80, 0x0, 0x4}}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000340)="07000000010000", 0x7) 1m8.734732352s ago: executing program 0 (id=2601): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f0000000800)='1', 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) ioctl(r2, 0xe, &(0x7f0000000140)="103100d852b89b0d2aa4b3f7d7af212fa8d10e80f8082cff063f129722880cb34b553140fa922f932cfb84a3f91b01259448a3d32ad9ae22f5d5e708c5dde338f92d3193d33ed2ba5f5151760062147d7c2163cec69a40fe9cbe4eb0ffaf7167e73ad8e91aacbbf38535fb82a4674ad667bbf44df3d0823de4f18e79c398f382cbcdded77a5328368964da345b06") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000240)=@reiserfs_5={0x0, 0x5, {0x3, 0x1, 0x2, 0x8000}}, &(0x7f0000000280), 0x0) syz_clone3(&(0x7f0000000900)={0x23800100, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x10001}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x80}, @alu={0x7, 0x1, 0x9}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000100)={[{@usrquota}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x38]}}]}) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)={0x24, r6, 0x1, 0x70bdb3, 0x65d7dbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c889}, 0x20000014) 1m7.982640092s ago: executing program 0 (id=2609): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000400)="a2", 0x1}], 0x1}}], 0x1, 0x4) mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) chroot(&(0x7f0000000300)='.\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1m6.788548996s ago: executing program 0 (id=2613): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) ioctl$CDROMREADAUDIO(r1, 0x5392, &(0x7f0000000000)={@lba, 0x1, 0x0, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000180)={@val={0x0, 0xf5}, @void, @eth={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0x67, 0x0, 0x7, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x40}}, "71aeb13098395276"}}}}}, 0x32) 1m6.50128378s ago: executing program 32 (id=2613): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) ioctl$CDROMREADAUDIO(r1, 0x5392, &(0x7f0000000000)={@lba, 0x1, 0x0, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000180)={@val={0x0, 0xf5}, @void, @eth={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0x67, 0x0, 0x7, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x40}}, "71aeb13098395276"}}}}}, 0x32) 7.310626005s ago: executing program 2 (id=2935): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x2, 0x7fc00100}]}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x5, @mcast2, 0x10001}], 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000006500)=[{{&(0x7f00000001c0)=@sco, 0x80, &(0x7f00000075c0)=[{&(0x7f00000002c0)=""/99, 0x63}, {&(0x7f0000000340)=""/50, 0x32}, {&(0x7f00000004c0)=""/169, 0xa9}, {&(0x7f0000000580)=""/176, 0xb0}, {&(0x7f0000002680)=""/2, 0x2}, {&(0x7f0000000380)=""/98, 0x62}, {&(0x7f00000065c0)=""/4096, 0x1000}], 0x7, &(0x7f0000002700)=""/41, 0x29}, 0x2ec6}, {{&(0x7f0000002740)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000003b00)=[{&(0x7f00000027c0)}, {&(0x7f0000007600)=""/100, 0x64}, {&(0x7f0000002880)=""/236, 0xec}, {&(0x7f0000002980)=""/128, 0x80}, {&(0x7f0000002a00)=""/252, 0xfc}, {&(0x7f0000002b00)=""/4096, 0x1000}], 0x6, &(0x7f0000003b40)}, 0x7}, {{0x0, 0x0, &(0x7f0000003e80)=[{&(0x7f0000003b80)=""/171, 0xab}, {&(0x7f0000003c40)=""/67, 0x43}, {&(0x7f0000003cc0)=""/156, 0x9c}, {&(0x7f0000003d80)=""/194, 0xc2}], 0x4, &(0x7f0000003ec0)=""/60, 0x3c}, 0xffff}, {{&(0x7f0000003f00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000005240)=[{&(0x7f0000003f80)=""/25, 0x19}, {&(0x7f0000003fc0)=""/4096, 0x1000}, {&(0x7f0000004fc0)=""/96, 0x60}, {&(0x7f0000005040)=""/81, 0x51}, {&(0x7f00000050c0)=""/87, 0x57}, {&(0x7f0000005140)=""/119, 0x77}, {&(0x7f00000051c0)=""/92, 0x5c}], 0x7, &(0x7f0000005280)=""/190, 0xbe}, 0xb}, {{&(0x7f0000005340)=@hci, 0x80, &(0x7f00000054c0)=[{&(0x7f00000053c0)=""/233, 0xe9}], 0x1, &(0x7f0000005500)=""/4096, 0x1000}, 0x5}], 0x5, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x1, 0xb, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') accept4$inet6(r3, 0x0, 0x0, 0x100000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x4, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) epoll_create1(0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r5) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) socket(0x3, 0x1, 0x38) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f0000000480)=@generic={0x0, 0x2, 0x3e8}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x3, r0, 0x5}) openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) 6.235474293s ago: executing program 2 (id=2944): openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffffda}, 0x1, 0x0, 0x0, 0x40}, 0x4000001) r1 = getpid() pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@ipv6_newnexthop={0x30, 0x68, 0x309, 0x0, 0x1, {}, [@NHA_BLACKHOLE={0x4}, @NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010102}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000300), 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000100)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f0000000340)={r0}) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000003c0)='erofs\x00', 0x1000d, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_clone(0x23180400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0xe) 4.531428078s ago: executing program 2 (id=2953): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) read(r3, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000180)={0x335, @tick=0xe, 0x42, {}, 0x2}) tkill(r2, 0x7) socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000200000008820525004000010203010902"], 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc222, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x55, 0x10, 0xff, "", [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x0, 0x3, {0x9, 0x21, 0xfff9, 0x37, 0x1, {0x22, 0x718}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x6, 0x2}}}}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$video4linux(0x0, 0xd, 0x68c80) ioctl$VIDIOC_S_EDID(r4, 0xc0285629, 0x0) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000040)) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) 3.59932247s ago: executing program 1 (id=2960): r0 = openat$vimc2(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x8, 0x8002}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r6, 0x0, 0x0}, 0x20) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x200000, 0x2) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000406010800000000000000060a0000050500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0x24000000) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x10000008, 0x8001, 0x0, 0xa, 0x8, 0xfffffe0000000001, 0xfa11, 0xfffffff7}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000000400)=[0xe758, 0xf8de], 0x2) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @local, 0xb}, 0x1c) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000180)={0x4, {0x1, 0x5, 0x71, 0x2386}}) 2.636059684s ago: executing program 2 (id=2962): socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="190000000400000004000000020008"], 0x50) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000140)=0x7, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r4 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x4, r5, 0x0, 0x0}) ioctl$MEDIA_REQUEST_IOC_REINIT(r5, 0x7c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r8 = socket$nl_crypto(0x10, 0x3, 0x15) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket(0x22, 0x80000, 0x3fd) listen(r10, 0x1) r11 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000180)='source\x00', &(0x7f00000001c0)='//127.0.0.1/share\x00', 0x0) fchdir(r8) 2.400527046s ago: executing program 1 (id=2964): syz_open_dev$vbi(0x0, 0x0, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x31e7d, 0x51a23}, [@IFLA_MAP={0x24, 0xe, {0x6, 0x800, 0x39, 0x5, 0xe, 0xe}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40800) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2000000002ffff, 0x0) socket$packet(0x11, 0x3, 0x300) write(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x25c2}, {0x0}], 0x2) r3 = syz_open_dev$dri(&(0x7f0000002580), 0x200, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, 0x0) close(r3) r4 = openat$vmci(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000180)=0xa0000) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000040)) 2.269383813s ago: executing program 1 (id=2965): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x0, 0x4, 0x81}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getgid() socket$netlink(0x10, 0x3, 0xf) syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYRES8=r4], 0x3) sendmsg$unix(r2, &(0x7f00000059c0)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000005940)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="180000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="180000000100000002000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0], 0x4c, 0x4000010}, 0x4840) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000340)=@req={0x3, 0xffffffff, 0x3, 0x7}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f750800390005", 0x26) syz_open_dev$tty20(0xc, 0x4, 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/163, 0xa3}, {&(0x7f0000000480)=""/109, 0x6d}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/227, 0xe3}, {&(0x7f0000000180)}, {&(0x7f0000000700)=""/4096, 0x1000}, {0x0}], 0x7) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_addrs=@can}) 2.263408412s ago: executing program 4 (id=2966): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x29, 0xe0, 0x6, 0x8, 0x10, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7, 0x80, 0x7f}}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300), 0x0, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1}}], 0x2, 0x4000001) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a1e00000000", 0x25) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r4, 0x0, 0x0}, 0x1c) recvmmsg(r3, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000026000/0x1000)=nil) read$FUSE(r5, &(0x7f0000003380)={0x2020}, 0x2020) socket(0x10, 0x80003, 0x0) close(0x3) openat$nvram(0xffffff9c, &(0x7f0000000100), 0x40, 0x0) syz_ublk_setup_io_uring(0x1ee0, &(0x7f0000000040)={0x0, 0x7917, 0x1, 0x1, 0x3a1, 0x0, r2}, 0x0, 0x0, 0x0) 2.159130271s ago: executing program 4 (id=2967): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000044c0)=[{{0x0, 0x0, 0x0}, 0x5e}, {{0x0, 0x0, &(0x7f0000001800)=[{0x0}, {&(0x7f0000001e40)=""/200, 0xc8}, {&(0x7f00000015c0)=""/106, 0x6a}, {&(0x7f00000016c0)=""/49, 0x31}, {&(0x7f0000000300)=""/202, 0xca}], 0x5}, 0x7}], 0x2, 0x2022, 0x0) 2.06398631s ago: executing program 4 (id=2968): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001000000000000000000bd00000a28000000000a0103b7360000000000000100000008000240000000020900010073797a310000000054000000030a01020000000000000000010000000900030073797a300000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000014000000110001"], 0xa4}}, 0x0) close(0x4) 1.944814493s ago: executing program 4 (id=2969): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x2) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x2) write$P9_RREADLINK(r2, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) r4 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r4, 0x0, &(0x7f00000002c0)={0x0, 0xfb87, 0x400, 0x3, 0x32c}, &(0x7f0000000740)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2ba7, 0x200, 0x6, 0x15e, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x3, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x4, 0x3, 0x125, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x81, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x40, 0x0, r4, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x0, 0xd3, 0x0, 0x0}}, 0x0) (async) syz_ublk_setup_queues(r4, 0x0, &(0x7f00000002c0)={0x0, 0xfb87, 0x400, 0x3, 0x32c}, &(0x7f0000000740)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2ba7, 0x200, 0x6, 0x15e, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x3, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x4, 0x3, 0x125, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x81, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x40, 0x0, r4, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x0, 0xd3, 0x0, 0x0}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) syz_io_uring_setup(0x110, 0x0, &(0x7f0000000540), &(0x7f0000000500), &(0x7f0000000280)) (async) syz_io_uring_setup(0x110, 0x0, &(0x7f0000000540), &(0x7f0000000500), &(0x7f0000000280)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) close(r7) r8 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, 0x0, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010001fff00000000010000", @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmmsg$unix(r5, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)=""/156, 0x9c}], 0x1}}], 0x2, 0x40000000, 0x0) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 1.765097709s ago: executing program 2 (id=2970): bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000001340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="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", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r0, 0x0, 0x0, 0xffffffffffffff92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1e, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000003002000000000000fcbfffff620191fd000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r4, 0xaea2, 0xf4240) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x80000000000, &(0x7f0000001000/0x1000)=nil}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x200c01, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x50009404, 0x0) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) open$dir(&(0x7f0000000080)='dir0/per_cpu/cpu0/trace\x00', 0x103201, 0x0) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xe, 0x4, 0x8, 0x1}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0xa) 1.528629785s ago: executing program 4 (id=2971): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r1, &(0x7f0000000400)=@abs, &(0x7f00000004c0)=0x6e) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f0000000280)) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc", 0x22) recvmmsg(r4, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf000001000000", @ANYRES32, @ANYBLOB="08000000dd0000000000000000c8d05300000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x591b, &(0x7f0000001240)}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r5, 0x0, 0xa002a0}, 0x38) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x850) 1.322943703s ago: executing program 3 (id=2972): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000280)={0x1, "5660359c32450000000000000000fa00", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000380)={"2486910284ed923431d4c5d5fbf514fd00", r3}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000feffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000002c0)=r4, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200082c00fe8000000000000000000000000000bbfe8000000000000000010000000000aa21000000dbc4ec195234b735508ccd", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0xb, 0x6, 0x100}, 0x3c, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xfbff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x1d98, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x8000004, 0x7, 0x3, 0x20008, 0x4c74, 0x80000000, 0x0, 0x3, 0x40000e, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10080007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x9, 0x4, 0x4, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x2, 0x2ff, 0x6, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x6, 0x1000a, 0x4, 0x5, 0xfffffffe, 0x103, 0x8d2, 0x9, 0x5, 0x7fff, 0xffffffff, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x10006, 0x8, 0xffffffff, 0x86, 0x3, 0x303c, 0x3e7, 0x8b, 0x5, 0x2, 0x5, 0x3, 0x2000000c, 0x2, 0x6d02, 0x6, 0xfffffd57, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x3, 0x6, 0xbe, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000010a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2eb, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1fd, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x0, 0x2, 0x5, 0x1, 0x3, 0x14c, 0x60a7, 0x6, 0x96, 0xfffffffb, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x2, 0x226, 0x9, 0x5, 0x1, 0x30b1d68f, 0xa1f, 0xcb, 0x800, 0x1, 0x6c1b, 0x0, 0x3, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xa77e]}, 0x45c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x12, 0x18}, [@ldst={0x4, 0x3, 0x5, 0x0, 0x2, 0x10}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f00000002c0)=0x3) 1.170290755s ago: executing program 3 (id=2973): socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000100)={0x0, 0x6515427712f0b7dd, &(0x7f0000000380), &(0x7f0000000480)=[0xfffe], &(0x7f0000000440), &(0x7f00000001c0)=[0x8, 0x40, 0x0, 0x9, 0x0]}) (async) r1 = socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000549ab32f6e8ce69980a25297d3eb6505ea70031d0edb53e834d75ce8554b6e758c132fcebc73f1e06a3a66455acd2dcbc3bb13b19d26a30209e304249c36692390dca76fec77d82c9aa14221397d88d46bb1c34ee23a0623a4010306afab3300ae7bc9921057f5e1f4cd4a8c8bc42ae77194c6f0953757ec17de3fa2f6e754d3a5b67d80e8e2c5d330d9777916ecbaf326337903a7f72154b768821ec2f745937c6e1506f9149834683a1dd772112cb9e6b9c5df17c7632706a6c8fff040d6e970f6c000edd43de05033a23c6a", @ANYRES32=r3, @ANYBLOB="14005e8008000200070000000800010000800000"], 0x30}}, 0x0) (async) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) (async) accept4(r1, 0x0, 0x0, 0x80000) (async) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') (async) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r7, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) fanotify_mark(r5, 0x40, 0x8000021, r7, &(0x7f0000000100)='./file0\x00') r8 = socket$inet_tcp(0x2, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xbda8ee4cc7852c63, 0x204031, 0xffffffffffffffff, 0x42791000) (async) bind$inet(r8, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) (async) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r8, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0) (async) recvmmsg(r8, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/140, 0x8c}], 0x1}, 0x80000000}], 0x1, 0x2, 0x0) (async) sendto$inet(r8, &(0x7f0000000900)='P', 0x1, 0x12, 0x0, 0x0) (async) openat$vcs(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) 1.153990057s ago: executing program 1 (id=2974): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[{@xino_on}], [], 0x2f}) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000000)={'pcl812\x00', [0x6, 0x6, 0x2, 0x18f5, 0xf0, 0x2, 0xfd, 0x6, 0x30, 0xb5a, 0xb, 0xb, 0x47, 0x7, 0x8b, 0x101, 0x89f3, 0xd, 0x2, 0x67, 0x1, 0x8, 0xd1, 0xb146, 0xed5, 0xffff, 0x1, 0xafef, 0x8, 0x3, 0x8, 0xa0]}) 1.089056705s ago: executing program 3 (id=2975): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000fc0)={0x20, 0x3, 0x7, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x84) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0x40405514, 0x0) 1.02472669s ago: executing program 3 (id=2976): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000044c0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/200, 0xc8}, {&(0x7f00000015c0)=""/106, 0x6a}, {&(0x7f00000016c0)=""/49, 0x31}, {&(0x7f0000000300)=""/202, 0xca}], 0x5}, 0x7}], 0x1, 0x2022, 0x0) 996.16016ms ago: executing program 3 (id=2977): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtaction={0xfe8, 0x30, 0xffff, 0x70bd2d, 0x20000000, {}, [{0xfd4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x5, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2b9, 0xf, 0x4, 0xfffffff8, 0x2e3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0xf1c, 0x3, 0x0, 0x0, {{0x8}, {0xef4, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xeed, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xfe8}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3103feffffff000000000800000008000300", @ANYRES32=r5, @ANYBLOB="090006"], 0x2c}, 0x1, 0x0, 0x0, 0x22004094}, 0x4080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0x871a15abc695f91d, 0x0, 0x35dfdbfe, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xe106, 0x5, 0x2, 0x9, 0xb3}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r6, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="060020ff", @ANYRES16=r1, @ANYBLOB="200228bd7000fedbdf2545000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000887}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000000008000340000000570800024000000001080006402000000208000840000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x4) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r10, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) clock_settime(0xffffffea, &(0x7f0000000100)={0x77359400}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r11, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB="0600cd00000000006c003300802009000802110000010802110000005050505050505f00ff"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 801.084637ms ago: executing program 3 (id=2978): socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="190000000400000004000000020008"], 0x50) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000140)=0x7, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r4 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x4, r5, 0x0, 0x0}) ioctl$MEDIA_REQUEST_IOC_REINIT(r5, 0x7c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r8 = socket$nl_crypto(0x10, 0x3, 0x15) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket(0x22, 0x80000, 0x3fd) listen(r10, 0x1) r11 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000180)='source\x00', &(0x7f00000001c0)='//127.0.0.1/share\x00', 0x0) fchdir(r8) 500.073904ms ago: executing program 4 (id=2979): mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./sys\x00', &(0x7f0000000d00)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/platform/drivers/vivid/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='vivid.0\x00', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/bus/platform/drivers/vimc/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000a00)='vimc.0\x00', 0x7) personality(0x400000) socket(0x8, 0x3, 0x0) syz_open_dev$dvb_demux(0x0, 0x0, 0x41) mkdir(&(0x7f0000000140)='./control\x00', 0x111) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000200)={'raw\x00', 0x0, [0x1, 0x7000000, 0xb67, 0x4, 0x7e]}, &(0x7f0000000180)=0x54) r3 = syz_io_uring_setup(0xdc5, &(0x7f00000001c0)={0x0, 0xa64d, 0x20000, 0x2, 0x239}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x56b3, 0x1401, 0x3, 0xde, 0x0, r3}, &(0x7f0000000380), &(0x7f0000000280), &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000c00)='./sys\x00', &(0x7f0000000d00)='sysfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/platform/drivers/vivid/unbind\x00', 0x1, 0x0) (async) write(r0, &(0x7f0000000800)='vivid.0\x00', 0x8) (async) openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/bus/platform/drivers/vimc/unbind\x00', 0x1, 0x0) (async) write(r1, &(0x7f0000000a00)='vimc.0\x00', 0x7) (async) personality(0x400000) (async) socket(0x8, 0x3, 0x0) (async) syz_open_dev$dvb_demux(0x0, 0x0, 0x41) (async) mkdir(&(0x7f0000000140)='./control\x00', 0x111) (async) unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000200)={'raw\x00', 0x0, [0x1, 0x7000000, 0xb67, 0x4, 0x7e]}, &(0x7f0000000180)=0x54) (async) syz_io_uring_setup(0xdc5, &(0x7f00000001c0)={0x0, 0xa64d, 0x20000, 0x2, 0x239}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) (async) syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x56b3, 0x1401, 0x3, 0xde, 0x0, r3}, &(0x7f0000000380), &(0x7f0000000280), &(0x7f0000000180)) (async) 499.337293ms ago: executing program 2 (id=2980): r0 = openat$sndseq(0xffffff9c, &(0x7f0000000040), 0x22100) r1 = socket(0x2b, 0x1, 0x1) listen(r1, 0x5) accept4$vsock_stream(r1, 0x0, 0x0, 0x800) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x1800087}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x1800087}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f00000001c0)=0x7ff, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) (async) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) getpid() (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) (async) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) migrate_pages(r3, 0x4, &(0x7f0000000080)=0xce, &(0x7f0000000100)=0x5) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000040)={0x5, 0x8}) r5 = socket$inet_udp(0x2, 0x2, 0x0) vmsplice(r5, &(0x7f00000014c0)=[{&(0x7f0000000280)}, {&(0x7f0000000340)="9e323f62ee0f7263025ee62b72c80000000000008e6dc40335239db4ef173ad5be3da0afaa1833c1", 0x28}, {&(0x7f00000003c0)="c0e50b461d049363f144", 0xa}, {&(0x7f00000004c0)="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", 0xf00}], 0x4, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000140)={{0x0, 0x1}, {0xf, 0xfc}}) 160.711596ms ago: executing program 1 (id=2981): openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$kcm(0x21, 0x7, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) close(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x880240, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0xb3b54c18e0590239, 0x0, &(0x7f0000bbdffc)) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000ac0)={0x0, 0xb04, 0x4000, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc00c9207, &(0x7f0000000440)={&(0x7f0000000400)=[0x0, 0x0, 0x0], 0x3, 0x4}) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f00000005c0)={0x7, 0x8, 0x7, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)=[{0x0, 0x1ff, 0x3}]}) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, &(0x7f00000004c0)="dd2c0030", 0x1d, 0x20080010, &(0x7f00000001c0)={0x11, 0x8100, 0x0, 0x1, 0x6, 0x6, @remote}, 0x14) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = dup(0xffffffffffffffff) timer_create(0x1, &(0x7f00000007c0)={0x0, 0x36, 0x4, @thr={&(0x7f0000000680)="cefd57e0948747e710375b7c3d92cf4bc95a3d2df4169f335e2b77990c7217e58fa79c8b230c0349", &(0x7f00000006c0)="baa38fe94d07ab548504e675023a8abf6235c83201a35722a9b9e020c3cdbc8aeb7d965f7e7dadd5b8876e25e916b34ddb4563b503d7babbb831bf43f8d7bc996d0b94c0afa14abd879acf0d7b90f86efe444f6865e2cb1dbadc93073d3e78e91764f68bbcd5f3a7650b1ae0ea8d6f035236274d1aefbb61391cf14ae6dd572dfa8d04d0dd52f417e89718eb4b8740bda720d4de1ba4c779ab3226dc94a7143ca405f6b5d852fd86fd989cce5c6cf28eb1cbe1a991e450fd51ac6995b44a8fc15ce5ca897c65ad4089075bb4df0f291b"}}, &(0x7f0000000a80)) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r9, &(0x7f0000000600)="1a9d5251ea424d81132002822a25192e86d4b3b87c02f104f1af420f16e270d0fb6bd30f8adff06c47d771eb03e47cbd9aef480eed9ac6110dd13f2eb6dc34a22626125ae3232264e8ad58f470f6175ad15d6aba37b1071f7baa6d1ab0c753efe4eb418b64ef6fb6a1ceebe1cebe7edd", 0x70, 0x0, &(0x7f0000000200)={0xa, 0x4e22, 0xfffffffd, @private2}, 0x1c) sendto$inet6(r9, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) symlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0\x00') shutdown(r9, 0x1) openat$vcs(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x80000000}, 0xc) writev(0xffffffffffffffff, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x1}], 0x1) syz_ublk_setup_queues(r8, r7, &(0x7f0000000b40)={0x0, 0xae0c, 0x800, 0x1, 0x245}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffd, 0x2, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x100, 0xfffffffe, 0x146, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf913, 0x4000, 0x0, 0x297, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x1, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0xb0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 0s ago: executing program 1 (id=2982): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000240)={0x11, 0xe, 0x0, 0x1, 0x0, 0x6, @random="09003e41efd4"}, 0x14) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x34900, 0x42) write(r3, &(0x7f0000001000)='rd', 0x2) kernel console output (not intermixed with test programs): (1785300997.287:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13823 comm="syz.0.2290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 440.469900][ T42] audit: type=1326 audit(1785300997.296:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13823 comm="syz.0.2290" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70befec code=0x7ffc0000 [ 440.476535][ T42] audit: type=1326 audit(1785300997.296:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13823 comm="syz.0.2290" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70bf017 code=0x7ffc0000 [ 440.483980][ T42] audit: type=1326 audit(1785300997.296:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13823 comm="syz.0.2290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 440.496651][ T42] audit: type=1326 audit(1785300997.306:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13823 comm="syz.0.2290" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70befec code=0x7ffc0000 [ 440.520754][T13859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.527239][T13859] batadv_slave_1: left promiscuous mode [ 440.531845][T13859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.557596][T13859] veth1_vlan: left promiscuous mode [ 440.564835][T13859] vlan0: left promiscuous mode [ 440.567736][T12725] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 440.571197][T13859] veth1_vlan: entered promiscuous mode [ 440.577350][T13859] tipc: Resetting bearer [ 440.583901][T13859] veth1_macvtap: left promiscuous mode [ 440.587058][T13859] veth0_macvtap: left promiscuous mode [ 440.589759][T12725] usb 8-1: device descriptor read/8, error -71 [ 440.589882][T13859] veth0_macvtap: entered promiscuous mode [ 440.595799][T13859] veth1_macvtap: entered promiscuous mode [ 440.603107][T13859] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 440.606750][T13859] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 440.609964][T13859] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 440.613189][T13859] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 440.620546][T13859] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 440.624543][T13859] 8021q: adding VLAN 0 to HW filter on device bond1 [ 440.628191][T13859] 8021q: adding VLAN 0 to HW filter on device bond2 [ 440.631108][T13859] bridge1: left promiscuous mode [ 440.642991][ T3270] team_slave_0: entered promiscuous mode [ 440.646164][ T3270] team_slave_1: entered promiscuous mode [ 440.648213][ T3270] bond_slave_0: entered promiscuous mode [ 440.651086][ T3270] bond_slave_1: entered promiscuous mode [ 440.652958][ T3270] veth0_to_bond: entered promiscuous mode [ 440.659630][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.662174][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.675120][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.677785][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.706862][T12725] usb usb8-port1: unable to enumerate USB device [ 441.211920][T13871] overlayfs: failed to resolve './file1': -2 [ 441.257747][T13872] binder: 13865:13872 ioctl c0306201 800004c0 returned -14 [ 441.266505][T13872] binder: 13865:13872 ioctl c0306201 800001c0 returned -14 [ 441.277566][T13873] IPv6: addrconf: prefix option has invalid lifetime [ 441.737404][ T7621] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.748730][ T7621] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.763554][ T7621] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.784361][ T7621] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.795156][ T7621] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.807541][ T7621] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.820578][ T7621] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.833652][ T7621] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.319319][ T5748] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 442.750004][ T847] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 442.908073][ T847] usb 6-1: device descriptor read/64, error -71 [ 443.146296][T11936] wlan1: Trigger new scan to find an IBSS to join [ 443.188394][ T847] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 443.346110][ T847] usb 6-1: device descriptor read/64, error -71 [ 443.498451][ T847] usb usb6-port1: attempt power cycle [ 443.869732][ T847] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 443.903219][ T847] usb 6-1: device descriptor read/8, error -71 [ 444.113844][T13921] overlayfs: missing 'lowerdir' [ 444.190692][ T847] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 444.213030][ T847] usb 6-1: device descriptor read/8, error -71 [ 444.332795][ T847] usb usb6-port1: unable to enumerate USB device [ 444.778820][T13928] netlink: 'syz.2.2317': attribute type 10 has an invalid length. [ 444.968004][T13934] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2320'. [ 445.630913][T13950] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2325'. [ 445.886458][T13958] overlayfs: missing 'lowerdir' [ 446.523942][ T40] wlan1: Trigger new scan to find an IBSS to join [ 447.024362][T13966] netlink: 'syz.2.2330': attribute type 12 has an invalid length. [ 447.032499][T13966] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2330'. [ 447.216810][ T5763] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 447.378638][ T5763] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 447.460223][T12725] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 447.588473][ T3270] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 447.620490][T12725] usb 6-1: Using ep0 maxpacket: 8 [ 447.623676][T12725] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 447.626294][T12725] usb 6-1: config 0 has no interface number 0 [ 447.628308][T12725] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 447.632209][T12725] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 447.635883][T12725] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 447.639331][T12725] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 447.643819][T12725] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 447.646777][T12725] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.651895][T12725] usb 6-1: config 0 descriptor?? [ 447.662403][T12725] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 447.748819][ T5963] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 447.751347][ T3270] usb 5-1: Using ep0 maxpacket: 8 [ 447.754437][ T3270] usb 5-1: no configurations [ 447.756028][ T3270] usb 5-1: can't read configurations, error -22 [ 447.887802][ T3270] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 447.890280][ T5963] usb 7-1: device descriptor read/64, error -71 [ 447.943117][T12725] usb 6-1: USB disconnect, device number 33 [ 447.945172][ C0] ldusb 6-1:0.55: usb_submit_urb failed (-19) [ 447.953706][T13977] ldusb 6-1:0.55: Couldn't submit interrupt_out_urb -19 [ 447.962043][T12725] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 448.017642][T13991] overlayfs: conflicting lowerdir path [ 448.047935][ T3270] usb 5-1: Using ep0 maxpacket: 8 [ 448.050317][ T3270] usb 5-1: no configurations [ 448.051859][ T3270] usb 5-1: can't read configurations, error -22 [ 448.056038][ T3270] usb usb5-port1: attempt power cycle [ 448.144287][ T5963] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 448.284155][ T5963] usb 7-1: device descriptor read/64, error -71 [ 448.401113][ T5963] usb usb7-port1: attempt power cycle [ 448.411512][ T3270] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 448.507047][ T3270] usb 5-1: Using ep0 maxpacket: 8 [ 448.509212][ T3270] usb 5-1: no configurations [ 448.510916][ T3270] usb 5-1: can't read configurations, error -22 [ 448.590582][T13999] 9pnet_virtio: no channels available for device syz [ 448.646570][ T3270] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 448.656237][T14000] Invalid ELF header magic: != ELF [ 448.732996][ T3270] usb 5-1: Using ep0 maxpacket: 8 [ 448.736123][ T3270] usb 5-1: no configurations [ 448.738129][ T3270] usb 5-1: can't read configurations, error -22 [ 448.741081][ T3270] usb usb5-port1: unable to enumerate USB device [ 448.886699][T14000] overlayfs: overlapping lowerdir path [ 448.900661][ T5963] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 448.925773][ T5963] usb 7-1: device descriptor read/8, error -71 [ 449.180694][ T5963] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 449.202637][ T5963] usb 7-1: device descriptor read/8, error -71 [ 449.335244][ T5963] usb usb7-port1: unable to enumerate USB device [ 449.408189][T14003] overlayfs: missing 'lowerdir' [ 450.581121][T13332] wlan1: Trigger new scan to find an IBSS to join [ 450.668677][T14022] tipc: Enabled bearer , priority 21 [ 450.775197][T14031] dlm: Unknown command passed to DLM device : 3 [ 450.775197][T14031] [ 451.673928][ T40] wlan1: Creating new IBSS network, BSSID da:a3:81:42:6c:16 [ 451.948163][ T847] tipc: Node number set to 3272362670 [ 452.264052][T14054] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2352'. [ 452.520795][T14051] macsec0: entered promiscuous mode [ 453.558778][T14090] overlayfs: failed to resolve './file1': -2 [ 454.739167][ T5963] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 454.855744][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 455.155033][T14097] bond2: (slave veth0_to_bond): Releasing active interface [ 455.188482][ T847] IPVS: starting estimator thread 0... [ 455.209888][T14097] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 455.314732][T14106] IPVS: using max 46 ests per chain, 110400 per kthread [ 455.359488][T14113] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2368'. [ 455.366074][T14113] ipvlan0: entered promiscuous mode [ 455.369070][T14113] ipvlan0: left promiscuous mode [ 455.485532][ T5963] usb 5-1: Using ep0 maxpacket: 8 [ 455.489984][ T5963] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 455.493647][T14110] tipc: Started in network mode [ 455.495375][T14110] tipc: Node identity aaaaaaaaaa34, cluster identity 4711 [ 455.497948][ T5963] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 455.499475][T14110] tipc: Enabled bearer , priority 21 [ 455.503995][ T5963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.509366][ T5963] usb 5-1: config 0 descriptor?? [ 455.818455][ T1134] ata1.00: exception Emask 0x0 SAct 0x40000000 SErr 0x0 action 0x6 [ 455.821412][ T1134] ata1.00: waking up from sleep [ 455.823415][ T1134] ata1: hard resetting link [ 455.836925][ T5963] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 456.026294][T14133] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 456.044489][ T5963] usb 5-1: USB disconnect, device number 50 [ 456.044547][ C2] iowarrior 5-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 456.163370][ T1134] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 456.176549][ T1134] ata1.00: configured for UDMA/100 [ 456.183633][ T1134] ata1: EH complete [ 456.703737][ T847] tipc: Node number set to 10398378 [ 457.349176][T14146] netlink: 'syz.1.2377': attribute type 10 has an invalid length. [ 457.407407][T14150] netlink: 'syz.0.2378': attribute type 1 has an invalid length. [ 457.456666][T14153] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2379'. [ 457.476841][T14150] 8021q: adding VLAN 0 to HW filter on device bond4 [ 457.525964][T14158] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2380'. [ 457.534077][T14154] 8021q: adding VLAN 0 to HW filter on device bond4 [ 457.540311][T14154] bond4: (slave gre1): The slave device specified does not support setting the MAC address [ 457.548711][T14154] bond4: (slave gre1): Error -95 calling set_mac_address [ 457.628943][T14164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2383'. [ 457.637102][T14150] 8021q: adding VLAN 0 to HW filter on device bond5 [ 457.652088][T14150] bond4: (slave bond5): Enslaving as an active interface with a down link [ 457.675558][T14150] bond4 (unregistering): (slave bond5): Releasing active interface [ 457.683828][T14150] bond4 (unregistering): Released all slaves [ 457.719944][T14165] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2381'. [ 457.837522][T14169] 9p: Bad value for 'rfdno' [ 457.882639][T14170] netlink: 'syz.0.2384': attribute type 10 has an invalid length. [ 458.114334][ T847] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 458.290420][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 458.297468][ T847] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 458.300715][ T847] usb 6-1: can't read configurations, error -61 [ 458.434829][ T847] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 458.618453][ T847] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 458.620806][ T847] usb 6-1: can't read configurations, error -61 [ 458.622985][ T847] usb usb6-port1: attempt power cycle [ 458.658452][T14177] netlink: 'syz.3.2387': attribute type 10 has an invalid length. [ 458.823141][T14181] netlink: ct family unspecified [ 458.825342][T14181] openvswitch: netlink: Actions may not be safe on all matching packets [ 458.928981][T14184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2389'. [ 458.980463][T14184] syzkaller0: entered promiscuous mode [ 458.982779][T14184] syzkaller0: entered allmulticast mode [ 459.011976][ T847] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 459.048448][ T847] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 459.055041][ T847] usb 6-1: can't read configurations, error -61 [ 459.204241][ T847] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 459.231813][ T847] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 459.237275][ T847] usb 6-1: can't read configurations, error -61 [ 459.242575][ T847] usb usb6-port1: unable to enumerate USB device [ 460.448949][T14202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2391'. [ 460.486946][T14206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2394'. [ 460.490106][T14206] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 460.550657][ T847] usb 8-1: new full-speed USB device number 58 using dummy_hcd [ 460.723611][ T847] usb 8-1: config 0 interface 0 altsetting 22 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 460.727191][ T847] usb 8-1: config 0 interface 0 has no altsetting 0 [ 460.729368][ T847] usb 8-1: New USB device found, idVendor=18d1, idProduct=5050, bcdDevice= 0.00 [ 460.734250][ T847] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.739425][ T847] usb 8-1: config 0 descriptor?? [ 460.741580][T14201] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 460.935569][ T5748] Bluetooth: hci0: command 0x0406 tx timeout [ 460.935942][ T5763] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 461.477036][T14228] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 461.574883][T14228] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 461.578981][T14228] overlayfs: failed to look up (tracing) for ino (-66) [ 462.837837][T14237] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 463.004276][T14241] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 463.086604][T14243] IPv6: addrconf: prefix option has invalid lifetime [ 463.496724][ T847] usbhid 8-1:0.0: can't add hid device: -71 [ 463.498786][ T847] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 463.507286][ T847] usb 8-1: USB disconnect, device number 58 [ 464.132259][T14250] 9pnet_virtio: no channels available for device syz [ 464.149213][T14251] file system registered [ 464.279387][T14258] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2410'. [ 464.335832][T14261] openvswitch: netlink: Message has 158 unknown bytes. [ 464.441017][T14264] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2413'. [ 464.537184][T14266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.607478][T14266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.651411][ T5748] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 464.660048][ T5748] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 464.664618][ T5748] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 464.672854][ T5748] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 464.677081][ T5748] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 464.739294][T14270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.965540][T14280] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 464.974051][ T5748] Bluetooth: hci1: unexpected event for opcode 0x2039 [ 464.978276][T14280] netlink: 'syz.3.2416': attribute type 2 has an invalid length. [ 464.980906][T14280] netlink: 'syz.3.2416': attribute type 2 has an invalid length. [ 465.038377][ T5752] ffs_data_put(): freeing [ 466.159252][T14297] overlay: ./bus is not a directory [ 466.331597][T14302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2421'. [ 466.334798][T14302] netlink: 'syz.0.2421': attribute type 5 has an invalid length. [ 466.352407][T14302] tipc: Enabled bearer , priority 10 [ 466.909031][ T5748] Bluetooth: hci3: command tx timeout [ 467.464584][T14267] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.467939][T14267] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.471210][T14267] bridge_slave_0: entered allmulticast mode [ 467.489841][T14267] bridge_slave_0: entered promiscuous mode [ 467.522028][T14267] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.535509][T14267] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.548689][T14267] bridge_slave_1: entered allmulticast mode [ 467.569860][T14267] bridge_slave_1: entered promiscuous mode [ 467.826350][T14267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.848624][T14267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.911697][T14267] team0: Port device team_slave_0 added [ 468.938680][T14267] team0: Port device team_slave_1 added [ 469.037230][T14267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.041440][T14267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.053422][T14267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.057860][T14267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.060013][T14267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.067786][T14267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.114972][T14267] hsr_slave_0: entered promiscuous mode [ 469.125430][T14267] hsr_slave_1: entered promiscuous mode [ 469.132941][T14267] debugfs: 'hsr0' already exists in 'hsr' [ 469.138454][T14267] Cannot create hsr debugfs directory [ 469.143998][ T5763] Bluetooth: hci3: command tx timeout [ 469.693910][T14267] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.069260][T14267] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.145093][T14267] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.146567][T14366] overlayfs: failed to resolve './file1': -2 [ 470.207680][T14368] PM: suspend entry (deep) [ 470.292523][ T13] Filesystems sync: 0.070 seconds [ 470.926538][T14368] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 470.929005][T14368] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 471.358595][ T5763] Bluetooth: hci3: command 0x040f tx timeout [ 471.393472][T14368] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 471.398192][T14368] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 471.402001][T14368] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 471.405185][T14368] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 471.408739][T14383] binder: 14382:14383 ioctl c0306201 0 returned -14 [ 471.416817][T14368] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 471.422328][T14368] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 471.426355][T14368] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 471.429367][T14368] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 471.435002][T14368] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 471.438488][T14368] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 471.443340][T14368] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 471.445275][T14368] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 471.448728][T14368] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 471.472839][T14368] Freezing user space processes [ 471.543529][T14368] Freezing user space processes completed (elapsed 0.063 seconds) [ 471.546588][T14368] OOM killer disabled. [ 471.547896][T14368] Freezing remaining freezable tasks [ 471.556332][T14368] Freezing remaining freezable tasks completed (elapsed 0.006 seconds) [ 471.561997][T14368] printk: Suspending console(s) (use no_console_suspend to debug) [ 471.750734][T14368] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 471.750784][T14368] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 471.750822][T14368] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 471.751631][T14368] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 471.751677][T14368] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 471.751717][T14368] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 471.751758][T14368] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 471.751798][T14368] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 471.751837][T14368] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 471.751881][T14368] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 471.751922][T14368] vhci_hcd vhci_hcd.2: We have 1 active connection. Do not suspend. [ 471.751933][T14368] vhci_hcd vhci_hcd.2: PM: dpm_run_callback(): platform_pm_suspend returns -16 [ 471.752189][T14368] vhci_hcd vhci_hcd.2: PM: failed to suspend: error -16 [ 471.756119][T14368] PM: Some devices failed to suspend, or early wake event detected [ 471.979270][T14368] OOM killer enabled. [ 471.980549][T14368] Restarting tasks: Starting [ 471.996969][T14368] Restarting tasks: Done [ 471.999838][T14368] random: crng reseeded on system resumption [ 472.002319][T14368] PM: suspend exit [ 472.179034][T14267] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 472.188153][T14267] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 472.192528][T14267] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 472.197296][T14267] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 472.201744][T14267] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 472.210723][T14267] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 472.214367][T14267] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 472.219097][T14267] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 472.270904][T14267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.283294][T14267] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.289812][T14415] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.292055][T14415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.300273][T14415] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.302545][T14415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.369497][ T9] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 472.531289][ T9] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 472.538755][ T9] usb 5-1: config 0 has no interface number 0 [ 472.544851][ T9] usb 5-1: config 0 interface 120 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 472.555792][ T9] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 472.563699][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.575500][ T9] usb 5-1: config 0 descriptor?? [ 472.589583][ T3270] usb usb40-port1: attempt power cycle [ 472.591552][ T24] usb usb42-port1: attempt power cycle [ 472.594797][T12725] usb usb38-port1: attempt power cycle [ 472.804060][T14448] usb 5-1: USB disconnect, device number 51 [ 472.844869][T14463] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 472.967181][T14267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.001213][T14267] veth0_vlan: entered promiscuous mode [ 473.007222][T14267] veth1_vlan: entered promiscuous mode [ 473.064145][ T5763] Bluetooth: hci1: command 0x0406 tx timeout [ 473.192803][ T24] usb usb42-port1: unable to enumerate USB device [ 473.214167][T12725] usb usb38-port1: unable to enumerate USB device [ 473.320607][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 473.506901][ T3270] usb usb40-port1: unable to enumerate USB device [ 473.583036][ T5763] Bluetooth: hci4: command 0x0405 tx timeout [ 473.585135][ T5748] Bluetooth: hci2: command 0x0406 tx timeout [ 473.662509][ T5763] Bluetooth: hci3: command 0x040f tx timeout [ 473.984352][T14267] veth0_macvtap: entered promiscuous mode [ 473.992753][T14267] veth1_macvtap: entered promiscuous mode [ 474.002465][T14267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.006752][T14267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.025799][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.058454][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.080601][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.083288][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.199659][T14415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.209048][T14415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.260375][T14387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.264748][T14482] syzkaller0: entered promiscuous mode [ 474.267271][T14482] syzkaller0: entered allmulticast mode [ 474.269005][T14387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.580103][T14495] FAULT_INJECTION: forcing a failure. [ 474.580103][T14495] name failslab, interval 1, probability 0, space 0, times 0 [ 474.586307][T14495] CPU: 2 UID: 0 PID: 14495 Comm: syz.1.2452 Tainted: G L syzkaller #0 PREEMPT(full) [ 474.586326][T14495] Tainted: [L]=SOFTLOCKUP [ 474.586329][T14495] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 474.586342][T14495] Call Trace: [ 474.586353][T14495] [ 474.586358][T14495] dump_stack_lvl+0x100/0x190 [ 474.586419][T14495] should_fail_ex.cold+0x5/0xa [ 474.586432][T14495] should_failslab+0xc2/0x120 [ 474.586449][T14495] __kmalloc_cache_noprof+0x91/0x6c0 [ 474.586464][T14495] ? dev_ingress_queue_create+0x11e/0x1f0 [ 474.586518][T14495] dev_ingress_queue_create+0x11e/0x1f0 [ 474.586534][T14495] tc_modify_qdisc+0xad1/0x2120 [ 474.586557][T14495] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 474.586582][T14495] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 474.586596][T14495] rtnetlink_rcv_msg+0x3c9/0xe90 [ 474.586614][T14495] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 474.586633][T14495] ? __lock_acquire+0x49f/0x1a40 [ 474.586653][T14495] netlink_rcv_skb+0x159/0x420 [ 474.586671][T14495] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 474.586688][T14495] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 474.586704][T14495] ? netlink_deliver_tap+0x1ae/0xcc0 [ 474.586718][T14495] netlink_unicast+0x585/0x850 [ 474.586732][T14495] ? __pfx_netlink_unicast+0x10/0x10 [ 474.586747][T14495] netlink_sendmsg+0x8b0/0xda0 [ 474.586766][T14495] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.586780][T14495] ? apparmor_socket_sendmsg+0x15b/0x270 [ 474.586815][T14495] ____sys_sendmsg+0xa4d/0xbe0 [ 474.586830][T14495] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.586843][T14495] ? __pfx_____sys_sendmsg+0x10/0x10 [ 474.586861][T14495] ___sys_sendmsg+0x190/0x1e0 [ 474.586874][T14495] ? __pfx____sys_sendmsg+0x10/0x10 [ 474.586892][T14495] ? find_held_lock+0x2b/0x80 [ 474.586914][T14495] __sys_sendmsg+0x160/0x210 [ 474.586929][T14495] ? __pfx___sys_sendmsg+0x10/0x10 [ 474.586947][T14495] ? __pfx_ksys_write+0x10/0x10 [ 474.586961][T14495] __do_fast_syscall_32+0xe7/0x970 [ 474.586980][T14495] ? lockdep_hardirqs_on+0x78/0x100 [ 474.586998][T14495] do_fast_syscall_32+0x32/0x70 [ 474.587012][T14495] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 474.587025][T14495] RIP: 0023:0xf7f04fec [ 474.587039][T14495] Code: Unable to access opcode bytes at 0xf7f04fc2. [ 474.587049][T14495] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 474.587060][T14495] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001340 [ 474.587067][T14495] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 474.587073][T14495] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 474.587078][T14495] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 474.587085][T14495] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 474.587098][T14495] [ 475.309365][ T5763] Bluetooth: hci1: command 0x0406 tx timeout [ 475.591813][T14507] block2mtd: error: cannot open device i [ 475.591813][T14507] Ҏїew3W`# [ 475.591813][T14507] GMPH};&Z@Af!Yr [ 475.842427][ T5763] Bluetooth: hci4: command 0x0405 tx timeout [ 475.885213][ T5763] Bluetooth: hci3: command 0x040f tx timeout [ 475.909253][ T5748] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 475.922188][ T5748] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 475.925943][ T5748] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 475.929780][ T5748] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 475.938240][ T5748] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 476.010639][T14518] netlink: 'syz.1.2457': attribute type 10 has an invalid length. [ 476.232951][ T5963] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 476.398384][ T5963] usb 7-1: Using ep0 maxpacket: 16 [ 476.403739][ T5963] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.412793][ T5963] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 476.422414][ T5963] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 476.425414][ T5963] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.434133][ T5963] usb 7-1: config 0 descriptor?? [ 476.669179][T14516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.679042][T14516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.718957][T14534] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 476.721046][T14534] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 476.760164][T14534] vhci_hcd vhci_hcd.0: Device attached [ 476.934436][T14543] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2462'. [ 476.956926][T14534] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 477.039482][T14448] usb 44-1: SetAddress Request (6) to port 0 [ 477.043926][T14448] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 477.088050][T14413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.092224][T14413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.103170][ T5963] usbhid 7-1:0.0: can't add hid device: -71 [ 477.107175][ T5963] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 477.121019][ T5963] usb 7-1: USB disconnect, device number 57 [ 477.177321][T14512] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.184668][T14512] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.191133][T14512] bridge_slave_0: entered allmulticast mode [ 477.196819][T14512] bridge_slave_0: entered promiscuous mode [ 477.206431][T14512] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.210839][T14512] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.214994][T14512] bridge_slave_1: entered allmulticast mode [ 477.218405][T14512] bridge_slave_1: entered promiscuous mode [ 477.245279][T14512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.250134][T14512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.268870][T14512] team0: Port device team_slave_0 added [ 477.277469][T14512] team0: Port device team_slave_1 added [ 477.297811][T14512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.300168][T14512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.309323][T14512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.313811][T14512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.315963][T14512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.324176][T14512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.359963][T14512] hsr_slave_0: entered promiscuous mode [ 477.362640][T14512] hsr_slave_1: entered promiscuous mode [ 477.364956][T14512] debugfs: 'hsr0' already exists in 'hsr' [ 477.366871][T14512] Cannot create hsr debugfs directory [ 477.512203][ T5748] Bluetooth: hci1: command 0x0406 tx timeout [ 477.552862][T14535] vhci_hcd: connection reset by peer [ 477.554849][ T5827] vhci_hcd vhci_hcd.3: stop threads [ 477.557099][ T5827] vhci_hcd vhci_hcd.3: release socket [ 477.564748][ T5827] vhci_hcd vhci_hcd.3: disconnect device [ 477.688466][T14553] block2mtd: error: cannot open device i [ 477.688466][T14553] Ҏїew3W`# [ 477.688466][T14553] GMPH};&Z@Af!Yr [ 477.924546][T14512] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 478.022372][ T5748] Bluetooth: hci4: command 0x0405 tx timeout [ 478.042544][T14512] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 478.045703][T14512] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 478.049867][T14512] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 478.052752][T14512] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 478.062258][T14512] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 478.070894][T14512] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 478.075282][T14512] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 478.107914][ T5748] Bluetooth: hci3: command 0x040f tx timeout [ 478.193527][ T5748] Bluetooth: hci0: command tx timeout [ 478.277489][T14512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.334385][T14512] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.354350][T14387] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.356607][T14387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.365384][T14387] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.369177][T14387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.467926][T14512] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 478.550737][T14579] ubi: mtd0 is already attached to ubi16 [ 478.633630][T14583] block2mtd: error: cannot open device i [ 478.633630][T14583] Ҏїew3W`# [ 478.633630][T14583] GMPH};&Z@Af!Yr [ 478.827094][ T5748] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 478.841835][T14512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.917122][T14512] veth0_vlan: entered promiscuous mode [ 478.931629][T14512] veth1_vlan: entered promiscuous mode [ 478.974654][T14512] veth0_macvtap: entered promiscuous mode [ 478.990770][T14512] veth1_macvtap: entered promiscuous mode [ 479.015807][T14512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.032287][T14512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.057020][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.068309][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.094897][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.101757][ T847] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 479.107759][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.196784][T14415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.205457][T14415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.258725][T14413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.265007][T14413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.283829][ T847] usb 7-1: Using ep0 maxpacket: 8 [ 479.288736][ T847] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 479.299043][ T847] usb 7-1: can't read configurations, error -61 [ 479.444004][ T847] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 479.492340][T14604] FAULT_INJECTION: forcing a failure. [ 479.492340][T14604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.509068][T14604] CPU: 0 UID: 0 PID: 14604 Comm: syz.1.2476 Tainted: G L syzkaller #0 PREEMPT(full) [ 479.509095][T14604] Tainted: [L]=SOFTLOCKUP [ 479.509101][T14604] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 479.509110][T14604] Call Trace: [ 479.509116][T14604] [ 479.509122][T14604] dump_stack_lvl+0x100/0x190 [ 479.509146][T14604] should_fail_ex.cold+0x5/0xa [ 479.509164][T14604] _copy_from_user+0x2e/0xd0 [ 479.509190][T14604] ctrl_cdev_ioctl+0x143/0x400 [ 479.509215][T14604] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 479.509242][T14604] ? __fget_files+0x21f/0x3d0 [ 479.509261][T14604] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 479.509285][T14604] compat_ptr_ioctl+0x6e/0xa0 [ 479.509324][T14604] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 479.509345][T14604] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 479.509371][T14604] __do_fast_syscall_32+0xe7/0x970 [ 479.509392][T14604] ? lockdep_hardirqs_on+0x78/0x100 [ 479.509414][T14604] do_fast_syscall_32+0x32/0x70 [ 479.509435][T14604] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 479.509455][T14604] RIP: 0023:0xf7f04fec [ 479.509473][T14604] Code: Unable to access opcode bytes at 0xf7f04fc2. [ 479.509481][T14604] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 479.509498][T14604] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000040186f40 [ 479.509508][T14604] RDX: 0000000080000440 RSI: 0000000000000000 RDI: 0000000000000000 [ 479.509517][T14604] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 479.509526][T14604] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 479.509536][T14604] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 479.509558][T14604] [ 479.575917][T14606] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 479.585257][T14606] tipc: Started in network mode [ 479.587038][T14606] tipc: Node identity 7a540865fc45, cluster identity 4711 [ 479.589832][T14606] tipc: Enabled bearer , priority 0 [ 479.592730][T14606] syzkaller0: entered promiscuous mode [ 479.594580][T14606] syzkaller0: entered allmulticast mode [ 479.606039][T14603] tipc: Resetting bearer [ 479.651460][T14601] tipc: Resetting bearer [ 479.678896][T14601] tipc: Disabling bearer [ 479.690262][ T847] usb 7-1: Using ep0 maxpacket: 8 [ 479.693922][ T847] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 479.696313][ T847] usb 7-1: can't read configurations, error -61 [ 479.698552][ T847] usb usb7-port1: attempt power cycle [ 479.733489][ T5748] Bluetooth: hci1: command 0x0406 tx timeout [ 479.849285][T14615] netlink: 'syz.1.2480': attribute type 1 has an invalid length. [ 479.868836][T14619] block2mtd: device name too long [ 479.886102][T14615] 8021q: adding VLAN 0 to HW filter on device bond1 [ 479.925244][T14615] bond1: (slave geneve2): making interface the new active one [ 479.939264][T14615] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 479.945418][ T5827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.948302][ T5827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.951162][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.953946][ T5827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.957691][T14621] netlink: 'syz.3.2482': attribute type 1 has an invalid length. [ 480.005712][T14621] 8021q: adding VLAN 0 to HW filter on device bond2 [ 480.013353][T14621] bond1: (slave bond2): making interface the new active one [ 480.016668][T14621] bond1: (slave bond2): Enslaving as an active interface with an up link [ 480.063328][ T847] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 480.097702][ T847] usb 7-1: Using ep0 maxpacket: 8 [ 480.101207][ T847] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 480.103805][ T847] usb 7-1: can't read configurations, error -61 [ 480.126775][T14626] bond1: (slave gretap2): Enslaving as a backup interface with an up link [ 480.133435][T14621] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2482'. [ 480.138804][T14621] bond1: entered promiscuous mode [ 480.140434][T14621] bond2: entered promiscuous mode [ 480.146887][T14621] bond1: entered allmulticast mode [ 480.148563][T14621] bond2: entered allmulticast mode [ 480.151159][T14621] 8021q: adding VLAN 0 to HW filter on device bond1 [ 480.320448][ T5748] Bluetooth: hci4: command 0x0405 tx timeout [ 480.334722][T14628] netlink: 'syz.1.2483': attribute type 10 has an invalid length. [ 480.348421][ T5748] Bluetooth: hci3: command 0x040f tx timeout [ 480.413587][T14631] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2484'. [ 480.420933][T14631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2484'. [ 480.423878][T14631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2484'. [ 480.427295][ T5748] Bluetooth: hci0: command tx timeout [ 480.459072][ T847] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 480.474289][T14635] netlink: 'syz.0.2486': attribute type 9 has an invalid length. [ 480.476789][T14635] netlink: 'syz.0.2486': attribute type 1 has an invalid length. [ 480.479205][T14635] netlink: 'syz.0.2486': attribute type 8 has an invalid length. [ 480.491363][ T847] usb 7-1: Using ep0 maxpacket: 8 [ 481.081320][ T847] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 481.322623][ T847] usb 7-1: can't read configurations, error -61 [ 481.324905][ T847] usb usb7-port1: unable to enumerate USB device [ 481.501247][T14649] block2mtd: device name too long [ 481.572742][T14652] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 481.576361][T14652] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 481.579293][T14652] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 481.582556][T14652] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 481.590823][T14652] netlink: 'syz.1.2492': attribute type 12 has an invalid length. [ 481.993630][T14663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2495'. [ 482.005838][T14663] hsr_slave_1 (unregistering): left promiscuous mode [ 482.469549][T14448] usb 44-1: device descriptor read/8, error -110 [ 482.638987][ T5748] Bluetooth: hci0: command tx timeout [ 482.758545][T14679] netlink: 'syz.3.2497': attribute type 10 has an invalid length. [ 482.896252][T14448] usb usb44-port1: attempt power cycle [ 482.976150][T14681] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2498'. [ 483.029228][T14683] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2499'. [ 483.098460][T14685] block2mtd: error: cannot open device i [ 483.098460][T14685] Ҏїew3W`# [ 483.098460][T14685] GMPH};&Z@Af!YrU1D [ 483.196416][ T5748] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 483.298861][T14698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2504'. [ 483.537335][T14448] usb usb44-port1: unable to enumerate USB device [ 483.686392][T14480] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 484.679734][T14480] usb 7-1: Using ep0 maxpacket: 8 [ 484.861672][ T5763] Bluetooth: hci0: command tx timeout [ 484.970374][T14717] block2mtd: error: cannot open device i [ 484.970374][T14717] Ҏїew3W`# [ 484.970374][T14717] GMPH};&Z@Af!YrU1D [ 485.145086][T14720] netlink: 'syz.3.2511': attribute type 1 has an invalid length. [ 485.155989][T14720] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2511'. [ 485.225937][T14480] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 485.230433][T14480] usb 7-1: can't read configurations, error -61 [ 485.394204][T14480] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 485.414932][T14731] Bluetooth: MGMT ver 1.23 [ 485.581797][T14480] usb 7-1: Using ep0 maxpacket: 8 [ 485.586937][T14480] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 485.595433][T14480] usb 7-1: can't read configurations, error -61 [ 485.604740][T14480] usb usb7-port1: attempt power cycle [ 485.614480][T14735] netlink: 'syz.0.2515': attribute type 10 has an invalid length. [ 485.899101][T14745] block2mtd: error: cannot open device i [ 485.899101][T14745] Ҏїew3W`# [ 485.899101][T14745] GMPH};&Z@Af!YrU1D [ 485.985242][T14480] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 486.007153][T14480] usb 7-1: Using ep0 maxpacket: 8 [ 486.018070][T14480] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 486.031131][T14480] usb 7-1: can't read configurations, error -61 [ 486.186569][T14480] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 486.208577][T14480] usb 7-1: Using ep0 maxpacket: 8 [ 486.216760][T14480] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 486.226437][T14480] usb 7-1: can't read configurations, error -61 [ 486.232117][T14480] usb usb7-port1: unable to enumerate USB device [ 486.344393][T14754] netlink: 'syz.1.2521': attribute type 1 has an invalid length. [ 486.364414][T14757] netlink: 'syz.3.2522': attribute type 1 has an invalid length. [ 486.383095][T14754] 8021q: adding VLAN 0 to HW filter on device bond2 [ 486.431535][T14757] 8021q: adding VLAN 0 to HW filter on device bond3 [ 486.463383][T14754] macvlan2: entered promiscuous mode [ 486.475765][T14754] macvlan2: entered allmulticast mode [ 486.515679][T14765] bond2: (slave ip6gretap1): making interface the new active one [ 486.524730][T14765] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 486.701869][T14775] IPv6: addrconf: prefix option has invalid lifetime [ 486.972112][T14795] netlink: 'syz.1.2530': attribute type 1 has an invalid length. [ 486.981046][T14795] netlink: 'syz.1.2530': attribute type 1 has an invalid length. [ 486.984773][T14795] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2530'. [ 487.597106][ T5760] Bluetooth: hci0: command 0x0c1a tx timeout [ 487.600291][ T5763] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 488.044108][T14811] netlink: 'syz.3.2535': attribute type 10 has an invalid length. [ 488.341756][T14821] siw: device registration error -23 [ 488.452018][ T5763] Bluetooth: hci3: command 0x040f tx timeout [ 488.481608][T14832] overlayfs: failed to resolve './file1': -2 [ 488.748015][T14843] sch_tbf: burst 959 is lower than device syzkaller0 mtu (1500) ! [ 488.755695][T14843] syzkaller0: entered promiscuous mode [ 488.761201][T14843] syzkaller0: entered allmulticast mode [ 489.232552][ T3270] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 489.394483][ T3270] usb 7-1: config 0 has no interfaces? [ 489.398789][ T3270] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 489.412579][ T3270] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.424914][ T3270] usb 7-1: config 0 descriptor?? [ 489.473935][T14856] overlayfs: failed to resolve './file1': -2 [ 489.658713][T14837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.673176][T14837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.800764][ T3270] usb 7-1: USB disconnect, device number 66 [ 489.871468][T14867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2556'. [ 489.998163][T14872] netlink: 'syz.3.2554': attribute type 10 has an invalid length. [ 490.193523][T14874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2558'. [ 490.393941][T14882] overlayfs: failed to resolve './file1': -2 [ 491.589115][T14895] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2567'. [ 491.740942][T14909] block2mtd: error: cannot open device i [ 491.740942][T14909] Ҏїew3W`# [ 491.740942][T14909] GMPH};&Z@Af!YrU1D@q [ 491.790460][T14914] overlayfs: failed to resolve './file1': -2 [ 492.085281][T14480] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 492.266912][T14480] usb 5-1: Using ep0 maxpacket: 32 [ 492.271725][T14480] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 492.276765][T14480] usb 5-1: config 0 has no interface number 0 [ 492.283595][T14480] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 492.288339][T14480] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.293828][T14480] usb 5-1: Product: syz [ 492.296798][T14480] usb 5-1: Manufacturer: syz [ 492.300756][T14480] usb 5-1: SerialNumber: syz [ 492.311040][T14480] usb 5-1: config 0 descriptor?? [ 492.317156][T14480] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 492.324353][T14480] usb 5-1: selecting invalid altsetting 1 [ 492.328407][T14480] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 492.345406][T14480] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 492.352559][T14480] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 492.366178][T14480] usb 5-1: media controller created [ 492.395828][T14480] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 492.636985][T14923] kvm: apic: phys broadcast and lowest prio [ 492.677674][T14923] e1000e 0000:00:02.0 eth1: removed PHC [ 492.920532][T14923] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 493.101613][T14938] netlink: 'syz.3.2576': attribute type 10 has an invalid length. [ 493.231660][T14947] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 0 out of range (51000..2150000) [ 493.851156][T14480] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 494.083901][T14480] zl10353_read_register: readreg error (reg=127, ret==-110) [ 494.388500][T14480] usb 5-1: USB disconnect, device number 52 [ 494.455775][T14978] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 495.477392][ T42] kauditd_printk_skb: 167 callbacks suppressed [ 495.477447][ T42] audit: type=1804 audit(1785301048.793:1386): pid=15013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2587" name="/newroot/28/file0/file1" dev="overlay" ino=181 res=1 errno=0 [ 495.892743][T14983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.163638][T15026] netlink: 'syz.2.2591': attribute type 10 has an invalid length. [ 496.370370][T15032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2594'. [ 496.394454][T15032] hsr_slave_1 (unregistering): left promiscuous mode [ 496.669652][ T5760] Bluetooth: hci4: command 0x0405 tx timeout [ 496.915230][ T5748] Bluetooth: hci0: command 0x0c1a tx timeout [ 496.919803][ T5763] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 498.096509][T15056] netlink: 'syz.3.2600': attribute type 10 has an invalid length. [ 498.881693][ T5748] Bluetooth: hci4: command 0x0405 tx timeout [ 499.041173][T15082] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 499.043380][T15082] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 499.129375][T15082] vhci_hcd vhci_hcd.0: Device attached [ 499.415843][T14448] usb 42-1: SetAddress Request (18) to port 0 [ 499.852489][T14448] usb 42-1: new SuperSpeed USB device number 18 using vhci_hcd [ 500.288044][ T5748] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 500.300154][ T5748] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 500.308457][ T5748] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 500.317194][ T5748] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 500.323423][ T5748] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 500.324799][T15099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 500.343304][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.448273][T15083] vhci_hcd: connection reset by peer [ 500.451108][T14344] vhci_hcd vhci_hcd.2: stop threads [ 500.453176][T14344] vhci_hcd vhci_hcd.2: release socket [ 500.456021][T14344] vhci_hcd vhci_hcd.2: disconnect device [ 500.604807][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.739654][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.945100][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.719186][T14344] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.728992][T14344] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.835341][T15129] FAULT_INJECTION: forcing a failure. [ 501.835341][T15129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.859515][T15129] CPU: 0 UID: 0 PID: 15129 Comm: syz.1.2621 Tainted: G L syzkaller #0 PREEMPT(full) [ 501.859536][T15129] Tainted: [L]=SOFTLOCKUP [ 501.859539][T15129] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 501.859546][T15129] Call Trace: [ 501.859550][T15129] [ 501.859554][T15129] dump_stack_lvl+0x100/0x190 [ 501.859571][T15129] should_fail_ex.cold+0x5/0xa [ 501.859584][T15129] _copy_from_user+0x2e/0xd0 [ 501.859601][T15129] get_compat_msghdr+0xb3/0x480 [ 501.859630][T15129] ? __pfx_get_compat_msghdr+0x10/0x10 [ 501.859651][T15129] ___sys_sendmsg+0x1b6/0x1e0 [ 501.859665][T15129] ? __pfx____sys_sendmsg+0x10/0x10 [ 501.859682][T15129] ? find_held_lock+0x2b/0x80 [ 501.859704][T15129] __sys_sendmsg+0x160/0x210 [ 501.859719][T15129] ? __pfx___sys_sendmsg+0x10/0x10 [ 501.859737][T15129] ? __pfx_ksys_write+0x10/0x10 [ 501.859750][T15129] __do_fast_syscall_32+0xe7/0x970 [ 501.859765][T15129] ? lockdep_hardirqs_on+0x78/0x100 [ 501.859778][T15129] do_fast_syscall_32+0x32/0x70 [ 501.859792][T15129] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 501.859806][T15129] RIP: 0023:0xf7f04fec [ 501.859820][T15129] Code: Unable to access opcode bytes at 0xf7f04fc2. [ 501.859825][T15129] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 501.859836][T15129] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000c80 [ 501.859843][T15129] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 501.859849][T15129] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 501.859855][T15129] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 501.859861][T15129] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 501.859875][T15129] [ 501.983747][T14344] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.994722][T14344] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.021070][ T13] bridge_slave_1: left allmulticast mode [ 502.025922][ T13] bridge_slave_1: left promiscuous mode [ 502.034209][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.061998][ T13] bridge_slave_0: left allmulticast mode [ 502.063800][ T13] bridge_slave_0: left promiscuous mode [ 502.067921][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.277877][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.282168][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.285916][ T13] bond0 (unregistering): Released all slaves [ 502.389723][T15141] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 502.403867][T15141] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.414045][T15141] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2624'. [ 502.418212][ T13] tipc: Left network mode [ 502.553970][T15141] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 502.557675][ T5760] Bluetooth: hci0: command tx timeout [ 502.570578][ T5460] 8021q: adding VLAN 0 to HW filter on device eth1 [ 502.845141][ T5460] 8021q: adding VLAN 0 to HW filter on device eth3 [ 502.913809][ T13] hsr_slave_0: left promiscuous mode [ 502.916150][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.918535][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.922347][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.924858][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.956213][ T13] veth1_macvtap: left promiscuous mode [ 502.959231][ T13] veth0_macvtap: left promiscuous mode [ 502.961108][ T13] veth1_vlan: left promiscuous mode [ 502.962977][ T13] veth0_vlan: left promiscuous mode [ 502.967374][T15133] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 502.979167][T15133] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 502.983534][T15133] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 502.989120][T15133] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 502.992735][T15133] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 503.032091][T15133] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 503.223592][ T13] team0 (unregistering): Port device team_slave_1 removed [ 503.232187][ T13] team0 (unregistering): Port device team_slave_0 removed [ 503.319848][ T5460] 8021q: adding VLAN 0 to HW filter on device eth4 [ 503.779630][T15097] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.782542][T15097] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.785454][T15097] bridge_slave_0: entered allmulticast mode [ 503.788866][T15097] bridge_slave_0: entered promiscuous mode [ 503.792663][T15097] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.795527][T15097] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.799422][T15097] bridge_slave_1: entered allmulticast mode [ 503.802580][T15097] bridge_slave_1: entered promiscuous mode [ 503.806333][ T5460] 8021q: adding VLAN 0 to HW filter on device eth2 [ 503.836567][T15097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.884482][T15097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.902196][T15097] team0: Port device team_slave_0 added [ 503.906243][T15097] team0: Port device team_slave_1 added [ 503.930392][T15097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.933210][T15097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.947620][T15097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.954835][T15097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.958762][T15097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.966711][T15097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.207723][T15185] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 504.209887][T15185] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 504.211937][T15185] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 504.224669][T15185] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 504.237895][T15097] hsr_slave_0: entered promiscuous mode [ 504.241431][T15097] hsr_slave_1: entered promiscuous mode [ 504.251048][T15097] debugfs: 'hsr0' already exists in 'hsr' [ 504.262487][T15097] Cannot create hsr debugfs directory [ 504.279500][T15205] netlink: 'syz.2.2631': attribute type 10 has an invalid length. [ 504.530527][T15214] IPv6: NLM_F_REPLACE set, but no existing node found! [ 504.542360][T15097] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 504.558639][T15097] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 504.580037][T15097] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 504.592483][T15097] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 504.596765][T15097] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 504.602298][T15097] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 504.637926][T15097] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 504.704154][T15097] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 504.789587][T15097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.793089][T15216] netlink: 'syz.1.2637': attribute type 2 has an invalid length. [ 504.802042][T15216] : entered promiscuous mode [ 504.818330][T15226] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2638'. [ 504.818471][T15097] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.834478][T14387] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.836783][T14387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.861013][T14387] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.863300][T14387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.971146][T15232] syzkaller0: entered promiscuous mode [ 504.973763][T15232] syzkaller0: entered allmulticast mode [ 505.549641][T14448] usb 42-1: device descriptor read/8, error -110 [ 505.644370][T15097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.127219][T14448] usb usb42-port1: attempt power cycle [ 506.159283][ T5748] Bluetooth: hci1: command 0x0406 tx timeout [ 506.185814][T15275] netlink: 'syz.3.2646': attribute type 10 has an invalid length. [ 506.225976][T15097] veth0_vlan: entered promiscuous mode [ 506.240115][T15097] veth1_vlan: entered promiscuous mode [ 506.284718][T15097] veth0_macvtap: entered promiscuous mode [ 506.297804][T15097] veth1_macvtap: entered promiscuous mode [ 506.318779][T15097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.344777][T15097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.357551][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.362473][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.368254][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.379904][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.405984][ T5748] Bluetooth: hci0: command 0x040f tx timeout [ 506.406038][ T5760] Bluetooth: hci3: command 0x040f tx timeout [ 506.408984][ T5763] Bluetooth: hci4: command 0x0405 tx timeout [ 506.569801][T14415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.579222][T14415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.618624][T14413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.627539][T14413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.747519][T14448] usb usb42-port1: unable to enumerate USB device [ 508.263874][T14448] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 508.384416][T15348] netlink: 'syz.3.2658': attribute type 10 has an invalid length. [ 508.392096][ T3270] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 508.424649][T14448] usb 7-1: Using ep0 maxpacket: 8 [ 508.429892][T14448] usb 7-1: config 0 has no interfaces? [ 508.435638][T14448] usb 7-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 508.441574][T14448] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.447333][T14448] usb 7-1: Product: syz [ 508.449971][T14448] usb 7-1: Manufacturer: syz [ 508.453228][T14448] usb 7-1: SerialNumber: syz [ 508.462168][T14448] usb 7-1: config 0 descriptor?? [ 508.552409][ T3270] usb 9-1: Using ep0 maxpacket: 8 [ 508.557305][ T3270] usb 9-1: config 0 has no interfaces? [ 508.563119][ T3270] usb 9-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 508.569120][ T3270] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.574234][ T3270] usb 9-1: Product: syz [ 508.575736][ T3270] usb 9-1: Manufacturer: syz [ 508.582160][ T3270] usb 9-1: SerialNumber: syz [ 508.588268][ T3270] usb 9-1: config 0 descriptor?? [ 508.637919][ T5748] Bluetooth: hci0: command 0x040f tx timeout [ 508.686898][T15331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.690888][T15331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.694766][ T3270] usb 7-1: USB disconnect, device number 67 [ 508.815071][T15334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.818178][T15334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.823067][T14448] usb 9-1: USB disconnect, device number 2 [ 509.216593][T15355] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2662'. [ 509.218542][T15356] sctp: [Deprecated]: syz.1.2663 (pid 15356) Use of int in max_burst socket option deprecated. [ 509.218542][T15356] Use struct sctp_assoc_value instead [ 510.406095][T15381] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2671'. [ 510.509658][T15384] /dev/sr0: Can't open blockdev [ 510.527883][T15381] usb usb9: usbfs: process 15381 (syz.3.2671) did not claim interface 0 before use [ 510.551068][T15381] netlink: 'syz.3.2671': attribute type 1 has an invalid length. [ 510.563068][T15381] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2671'. [ 510.616878][ T5748] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 510.708607][T15396] syzkaller0: entered promiscuous mode [ 510.713763][T15396] syzkaller0: entered allmulticast mode [ 510.803894][T15403] pim6reg99999999: entered allmulticast mode [ 510.850236][ T5763] Bluetooth: hci0: command 0x040f tx timeout [ 510.932310][T15410] ehci-pci 0000:00:1d.7: remove, state 1 [ 510.942639][T15410] usb usb2: USB disconnect, device number 1 [ 510.945739][T15410] usb 2-1: USB disconnect, device number 2 [ 511.042745][T14448] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 511.594921][T15410] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 511.619735][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 511.875462][T15436] syzkaller0: entered promiscuous mode [ 511.877453][T15436] syzkaller0: entered allmulticast mode [ 511.887674][T14448] usb 7-1: Using ep0 maxpacket: 8 [ 511.901868][T14448] usb 7-1: config 0 has no interfaces? [ 511.911757][T14448] usb 7-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 511.917921][T14448] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.924037][T14448] usb 7-1: Product: syz [ 511.925425][T14448] usb 7-1: Manufacturer: syz [ 511.929963][T14448] usb 7-1: SerialNumber: syz [ 511.938890][ T847] usb 1-1: new full-speed USB device number 2 using uhci_hcd [ 511.939430][T14448] usb 7-1: config 0 descriptor?? [ 512.138176][ T847] usb 1-1: not running at top speed; connect to a high speed hub [ 512.158725][ T847] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 512.161827][ T847] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 512.165202][ T847] usb 1-1: Product: QEMU USB Tablet [ 512.167805][T15388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.172161][T15388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.182635][ T847] usb 1-1: Manufacturer: QEMU [ 512.184211][ T847] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 512.192913][T14448] usb 7-1: USB disconnect, device number 68 [ 512.269514][ T847] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.000A/input/input24 [ 512.411023][ T847] hid-generic 0003:0627:0001.000A: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 512.472425][T15405] usb 1-1: USB disconnect, device number 2 [ 512.519188][T15447] FAULT_INJECTION: forcing a failure. [ 512.519188][T15447] name failslab, interval 1, probability 0, space 0, times 0 [ 512.523219][T15447] CPU: 2 UID: 0 PID: 15447 Comm: syz.3.2684 Tainted: G L syzkaller #0 PREEMPT(full) [ 512.523237][T15447] Tainted: [L]=SOFTLOCKUP [ 512.523241][T15447] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 512.523247][T15447] Call Trace: [ 512.523253][T15447] [ 512.523258][T15447] dump_stack_lvl+0x100/0x190 [ 512.523293][T15447] should_fail_ex.cold+0x5/0xa [ 512.523306][T15447] should_failslab+0xc2/0x120 [ 512.523323][T15447] __kmalloc_noprof+0xfc/0x820 [ 512.523337][T15447] ? bpf_map_meta_alloc+0x1df/0x790 [ 512.523353][T15447] bpf_map_meta_alloc+0x1df/0x790 [ 512.523369][T15447] htab_of_map_alloc+0x44/0xe0 [ 512.523382][T15447] map_create+0x874/0x3120 [ 512.523400][T15447] ? __lock_acquire+0x49f/0x1a40 [ 512.523419][T15447] ? __pfx_map_create+0x10/0x10 [ 512.523439][T15447] ? __might_fault+0xc5/0x140 [ 512.523456][T15447] __sys_bpf+0x2a6e/0x4e80 [ 512.523472][T15447] ? __pfx___sys_bpf+0x10/0x10 [ 512.523484][T15447] ? find_held_lock+0x2b/0x80 [ 512.523496][T15447] ? get_pid_task+0xfc/0x250 [ 512.523509][T15447] ? get_pid_task+0xfc/0x250 [ 512.523526][T15447] ? proc_fail_nth_write+0x9f/0x220 [ 512.523540][T15447] ? find_held_lock+0x2b/0x80 [ 512.523556][T15447] ? rcu_read_lock_any_held+0x6a/0xa0 [ 512.523570][T15447] ? find_held_lock+0x2b/0x80 [ 512.523582][T15447] ? ksys_write+0x190/0x250 [ 512.523592][T15447] ? ksys_write+0x190/0x250 [ 512.523611][T15447] ? fput+0x79/0x100 [ 512.523625][T15447] ? __ia32_sys_bpf+0xcc/0x170 [ 512.523636][T15447] __ia32_sys_bpf+0xcc/0x170 [ 512.523648][T15447] ? __do_fast_syscall_32+0x98/0x970 [ 512.523663][T15447] __do_fast_syscall_32+0xe7/0x970 [ 512.523677][T15447] ? lockdep_hardirqs_on+0x78/0x100 [ 512.523690][T15447] do_fast_syscall_32+0x32/0x70 [ 512.523704][T15447] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 512.523718][T15447] RIP: 0023:0xf706efec [ 512.523732][T15447] Code: Unable to access opcode bytes at 0xf706efc2. [ 512.523737][T15447] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 512.523748][T15447] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800001c0 [ 512.523755][T15447] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 512.523761][T15447] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 512.523767][T15447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 512.523773][T15447] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 512.523786][T15447] [ 512.729243][T15445] fido_id[15445]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb1/1-1/report_descriptor': No such file or directory [ 512.927307][ T5748] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 512.939184][ T5748] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 512.955675][ T5748] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 512.964534][ T5748] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 512.970843][ T5748] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 513.072652][ T5748] Bluetooth: hci0: command 0x040f tx timeout [ 513.317878][T15405] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 513.336981][T15405] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 513.357489][T15405] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 513.390642][T15405] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 513.450808][T15405] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 513.454886][T15405] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 513.457961][T15405] usb usb2: Product: EHCI Host Controller [ 513.459874][T15405] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 513.472307][T15405] usb usb2: SerialNumber: 0000:00:1d.7 [ 513.527965][T15405] hub 2-0:1.0: USB hub found [ 513.540519][T15405] hub 2-0:1.0: 6 ports detected [ 513.557235][T15460] netlink: 'syz.2.2687': attribute type 10 has an invalid length. [ 513.703368][T15405] hub 1-0:1.0: USB hub found [ 513.708031][T15405] hub 1-0:1.0: 2 ports detected [ 513.900615][ T6420] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 514.069320][T15405] hub 3-0:1.0: USB hub found [ 514.076323][T15405] hub 3-0:1.0: 2 ports detected [ 514.332922][ T6420] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 514.339539][ T6420] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 514.351005][ T6420] usb 2-1: Product: QEMU USB Tablet [ 514.353008][ T6420] usb 2-1: Manufacturer: QEMU [ 514.354632][ T6420] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 514.376991][T15405] hub 4-0:1.0: USB hub found [ 514.396535][T15405] hub 4-0:1.0: 2 ports detected [ 514.505998][ T6420] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.000B/input/input25 [ 514.666528][ T6420] hid-generic 0003:0627:0001.000B: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 515.214194][ T5760] Bluetooth: hci2: command tx timeout [ 515.232835][ T5106] Bluetooth: hci3: command 0x040f tx timeout [ 515.295421][ T5763] Bluetooth: hci0: command 0x040f tx timeout [ 515.533624][ T6793] bond0: (slave syz_tun): Releasing backup interface [ 515.536695][ T6793] syz_tun (unregistering): left allmulticast mode [ 516.031562][T15497] comedi comedi1: pcl711: I/O base address not correctly aligned [ 516.036805][T15494] bond0: entered promiscuous mode [ 516.038471][T15494] bond_slave_0: entered promiscuous mode [ 516.040407][T15494] bond_slave_1: entered promiscuous mode [ 516.042701][T15494] bond0: entered allmulticast mode [ 516.046537][T15494] bond_slave_0: entered allmulticast mode [ 516.048429][T15494] bond_slave_1: entered allmulticast mode [ 516.051490][T15494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.382665][T15537] netlink: 'syz.2.2699': attribute type 1 has an invalid length. [ 517.389447][T15537] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2699'. [ 517.398568][T15537] netlink: 2060 bytes leftover after parsing attributes in process `syz.2.2699'. [ 517.432626][ T5748] Bluetooth: hci2: command tx timeout [ 517.522776][ T5748] Bluetooth: hci0: command 0x040f tx timeout [ 517.708659][T15450] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.718769][T15450] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.724637][T15450] bridge_slave_0: entered allmulticast mode [ 517.732572][T15450] bridge_slave_0: entered promiscuous mode [ 517.741033][T15450] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.745447][T15450] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.750055][T15450] bridge_slave_1: entered allmulticast mode [ 517.754096][T15450] bridge_slave_1: entered promiscuous mode [ 517.794129][T15450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.827021][T15450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.868029][T15450] team0: Port device team_slave_0 added [ 517.872488][T15450] team0: Port device team_slave_1 added [ 517.886096][T15450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 517.888369][T15450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 517.896693][T15450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.901548][T15450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 517.904016][T15450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 517.911909][T15450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 517.948991][T15450] hsr_slave_0: entered promiscuous mode [ 517.951397][T15450] hsr_slave_1: entered promiscuous mode [ 517.953634][T15450] debugfs: 'hsr0' already exists in 'hsr' [ 517.960231][T15450] Cannot create hsr debugfs directory [ 518.086238][T15450] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.090923][T15450] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 518.295125][T15450] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.299312][T15450] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 518.385258][T15450] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.388527][T15450] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 518.449894][T15450] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.453129][T15450] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 518.555732][T15450] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 518.559926][T15450] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 518.562603][T15450] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 518.566602][T15450] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 518.569306][T15450] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 518.575078][T15450] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 518.578012][T15450] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 518.581880][T15450] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 518.635563][T15450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.661987][T15450] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.669937][T14415] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.672310][T14415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.696693][T14415] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.700827][T14415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.721801][T15570] syzkaller0: entered promiscuous mode [ 518.723897][T15570] syzkaller0: entered allmulticast mode [ 518.877580][T15575] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2707'. [ 518.895187][T15575] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2707'. [ 518.908809][T15575] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2707'. [ 518.944381][T15575] gfs2: gfs2 mount does not exist [ 518.950259][T15578] netlink: 'syz.1.2708': attribute type 74 has an invalid length. [ 519.472134][T15450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.558765][T15450] veth0_vlan: entered promiscuous mode [ 519.578745][T15450] veth1_vlan: entered promiscuous mode [ 519.605444][T15450] veth0_macvtap: entered promiscuous mode [ 519.609873][T15450] veth1_macvtap: entered promiscuous mode [ 519.619978][T15450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.633255][T15450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.644279][T14344] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.647850][T14344] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.655297][ T5748] Bluetooth: hci2: command tx timeout [ 519.659440][T14344] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.668642][T14344] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.740866][ T5748] Bluetooth: hci0: command 0x040f tx timeout [ 519.789354][T14413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.806344][T14413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.839933][T13336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.842846][T13336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.376462][T15621] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2717'. [ 520.385535][T15621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2717'. [ 520.395218][T15621] netlink: 'syz.3.2717': attribute type 2 has an invalid length. [ 520.405323][T15621] netlink: 'syz.3.2717': attribute type 1 has an invalid length. [ 520.773531][T15626] ip_vti0: entered promiscuous mode [ 520.777535][T15626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2718'. [ 521.103519][T15635] syzkaller0: entered promiscuous mode [ 521.105355][T15635] syzkaller0: entered allmulticast mode [ 521.167523][ T42] audit: type=1400 audit(1785301072.862:1387): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=15637 comm="syz.3.2723" [ 521.230846][T15643] overlayfs: failed to resolve './file1': -2 [ 521.433782][T15649] tipc: Started in network mode [ 521.436039][T15649] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 521.445238][T15649] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 521.454816][T15649] tipc: Enabled bearer , priority 10 [ 521.889317][ T5748] Bluetooth: hci2: command tx timeout [ 522.324109][T15661] syzkaller0: entered promiscuous mode [ 522.328939][T15661] syzkaller0: entered allmulticast mode [ 522.508888][T14480] tipc: Node number set to 1 [ 522.690551][ T1045] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 522.943733][ T1045] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.349410][T15686] syzkaller0: entered promiscuous mode [ 523.351317][T15686] syzkaller0: entered allmulticast mode [ 523.486585][T15688] syzkaller0: entered promiscuous mode [ 523.488577][T15688] syzkaller0: entered allmulticast mode [ 523.608851][T15690] openvswitch: netlink: Flow actions attr not present in new flow. [ 523.661910][ T1045] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 523.665231][ T1045] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.668997][ T1045] usb 7-1: config 0 descriptor?? [ 523.711852][T15692] overlayfs: failed to resolve './file1': -2 [ 523.973225][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 525.209621][ T5748] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 525.213307][ T5748] CPU: 2 UID: 0 PID: 5748 Comm: kworker/u34:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 525.213327][ T5748] Tainted: [L]=SOFTLOCKUP [ 525.213331][ T5748] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 525.213349][ T5748] Workqueue: hci2 hci_rx_work [ 525.213373][ T5748] Call Trace: [ 525.213377][ T5748] [ 525.213382][ T5748] dump_stack_lvl+0x100/0x190 [ 525.213398][ T5748] sysfs_warn_dup.cold+0x1c/0x28 [ 525.213417][ T5748] sysfs_create_dir_ns+0x24b/0x2b0 [ 525.213434][ T5748] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 525.213450][ T5748] ? find_held_lock+0x2b/0x80 [ 525.213466][ T5748] ? kobject_add_internal+0x25f/0x930 [ 525.213483][ T5748] ? kobject_add_internal+0x25f/0x930 [ 525.213500][ T5748] ? do_raw_spin_unlock+0x145/0x1e0 [ 525.213514][ T5748] kobject_add_internal+0x2c8/0x930 [ 525.213535][ T5748] kobject_add+0x16a/0x1e0 [ 525.213551][ T5748] ? __pfx_kobject_add+0x10/0x10 [ 525.213567][ T5748] ? class_to_subsys+0x10f/0x150 [ 525.213580][ T5748] ? kobject_put+0xb9/0x640 [ 525.213593][ T5748] ? _raw_spin_unlock+0x28/0x50 [ 525.213609][ T5748] device_add+0x294/0x1970 [ 525.213627][ T5748] ? __pfx_dev_set_name+0x10/0x10 [ 525.213639][ T5748] ? __pfx_device_add+0x10/0x10 [ 525.213655][ T5748] ? mgmt_send_event_skb+0x2fb/0x460 [ 525.213679][ T5748] hci_conn_add_sysfs+0x1a3/0x260 [ 525.213695][ T5748] le_conn_complete_evt+0x11eb/0x1f60 [ 525.213712][ T5748] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 525.213724][ T5748] ? hci_event_packet+0x186/0xcd0 [ 525.213739][ T5748] hci_le_conn_complete_evt+0x23c/0x3a0 [ 525.213752][ T5748] ? skb_pull_data+0x15f/0x1e0 [ 525.213766][ T5748] hci_le_meta_evt+0x34a/0x5f0 [ 525.213781][ T5748] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 525.213798][ T5748] hci_event_packet+0x51c/0xcd0 [ 525.213811][ T5748] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 525.213826][ T5748] ? __pfx_hci_event_packet+0x10/0x10 [ 525.213841][ T5748] ? kcov_remote_start+0x384/0x670 [ 525.213857][ T5748] ? lockdep_hardirqs_on+0x78/0x100 [ 525.213873][ T5748] hci_rx_work+0x451/0xfc0 [ 525.213888][ T5748] process_one_work+0xa23/0x1940 [ 525.213910][ T5748] ? __pfx_process_one_work+0x10/0x10 [ 525.213935][ T5748] ? __pfx_hci_rx_work+0x10/0x10 [ 525.213949][ T5748] worker_thread+0x5ef/0xe50 [ 525.213971][ T5748] ? kthread+0x13a/0x450 [ 525.213986][ T5748] ? __pfx_worker_thread+0x10/0x10 [ 525.214001][ T5748] kthread+0x370/0x450 [ 525.214017][ T5748] ? __pfx_kthread+0x10/0x10 [ 525.214033][ T5748] ret_from_fork+0x72b/0xd50 [ 525.214048][ T5748] ? __pfx_ret_from_fork+0x10/0x10 [ 525.214061][ T5748] ? native_load_gs_index+0x1e/0xc0 [ 525.214077][ T5748] ? __switch_to+0x800/0x10f0 [ 525.214094][ T5748] ? __pfx_kthread+0x10/0x10 [ 525.214109][ T5748] ret_from_fork_asm+0x1a/0x30 [ 525.214130][ T5748] [ 525.214143][ T5748] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 525.315203][ T5748] Bluetooth: hci2: failed to register connection device [ 525.547740][T15745] overlayfs: failed to resolve './file1': -2 [ 525.596668][ T6420] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 525.757055][ T6420] usb 8-1: Using ep0 maxpacket: 8 [ 525.764002][ T6420] usb 8-1: config 0 has no interfaces? [ 525.774857][ T6420] usb 8-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 525.787444][ T6420] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.795860][ T6420] usb 8-1: Product: syz [ 525.801241][ T6420] usb 8-1: Manufacturer: syz [ 525.805826][ T6420] usb 8-1: SerialNumber: syz [ 525.824438][ T6420] usb 8-1: config 0 descriptor?? [ 525.980838][ T847] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 526.082458][T15730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.095428][T15730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.102412][ T24] usb 8-1: USB disconnect, device number 59 [ 526.545245][ T1045] usbhid 7-1:0.0: can't add hid device: -71 [ 526.547307][ T1045] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 526.550837][ T1045] usb 7-1: USB disconnect, device number 69 [ 526.718669][ T847] usb 9-1: Using ep0 maxpacket: 8 [ 526.722009][ T847] usb 9-1: config 0 has no interfaces? [ 526.725497][ T847] usb 9-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 526.728476][ T847] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.731254][ T847] usb 9-1: Product: syz [ 526.733204][ T847] usb 9-1: Manufacturer: syz [ 526.734802][ T847] usb 9-1: SerialNumber: syz [ 526.737855][ T847] usb 9-1: config 0 descriptor?? [ 526.947590][ T6420] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 526.965016][T15737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.973449][T15737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.978776][ T847] usb 9-1: USB disconnect, device number 3 [ 527.327837][ T6420] usb 6-1: Using ep0 maxpacket: 8 [ 527.332329][ T6420] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 527.336940][ T6420] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 527.341777][ T6420] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 527.634688][ T6420] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 527.637678][ T6420] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.640251][ T6420] usb 6-1: Product: syz [ 527.643897][ T6420] usb 6-1: Manufacturer: syz [ 527.649244][ T6420] usb 6-1: SerialNumber: syz [ 527.657357][ T6420] usb 6-1: config 0 descriptor?? [ 527.667547][T15761] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 527.677058][T15774] 9pnet_virtio: no channels available for device syz [ 527.689660][T15774] 9pnet_virtio: no channels available for device syz [ 527.725559][ T6420] rc_core: IR keymap rc-streamzap not found [ 527.730675][ T6420] Registered IR keymap rc-empty [ 527.733721][ T6420] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 527.742358][ T6420] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input26 [ 527.990397][ T847] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 528.003583][ T6420] usb 6-1: USB disconnect, device number 38 [ 528.141366][ T847] usb 9-1: device descriptor read/64, error -71 [ 528.170925][T15782] 9pnet_virtio: no channels available for device syz [ 528.174688][ T5763] Bluetooth: hci3: Malformed HCI Event [ 528.277120][T15786] overlayfs: failed to resolve './file1': -2 [ 528.308323][T15787] netlink: 'syz.2.2762': attribute type 12 has an invalid length. [ 528.396391][ T847] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 528.535318][ T847] usb 9-1: device descriptor read/64, error -71 [ 528.721289][ T847] usb usb9-port1: attempt power cycle [ 529.080354][ T847] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 529.104611][ T847] usb 9-1: device descriptor read/8, error -71 [ 529.238433][T15796] tc action pedit 'at' offset 5 out of bounds [ 529.242436][T15796] tc action pedit 'at' offset 5 out of bounds [ 529.244431][T15796] tc action pedit 'at' offset 5 out of bounds [ 529.246330][T15796] tc action pedit 'at' offset 5 out of bounds [ 529.248311][T15796] tc action pedit 'at' offset 5 out of bounds [ 529.250200][T15796] tc action pedit 'at' offset 5 out of bounds [ 529.252205][T15796] tc action pedit 'at' offset 5 out of bounds [ 529.254115][T15796] tc action pedit 'at' offset 5 out of bounds [ 529.256046][T15796] tc action pedit 'at' offset 5 out of bounds [ 529.257971][T15796] tc action pedit 'at' offset 5 out of bounds [ 529.259897][T15796] 0: reclassify loop, rule prio 0, protocol 800 [ 529.289828][T15803] configfs-gadget.g1 gadget.32: Error: incorrect playback sampling rate [ 529.292560][T15803] udc usbip-vudc.0: failed to start g1: -22 [ 529.294993][T15803] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 529.299051][T15803] UDC core: g1: couldn't find an available UDC or it's busy [ 529.369768][ T847] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 529.391613][ T847] usb 9-1: device descriptor read/8, error -71 [ 529.519268][ T847] usb usb9-port1: unable to enumerate USB device [ 529.586361][T15812] overlay: Unknown parameter '/' [ 529.642305][T15814] netlink: zone id is out of range [ 529.645757][T15814] netlink: zone id is out of range [ 529.650033][T15814] netlink: zone id is out of range [ 529.656632][T15814] netlink: zone id is out of range [ 529.677071][T15814] input: syz0 as /devices/virtual/input/input27 [ 530.405064][T15824] overlayfs: failed to resolve './file1': -2 [ 531.131225][T15844] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2778'. [ 531.152972][T15832] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 531.165795][ T5763] Bluetooth: hci4: unexpected event for opcode 0x2039 [ 531.168944][T15832] netlink: 'syz.1.2776': attribute type 2 has an invalid length. [ 531.172431][T15832] netlink: 'syz.1.2776': attribute type 2 has an invalid length. [ 531.269043][T15849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2779'. [ 531.278971][ T5763] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 531.300315][T15849] [U] [ 531.302039][T15849] [U] [ 531.302954][T15849] [U] [ 531.303861][T15849] [U] [ 531.331115][T15849] [U] [ 531.332090][T15849] [U] [ 531.332993][T15849] [U] [ 531.333897][T15849] [U] [ 531.344920][T15849] [U] [ 531.345861][T15849] [U] [ 531.346754][T15849] [U] [ 531.347652][T15849] [U] [ 531.356435][T15849] [U] [ 531.357360][T15849] [U] [ 531.358261][T15849] [U] [ 531.359156][T15849] [U] [ 531.367665][T15849] [U] [ 531.368627][T15849] [U] [ 531.369519][T15849] [U] [ 531.370429][T15849] [U] [ 531.372301][T15849] [U] [ 531.373225][T15849] [U] [ 531.374107][T15849] [U] [ 531.375011][T15849] [U] [ 531.376017][T15849] [U] [ 531.376908][T15849] [U] [ 531.377831][T15849] [U] [ 531.378712][T15849] [U] [ 531.379721][T15849] [U] [ 531.380626][T15849] [U] [ 531.381498][T15849] [U] [ 531.382378][T15849] [U] [ 531.383268][T15849] [U] [ 531.384148][T15849] [U] [ 531.385045][T15849] [U] [ 531.385925][T15849] [U] [ 531.386913][T15849] [U] [ 531.387838][T15849] [U] [ 531.388737][T15849] [U] [ 531.389620][T15849] [U] [ 531.393535][T15849] [U] [ 531.394470][T15849] [U] [ 531.395365][T15849] [U] [ 531.396253][T15849] [U] [ 531.397848][T15849] [U] [ 531.398755][T15849] [U] [ 531.399660][T15849] [U] [ 531.400563][T15849] [U] [ 531.401601][T15849] [U] [ 531.402491][T15849] [U] [ 531.403385][T15849] [U] [ 531.404509][T15849] [U] [ 531.405546][T15849] [U] [ 531.406555][T15849] [U] [ 531.407644][T15849] [U] [ 531.408655][T15849] [U] [ 531.409833][T15849] [U] [ 531.410736][T15849] [U] [ 531.411632][T15849] [U] [ 531.412518][T15849] [U] [ 531.413442][T15849] [U] [ 531.414342][T15849] [U] [ 531.415235][T15849] [U] [ 531.416116][T15849] [U] [ 531.417014][T15849] [U] [ 531.417933][T15849] [U] [ 531.418837][T15849] [U] [ 531.419737][T15849] [U] [ 531.420791][T15849] [U] [ 531.421963][T15849] [U] [ 531.423110][T15849] [U] [ 531.423979][T15849] [U] [ 531.424795][T15849] [U] [ 531.425626][T15849] [U] [ 531.426507][T15849] [U] [ 531.427454][T15849] [U] [ 531.428595][T15849] [U] [ 531.429515][T15849] [U] [ 531.430413][T15849] [U] [ 531.431325][T15849] [U] [ 531.432202][T15849] [U] [ 531.433183][T15849] [U] [ 531.434084][T15849] [U] [ 531.434993][T15849] [U] [ 531.435973][T15849] [U] [ 531.437108][T15849] [U] [ 531.437991][T15849] [U] [ 531.438928][T15849] [U] [ 531.439818][T15849] [U] [ 531.440824][T15849] [U] [ 531.441961][T15849] [U] [ 531.442862][T15849] [U] [ 531.443751][T15849] [U] [ 531.444842][T15849] [U] [ 531.445734][T15849] [U] [ 531.446630][T15849] [U] [ 531.447517][T15849] [U] [ 531.448446][T15849] [U] [ 531.449328][T15849] [U] [ 531.450207][T15849] [U] [ 531.451104][T15849] [U] [ 531.452000][T15849] [U] [ 531.452891][T15849] [U] [ 531.453782][T15849] [U] [ 531.454819][T15849] [U] [ 531.458599][T15849] [U] [ 531.459511][T15849] [U] [ 531.460427][T15849] [U] [ 531.461299][T15849] [U] [ 531.462253][T15849] [U] [ 531.463223][T15849] [U] [ 531.464113][T15849] [U] [ 531.465005][T15849] [U] [ 531.466200][T15849] [U] [ 531.467138][T15849] [U] [ 531.468028][T15849] [U] [ 531.468904][T15849] [U] [ 531.471972][T15849] [U] [ 531.473158][T15849] [U] [ 531.474355][T15849] [U] [ 531.475514][T15849] [U] [ 531.476777][T15849] [U] [ 531.477921][T15849] [U] [ 531.479064][T15849] [U] [ 531.480211][T15849] [U] [ 531.488222][T15849] [U] [ 531.489418][T15849] [U] [ 531.490551][T15849] [U] [ 531.563599][T15859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2782'. [ 531.836984][T15862] syzkaller0: entered promiscuous mode [ 531.839126][T15862] syzkaller0: entered allmulticast mode [ 532.011516][T15842] [U] [ 532.247908][T15870] netlink: 'syz.4.2786': attribute type 9 has an invalid length. [ 532.566128][T15881] overlayfs: failed to resolve './file1': -2 [ 532.724317][ T24] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 532.885386][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 532.890005][ T24] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 532.905028][ T24] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 532.923681][ T24] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 532.939395][ T24] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 532.957988][ T24] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 532.972086][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.984724][ T24] usb 7-1: Product: syz [ 532.991161][ T24] usb 7-1: Manufacturer: syz [ 532.998047][ T24] usb 7-1: SerialNumber: syz [ 533.027510][ C2] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 533.600845][ T5748] Bluetooth: hci0: command 0x040f tx timeout [ 534.423425][T15896] netlink: 'syz.3.2792': attribute type 10 has an invalid length. [ 534.696163][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input28 [ 534.705046][T15898] netlink: 'syz.4.2791': attribute type 10 has an invalid length. [ 534.786695][ T24] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 534.789669][ T24] (id 0x00) [ 534.852925][ T24] rc_core: IR keymap rc-imon-pad not found [ 534.857162][ T24] Registered IR keymap rc-empty [ 534.859989][ T24] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 534.866913][ T24] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 534.922573][T15904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 534.985223][T15900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 535.113051][T15907] netlink: 'syz.1.2793': attribute type 10 has an invalid length. [ 535.119217][T15907] veth0_to_bond: entered promiscuous mode [ 535.121462][T15907] veth0_to_bond: entered allmulticast mode [ 535.366071][T15897] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 535.368164][T15897] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 535.454124][T15897] vhci_hcd vhci_hcd.0: Device attached [ 535.621885][ T24] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0 [ 535.630562][ T24] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0/input29 [ 535.660013][ T24] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:70> initialized [ 535.748434][T14448] usb 42-1: SetAddress Request (22) to port 0 [ 535.750482][T14448] usb 42-1: new SuperSpeed USB device number 22 using vhci_hcd [ 535.971769][T15922] overlayfs: failed to resolve './file1': -2 [ 536.044335][T15918] kernel read not supported for file /eth0 (pid: 15918 comm: syz.4.2797) [ 536.070043][ T42] audit: type=1800 audit(1785301086.796:1388): pid=15918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2797" name="eth0" dev="mqueue" ino=56802 res=0 errno=0 [ 537.372025][T15897] imon:send_packet: task interrupted [ 537.411926][T15946] netlink: 'syz.1.2802': attribute type 10 has an invalid length. [ 537.430139][T15897] imon:send_packet: packet tx failed (-512) [ 537.462917][T15897] imon:vfd_write: send packet #0 failed [ 537.549191][T15908] vhci_hcd: connection reset by peer [ 537.554838][ T847] usb 7-1: USB disconnect, device number 70 [ 537.557140][ T5827] vhci_hcd vhci_hcd.2: stop threads [ 537.559881][ T5827] vhci_hcd vhci_hcd.2: release socket [ 537.566458][ T5827] vhci_hcd vhci_hcd.2: disconnect device [ 537.769488][T15956] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2806'. [ 537.909251][ T24] kernel write not supported for file /uinput (pid: 24 comm: kworker/2:0) [ 537.983789][T15960] overlayfs: failed to resolve './file1': -2 [ 538.038859][T15964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2808'. [ 538.650644][T15977] Invalid ELF header magic: != ELF [ 538.671894][T15977] overlayfs: failed lookup in lower (newroot/27, name='file0', err=-40): overlapping layers [ 539.282530][T15989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2814'. [ 539.392367][ T24] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 539.552620][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 539.556899][ T24] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 85, changing to 7 [ 539.564750][ T24] usb 9-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 539.567400][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.569670][ T24] usb 9-1: Product: syz [ 539.570877][ T24] usb 9-1: Manufacturer: 嘚牿ꀄ癯痦壡멚鿾봜뭚忓鲞䍊ដޅ벒栲껎ﻒ靾뙡ḁ륐衚㻣张曁伸鿎Ɔ孛ⓜ䄪﹞㖷눟䊈秾鹑㙘溽ꡁ埴䔇튂⿕绚안鋕鵐헋琄雲緻✠빋耭븟菆앤紼빌톞䰜礽ꉜཅ챏抪鄲脇뀼ㆦ鵔뷋殠䢮⡞៻䊝膵৅颀볐ꉫᴭԳሊ嫍賕죥䛙계㢪똧췼力士Οㆼ皹逛쩘 [ 539.591767][ T24] usb 9-1: SerialNumber: syz [ 539.692497][T16012] overlayfs: failed to resolve './file1': -2 [ 539.828890][T15980] netlink: 'syz.4.2812': attribute type 21 has an invalid length. [ 539.831863][T15980] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2812'. [ 539.834679][T15980] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2812'. [ 539.854292][ T24] usb 9-1: Audio class v2/v3 interfaces need an interface association [ 539.883062][ T24] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 539.890826][ T24] usb 9-1: USB disconnect, device number 8 [ 540.082588][T12726] udevd[12726]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 540.724962][T16024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2824'. [ 540.747281][T16024] bridge_slave_1: left allmulticast mode [ 540.749744][T16024] bridge_slave_1: left promiscuous mode [ 540.752037][T16024] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.755752][T16024] bridge_slave_0: left allmulticast mode [ 540.757667][T16024] bridge_slave_0: left promiscuous mode [ 540.759699][T16024] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.930431][T16033] 9pnet_virtio: no channels available for device syz [ 541.198752][T14448] usb 42-1: device descriptor read/8, error -110 [ 541.971578][T14448] usb usb42-port1: attempt power cycle [ 542.053220][ T847] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 542.224412][ T847] usb 6-1: Using ep0 maxpacket: 8 [ 542.237845][ T847] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 542.249893][ T847] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 542.263161][ T847] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 542.281633][ T847] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 542.294086][ T847] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.346327][ T847] usbtmc 6-1:16.0: bulk endpoints not found [ 542.625688][T16072] overlayfs: failed to resolve './file1': -2 [ 542.856467][T16081] syzkaller0: entered promiscuous mode [ 542.861221][T16081] syzkaller0: entered allmulticast mode [ 543.090229][T14448] usb usb42-port1: unable to enumerate USB device [ 543.366390][T16086] netlink: 'syz.2.2837': attribute type 3 has an invalid length. [ 543.369239][T16086] netlink: 'syz.2.2837': attribute type 1 has an invalid length. [ 543.371813][T16086] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2837'. [ 543.374812][T16086] NCSI netlink: No device for ifindex 0 [ 543.588876][T16090] input: syz0 as /devices/virtual/input/input31 [ 543.637871][T16093] loop5: detected capacity change from 0 to 7 [ 543.641181][T16093] loop5: [ 543.642419][T16093] loop5: partition table partially beyond EOD, truncated [ 543.735158][ T5748] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 543.739484][ T5748] Bluetooth: hci2: unexpected event for opcode 0x2062 [ 544.573626][T16115] overlayfs: failed to resolve './file1': -2 [ 545.214650][T14448] usb 6-1: USB disconnect, device number 39 [ 545.642849][T16129] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2851'. [ 545.692026][T16129] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2851'. [ 545.843846][T16136] FAULT_INJECTION: forcing a failure. [ 545.843846][T16136] name failslab, interval 1, probability 0, space 0, times 0 [ 545.849342][T16136] CPU: 0 UID: 0 PID: 16136 Comm: syz.1.2853 Tainted: G L syzkaller #0 PREEMPT(full) [ 545.849360][T16136] Tainted: [L]=SOFTLOCKUP [ 545.849364][T16136] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 545.849371][T16136] Call Trace: [ 545.849376][T16136] [ 545.849380][T16136] dump_stack_lvl+0x100/0x190 [ 545.849397][T16136] should_fail_ex.cold+0x5/0xa [ 545.849410][T16136] should_failslab+0xc2/0x120 [ 545.849439][T16136] __kmalloc_noprof+0xfc/0x820 [ 545.849454][T16136] ? tomoyo_encode2+0xfb/0x3c0 [ 545.849476][T16136] tomoyo_encode2+0xfb/0x3c0 [ 545.849494][T16136] tomoyo_encode+0x29/0x50 [ 545.849509][T16136] tomoyo_realpath_from_path+0x18c/0x690 [ 545.849529][T16136] tomoyo_path_number_perm+0x23c/0x580 [ 545.849543][T16136] ? tomoyo_path_number_perm+0x22e/0x580 [ 545.849558][T16136] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 545.849573][T16136] ? get_pid_task+0x106/0x250 [ 545.849600][T16136] ? find_held_lock+0x2b/0x80 [ 545.849613][T16136] ? __fget_files+0x215/0x3d0 [ 545.849623][T16136] ? hook_file_ioctl_common+0x140/0x440 [ 545.849637][T16136] ? __fget_files+0x215/0x3d0 [ 545.849649][T16136] ? __fget_files+0x21f/0x3d0 [ 545.849662][T16136] security_file_ioctl_compat+0xd3/0x230 [ 545.849678][T16136] __ia32_compat_sys_ioctl+0xc2/0x360 [ 545.849696][T16136] __do_fast_syscall_32+0xe7/0x970 [ 545.849711][T16136] ? lockdep_hardirqs_on+0x78/0x100 [ 545.849725][T16136] do_fast_syscall_32+0x32/0x70 [ 545.849740][T16136] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 545.849754][T16136] RIP: 0023:0xf7f04fec [ 545.849768][T16136] Code: Unable to access opcode bytes at 0xf7f04fc2. [ 545.849774][T16136] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 545.849785][T16136] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040505412 [ 545.849792][T16136] RDX: 0000000080000440 RSI: 0000000000000000 RDI: 0000000000000000 [ 545.849799][T16136] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 545.849805][T16136] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 545.849812][T16136] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 545.849826][T16136] [ 545.850069][T16136] ERROR: Out of memory at tomoyo_realpath_from_path. [ 546.538073][T16147] netlink: 'syz.3.2856': attribute type 10 has an invalid length. [ 546.784644][T16153] overlayfs: failed to resolve './file1': -2 [ 547.061066][T16160] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2861'. [ 547.069706][T16160] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2861'. [ 547.075397][T16162] fuse: Unknown parameter '000000000000000000030x0000000000000003' [ 547.079768][T16162] x_tables: duplicate underflow at hook 2 [ 547.780939][ T847] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 547.963102][ T847] usb 9-1: Using ep0 maxpacket: 8 [ 547.967872][ T847] usb 9-1: config 0 has no interfaces? [ 547.973833][ T847] usb 9-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 547.979204][ T847] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.983969][ T847] usb 9-1: Product: syz [ 547.985354][ T847] usb 9-1: Manufacturer: syz [ 547.989845][ T847] usb 9-1: SerialNumber: syz [ 547.995750][ T847] usb 9-1: config 0 descriptor?? [ 548.045643][ T5748] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 548.053569][ T5748] Bluetooth: hci2: Injecting HCI hardware error event [ 548.062825][ T5763] Bluetooth: hci2: hardware error 0x00 [ 548.216002][T16168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.224144][T16168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.229075][ T847] usb 9-1: USB disconnect, device number 9 [ 548.575667][T16193] overlayfs: failed to resolve './file1': -2 [ 548.606209][T16195] CIFS: enabling forceuid mount option implicitly because uid= option is specified [ 548.609252][T16195] CIFS mount error: No usable UNC path provided in device string! [ 548.609252][T16195] [ 548.612414][T16195] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 548.664566][T16198] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2872'. [ 549.113884][T16207] netlink: 'syz.4.2874': attribute type 10 has an invalid length. [ 550.038410][T16217] netlink: 'syz.3.2877': attribute type 10 has an invalid length. [ 550.284322][ T5763] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 550.651193][T16226] netlink: 'syz.1.2880': attribute type 10 has an invalid length. [ 551.124678][ T6420] IPVS: starting estimator thread 0... [ 551.186266][ T5763] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 551.275334][T16241] IPVS: using max 46 ests per chain, 110400 per kthread [ 551.538663][T16260] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2888'. [ 551.574486][ T6420] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 551.637803][T16261] netlink: 'syz.3.2887': attribute type 4 has an invalid length. [ 551.734750][ T6420] usb 9-1: Using ep0 maxpacket: 8 [ 551.738118][ T6420] usb 9-1: config 0 has no interfaces? [ 551.742188][ T6420] usb 9-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 551.745205][ T6420] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.749617][ T6420] usb 9-1: Product: syz [ 551.751250][ T6420] usb 9-1: Manufacturer: syz [ 551.752984][ T6420] usb 9-1: SerialNumber: syz [ 551.759003][ T6420] usb 9-1: config 0 descriptor?? [ 551.978780][T16242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.984052][T16242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.988094][ T6420] usb 9-1: USB disconnect, device number 10 [ 552.527047][T16271] 9pnet_virtio: no channels available for device syz [ 552.861663][T16274] 9p: Bad value for 'rfdno' [ 552.881367][T16274] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.884394][T16274] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.934425][T16274] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.936945][T16274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.941628][T16274] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.944206][T16274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.029728][T16274] team0: Port device bridge0 added [ 553.475671][ T6420] IPVS: starting estimator thread 0... [ 553.542132][ T5748] Bluetooth: hci3: unexpected event for opcode 0x1000 [ 553.585136][T16285] IPVS: using max 46 ests per chain, 110400 per kthread [ 554.320178][ T5748] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 554.695405][T12725] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 554.790916][ T5748] Bluetooth: hci0: command 0x040f tx timeout [ 555.047384][T12725] usb 9-1: Using ep0 maxpacket: 8 [ 555.224085][T16310] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.226650][T16310] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.335582][T16310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 555.342363][T16310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 555.423453][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.427764][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.433317][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.439892][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.532122][T12725] usb 9-1: config 0 has no interfaces? [ 555.686533][T12725] usb 9-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 555.689949][T12725] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.692571][T12725] usb 9-1: Product: syz [ 555.694038][T12725] usb 9-1: Manufacturer: syz [ 555.695650][T12725] usb 9-1: SerialNumber: syz [ 555.698583][T12725] usb 9-1: config 0 descriptor?? [ 555.752946][ T42] audit: type=1326 audit(1785301105.203:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16334 comm="syz.1.2907" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f04fec code=0x0 [ 555.924467][T16305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.927847][T16305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.931402][ T3270] usb 9-1: USB disconnect, device number 11 [ 556.303231][T12725] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 556.985056][T12725] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 556.992441][T12725] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 556.996211][T12725] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 557.004258][T12725] usb 8-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 557.007558][T12725] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 557.010344][T12725] usb 8-1: Product: syz [ 557.011862][T12725] usb 8-1: Manufacturer: syz [ 557.016146][T16338] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 557.021559][T12725] usb_debug 8-1:1.0: debug converter detected [ 557.033291][T12725] usb 8-1: debug converter now attached to ttyUSB0 [ 557.256580][ T847] usb 8-1: USB disconnect, device number 60 [ 557.269745][ T847] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 557.275425][ T847] usb_debug 8-1:1.0: device disconnected [ 557.316558][T16361] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2915'. [ 557.339652][T16361] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2915'. [ 557.391996][T16361] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2915'. [ 557.395037][T16361] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2915'. [ 557.473297][T12725] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 557.637390][T12725] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 557.642329][T12725] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 557.648867][T12725] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 557.656325][T12725] usb 9-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 557.662383][T12725] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 557.666934][T12725] usb 9-1: Product: syz [ 557.668298][T12725] usb 9-1: Manufacturer: syz [ 557.675734][T16362] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 557.681443][T12725] usb_debug 9-1:1.0: debug converter detected [ 557.696747][T12725] usb 9-1: debug converter now attached to ttyUSB0 [ 557.829569][T16370] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2917'. [ 557.990209][ T847] usb 9-1: USB disconnect, device number 12 [ 558.001455][ T847] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 558.009174][ T847] usb_debug 9-1:1.0: device disconnected [ 558.025368][T16380] IPv6: NLM_F_REPLACE set, but no existing node found! [ 558.221418][T12725] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 558.259552][T16391] : renamed from vlan0 [ 558.296079][T16391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2924'. [ 558.299056][T16391] openvswitch: netlink: Flow actions attr not present in new flow. [ 558.392255][T12725] usb 7-1: Using ep0 maxpacket: 8 [ 558.398407][T12725] usb 7-1: config 0 has no interfaces? [ 558.402025][T12725] usb 7-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 558.408507][T12725] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.412806][T12725] usb 7-1: Product: syz [ 558.416072][T12725] usb 7-1: Manufacturer: syz [ 558.417575][T12725] usb 7-1: SerialNumber: syz [ 558.440731][T12725] usb 7-1: config 0 descriptor?? [ 558.596305][T16402] IPv6: NLM_F_REPLACE set, but no existing node found! [ 558.674433][T16403] xt_connbytes: Forcing CT accounting to be enabled [ 558.677471][T16403] Cannot find del_set index 0 as target [ 558.790425][T16373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.798888][T16373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.819459][T14448] usb 7-1: USB disconnect, device number 71 [ 559.824138][T12725] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 560.007803][T12725] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 560.011175][T12725] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 560.014364][T12725] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 560.020520][T12725] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 560.023634][T12725] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 560.026312][T12725] usb 8-1: Product: syz [ 560.030716][T12725] usb 8-1: Manufacturer: syz [ 560.032370][T12725] usb 8-1: SerialNumber: syz [ 560.257985][T12725] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 61 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 560.271511][T12725] usb 8-1: USB disconnect, device number 61 [ 560.285045][T12725] usblp0: removed [ 560.375222][ T42] audit: type=1326 audit(1785301109.555:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16423 comm="syz.2.2935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77fec code=0x7fc00000 [ 560.389702][ T42] audit: type=1326 audit(1785301109.555:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16423 comm="syz.2.2935" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f77fec code=0x7fc00000 [ 560.408654][ T42] audit: type=1326 audit(1785301109.555:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16423 comm="syz.2.2935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77fec code=0x7fc00000 [ 560.432275][ T42] audit: type=1326 audit(1785301109.555:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16423 comm="syz.2.2935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77fec code=0x7fc00000 [ 560.443680][ T42] audit: type=1326 audit(1785301109.555:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16423 comm="syz.2.2935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77fec code=0x7fc00000 [ 560.453167][ T42] audit: type=1326 audit(1785301109.555:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16423 comm="syz.2.2935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77fec code=0x7fc00000 [ 560.461248][ T42] audit: type=1326 audit(1785301109.555:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16423 comm="syz.2.2935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77fec code=0x7fc00000 [ 560.469736][ T42] audit: type=1326 audit(1785301109.555:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16423 comm="syz.2.2935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77fec code=0x7fc00000 [ 560.476800][ T42] audit: type=1326 audit(1785301109.555:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16423 comm="syz.2.2935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77fec code=0x7fc00000 [ 560.757831][T16452] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 560.759947][T16452] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 560.797104][T16452] vhci_hcd vhci_hcd.0: Device attached [ 560.810814][T14400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.825161][T14400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.927236][T16452] erofs (device sr0): cannot find valid erofs superblock [ 561.106744][T12725] usb 42-1: SetAddress Request (26) to port 0 [ 561.111355][T12725] usb 42-1: new SuperSpeed USB device number 26 using vhci_hcd [ 561.429328][T16453] vhci_hcd: connection reset by peer [ 561.431701][ T12] vhci_hcd vhci_hcd.2: stop threads [ 561.433717][ T12] vhci_hcd vhci_hcd.2: release socket [ 561.435532][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 561.894085][T16471] netlink: 'syz.4.2950': attribute type 10 has an invalid length. [ 562.158586][ T5748] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 562.527949][T14448] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 562.772653][T16498] netlink: 'syz.4.2955': attribute type 10 has an invalid length. [ 562.910625][T14448] usb 7-1: Using ep0 maxpacket: 8 [ 562.921913][T14448] usb 7-1: config 0 has no interfaces? [ 562.925928][T14448] usb 7-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 562.929428][T14448] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.935259][T14448] usb 7-1: Product: syz [ 562.936789][T14448] usb 7-1: Manufacturer: syz [ 562.938333][T14448] usb 7-1: SerialNumber: syz [ 562.942893][T14448] usb 7-1: config 0 descriptor?? [ 563.162021][T16480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.169412][T16480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.179982][T14448] usb 7-1: USB disconnect, device number 72 [ 564.638762][T16530] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 565.039689][T16545] kvm: user requested TSC rate below hardware speed [ 565.391857][ T5748] Bluetooth: hci3: command 0x040f tx timeout [ 565.651460][T16565] overlay: Unknown parameter '/' [ 565.836356][T14448] IPVS: starting estimator thread 0... [ 565.936592][T16569] IPVS: using max 46 ests per chain, 110400 per kthread [ 566.200182][T16575] vivid-000: unregistering video7 [ 566.214975][T16575] vivid-000: unregistering video8 [ 566.223914][T16575] vivid-000: unregistering vbi0 [ 566.258930][T16575] vivid-000: unregistering vbi1 [ 566.280619][T16575] vivid-000: unregistering swradio0 [ 566.357825][T16575] vivid-000: unregistering radio0 [ 566.367363][T16575] vivid-000: unregistering radio1 [ 566.375276][T16575] vivid-000: unregistering video9 [ 566.381118][T16575] vivid-000: unregistering video10 [ 566.390762][T16575] vivid-000: unregistering v4l-touch0 [ 566.504047][T12725] usb 42-1: device descriptor read/8, error -110 [ 566.518723][T16575] vivid-001: unregistering video11 [ 566.522120][T16575] vivid-001: unregistering video12 [ 566.524713][T16575] vivid-001: unregistering vbi2 [ 566.796963][T16575] vivid-001: unregistering vbi3 [ 566.804935][T16575] vivid-001: unregistering swradio1 [ 566.851505][T16575] vivid-001: unregistering radio2 [ 566.865488][T16575] vivid-001: unregistering radio3 [ 566.925282][T16575] vivid-001: unregistering video13 [ 566.957026][T16570] ================================================================== [ 566.959602][T16570] BUG: KASAN: use-after-free in media_request_release+0x18f/0x1b0 [ 566.962064][T16570] Read of size 8 at addr ffff888043c603d0 by task syz.3.2978/16570 [ 566.965306][T16570] [ 566.966381][T16570] CPU: 0 UID: 0 PID: 16570 Comm: syz.3.2978 Tainted: G L syzkaller #0 PREEMPT(full) [ 566.966398][T16570] Tainted: [L]=SOFTLOCKUP [ 566.966402][T16570] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 566.966409][T16570] Call Trace: [ 566.966414][T16570] [ 566.966418][T16570] dump_stack_lvl+0x100/0x190 [ 566.966433][T16570] print_report+0x13d/0x4b0 [ 566.966448][T16570] ? __virt_addr_valid+0x239/0x430 [ 566.966461][T16570] ? media_request_release+0x18f/0x1b0 [ 566.966476][T16570] kasan_report+0xdf/0x1c0 [ 566.966492][T16570] ? media_request_release+0x18f/0x1b0 [ 566.966508][T16570] media_request_release+0x18f/0x1b0 [ 566.966523][T16570] media_request_close+0x7e/0xc0 [ 566.966537][T16570] ? __pfx_media_request_close+0x10/0x10 [ 566.966552][T16570] __fput+0x3ff/0xb50 [ 566.966565][T16570] task_work_run+0x150/0x240 [ 566.966581][T16570] ? __pfx_task_work_run+0x10/0x10 [ 566.966599][T16570] exit_to_user_mode_loop+0x1d8/0x6f0 [ 566.966609][T16570] ? rcu_is_watching+0x12/0xc0 [ 566.966623][T16570] __do_fast_syscall_32+0x701/0x970 [ 566.966638][T16570] ? lockdep_hardirqs_on+0x78/0x100 [ 566.966651][T16570] do_fast_syscall_32+0x32/0x70 [ 566.966665][T16570] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 566.966679][T16570] RIP: 0023:0xf705efec [ 566.966694][T16570] Code: Unable to access opcode bytes at 0xf705efc2. [ 566.966699][T16570] RSP: 002b:00000000ff83e81c EFLAGS: 00000202 ORIG_RAX: 00000000000001b4 [ 566.966710][T16570] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 566.966717][T16570] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 566.966723][T16570] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 566.966733][T16570] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 566.966739][T16570] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 566.966749][T16570] [ 566.966753][T16570] [ 567.033025][T16570] The buggy address belongs to the physical page: [ 567.035445][T16570] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x43c60 [ 567.038386][T16570] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 567.040939][T16570] page_type: f0(buddy) [ 567.042696][T16570] raw: 04fff00000000000 ffffea00010f6008 ffff88807ffd6cc8 0000000000000000 [ 567.046099][T16570] raw: 0000000000000000 0000000000000005 00000000f0000000 0000000000000000 [ 567.049455][T16570] page dumped because: kasan: bad access detected [ 567.051705][T16570] page_owner tracks the page as freed [ 567.053513][T16570] page last allocated via order 4, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 13449862613, free_ts 566956916092 [ 567.059887][T16570] post_alloc_hook+0xfd/0x120 [ 567.061886][T16570] get_page_from_freelist+0xf48/0x3530 [ 567.064168][T16570] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 567.066660][T16570] alloc_pages_mpol+0x1fb/0x540 [ 567.068725][T16570] ___kmalloc_large_node+0xe5/0x120 [ 567.070789][T16570] __kmalloc_large_noprof+0x1c/0x70 [ 567.072481][T16570] vivid_probe+0x1f8/0x10d0 [ 567.073983][T16570] platform_probe+0x106/0x1d0 [ 567.075478][T16570] really_probe+0x241/0xa60 [ 567.076976][T16570] __driver_probe_device+0x20e/0x450 [ 567.078631][T16570] driver_probe_device+0x4a/0x140 [ 567.080240][T16570] __driver_attach+0x21f/0x5b0 [ 567.081755][T16570] bus_for_each_dev+0x13e/0x1d0 [ 567.083282][T16570] bus_add_driver+0x305/0x5b0 [ 567.084764][T16570] driver_register+0x1e2/0x360 [ 567.086286][T16570] vivid_init+0x527/0x6a0 [ 567.087734][T16570] page last free pid 16570 tgid 16570 stack trace: [ 567.089710][T16570] __free_pages_ok+0x73b/0xfe0 [ 567.091597][T16570] v4l2_device_put+0xa3/0xd0 [ 567.093485][T16570] v4l2_device_release+0x2cf/0x480 [ 567.095655][T16570] device_release+0xd2/0x270 [ 567.097625][T16570] kobject_put+0x1f7/0x640 [ 567.099542][T16570] put_device+0x1f/0x30 [ 567.101303][T16570] v4l2_release+0x2da/0x390 [ 567.103237][T16570] __fput+0x3ff/0xb50 [ 567.104969][T16570] task_work_run+0x150/0x240 [ 567.106911][T16570] exit_to_user_mode_loop+0x1d8/0x6f0 [ 567.109133][T16570] __do_fast_syscall_32+0x701/0x970 [ 567.111268][T16570] do_fast_syscall_32+0x32/0x70 [ 567.112955][T16570] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 567.115499][T16570] [ 567.116469][T16570] Memory state around the buggy address: [ 567.118824][T16570] ffff888043c60280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 567.122082][T16570] ffff888043c60300: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 567.125438][T16570] >ffff888043c60380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 567.128816][T16570] ^ [ 567.131611][T16570] ffff888043c60400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 567.134237][T16570] ffff888043c60480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 567.136745][T16570] ================================================================== [ 567.180520][T16570] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 567.182858][T16570] CPU: 2 UID: 0 PID: 16570 Comm: syz.3.2978 Tainted: G L syzkaller #0 PREEMPT(full) [ 567.186460][T16570] Tainted: [L]=SOFTLOCKUP [ 567.187923][T16570] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 567.191532][T16570] Call Trace: [ 567.192912][T16570] [ 567.194131][T16570] dump_stack_lvl+0x100/0x190 [ 567.196097][T16570] vpanic+0x552/0x970 [ 567.197643][T16570] ? __pfx_vpanic+0x10/0x10 [ 567.199144][T16570] ? rcu_is_watching+0x12/0xc0 [ 567.200762][T16570] ? media_request_release+0x18f/0x1b0 [ 567.202458][T16570] panic+0xd1/0xe0 [ 567.203713][T16570] ? __pfx_panic+0x10/0x10 [ 567.205193][T16570] ? media_request_release+0x18f/0x1b0 [ 567.207173][T16570] ? preempt_schedule_common+0x42/0xc0 [ 567.209376][T16570] ? check_panic_on_warn+0x1f/0x90 [ 567.211449][T16570] check_panic_on_warn.cold+0x19/0x34 [ 567.213374][T16570] end_report.part.0+0x3a/0x90 [ 567.215101][T16570] kasan_report.cold+0xe/0x18 [ 567.216791][T16570] ? media_request_release+0x18f/0x1b0 [ 567.218720][T16570] media_request_release+0x18f/0x1b0 [ 567.220770][T16570] media_request_close+0x7e/0xc0 [ 567.222528][T16570] ? __pfx_media_request_close+0x10/0x10 [ 567.224511][T16570] __fput+0x3ff/0xb50 [ 567.225927][T16570] task_work_run+0x150/0x240 [ 567.227577][T16570] ? __pfx_task_work_run+0x10/0x10 [ 567.229469][T16570] exit_to_user_mode_loop+0x1d8/0x6f0 [ 567.231517][T16570] ? rcu_is_watching+0x12/0xc0 [ 567.233403][T16570] __do_fast_syscall_32+0x701/0x970 [ 567.235353][T16570] ? lockdep_hardirqs_on+0x78/0x100 [ 567.237338][T16570] do_fast_syscall_32+0x32/0x70 [ 567.239166][T16570] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 567.241671][T16570] RIP: 0023:0xf705efec [ 567.243151][T16570] Code: Unable to access opcode bytes at 0xf705efc2. [ 567.245252][T16570] RSP: 002b:00000000ff83e81c EFLAGS: 00000202 ORIG_RAX: 00000000000001b4 [ 567.247871][T16570] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 567.250366][T16570] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 567.253352][T16570] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 567.256271][T16570] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 567.258956][T16570] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 567.261675][T16570] [ 567.263262][T16570] Kernel Offset: disabled [ 567.264676][T16570] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:59:02 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a129e5 RDI=ffffffff9b9f31a0 RBP=ffffffff9b9f3160 RSP=ffffc900052f7760 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3430383838666666 R12=0000000000000000 R13=0000000000000037 R14=ffffffff9b6f3235 R15=ffffffff85a12980 RIP=ffffffff85a12a0f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096be3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7426a70 CR3=000000005dd6a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b51eaa RDX=ffff88801c742540 RSI=ffffffff81b51ece RDI=ffff88801c742540 RBP=0000000000000001 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=0000000000000000 RIP=ffffffff81b51ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ce3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f71ee853 CR3=000000000e994000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=0000000000000000 RCX=84b19d7c2b40b097 RDX=0000000000000000 RSI=ffffffff8e182932 RDI=ffffffff8c400a80 RBP=ffff8880245b5358 RSP=ffffc90002e17ad8 R8 =00000000ffffffff R9 =00000000000000c6 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000001 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8bb87a52 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096de3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000056284b320808 CR3=0000000072f52000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b51eaa RDX=ffff88801c7fa540 RSI=ffffffff81b51ece RDI=ffff88801c7fa540 RBP=0000000000000003 RSP=ffffc9000048fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=0000000000000000 RIP=ffffffff81b51ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ee3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000056284b3a8628 CR3=000000000e994000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000