last executing test programs: 2m7.530688666s ago: executing program 3 (id=4125): openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x700, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000000000"]}, 0xe0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000500)=ANY=[], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="dd550bc0120cf27821b04d0803d83fad768dfddb5ef07febb5df1015b9e0578256fb5b2a3f671868461344b06b888b3b18af1c278607000000718b9b90e84a349dd761430753b2026f7e52f9e39e15cd6fafd2999919fd375ee8d670c8e337fcaea52e0885b6c6181faf0367b9429f", @ANYRES32=r2, @ANYBLOB="cd2f8a"], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x40080) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMVOLCTRL(r3, 0x30d, &(0x7f0000000340)={0x23, 0x5, 0xc, 0x87}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x4a5c, 0x2003) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x50000, 0x0) read$FUSE(r4, &(0x7f0000004200)={0x2020}, 0x2020) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r5, r5, 0x0, 0x200000) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1e0000008d000000008000000000000030100100", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000001000000010000000900"/24, @ANYRES32, @ANYBLOB], 0x50) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r7, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) sendfile(0xffffffffffffffff, r6, 0x0, 0x1002000ff) 2m6.756198274s ago: executing program 3 (id=4127): r0 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb002, 0x8d200, 0x6, 0x196}) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r1, 0x4) recvmmsg(r1, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40000020, 0x0) close_range(r0, r1, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0xa, 0x1, 0x106) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x80080, 0x0) ioctl$BLKTRACESETUP(r3, 0x40046806, 0x0) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000000)) r4 = socket(0x21, 0xa, 0x2) acct(0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) r8 = getpid() sched_setaffinity(r8, 0x8, &(0x7f0000000240)=0x2) r9 = gettid() ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0186405, &(0x7f0000001980)={0x200, 0xf, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x2, 0x3}) syz_emit_ethernet(0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c20000001704b45adbde0800450000640000000000019078ac1e0001ac1414aa05009078e00000e0420000000000000000110600ac1414aa00000000443400030a010600010000000000000400000000ac141400"/114], 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000019c0)=0x0) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) write$cgroup_int(r12, &(0x7f0000000040)=0x800000000001e8, 0x12) ioctl$BLKTRACESETUP(r12, 0xc0481273, 0x0) syz_clone3(&(0x7f0000001a40)={0x200000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140), {0x32}, &(0x7f0000000940)=""/4096, 0x1000, &(0x7f0000001940)=""/24, &(0x7f0000001a00)=[r8, r9, r10, r11], 0x4, {r12}}, 0x58) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@getqdisc={0x2c, 0x26, 0x20, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xe, 0x6}, {0x8, 0x6}, {0xfff1, 0x6}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 2m5.03984404s ago: executing program 3 (id=4133): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x9, 0xd75, 0x1, {0x1, @vbi={0x8, 0x8000, 0x3, 0x41416770, [0x82, 0x7], [0xc153], 0x1}}, 0xd3}) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000280)={0x1}) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) madvise(&(0x7f0000463000/0x2000)=nil, 0x2000, 0x17) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x24000000) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x8, 0x9, 0x0, 0x600, 0x80, 0x89, 0x8, 0x8, 0x8d], 0x100000, 0x240246}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) close(0x3) openat$qrtrtun(0xffffff9c, &(0x7f0000000000), 0x100) syz_open_dev$ttys(0xc, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) 2m1.730105153s ago: executing program 3 (id=4142): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x36a0c2, 0x9f667fd378a54ed5) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f076bbee2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000400)={0x0, @broadcast, @broadcast}, &(0x7f0000000440)=0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r7, 0x6b, 0x3, &(0x7f00000000c0)=0x5, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r8, {0xfff2, 0xfff2}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000004c0)={@remote, @multicast2, 0x0}, &(0x7f0000000500)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000d40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000d80)=ANY=[@ANYBLOB="ac030000", @ANYRES16=0x0, @ANYBLOB="000428bd7000fbdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="8002028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="fc0002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400c31136e22c49aba931636fc7d14ca2351c148cf9a35ea1f51797bf5bfd6da4e5889fa073b970a7eee3c0a5f5be73f62b0113f10a971b9385277b7da1520717abc532ab2e05ea044fd936670a0817edc63b769e09bdef4df18bc740f4ae95b37bc4da94b74a15616aeb6e41b3bf392f82475c1fbe5c04ec6828c8f98bfd5835e3e4797e5ee3433ce38da1a21ccca1260ceb88a4523ddc7df566a08cf252e548575ccdbee7b7f5740027d4f430d7b43be11d4d4f96b5fb2bdd22ca9e7a1f34cbb409960adb4cd1efd16f6d7b0deedc9de2c523db", @ANYRES32=r9, @ANYBLOB="0800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000300000008000600", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="04000280"], 0x3ac}, 0x1, 0x0, 0x0, 0x48850}, 0x40811) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r15, 0x1, 0x32, &(0x7f0000000180)=r14, 0x4) read(r1, &(0x7f0000000340)=""/165, 0xa5) splice(r12, 0x0, r13, 0x0, 0x38f9, 0x0) 1m57.660522638s ago: executing program 3 (id=4154): syz_emit_ethernet(0x212, &(0x7f0000000180)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x1dc, 0x3a, 0x0, @remote, @remote, {[@dstopts={0x2f, 0x14, '\x00', [@calipso={0x7, 0x40, {0x2, 0xe, 0x9, 0xa11, [0x4, 0x18, 0x401, 0x7, 0x0, 0x6, 0x1]}}, @hao={0xc9, 0x10, @empty}, @ra={0x5, 0x2, 0x82}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x1c, 0x43, "7af295e2a65b4cb51054b60ab9844c5195b984ee9a8e60f090465886be03b5515e3277bb78949f1c6a608e7e691962124900c9d8b61b9b08d1d97eca9886ab396d749d"}]}, @hopopts={0x3a, 0x19, '\x00', [@ra={0x5, 0x2, 0xfffd}, @padn={0x1, 0x1, [0x0]}, @generic={0x2f, 0xa2, "34196cd7d14a086c0b2da68b0051fe6369bab31155cfd1b8f405f2f9ad480c8dd7b1f31e1c73feace9264d503436b7de36ee5944f3a85744b67154fa9ad5c75444fbc286591aa42b27d3add5af9846d3d292a91e2c04119a6e561e408f09f1fc583252e4de30e28d1eaf152a247ba75b8af4eb80bea93635605b9e585e68036f8ac7f833be1c5abe47adf12f6fa9a885dbaf6bb27eceeb84fb4e23a6e152b86defd0"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @calipso={0x7, 0x10, {0x3, 0x2, 0xf, 0x7f, [0x5]}}, @enc_lim={0x4, 0x1, 0x2}]}, @srh={0x84, 0x2, 0x4, 0x1, 0xfd, 0x8, 0x4, [@remote]}], @mlv2_query={0x82, 0x0, 0x0, 0xffff, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}, 0x5, 0x0, 0x0, 0x6, 0x2, [@local, @dev={0xfe, 0x80, '\x00', 0x3}]}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dev\x00', 0x1ff) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x10) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000000)={0x1, 0x9033}) mount(0x0, &(0x7f0000000800)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x8, 0x0, 0xe4}]}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./dev/nullb1\x00', 0x2, 0x0) write(r2, &(0x7f0000001000)="53464f5ad309e7e5", 0x1000) close(r2) 1m57.442918574s ago: executing program 3 (id=4155): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) creat(&(0x7f00000000c0)='./file0\x00', 0x100) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) (fail_nth: 3) 1m52.68249211s ago: executing program 2 (id=4171): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) syz_clone(0x20a20800, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000)=0x8000, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0) r0 = fsopen(&(0x7f0000000300)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x1000007fd) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) setresuid(0xee00, 0xee01, 0x0) r3 = openat$mice(0xffffff9c, &(0x7f0000000040), 0x101040) r4 = socket$packet(0x11, 0x3, 0x300) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pwrite64(r5, &(0x7f0000000100)="a944ea37911791ea7ba47970ce0187644d31c823cfc9641387a26673e9dc4fd57a6ad953dfa4781ce73f9bc3cf76902e2ac3a2f310123c8fbb8f4ec0b266cbd28e758ab5ca64c823dea339655f06cbe8a584ee573410c844c063a98791f490991d814cf6b0710d8e0efb60cfa8428a033cc896edcb688b6bd2ad619ab2262a2738d5fc58042e0161a0bc55810b249bf7b92e8e08e2b5e6f2de9e474c976cf2605b520bb79ba1ebbee3bcbd96d8c8c9aa0c", 0xb1, 0x1) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0x4, 0x2}, 0x6) setreuid(0xee00, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYRES8=r5, @ANYRES64=r6], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1b, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1802007ffd2f20b1dd156c00000000001801000020646c250000000000200720e44b19e2382bf12759c0a87b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800000000000000850000000600000085000000070000009500000000"], 0x0, 0x10000000, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback=0x24, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x195f, 0x10000, 0xfffffffd, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x7, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r7, 0x2000, 0xfffffffd, 0x48, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa1000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) 1m51.721631334s ago: executing program 2 (id=4174): syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setattr(0x0, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x471, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x1, 0x158}, &(0x7f0000000780)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_setup_queues(r0, 0x0, &(0x7f00000007c0)={0x0, 0x6a1a, 0x2000, 0x3, 0x185, 0x0, r1}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7f51, 0x8000, 0x2, 0x2d7, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbfe3, 0x4, 0x1, 0x272}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa471, 0x100, 0x3, 0xd1, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe0a5, 0x20, 0x0, 0xaa, 0x0, r1}}], 0x4, &(0x7f0000001d00)={0x2e, 0x30, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, '\x00', {0x2, 0x6d7, 0x0, &(0x7f0000000d00)=@buf_4k="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"}}, &(0x7f0000001d80)) syz_ublk_add_dev(r5, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x56, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x6d}}}, &(0x7f0000000480)=0x0) r7 = dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x8, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000480), r9) syz_ublk_setup_queues(r7, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x251, 0x0, r1}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x20, 0x2000, 0x1d1, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x3, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x30, r7, 0x100000000) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e4000000000900fe5da7ded000000000000059ec8303cfef91b9000000000000000000008f5be75bf9a94245178c408cddc2c6cf7a168d68e9b59506ad7658f50a68adc6a1b1c092a82dca67078024ce823e88b87d4df9de10a449440a54227bd08cef4cb0630c6c148e3e6d2d4f4b0309fb098e64fec121e746b4d0f6e001912b795692899d874833c8172f1423b330f25e13c0"], 0x48) ioctl$BLKREPORTZONE(r7, 0xc0101282, &(0x7f0000000980)={0x7, 0x3, 0x0, [{0x7ff, 0x0, 0xe04, 0x3, 0x6, 0x20, 0x8, '\x00', 0x10000}, {0x5, 0xa3, 0x8, 0x5, 0xe8, 0x26, 0x3, '\x00', 0x6e5cd63d}, {0xfffffffffffffffa, 0x765, 0x329, 0xf, 0x6, 0x4, 0x0, '\x00', 0x942}]}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc04c565d, &(0x7f0000001dc0)=@userptr={0x2, 0x2, 0x4, 0x80, 0x101, {}, {0x7, 0xc, 0x62, 0xd, 0x2, 0x9, "deac681d"}, 0x703, 0x2, {}, 0x0, 0x0, r7}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4, 0x2, 0x0, 0x0}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 1m50.746233318s ago: executing program 2 (id=4177): r0 = syz_clone(0x82020000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='smaps\x00') syz_usb_disconnect(0xffffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m49.699371908s ago: executing program 2 (id=4179): mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000680)="000400", 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/subsys1/namespaces/1\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r1, &(0x7f000039e000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000080)={0x1d0003, 0x0, {[0xffffffffffffffff, 0x0, 0x8, 0xfffffffdefffff16, 0x3, 0x10, 0x4, 0x4]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/nvmet/subsystems/subsys1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/nvmet/subsystems/subsys1/namespaces/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1a4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/nvmet/subsystems/subsys1/namespaces/1/device_path\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='./fi', 0x4) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x50, &(0x7f0000000100), 0x48) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4038587a, &(0x7f00000001c0)={{r4, &(0x7f0000000040)='configfs\x00', 0x208101, &(0x7f0000000080)={@align, {0x6, 0x8, 0x45, 0x7fffffffffffffff}}, 0x5, &(0x7f00000000c0), &(0x7f0000000140)=0x5}, {[0xc0, 0x0, 0x1ff, 0x9]}, 0x262, 0x31, &(0x7f0000000180)=""/49}) 1m48.857148175s ago: executing program 2 (id=4183): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a", @ANYRESOCT], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48008) 1m47.764320792s ago: executing program 2 (id=4185): syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setattr(0x0, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x471, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x1, 0x158}, &(0x7f0000000780)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_setup_queues(r0, 0x0, &(0x7f00000007c0)={0x0, 0x6a1a, 0x2000, 0x3, 0x185, 0x0, r1}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7f51, 0x8000, 0x2, 0x2d7, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbfe3, 0x4, 0x1, 0x272}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa471, 0x100, 0x3, 0xd1, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe0a5, 0x20, 0x0, 0xaa, 0x0, r1}}], 0x4, &(0x7f0000001d00)={0x2e, 0x30, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, '\x00', {0x2, 0x6d7, 0x0, &(0x7f0000000d00)=@buf_4k="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"}}, &(0x7f0000001d80)) syz_ublk_add_dev(r5, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x56, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x6d}}}, &(0x7f0000000480)=0x0) r7 = dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x8, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000480), r9) syz_ublk_setup_queues(r7, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x251, 0x0, r1}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x20, 0x2000, 0x1d1, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x3, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x30, r7, 0x100000000) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e4000000000900fe5da7ded000000000000059ec8303cfef91b9000000000000000000008f5be75bf9a94245178c408cddc2c6cf7a168d68e9b59506ad7658f50a68adc6a1b1c092a82dca67078024ce823e88b87d4df9de10a449440a54227bd08cef4cb0630c6c148e3e6d2d4f4b0309fb098e64fec121e746b4d0f6e001912b795692899d874833c8172f1423b330f25e13c0"], 0x48) ioctl$BLKREPORTZONE(r7, 0xc0101282, &(0x7f0000000980)={0x7, 0x3, 0x0, [{0x7ff, 0x0, 0xe04, 0x3, 0x6, 0x20, 0x8, '\x00', 0x10000}, {0x5, 0xa3, 0x8, 0x5, 0xe8, 0x26, 0x3, '\x00', 0x6e5cd63d}, {0xfffffffffffffffa, 0x765, 0x329, 0xf, 0x6, 0x4, 0x0, '\x00', 0x942}]}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc04c565d, &(0x7f0000001dc0)=@userptr={0x2, 0x2, 0x4, 0x80, 0x101, {}, {0x7, 0xc, 0x62, 0xd, 0x2, 0x9, "deac681d"}, 0x703, 0x2, {}, 0x0, 0x0, r7}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4, 0x2, 0x0, 0x0}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 1m46.986249268s ago: executing program 32 (id=4185): syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setattr(0x0, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x471, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x1, 0x158}, &(0x7f0000000780)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_setup_queues(r0, 0x0, &(0x7f00000007c0)={0x0, 0x6a1a, 0x2000, 0x3, 0x185, 0x0, r1}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7f51, 0x8000, 0x2, 0x2d7, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbfe3, 0x4, 0x1, 0x272}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa471, 0x100, 0x3, 0xd1, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe0a5, 0x20, 0x0, 0xaa, 0x0, r1}}], 0x4, &(0x7f0000001d00)={0x2e, 0x30, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, '\x00', {0x2, 0x6d7, 0x0, &(0x7f0000000d00)=@buf_4k="f8917550b4edd73474d5d555968d2757ba067c8787526ff39ffb78db2a4202d9593a71ea0cf6f739ba71c958b297250544b3080a54edca4f8d1d4d45184d72eefcadbe703536f45820ad76ca7dddd1328e33db80d177b21669409f17699f90d68ec5db04f53872d5c7e56b5f83febfea783c4550080274f9d12f16237278b4d5d129832f82970a75aa818be034417a94229e9939255f2ba0918212b3ba8224687a2e09af714407a46d8197d880dd3b559ab5dc049362292331bd079057622b0418a93e713f4e4db11f19caebd4bcb00d5eaeca7fd3c4a785197d5b8901805ac3ef11a6270d2c11ecb106e6b03e77889210c2f60f83b5ca5e113a7409ea5d2b3c085a3080f98a5b02a11763066b8b8a1acfc0cbeed49d692078c372b19e122384c55aff3c46cf047fe8568650bdb080de7f673fcc8d33be2ecabf140c9fadb40f552fba80517444e628b5c00a6486b16485489d47a9d52ac38ecb65895eed5cb30a1037912e3e3c11634bf7caa20dd4ac8260246316569032f7803adfca810ccbfcea76aec40a8bfa6dd64d5a674becb48d96b3790316e2eca2c42505b1e443b1e64d6621e306a0fe1280546db6066d69ea327fdb78183259d160bca980a3a822906d8222c630f563987fd8d1599de6559d5b497fc0c84e8115a1677ebca98ddaa24616b59a0ffd23c401f63f966c6850ca1661a76bea61ca7bde0a7e9b0b1bcdccfc48bf2726a6816f656c78e7cbb047002553916c65d7eec49fe217d9ce767b338430baf54abbda2b9a8dad21f034642c79fc357b92c644b3ec839c29d8ac8c53e38ea84ff9dd57dd9239ec156ce2aee5188d668f80e0255e75564e004957a9f5fa99523580099e986421fb16864417b98798bfe49e32dc0ddb26220da4e62de6f44a315a0e904aa4c0d8ed77f087507e04f4ca9c8f5a1918ba1b65a7da39e8624b06e8b0f76f0299188ea3e28317d1e4c2ce3898961c093fb298be0c47ddfb2fc5377514eaeefa3f3cc03fa73f8d205fd6bd8a243a29c793afa24a490e73b87f218bcc17cb3df903a0819bc0373daf793c803c14c5af8ea5d6b5b0c1bbd5e27fd3c6d2ec728fcf4b13b68b5cd661b683a801dc225049d83f76f6c3db13cfc8f13e9693dfba17f7088f8ab6d389dcd52afe03037f9ccfd45787248f2d7bb32376d2a00a618c7e774b999cc213b16bbd4f49f2115e1a58ee91519b234a40a9eb08159886f0eb83813dc17bc1d98a632669c1e86def9ea082620b15bf0e3a0a0972b8c3de8ee81d1a32932ce4d28d83659425c1d864193c5a09b8cd789a2b00dd803985453fe07682cfd8c57feb583ebf30ff93afbedabbfecefea2ed903f3621e21c54fc76d5a78055367c3acbe0f3605b53294ecca41ce57b791c8ac1b40b8a0ad5848295af35969de0090a9636c3004e339a8ee2f9b7dfbd28a5337f03e924fcdf5d6342b4c3c10efa446cb72e24bf15ffaf3eeb1fcc602f07bd372e04f9f12406cac70c18b3e25717475061c2686d243abe565b2e3c2c986f0d475f61647f1b41b39d127cbf94d64dc6bbfb95cc7d3ad77a0bf4c256fa55551838ce2f7f37ba98091a38059cc754fdc982eefa88a9105ba705ecc8d948211fd95590500697aa9a7bdeb7ab78cc1cefb937af439f36826fee3e71542dd106b63055bc7f1ad64923ce10d1427019ed42a5e2e47dd9e6f60d9f15c51f06d4f82526c6c9420234b9ca52c830c7795462effab973d457f0a97adb389ba9b1b55c7c5989dfb20eda54a685845c5cefc1a55466947b49058a8effa02111efc94d51b945b0e5d01e254c551c4a8651fc51f84ccc88b796d5cde7ca17f6f95ebe0274a7b951b4952a53854c74c328d91a0b9def476576bc2558c8e191ef0235df4691fa62915fd57ae78eaf06d62298273fcd1a0ace7e9d10ddbc9b7dc762c20a656b8bfe8776d1784b5100aa667e8391a20e0ce0740e2fe603e0bb752b6a82dedb3e4bc1a596bec379e8a6ef86c003c0e1d7abd5adde6c253195ae9efa7b877fd054417ee6b36367150922794fcbefcb786aa3794407273d6a203b352d2b2931016b8866ef238d68e2fc8f94900049a1439674e700502c696cf5a2374166d149db5f78af08f37edec9a96d586920b9c3e44988602c176218a200157eea9e99b7f97973cc01c07b2685c31444df028772982616383109238f4f24df05da25414fcb4f9b395cc8eeb8b7ea3bc78ecba1df1339f0e18432a8f686a7af9a416845be9584ba7a081982462f2e4c64269f38cc7c279b05f8c822d5c81b293ee9cfd978e468734e8ad167c10dbd1affbf7b26841960aff8b6b69a908d4a003f95864ae4c1aacb430f7808210a09ab8382431d6436f3859b2367fe2be8b4a6fd4ab4fc305851e4f3350e42ec4172484bb0763b1b551e1afc7a7c7fe1a1ed832e6d1222ea21ce82db4773875ff70329566d32c7f185ff350b55eaab37783ea3948058da91c2636fc9775057c414067181eeecdf9d66cb18af5f4c92b4603897acc9be4d8aca9a79de1dab313961c6cf26502c0eb3a43c1f55b07e9a611c9363290aff085c6abe4cdd02740c58481976a735a19e95b2ba4a54ad311fdf6132c57362377c573b909379c03640824a2c2c34f79d570664e9eb4ef5511e0dd52fce6e761568851d356c4beac8e647221e3774c43bcc2a713134fb0521a635a8d8d510f91e3929f8c01901ac4ce0ee16dabfc4676fa05581b1f130bacc9e60e9eb9a9a86b82364f6305517fbf8e2e6ba97bb7c1fe3dc3cfe735bb272d21f20a8ddf00fae7381a086e11da2724bf4cb33a297eaacf1a3c4f82daff7ea77598a3fb37854c0ef11a32fd0c1daa113ae251f1f2d29558418bc686e391da7e4768859c2a46cfc766cb0f2a74aff63c2b3a8be83b2e777b98ac6f56e13bee545e89b599dfbfc527a5d101e2da20e793ee67c5dab27f32a53a04cf3dea64d2e2fdd784eeb51b80e07eb7af52b6a53482b10e989cf8b2f931bfb60a0c4f1bf90234ee38360ab16d290555180d7b5ec0e7178a4d0e973ae70fe8701ac346e9e550e58366c01231199068b977a0c6a91c4f4d95e20e39f63dc9bfe4d63e8a29e3355426795c674002cad2d35da3b2cf94a3c12ce8f364fc139be849f8b91364edf1eceaa01e4d5a44cf95cc1a471c1e684da932cddc2ddb08bd5f79b0136d9d4590ddc821633e12c70f7d5656ec370be70f2986494ea37fa98de544796b56ce442a03f96dac61c78de52b5710d4d616e2bead0b7fba20d55e33791c2ce0da4c47be2a3549541b220f999a4ab94784a5b326da4e09f82f3682f1a6be3105339f8f925755fbb0140a84c04e463af62a71e9d85f3f27fbf6c40a5eda551450edbc99fdae07122207b55ede1a6c5fb19a30e6ac25cafa95287fc43e043fa8d9f2d666ba9d3953734127ead785af2c0f81170126166a14fe3a959b3389c3d52c56117c2e3d33b91e556029b59f23addf66263d473d88d94c2fa6b9e84b4921fc68a224b6949e7fd5da4c5d7a144a2d5f8dd2117c666f1c838589ae01924cdf2d96dc7072b103c05b3d3d7cec5fef05c1b3786203afcf35cd6f8499c104d57175ff42b8a0e53824f2e84beb3bb424b77eccc68dd2486f92d95433c5bbb8eb3e56900d4404b0a7995ebb2bcc965d818a3ecaf171070aed6f72c2c5e119d5d9cd9436f35d28cf7e39417d7b35840bd9ab3d22eda0ba74b957ee92a962d65c14dd2e9804f03130e4db4242c69b6129d97f98f0d3e8b52839ef4d408f20f78a89b340fd88953535eb54da54fd976a1f161282faea6a5522631415e283dd14ec54dd066453f9ff0dab58ca19cb7609eb29269bc18a943d3cd5c0a1c14ea1e96ba92ffceb6f38723575bee3fd9ccfbf4d53469d5b39994c40d1ad1700c15c35fa3f0d64496332f6ffcd2f2ec4af2a16bb09fda5c6a31bbe18a3020a516af72cd1262d8ffb96bdb63a192b9d1d624f6c946279243593f679ddce2b99fefbe7c375bcedcae3aac86accf88de033a8f36b77c3324a64f84aed478e83b729b3d91c000da4f7dc00924ecf2c40ad8599c56e702cc604a02df286bf08bcecc126f91ac87535020b6717a4b3d255b9b6109e8e2d7ce9a3457ab39d4cb09efc27910a147d46ca49e5489202fa718e0a6f4018cb3243d147e6b0af6f734fd38400e7ff4e28402b56128a7cb1bb1e13282077441b6b175b07885e3c493e25975f9e142a505f0f8a04485b8842344ef7d867102ccc55cb5aca2dd21b5e3d300ae753c1cad3eef62d4963c1e426759454ee4efb98e1e5163e9e8b5a99596104cb69c45fd2b3da903643c742d158e1d1b1577a8b2086507f0593b638edfb3f03554b33c75a9ab5b66ee1d66a5a8b185d9405e65c660c1d931c6bacf5273ec9d98c1369e1aa95a856e0c926e57b0be117d9b0e496a0390b05df58604e14320e04e9a0322f5ada33e1a2b55758dee7bee40ba538ac52bd4f7ff3f1c88949501456bbb9ed8bcc47695bc389a0898f7444d61f4a27e42757a60775954b564f9cf069f450c05069eea50fd8183b33d96eddbc9150ff366c0b17d38d4e43b334e16b130ca5d1834da0203845e30c788f7d2e0977da1639754439cea88ae82110a07c239c38579807a756190c5842b3075149920a6fe4fb3be9fa01792823ce27068999ba47621c008536c22ca2f27559a704b9ded5254a59cded012c07de5b700e2ea28372a62c648c2f706bf0f2feab1360fdf752e80386a7fdfc53ba1b6fa69b6cc564a4d73292603b2b0755deefec16fbf90840b293f8659fa60cb77c329393aee3122b2bebc3716f2895caff2df45e5b2991f712819bff4cad15e8594dd2bca5ea7dfaa1106fd87a2d4ae7ac90f41658a236ff52e0e7440aaba63881fb66c6f2d89d490df0f037654aff5195dd951eb9311789ea95beda1b6b1488463dba98679a995277f85134805cd598b55b67f8c3c0ccc2c670016b1d19eb8b6dc015cc3dcd059f7b104df28b04188dc38a240b220a2e0b88605339eb2750e308e2128a911d160b47d439542a15578ba2908fd224acc1dabeb6377bac81c9a4f13ece87cc9c097cf95faab8cd67156453569db44d168aea92d2e8ca578a4a89d30e4ce8437be54b14b2e7759e1b35b78bff962c3fb1b3b3906014877669b982b078395d2bc752dca09547d2f5d5f9c40a4d9b8565504a8ca64c6213f064cc5bf3dd193351a074d5ce7d1c41b5ab8eec42a3d8eb0a49f05457171c8d7b8698f7dcc3cfcdefd4b590d10d769faafb74dd1dfcf747eecc8981efae39fb4d34a36f9fba1fa313a2e149a9457fe2bbbe206bd11515797c633fc1fedab5a0b4844eae21febb8c4f7f7aba4e92b77ac6d0939c04ed345aa24d072d73a277f3fa009953d413172475165afe5be24ef849c33f9c26d240f037226e1541a3ef4137a7539b4ee781fae52152936dfc5667b3e274d62d70abfc8134762fa66e93e47775f1fd85740719d7e95ed2729a8a4ed353d28d4cda5f967a5ddbca46409cd17707436985a3062fb5e9f925cfa0f55b49931cbc080a1f4e070aac88170a5324d421ddd82f8a5bba37e8d2e0a91ad891945c65bf4aaef07a3148f35cd945150a3e0965aa5bf94f35a07eeec786f97747a872ec77e7c8eacbb6e8257824d9631645a7b2e10fb180962af0f7b56da32f9923d30fa28d94086adcb59a03cb3534bc9fc19689b9a3d1cb63ea6dd0d26ea32fde0f6bfb4f1605042e767eddab35d6c2167d1915876bb427233f86152e73d9dd4ef9523f317931d0558c9045941acc5a635e4b75c9d17ab88ac084e"}}, &(0x7f0000001d80)) syz_ublk_add_dev(r5, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x56, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x6d}}}, &(0x7f0000000480)=0x0) r7 = dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x8, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000480), r9) syz_ublk_setup_queues(r7, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x251, 0x0, r1}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x20, 0x2000, 0x1d1, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x3, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x30, r7, 0x100000000) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e4000000000900fe5da7ded000000000000059ec8303cfef91b9000000000000000000008f5be75bf9a94245178c408cddc2c6cf7a168d68e9b59506ad7658f50a68adc6a1b1c092a82dca67078024ce823e88b87d4df9de10a449440a54227bd08cef4cb0630c6c148e3e6d2d4f4b0309fb098e64fec121e746b4d0f6e001912b795692899d874833c8172f1423b330f25e13c0"], 0x48) ioctl$BLKREPORTZONE(r7, 0xc0101282, &(0x7f0000000980)={0x7, 0x3, 0x0, [{0x7ff, 0x0, 0xe04, 0x3, 0x6, 0x20, 0x8, '\x00', 0x10000}, {0x5, 0xa3, 0x8, 0x5, 0xe8, 0x26, 0x3, '\x00', 0x6e5cd63d}, {0xfffffffffffffffa, 0x765, 0x329, 0xf, 0x6, 0x4, 0x0, '\x00', 0x942}]}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc04c565d, &(0x7f0000001dc0)=@userptr={0x2, 0x2, 0x4, 0x80, 0x101, {}, {0x7, 0xc, 0x62, 0xd, 0x2, 0x9, "deac681d"}, 0x703, 0x2, {}, 0x0, 0x0, r7}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4, 0x2, 0x0, 0x0}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 1m44.712265117s ago: executing program 1 (id=4192): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r2, 0x40104d00, &(0x7f0000000a00)="0000020000000000000002") (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r1) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000200)=0x1) (async) sched_setaffinity(r5, 0x0, 0x0) rt_tgsigqueueinfo(0x0, r5, 0x2f, &(0x7f0000000700)={0x27, 0xfffffff7, 0x592}) (async) sendmsg$nl_generic(r1, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x1c8, 0x39, 0x800, 0x70bd27, 0x25dfdbff, {0x10}, [@typed={0xc, 0x8e, 0x0, 0x0, @u64=0x2}, @generic="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", @typed={0x8, 0x1c, 0x0, 0x0, @binary="49c0dffc"}, @typed={0x8, 0xc2, 0x0, 0x0, @pid=r5}, @generic="58bbaef5374d92fd9276f39256593e46b0d8856c7d7d36df645c4dd3df3c384b1274c6ac41519aac06d3f44d0ca859c6b313a42bed23aa4a7cb22eccab1bdb510af9bb4ec534849b103d0eb69938b532c3fd3d5095c5ed19fadad41d7d398ea44d2e64ce4a8a4dc06c5a733e930eecf0de5370ccb95c02913748d325359f78f4296d9b6c65e68c4f2a9895b2c330dfc4482757ab745c56eb72b27fa7"]}, 0x1c8}}, 0x4) (async) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x8c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6880}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1e2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x244c1683}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3e7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}]]}, 0x8c}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) (async) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlinkprop={0x60, 0x6c, 0x100, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x10804}, [@IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'vxcan1\x00'}, {0x14, 0x35, 'vlan0\x00'}, {0x14, 0x35, 'veth0_to_batadv\x00'}]}]}, 0x60}}, 0x40850) 1m44.441137333s ago: executing program 1 (id=4193): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYBLOB="00000000100000001c001a80", @ANYRESOCT], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48008) 1m43.968035215s ago: executing program 1 (id=4195): socket$inet6(0xa, 0x80002, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0xc0101) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x2}, 0x2) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2}) ioctl$VIDIOC_QUERYMENU(r1, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000200), 0x80000002, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="58000000100001002bbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="e9240e859ab1d16da4a6836139ddab7f483f87563a5f060467b0153673f08af5bb4c6d5d0fb79e3e3aa3b229d4aabd5b2c601933c13ba9d009b6c1d4a756a7047533b6b4ea0c12be66d324d99e0bcfe18d5ec27bcf3d7a6a098bc7f53264afa6f049fe78da5d942dddd968db42e689d33eb1a7f33e3dcb86f49b32389d1b00208c04d5efb523faf65469a6c8e9e669374465f09662f8adf6ea4bc22dff735f89ecf05900a8aebd65c71f185fd342fa5ed2969bbe2eebe64198dbb3b4a880c15856e4a5db83377832799adfc7fd413368e6d7d89fe09a4a72b226f47a0484d44a7cd3b469a495522080"], 0x58}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) ioctl$FE_DISEQC_SEND_MASTER_CMD(r2, 0x40076f3f, &(0x7f0000000040)={"824ca06c4e58", 0x6}) r4 = syz_open_dev$sg(&(0x7f0000000300), 0x4a38, 0x141000) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000140)={0x53, 0xfffffffffffffffc, 0x0, 0x20, @buffer={0x0, 0x0, 0x0}, &(0x7f00000001c0), 0x0, 0x1000000c, 0x0, 0x0, 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4870000000000000200000000000e0ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f55ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf3ed410f6accd3641110bec4e90a634199e07f8f6eb9604000e011ea665c45a3449abe802f5ab3e89cf6cfdffffffb8580218ce740068720000074e8b1715807ea0ca469e468eea13c9a77e1c89c5082a703fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea7042ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850bf895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2200af6c7784a1975fabc0c4dd418c005479ecab19bdfb15a32a4fd67ce446adb431d7e74853b7978639be2463308af07db79240acaf0910300000077d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061622718551c20ec23812770d72c700a44e113d17088fdd00600000f7889b8d7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f740586903500090000000000000000be34b10f9d640dd782ac0cbc0abcf72846903243d0d0f4bc7fb0a0d7c5000032daaf281c450e64c33aac8ff7e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae1d39c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b4bfaf5a6b649dd5f13cd776e6c7c4b5c4b0de20e0c81efb5e392a13cdd2ce219e6733b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e863fef0ad9d1ac32276cffe5f1fc21390797d0244cf1ce269d10525745caaa3f77d1b80116cb385a0242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2424ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd911e0e5f00019be25b5910a3193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f55136628090702f70000d0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c685492a1689ad4218cea744b332ab232a09cf1ec375627074ce2d3d7619936768a84a1465fff4610cf8838b28319e0f79533d87eedba55955434f132ab7b8840558b3f918d675a79907a72a8252cd3fbaea5d3006a03507818231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f278ea00cee8a2088359946e726aef83d9ff9281ab79625e2979fe689a5a246cbbdf6ad488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc856df0000000010c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d0e68d7eef5d32d5fcc7923d7544fa492aa38717481c55e86dcd7816ad8940bd19953603000000adeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016be64dc097982e23462392a0cd05afb2e060fd6424a942ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1af45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5d81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b1495213060000000000000049584655c4fce8c5bb7c54664aef6d780100358aa54bcb49926c4be9ee4659153d9fa95d07cc4efdab2c355efe8e8d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6122f572047ccf3c8edd82660e5d74c52be71d780c30000000000fd00000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f2def52394db3e9d8318bbb9baff3db95bfd69e08ded502cc08a485c804e4fd107a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d05b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b0d87a6ed800000000000000000000000000000000006cc6f64f583a26a78f7f417f66c0a832f5194ddfce51e5aff28f621bb2fd2a5ab719df823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c3348329b0ee77d93596e3f1287552e0c8cdb326c5118d2e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e26aa90c571fa3c07238697b13c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170e42f28cea4105541e11c8605628b9ca935bc252fee8b596a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babb8fa16f3182c5b98493a5aa943aa3a777a751f56e0c7a74f7f63d83ff119561acd5fe560563b051dc29ac586b21148ad5a5498369ac347d19660c132b1df58d65418bc824d8b88b699462c2ce6524eaf0905445413033f041a26b189f2553ef218eba22152a4dc979a0e37396ae1a2883b1e4d44c8af7973d5c1f286c26459209db5a9a51dc69d0ba3fb6c884e50be3598ac53295137c97dabe52d98fed0b352c0b68b7e75ed59931ef57bb5fc28d5b1f914fc8abbb444637a5dfbac5035eb0713efb823360a8da80e4265e599f76952a8082b8c5f7890275a922cd2ccaaf75dcca6849e89e1bab32fe9b598c61d7565dc6ab0a6d43b60f8d08ddf27a286807692d18973edaa6d5401c79b3cafaab4a8d6c946cbe5de350000000022e16a5f72c6d41dc9de8517fdcfa0c0efca880257443cfc3057c353569ffb1588b4bb261a6e99c5936e1b4339d87ec84db99e797f44451fc6b5da1950d24b3d4118f2288804740e605500c1f493c7dc42164cc6c1b01a329ce95272a07a355d4ba705b5e71ce5e1042a0c638e565881e5eedbc62f79407b73ae787c9cdb752eda44aeef962c93ab245f61e8ca5c0d41cc56124840f1b2b30be599fea0afaf905f90dd3e55fef0b94afbfd7144b7"], &(0x7f0000000140)='GPL\x00'}, 0x94) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x6}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100d1000000fbdbdf3a3300000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4008800) ioctl$UI_DEV_CREATE(r6, 0x5501) ioctl$UI_ABS_SETUP(r6, 0x401c5504, 0x0) futex(&(0x7f0000000500), 0x20a, 0x2, 0x0, &(0x7f0000000580)=0x1, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x18000000000002a0, 0x11, 0x0, &(0x7f00000002c0)="000000952ba300"/17, 0x0, 0x6639, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m42.782497089s ago: executing program 1 (id=4197): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, 0x0}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x8010) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f0000000640)={0x0, 0x0}, 0x10) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dd, &(0x7f0000001500)) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a40), r6) sendmsg$NLBL_MGMT_C_REMOVEDEF(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, r7, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) (fail_nth: 3) 1m42.403991896s ago: executing program 1 (id=4199): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) shmctl$IPC_SET(0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000006c00010026bd7000fbdbdf2500000000", @ANYRES32=r1, @ANYBLOB="00000400088004001400030064756d6d79300000000000000000000018003480140035"], 0x4c}, 0x1, 0x0, 0x0, 0x6}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) fchdir(r4) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x25) rmdir(&(0x7f0000000000)='./file0\x00') ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x3, r2}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000400)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) kexec_load(0x7, 0x0, 0x0, 0x150000) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001340)={{}, r6, 0x4, @inherit={0x80, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000700000000000000e70e000000000000018000000000000016000000000080000010000000000000040000000000000002000000000000008130000000000000ff7fbf461af80057f5b400000000000000000000000000008c440000000000000a0000000000000002000000000000000600000000000000"]}, @name="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"}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000940)={{r0}, r6, 0x2, @unused=[0x2, 0x15, 0x7, 0x9], @name="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"}) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100fbffffff0000000001000000000000000b400000004c0014fffffff062726f6164636173742d6c696eeb00"/98], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x40) mkdir(&(0x7f0000000080)='./my_configfs\x00', 0x1bf) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1c0) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040cd0607010001010203010902350001010080fa0904000005ff00000007058102400001070501024000010705830240000107050302"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyUSB0\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x103843, 0x6) 1m42.269298868s ago: executing program 33 (id=4155): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) creat(&(0x7f00000000c0)='./file0\x00', 0x100) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) (fail_nth: 3) 1m38.774229141s ago: executing program 1 (id=4204): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x0) inotify_rm_watch(r1, r3) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 1m23.406378481s ago: executing program 34 (id=4204): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x0) inotify_rm_watch(r1, r3) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 12.811539157s ago: executing program 6 (id=4438): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x7e, &(0x7f0000000500)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0xfffe, 0x0, 0xf5, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x21, 0x0, {0x15, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x3, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x37}, {[@generic={0x82, 0x9, "0658633d10b523"}, @timestamp={0x44, 0x8, 0x48, 0x0, 0x0, [0x5]}, @timestamp_prespec={0x44, 0x2c, 0xee, 0x3, 0x7, [{@multicast1, 0x3}, {@multicast1, 0x7fffffff}, {@multicast1, 0x5}, {@private=0xa010102, 0xffff}, {@empty, 0x1}]}]}}}}}}}, 0x0) r1 = gettid() sigaltstack(&(0x7f0000000000)={&(0x7f0000002b40)=""/4087, 0x0, 0xff4c}, 0x0) rt_sigqueueinfo(r1, 0x21, &(0x7f00000002c0)={0x3d}) (async) rt_sigqueueinfo(r1, 0x21, &(0x7f00000002c0)={0x3d}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x600, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {0x10000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000080), 0x240280, 0x0) (async) r3 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x240280, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x12) 12.709854831s ago: executing program 6 (id=4441): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000340), 0x80000000, 0x2) pwritev2(r4, &(0x7f0000000600)=[{0x0}], 0x1, 0x25e, 0x1, 0x1) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000e00)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 11.630672275s ago: executing program 6 (id=4446): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mprotect(&(0x7f0000895000/0x3000)=nil, 0x3000, 0x3000005) (fail_nth: 1) 10.863202706s ago: executing program 5 (id=4449): socket$igmp6(0xa, 0x3, 0x2) io_uring_enter(0xffffffffffffffff, 0x21, 0x20, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) socket$inet_udp(0x2, 0x2, 0x0) socket(0x400000000010, 0x3, 0x80000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x0, 0x6c, 0x0, 0x0, 0xaba}, 0xfffffffffffffe97) socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix={0x81, 0x8, 0x4f565559, 0xa46bd5e7b44fc29f, 0x1, 0x103, 0xa, 0x80000001, 0x1, 0x4, 0x0, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x2fa, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x0) 10.750080401s ago: executing program 6 (id=4450): socket$igmp6(0xa, 0x3, 0x2) io_uring_enter(0xffffffffffffffff, 0x21, 0x20, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) socket$inet_udp(0x2, 0x2, 0x0) socket(0x400000000010, 0x3, 0x80000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x0, 0x6c, 0x0, 0x0, 0xaba}, 0xfffffffffffffe97) socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix={0x81, 0x8, 0x4f565559, 0xa46bd5e7b44fc29f, 0x1, 0x103, 0xa, 0x80000001, 0x1, 0x4, 0x0, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, 0x0, 0x0) (fail_nth: 1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x2fa, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x0) 8.904488156s ago: executing program 4 (id=4452): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$comedi(0xffffff9c, &(0x7f00000000c0)='/dev/comedi2\x00', 0x80340, 0x0) ioctl$COMEDI_INSN(r0, 0x8020640c, &(0x7f0000000080)={0xc000002, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') socket$inet6_sctp(0xa, 0x801, 0x84) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net/dev_snmp6\x00') read$FUSE(r4, &(0x7f0000000400)={0x2020}, 0x2020) r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)={0x34, 0x0, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000804) ioctl$NBD_SET_SOCK(r5, 0xab00, r6) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xd) 6.828585423s ago: executing program 4 (id=4453): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x2}) io_setup(0x2, &(0x7f0000000000)) r3 = add_key$keyring(0x0, &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) add_key$keyring(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, r3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e000000fdd672bad09dfb78c7699874e891a0c7f120ffffffffffff000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f00000000c0)={0x0, 0x4b, &(0x7f0000000040)={&(0x7f0000000180)={0x58, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x58}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x44004) r6 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000002}) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x21e) syz_open_dev$vbi(0x0, 0x0, 0x2) openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x8ec02, 0x0) 5.251515317s ago: executing program 4 (id=4454): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x2}) io_setup(0x2, &(0x7f0000000000)) r3 = add_key$keyring(0x0, &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) add_key$keyring(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, r3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e000000fdd672bad09dfb78c7699874e891a0c7f120ffffffffffff000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f00000000c0)={0x0, 0x4b, &(0x7f0000000040)={&(0x7f0000000180)={0x58, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x58}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x44004) (fail_nth: 1) r6 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000002}) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x21e) syz_open_dev$vbi(0x0, 0x0, 0x2) openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x8ec02, 0x0) 4.233572883s ago: executing program 6 (id=4455): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) fchdir(r3) sendmmsg$unix(r2, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408d4}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004}}], 0x2, 0x40000004) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'bond0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2104048000004300"], 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYRESOCT=r0, @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300cfbd31600eace5383825d6a175e4db0256dd13049d3d3c7d01526821045f68f6872c43cfaf52070e2f070000000000000014d5a580b87fefefb1d69541739157a446ca6e8a17bc0689daa03615b068ae9d13fd3a47e4447d1e21563b2df0e625cfd61b8bbf1104cdb2662824605a0744af46054054d6edc9717e652b034d84900d56f15a8b3914c06e4443c4ed4162a91bf59e47820040a786b3aa08510f8bb4fca782970cd8b64ddbb53d38b94fd4f219f06785fe941009bd7753689b847ed88f6d5b07d4797e77f466ebd000574043", @ANYRES32=r4, @ANYBLOB], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c004000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @random=0x401, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @val={0x4, 0x6, {0x7, 0x8, 0xfffb, 0x6f1}}, @void, @void, @void, @val={0x2a, 0x1, {0x1}}, @void, @void, @void, @void, @void}, 0x41) syz_usb_connect(0xe7af3cf0599a7105, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc0045520, &(0x7f0000000080)=0xffffbf7f) unshare(0x22020600) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') syz_open_dev$video4linux(&(0x7f0000000080), 0xffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x9, 0x7, 0x7, 0x2, 0x3, 0xffffffffffffffff, 0xfffffffffffffff7, 0x34f}, 0x0, 0x0, 0x0, 0x0) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$FUSE_NOTIFY_POLL(r10, &(0x7f0000000140)={0x18, 0x1, 0x0, {0x2}}, 0x6a) splice(r9, 0x0, r8, 0x0, 0x18, 0x7) ioctl$NS_GET_PARENT(r7, 0xb702, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="03000000", @ANYRES16=r1, @ANYBLOB="00012cbd7000fedbdf252e0000000c00990000280000120000000400d0000a00c8005050505050500000050019010e0000001e00940002001d0200000000000000020006000500000008000100000003000010009d00"], 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) clock_gettime(0x3, &(0x7f00000002c0)={0x0, 0x0}) nanosleep(&(0x7f0000000080)={r11, r12+60000000}, &(0x7f00000000c0)) 4.091411968s ago: executing program 5 (id=4456): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pipe(0x0) r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x2) 4.033813413s ago: executing program 0 (id=4457): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xa, &(0x7f0000000640)=ANY=[@ANYRESOCT=r1, @ANYRES16], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r4 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r4, &(0x7f0000001180)={0x2020}, 0x2020) rename(&(0x7f0000000580)='./file0\x00', 0x0) symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x8040) request_key(&(0x7f00000011c0)='big_key\x00', &(0x7f0000001200)={'syz', 0x1}, &(0x7f0000001240)='\x00', 0x0) (fail_nth: 2) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)='G', 0x1, 0xfffffffffffffffb) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000000)=ANY=[@ANYRESDEC], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 4.033374519s ago: executing program 5 (id=4458): syz_open_dev$video(&(0x7f0000000000), 0x6, 0x109002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x6f, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="cab82d382f1b8c86410afb0e8da6e71f451f455e55b5778b86df103d910f9f2f121b814dd59e8a28331973331e601fc3daa7650b07c6121c60f8b897d7d1e38b3cc5cc0d12f06f3edf7a6c1c5ce4307bb90f5a7c68659e9b356713475d4225269583b7f41d9e013618f64196a59e99c4", @ANYRESDEC], 0xfc}, 0x1, 0x0, 0x0, 0x50011}, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) syz_usb_connect(0x1, 0x3d, 0x0, 0x0) r5 = epoll_create1(0x0) epoll_pwait(r5, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) epoll_wait(r5, &(0x7f0000000040)=[{}], 0x1, 0x400) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c000004004280", @ANYRES32=r3, @ANYRESDEC=r2], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$mixer(0xffffffffffffff9c, 0x0, 0x109080, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r7, 0x80044dfb, &(0x7f0000000040)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 3.986272468s ago: executing program 4 (id=4459): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x101401) syncfs(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x16ba82, 0x10) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x8, 0x8ab5, 0x10001, 0x20000000, 0x100, 0x4, 0x63dd1ea1, 0x1}, 0x0, 0x0, 0x0, 0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0, 0x0, 0x0, 0x0, 0x0, r6}]) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r1, 0x1) 2.990960329s ago: executing program 0 (id=4460): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(0x0, 0x80880) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x33, 0x2}, 0x7) socket(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x120) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_PRE_FAULT_MEMORY(r1, 0xc040aed5, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beefff5d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="f78d9ca38fff48f3be52163448412ba8", 0xc45e158d1a96cd32}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe", 0x2c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d", 0x24}], 0x3, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x9cde14b4b725c073}], 0x1, 0x448d4) recvmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000600)=""/85, 0x5}, {&(0x7f0000000680)=""/106, 0x20000253}], 0x2}, 0x6020) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="90000000000101040000000000000000020000002c0001801400018008000100e000000108000200ac1414000c00028005000100000000000600034000040000240002801400018008000100e000000108000200e00000010c00028005000100000000002c00108008000340000000080800014000000cba080001400000000308000240000080010800034000000080d87b7be40ff827cc8305f6f4df751b795190789057ee6d14241c95d38942ba8303591721434906eebff8735d0eb88399e4ff4c95589f18f9ead5eec57bd3b355910b5e654954217c0cda570f4d114cf063bed6f965ba65f1ea1ae5"], 0x90}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r1, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x49, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f00000005c0), &(0x7f0000000700), 0x8, 0x8, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000b00)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="c0000000", @ANYRES16=0x0, @ANYBLOB="010029bd700007000000040000003c000180080003000200000014000200766c616e3000000000000000000000001400020076657468315f746f5f626f6e6400000008000100", @ANYRES32=0x0, @ANYBLOB="7000018008000100", @ANYRES32=0x0, @ANYBLOB="14000200000000000000000000000000000000000800030003000000080003000200000008000100", @ANYRES32=r8, @ANYBLOB="1400020076060064315f746f5f6261746a00"/42, @ANYRES32=r9, @ANYBLOB="0800030003000000"], 0xc0}, 0x1, 0x0, 0x0, 0x20040840}, 0x80) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./bus\x00', &(0x7f0000000000)='./bus\x00', &(0x7f0000000140)='btrfs\x00', 0x2800080, &(0x7f00000001c0)='discard') sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002c00028014000180080001000800ffee08000200ac1e00010c00028005000100000000000600034000010000080007"], 0x6c}}, 0x0) 2.64767629s ago: executing program 4 (id=4461): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(0x0, 0x80880) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x33, 0x2}, 0x7) socket(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x120) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_PRE_FAULT_MEMORY(r1, 0xc040aed5, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beefff5d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="f78d9ca38fff48f3be52163448412ba8", 0xc45e158d1a96cd32}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe", 0x2c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d", 0x24}], 0x3, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x9cde14b4b725c073}], 0x1, 0x448d4) recvmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000600)=""/85, 0x5}, {&(0x7f0000000680)=""/106, 0x20000253}], 0x2}, 0x6020) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="90000000000101040000000000000000020000002c0001801400018008000100e000000108000200ac1414000c00028005000100000000000600034000040000240002801400018008000100e000000108000200e00000010c00028005000100000000002c00108008000340000000080800014000000cba080001400000000308000240000080010800034000000080d87b7be40ff827cc8305f6f4df751b795190789057ee6d14241c95d38942ba8303591721434906eebff8735d0eb88399e4ff4c95589f18f9ead5eec57bd3b355910b5e654954217c0cda570f4d114cf063bed6f965ba65f1ea1ae5"], 0x90}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r1, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x49, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f00000005c0), &(0x7f0000000700), 0x8, 0x8, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000b00)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="c0000000", @ANYRES16=0x0, @ANYBLOB="010029bd700007000000040000003c000180080003000200000014000200766c616e3000000000000000000000001400020076657468315f746f5f626f6e6400000008000100", @ANYRES32=0x0, @ANYBLOB="7000018008000100", @ANYRES32=0x0, @ANYBLOB="14000200000000000000000000000000000000000800030003000000080003000200000008000100", @ANYRES32=r8, @ANYBLOB="1400020076060064315f746f5f6261746a00"/39, @ANYRES32=r9, @ANYBLOB="0800030003000000"], 0xc0}, 0x1, 0x0, 0x0, 0x20040840}, 0x80) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./bus\x00', &(0x7f0000000000)='./bus\x00', &(0x7f0000000140)='btrfs\x00', 0x2800080, &(0x7f00000001c0)='discard') sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002c00028014000180080001000800ffee08000200ac1e00010c00028005000100000000000600034000010000080007"], 0x6c}}, 0x0) 1.91185428s ago: executing program 0 (id=4462): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001800dd8d00000000fedbdf2502201000fd00fe0200000020bdd4f9b9977ec232dd46f378bbb211c25c9e5f183e81eafe7487396ca2fe02bda0dabd9fda737cf5e73a76732cd0f838645d20188298daa2890e1b8f320f8be358c48b4a6ff582edf66ea95186b915d37fda31f3f87b4a7e123302a335c838a3c5defd4abc2b7cd090bcadfcf51e62eec78858a9cc2405ed54cccdda6b76ffe94aabcb7a1692444f0aaf02fa38ec86f21d4df6fe5688da951eb6340d7d892b67dff0898183ba5ad892c24381dd1d259ab7543a9dd8b63d979f05606312bb0ba4509ec02b39d07c073dbdffc573f365f5cd8d06eb75ac"], 0x1c}, 0x1, 0x0, 0x0, 0x400a044}, 0x20004090) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x2, 0x70bd2b, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44045}, 0x8010) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) r5 = fcntl$dupfd(r2, 0x0, r3) ioctl$TIOCSETD(r5, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0xc) ioctl$BSG_SET_COMMAND_Q(r5, 0x2271, &(0x7f0000000140)=0x1) capset(&(0x7f0000000000)={0x19980330}, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x80a4d1, 0x2) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) 993.206951ms ago: executing program 4 (id=4463): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x8) listen(r0, 0x7fff) r1 = gettid() rt_tgsigqueueinfo(0x0, r1, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffa}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x4c37e, 0x0) socket$kcm(0x29, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a00080000200000080000004000000042000000fd0da863d25d6dd9553b0258f023146f333301188865dc", @ANYRES32=0x1, @ANYRES32=r3, @ANYBLOB="df635e0ca9a01f867b523acba6fc449410381029a310b72b13db", @ANYRESDEC=r5, @ANYRESHEX=r5], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000, r6}, 0x38) ioctl$FBIOBLANK(r5, 0x4611, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x5, 0x5]}, 0x8, 0x0) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r8 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r13 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r13, r12, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2c1, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2, 0x1ed, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x787e, 0x8200, 0x1, 0x25e}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000040)={'\x00', 0x0, 0x5, 0x2, 0x0, 0xc, "00000000020000000000002100", '\x00', "0064008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "0000000000000400", "0000efffffffffffbfff00", "000003cefd70f14003556000"]}) socket$rxrpc(0x21, 0x2, 0xa) 984.178957ms ago: executing program 6 (id=4464): socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000380)={"b8e50a31a002b94fcd8fc4db3056309d", 0x0, 0x0, {0x7, 0x100}, {0x0, 0x5}, 0x51, [0x7, 0x3, 0xe, 0x2, 0x9, 0x1, 0xd8e, 0x7fc0000, 0x5, 0x0, 0x6, 0x3, 0x5, 0x49, 0xfffffffffffffffe, 0xc]}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) write(r0, &(0x7f0000000900), 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = openat$ttynull(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000380)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r5, 0x80186803, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a8"], &(0x7f0000000100)='GPL\x00'}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) chroot(&(0x7f0000000200)='./file0\x00') 894.110784ms ago: executing program 5 (id=4465): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)="5017fc3b6c9bf30b7f070009e2cafec77b237a67571783b76accf9393d9b56213d8908db5ba9dcd70951e9715d8394c048ccfd29ed9c4c72c1c238bd5e1407024a75127d00c1", 0x46) (fail_nth: 1) 571.411584ms ago: executing program 5 (id=4466): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 311.089532ms ago: executing program 5 (id=4467): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x4c, 0xfffffffffffffffc, &(0x7f0000000b00)="785362467ace63460d97889e48af2355c9ef81fff076bb16187e0514c3d32c1ecc2ba62811adbe8beddad3dcf85281bcb9908c3e725feb52bf07c870aa7bb7a9e22712e5b4a4fea9da95bcf1"}) 301.249001ms ago: executing program 0 (id=4468): mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1200880, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xe) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000010440)=[{&(0x7f0000000040)=""/160, 0xa0}], 0x1, 0xc03, 0x0) 141.517263ms ago: executing program 0 (id=4469): socket(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$getflags(r1, 0x401) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r2, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r2], 0x40c}}, 0x0) 0s ago: executing program 0 (id=4470): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000001c0)={r0, 0xfffffffffffffe68, &(0x7f0000000400)}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1\x00', 0x1ff) kernel console output (not intermixed with test programs): x0 [ 1004.797730][T18177] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3478'. [ 1008.127214][ T42] audit: type=1326 audit(1786077391.094:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18206 comm="syz.2.3487" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f06fec code=0x0 [ 1008.153699][T18209] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3488'. [ 1016.531988][T18263] netlink: 'syz.1.3510': attribute type 1 has an invalid length. [ 1016.535957][T18263] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3510'. [ 1017.788417][ T42] audit: type=1326 audit(1786077400.754:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18275 comm="syz.2.3505" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f06fec code=0x0 [ 1019.022251][T18284] fuse: Unknown parameter 'grou00000000000000000000' [ 1019.136771][T18284] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1019.964988][T18299] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3513'. [ 1020.578507][ T42] audit: type=1326 audit(1786077403.494:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18303 comm="syz.1.3515" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc6fec code=0x0 [ 1026.614674][T18348] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3524'. [ 1026.754867][T18349] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3524'. [ 1030.222809][T18399] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3540'. [ 1030.349530][T18401] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3540'. [ 1035.098241][T18446] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3551'. [ 1035.162155][T18447] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3551'. [ 1038.630356][T18486] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3563'. [ 1038.829788][T18490] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3563'. [ 1039.652418][T18493] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3564'. [ 1046.938880][T18548] netlink: 'syz.1.3577': attribute type 1 has an invalid length. [ 1046.948150][T18548] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3577'. [ 1049.060076][T18573] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3583'. [ 1049.147340][T18574] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3583'. [ 1049.198116][T18563] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1049.881294][T18581] netlink: 'syz.2.3586': attribute type 1 has an invalid length. [ 1049.895401][T18581] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3586'. [ 1052.032852][T18595] fuse: Bad value for 'fd' [ 1052.623960][T18603] netlink: 'syz.1.3591': attribute type 1 has an invalid length. [ 1052.627484][T18603] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3591'. [ 1054.442690][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.666810][T18632] netlink: 'syz.0.3596': attribute type 1 has an invalid length. [ 1054.694880][T18632] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3596'. [ 1059.506279][T18671] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3604'. [ 1060.104914][T18676] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3606'. [ 1060.169979][T18677] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3606'. [ 1060.798984][T18685] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3609'. [ 1062.261138][T18690] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1063.126797][T18715] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3618'. [ 1063.222708][T18716] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3618'. [ 1066.389979][T18750] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3629'. [ 1066.573902][T18752] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3629'. [ 1076.067309][T18835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3652'. [ 1080.991790][T18869] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3660'. [ 1081.728550][T18878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3661'. [ 1081.757283][T18878] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3661'. [ 1082.149530][T18885] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3664'. [ 1085.162806][T18897] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1085.792603][T18916] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3674'. [ 1089.410921][T18941] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3682'. [ 1089.494445][T18943] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3683'. [ 1096.538396][T19004] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3700'. [ 1096.757784][T19005] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3700'. [ 1097.487326][T19012] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3702'. [ 1099.145012][T19027] fuse: Bad value for 'fd' [ 1102.315878][T19043] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3713'. [ 1102.579076][T19045] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3713'. [ 1106.485157][T19083] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3724'. [ 1106.555071][T19084] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3724'. [ 1114.992117][T19136] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3738'. [ 1115.176234][T19140] fuse: Bad value for 'fd' [ 1115.938307][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 1123.448452][T19199] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3752'. [ 1126.715463][T19223] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3760'. [ 1126.809144][T19224] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3760'. [ 1129.963984][T19238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3763'. [ 1130.544649][T19252] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3767'. [ 1134.042748][T19275] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3772'. [ 1134.380922][T19281] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3774'. [ 1134.439478][T19282] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3774'. [ 1141.916124][T19335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3787'. [ 1144.946808][T19354] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3793'. [ 1145.560008][T19356] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3794'. [ 1145.731914][T19359] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3794'. [ 1146.976153][T19369] fuse: Unknown parameter 'user_id00000000000000000000' [ 1149.856052][T19396] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3806'. [ 1150.457225][T19401] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3806'. [ 1151.390044][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1154.052944][T19432] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3814'. [ 1155.456256][T19448] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3819'. [ 1155.527810][T19451] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3817'. [ 1155.617770][T19452] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3819'. [ 1165.690945][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 1171.936905][T19592] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3859'. [ 1177.368976][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 1183.154791][T19684] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3880'. [ 1187.352454][T19712] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3889'. [ 1189.703150][T19731] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3893'. [ 1190.379644][T19742] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3898'. [ 1190.388640][T19743] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3897'. [ 1194.838395][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1197.338394][T19810] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3916'. [ 1198.210680][T19819] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3921'. [ 1200.884927][T19836] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3927'. [ 1201.005410][T19838] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3926'. [ 1204.052170][T19862] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3934'. [ 1204.107092][T19860] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3933'. [ 1204.151299][T19863] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3934'. [ 1208.935994][T19908] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3947'. [ 1209.030676][T19909] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3947'. [ 1211.844187][T19932] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3953'. [ 1211.986163][T19936] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3954'. [ 1213.245318][T19950] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3959'. [ 1213.879920][T19956] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3961'. [ 1218.760497][T20003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3974'. [ 1221.899433][T20036] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3986'. [ 1224.775754][T20057] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3991'. [ 1226.989014][T20071] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3995'. [ 1230.264515][T20105] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4004'. [ 1233.076689][T20131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4010'. [ 1236.439320][T20156] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4019'. [ 1238.776778][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 1249.602053][T20248] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4043'. [ 1252.313152][T20278] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4053'. [ 1263.709105][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 1272.070556][T20461] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4105'. [ 1272.208341][T20466] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4105'. [ 1273.706642][T20477] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4110'. [ 1277.352181][T20511] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4121'. [ 1277.429961][T20514] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4121'. [ 1278.990185][T20528] FAULT_INJECTION: forcing a failure. [ 1278.990185][T20528] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1279.009807][T20528] CPU: 1 UID: 0 PID: 20528 Comm: syz.0.4126 Not tainted syzkaller #0 PREEMPT(full) [ 1279.009832][T20528] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1279.009842][T20528] Call Trace: [ 1279.009871][T20528] [ 1279.009879][T20528] dump_stack_lvl+0x100/0x190 [ 1279.009941][T20528] should_fail_ex.cold+0x5/0xa [ 1279.009971][T20528] _copy_from_user+0x2e/0xd0 [ 1279.010010][T20528] move_addr_to_kernel+0x65/0x170 [ 1279.010069][T20528] __sys_sendto+0x1b8/0x4e0 [ 1279.010093][T20528] ? __pfx___sys_sendto+0x10/0x10 [ 1279.010131][T20528] ? fput+0x79/0x100 [ 1279.010162][T20528] ? ksys_write+0x1ac/0x250 [ 1279.010179][T20528] __ia32_sys_sendto+0xdd/0x1b0 [ 1279.010202][T20528] ? __do_fast_syscall_32+0x98/0x970 [ 1279.010268][T20528] ? lockdep_hardirqs_on+0x78/0x100 [ 1279.010287][T20528] __do_fast_syscall_32+0xe7/0x970 [ 1279.010309][T20528] ? lockdep_hardirqs_on+0x78/0x100 [ 1279.010333][T20528] do_fast_syscall_32+0x32/0x70 [ 1279.010358][T20528] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1279.010382][T20528] RIP: 0023:0xf7f46fec [ 1279.010408][T20528] Code: Unable to access opcode bytes at 0xf7f46fc2. [ 1279.010425][T20528] RSP: 002b:00000000f53e550c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 1279.010444][T20528] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000800 [ 1279.010464][T20528] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000080000900 [ 1279.010474][T20528] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 1279.010484][T20528] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1279.010496][T20528] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1279.010519][T20528] [ 1279.172582][T20531] block device autoloading is deprecated and will be removed. [ 1279.902530][T20541] FAULT_INJECTION: forcing a failure. [ 1279.902530][T20541] name failslab, interval 1, probability 0, space 0, times 1 [ 1279.933978][T20541] CPU: 2 UID: 0 PID: 20541 Comm: syz.0.4130 Not tainted syzkaller #0 PREEMPT(full) [ 1279.934011][T20541] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1279.934022][T20541] Call Trace: [ 1279.934030][T20541] [ 1279.934040][T20541] dump_stack_lvl+0x100/0x190 [ 1279.934069][T20541] should_fail_ex.cold+0x5/0xa [ 1279.934091][T20541] should_failslab+0xc2/0x120 [ 1279.934137][T20541] __kmalloc_noprof+0xfc/0x820 [ 1279.934168][T20541] ? rcu_is_watching+0x12/0xc0 [ 1279.934197][T20541] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1279.934243][T20541] tomoyo_realpath_from_path+0xb6/0x690 [ 1279.934276][T20541] tomoyo_path_number_perm+0x23c/0x580 [ 1279.934301][T20541] ? tomoyo_path_number_perm+0x22e/0x580 [ 1279.934324][T20541] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1279.934349][T20541] ? get_pid_task+0x106/0x250 [ 1279.934404][T20541] ? find_held_lock+0x2b/0x80 [ 1279.934433][T20541] ? __fget_files+0x215/0x3d0 [ 1279.934460][T20541] ? hook_file_ioctl_common+0x140/0x440 [ 1279.934495][T20541] ? __fget_files+0x215/0x3d0 [ 1279.934516][T20541] ? __fget_files+0x21f/0x3d0 [ 1279.934538][T20541] security_file_ioctl_compat+0xd3/0x230 [ 1279.934567][T20541] __ia32_compat_sys_ioctl+0xc2/0x360 [ 1279.934600][T20541] __do_fast_syscall_32+0xe7/0x970 [ 1279.934627][T20541] ? lockdep_hardirqs_on+0x78/0x100 [ 1279.934655][T20541] do_fast_syscall_32+0x32/0x70 [ 1279.934682][T20541] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1279.934708][T20541] RIP: 0023:0xf7f46fec [ 1279.934734][T20541] Code: Unable to access opcode bytes at 0xf7f46fc2. [ 1279.934744][T20541] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1279.934763][T20541] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040946400 [ 1279.934775][T20541] RDX: 0000000080000340 RSI: 0000000000000000 RDI: 0000000000000000 [ 1279.934785][T20541] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1279.934798][T20541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1279.934811][T20541] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1279.934845][T20541] [ 1279.935217][T20541] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1280.172088][T20541] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (eth1-tx-0) [ 1280.709100][T20548] FAULT_INJECTION: forcing a failure. [ 1280.709100][T20548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1280.723115][T20548] CPU: 0 UID: 0 PID: 20548 Comm: syz.2.4132 Not tainted syzkaller #0 PREEMPT(full) [ 1280.723145][T20548] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1280.723155][T20548] Call Trace: [ 1280.723162][T20548] [ 1280.723169][T20548] dump_stack_lvl+0x100/0x190 [ 1280.723197][T20548] should_fail_ex.cold+0x5/0xa [ 1280.723217][T20548] _copy_from_user+0x2e/0xd0 [ 1280.723246][T20548] tracing_set_trace_write+0xe3/0x240 [ 1280.723290][T20548] ? __pfx_tracing_set_trace_write+0x10/0x10 [ 1280.723310][T20548] ? import_ubuf+0x1b6/0x220 [ 1280.723350][T20548] ? __pfx_tracing_set_trace_write+0x10/0x10 [ 1280.723370][T20548] vfs_writev+0x5ed/0xdd0 [ 1280.723403][T20548] ? __pfx_vfs_writev+0x10/0x10 [ 1280.723443][T20548] ? __fget_files+0x21f/0x3d0 [ 1280.723467][T20548] ? do_writev+0x13e/0x340 [ 1280.723489][T20548] do_writev+0x13e/0x340 [ 1280.723515][T20548] ? __pfx_do_writev+0x10/0x10 [ 1280.723538][T20548] ? ksys_write+0x1ac/0x250 [ 1280.723554][T20548] ? __pfx_ksys_write+0x10/0x10 [ 1280.723574][T20548] __do_fast_syscall_32+0xe7/0x970 [ 1280.723599][T20548] ? lockdep_hardirqs_on+0x78/0x100 [ 1280.723622][T20548] do_fast_syscall_32+0x32/0x70 [ 1280.723647][T20548] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1280.723669][T20548] RIP: 0023:0xf7f06fec [ 1280.723692][T20548] Code: Unable to access opcode bytes at 0xf7f06fc2. [ 1280.723700][T20548] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000092 [ 1280.723719][T20548] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800023c0 [ 1280.723729][T20548] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1280.723739][T20548] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1280.723749][T20548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1280.723759][T20548] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1280.723780][T20548] [ 1281.440322][T20560] udc usbip-vudc.0: soft-connect without a gadget driver [ 1281.603292][T20564] FAULT_INJECTION: forcing a failure. [ 1281.603292][T20564] name failslab, interval 1, probability 0, space 0, times 0 [ 1281.663410][T20564] CPU: 2 UID: 0 PID: 20564 Comm: syz.0.4137 Not tainted syzkaller #0 PREEMPT(full) [ 1281.663441][T20564] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1281.663453][T20564] Call Trace: [ 1281.663465][T20564] [ 1281.663474][T20564] dump_stack_lvl+0x100/0x190 [ 1281.663523][T20564] should_fail_ex.cold+0x5/0xa [ 1281.663544][T20564] should_failslab+0xc2/0x120 [ 1281.663569][T20564] __kmalloc_noprof+0xfc/0x820 [ 1281.663594][T20564] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 1281.663646][T20564] kernfs_fop_write_iter+0x26a/0x5f0 [ 1281.663672][T20564] vfs_write+0x6ac/0x1050 [ 1281.663691][T20564] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1281.663715][T20564] ? __pfx_vfs_write+0x10/0x10 [ 1281.663730][T20564] ? find_held_lock+0x2b/0x80 [ 1281.663769][T20564] ksys_write+0x12a/0x250 [ 1281.663787][T20564] ? __pfx_ksys_write+0x10/0x10 [ 1281.663803][T20564] ? ksys_write+0x1ac/0x250 [ 1281.663820][T20564] ? __pfx_ksys_write+0x10/0x10 [ 1281.663843][T20564] __do_fast_syscall_32+0xe7/0x970 [ 1281.663869][T20564] ? lockdep_hardirqs_on+0x78/0x100 [ 1281.663893][T20564] do_fast_syscall_32+0x32/0x70 [ 1281.663919][T20564] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1281.663941][T20564] RIP: 0023:0xf7f46fec [ 1281.663966][T20564] Code: Unable to access opcode bytes at 0xf7f46fc2. [ 1281.663974][T20564] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1281.663994][T20564] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001800 [ 1281.664006][T20564] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000000000000 [ 1281.664021][T20564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1281.664033][T20564] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1281.664044][T20564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1281.664065][T20564] [ 1283.679759][T20580] FAULT_INJECTION: forcing a failure. [ 1283.679759][T20580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1283.699596][T20580] CPU: 1 UID: 0 PID: 20580 Comm: syz.2.4141 Not tainted syzkaller #0 PREEMPT(full) [ 1283.699627][T20580] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1283.699638][T20580] Call Trace: [ 1283.699650][T20580] [ 1283.699659][T20580] dump_stack_lvl+0x100/0x190 [ 1283.699687][T20580] should_fail_ex.cold+0x5/0xa [ 1283.699709][T20580] _copy_from_user+0x2e/0xd0 [ 1283.699739][T20580] __sys_bpf+0x2f5/0x4e80 [ 1283.699791][T20580] ? __pfx___sys_bpf+0x10/0x10 [ 1283.699814][T20580] ? find_held_lock+0x2b/0x80 [ 1283.699838][T20580] ? get_pid_task+0xfc/0x250 [ 1283.699860][T20580] ? get_pid_task+0xfc/0x250 [ 1283.699889][T20580] ? proc_fail_nth_write+0x9f/0x220 [ 1283.699927][T20580] ? find_held_lock+0x2b/0x80 [ 1283.699956][T20580] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1283.699983][T20580] ? find_held_lock+0x2b/0x80 [ 1283.700005][T20580] ? ksys_write+0x190/0x250 [ 1283.700022][T20580] ? ksys_write+0x190/0x250 [ 1283.700056][T20580] ? fput+0x79/0x100 [ 1283.700079][T20580] ? __ia32_sys_bpf+0xcc/0x170 [ 1283.700099][T20580] __ia32_sys_bpf+0xcc/0x170 [ 1283.700150][T20580] ? __do_fast_syscall_32+0x98/0x970 [ 1283.700181][T20580] __do_fast_syscall_32+0xe7/0x970 [ 1283.700207][T20580] ? lockdep_hardirqs_on+0x78/0x100 [ 1283.700235][T20580] do_fast_syscall_32+0x32/0x70 [ 1283.700261][T20580] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1283.700285][T20580] RIP: 0023:0xf7f06fec [ 1283.700310][T20580] Code: Unable to access opcode bytes at 0xf7f06fc2. [ 1283.700318][T20580] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 1283.700337][T20580] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 1283.700349][T20580] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000 [ 1283.700359][T20580] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1283.700371][T20580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1283.700381][T20580] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1283.700406][T20580] [ 1284.330765][ T42] audit: type=1326 audit(1786077667.294:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20577 comm="syz.3.4142" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1284.388159][ T42] audit: type=1326 audit(1786077667.294:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20577 comm="syz.3.4142" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf708f017 code=0x7ffc0000 [ 1284.407161][ T42] audit: type=1326 audit(1786077667.294:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20577 comm="syz.3.4142" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1284.458134][ T42] audit: type=1326 audit(1786077667.294:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20577 comm="syz.3.4142" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf708f017 code=0x7ffc0000 [ 1284.540430][ T42] audit: type=1326 audit(1786077667.294:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20577 comm="syz.3.4142" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1284.578241][ T42] audit: type=1326 audit(1786077667.294:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20577 comm="syz.3.4142" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf708f017 code=0x7ffc0000 [ 1284.639482][ T42] audit: type=1326 audit(1786077667.294:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20577 comm="syz.3.4142" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1284.733616][ T42] audit: type=1326 audit(1786077667.294:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20577 comm="syz.3.4142" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf708f017 code=0x7ffc0000 [ 1284.750654][ T42] audit: type=1326 audit(1786077667.294:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20577 comm="syz.3.4142" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1284.780800][ T42] audit: type=1326 audit(1786077667.354:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20577 comm="syz.3.4142" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf708f017 code=0x7ffc0000 [ 1285.038993][T20594] configfs-gadget.g1 gadget.0: HOST MAC 5a:40:82:91:1b:e6 [ 1285.045830][T20594] configfs-gadget.g1 gadget.0: MAC 22:e7:1d:24:23:b0 [ 1285.301835][T20594] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4145'. [ 1285.308920][T20594] CIFS: VFS: UNC: path must begin with // or \\ [ 1285.322788][T20594] CIFS: VFS: Malformed UNC in devname [ 1285.340332][T20601] Cannot find add_set index 0 as target [ 1285.430963][ T41] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1285.628899][ T41] usb 5-1: Dual-Role OTG device on HNP port [ 1285.639452][ T41] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 1285.671337][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.690501][T20608] FAULT_INJECTION: forcing a failure. [ 1285.690501][T20608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1285.698670][T20608] CPU: 1 UID: 0 PID: 20608 Comm: syz.1.4146 Not tainted syzkaller #0 PREEMPT(full) [ 1285.698698][T20608] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1285.698709][T20608] Call Trace: [ 1285.698738][T20608] [ 1285.698747][T20608] dump_stack_lvl+0x100/0x190 [ 1285.698775][T20608] should_fail_ex.cold+0x5/0xa [ 1285.698796][T20608] _copy_from_user+0x2e/0xd0 [ 1285.698823][T20608] get_compat_msghdr+0xb3/0x480 [ 1285.698845][T20608] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1285.698871][T20608] ___sys_sendmsg+0x1b6/0x1e0 [ 1285.698893][T20608] ? __pfx____sys_sendmsg+0x10/0x10 [ 1285.698924][T20608] ? find_held_lock+0x2b/0x80 [ 1285.698960][T20608] __sys_sendmsg+0x160/0x210 [ 1285.698986][T20608] ? __pfx___sys_sendmsg+0x10/0x10 [ 1285.699014][T20608] ? __pfx_ksys_write+0x10/0x10 [ 1285.699036][T20608] __do_fast_syscall_32+0xe7/0x970 [ 1285.699061][T20608] ? lockdep_hardirqs_on+0x78/0x100 [ 1285.699084][T20608] do_fast_syscall_32+0x32/0x70 [ 1285.699107][T20608] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1285.699128][T20608] RIP: 0023:0xf7fc6fec [ 1285.699149][T20608] Code: Unable to access opcode bytes at 0xf7fc6fc2. [ 1285.699157][T20608] RSP: 002b:00000000f544450c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1285.699174][T20608] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080009b40 [ 1285.699184][T20608] RDX: 0000000020040040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1285.699194][T20608] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1285.699203][T20608] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1285.699211][T20608] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1285.699233][T20608] [ 1285.796586][T20583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4142'. [ 1286.131406][ T41] cdc_eem 5-1:1.0 usb1: register 'cdc_eem' at usb-dummy_hcd.0-1, CDC EEM Device, 3a:90:f4:05:4a:01 [ 1286.731558][T20620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4148'. [ 1286.791855][T20620] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1286.795778][T20623] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4148'. [ 1286.873127][T20623] bond1: entered promiscuous mode [ 1286.876147][T20623] bond1: entered allmulticast mode [ 1287.000168][T20620] dummy0: entered promiscuous mode [ 1287.004501][T20620] dummy0: entered allmulticast mode [ 1287.006912][T20620] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1287.276621][T20630] jffs2: notice: (20630) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1287.367923][T20634] FAULT_INJECTION: forcing a failure. [ 1287.367923][T20634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1287.399348][T20634] CPU: 0 UID: 0 PID: 20634 Comm: syz.2.4150 Not tainted syzkaller #0 PREEMPT(full) [ 1287.399397][T20634] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1287.399410][T20634] Call Trace: [ 1287.399416][T20634] [ 1287.399423][T20634] dump_stack_lvl+0x100/0x190 [ 1287.399449][T20634] should_fail_ex.cold+0x5/0xa [ 1287.399468][T20634] strncpy_from_user+0x3b/0x2d0 [ 1287.399514][T20634] do_getname+0x78/0x390 [ 1287.399537][T20634] do_utimes_path+0xc9/0x1b0 [ 1287.399558][T20634] ? __pfx_do_utimes_path+0x10/0x10 [ 1287.399579][T20634] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1287.399607][T20634] __ia32_sys_utime32+0x183/0x200 [ 1287.399628][T20634] ? __pfx___ia32_sys_utime32+0x10/0x10 [ 1287.399657][T20634] __do_fast_syscall_32+0xe7/0x970 [ 1287.399679][T20634] ? lockdep_hardirqs_on+0x78/0x100 [ 1287.399702][T20634] do_fast_syscall_32+0x32/0x70 [ 1287.399724][T20634] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1287.399744][T20634] RIP: 0023:0xf7f06fec [ 1287.399765][T20634] Code: Unable to access opcode bytes at 0xf7f06fc2. [ 1287.399772][T20634] RSP: 002b:00000000f53a550c EFLAGS: 00000292 ORIG_RAX: 000000000000001e [ 1287.399790][T20634] RAX: ffffffffffffffda RBX: 00000000800000c0 RCX: 0000000000000000 [ 1287.399800][T20634] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1287.399809][T20634] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1287.399818][T20634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1287.399828][T20634] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1287.399848][T20634] [ 1287.846342][T20643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4152'. [ 1288.049857][T20644] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1288.195438][T20644] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1288.206828][T20644] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1288.233135][T20644] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1288.296864][T20644] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1288.496762][T20649] nvmet: adding nsid 1 to subsystem subsys1 [ 1289.341632][T20666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4158'. [ 1289.443402][T20666] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4158'. [ 1290.936812][T20688] FAULT_INJECTION: forcing a failure. [ 1290.936812][T20688] name failslab, interval 1, probability 0, space 0, times 0 [ 1290.965625][T20688] CPU: 2 UID: 0 PID: 20688 Comm: syz.1.4162 Not tainted syzkaller #0 PREEMPT(full) [ 1290.965648][T20688] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1290.965657][T20688] Call Trace: [ 1290.965662][T20688] [ 1290.965668][T20688] dump_stack_lvl+0x100/0x190 [ 1290.965692][T20688] should_fail_ex.cold+0x5/0xa [ 1290.965709][T20688] should_failslab+0xc2/0x120 [ 1290.965730][T20688] __kmalloc_noprof+0xfc/0x820 [ 1290.965748][T20688] ? __pfx_dynamic_dname+0x10/0x10 [ 1290.965768][T20688] ? tomoyo_encode2+0xfb/0x3c0 [ 1290.965797][T20688] tomoyo_encode2+0xfb/0x3c0 [ 1290.965820][T20688] tomoyo_encode+0x29/0x50 [ 1290.965840][T20688] tomoyo_realpath_from_path+0x18c/0x690 [ 1290.965865][T20688] tomoyo_path_number_perm+0x23c/0x580 [ 1290.965883][T20688] ? tomoyo_path_number_perm+0x22e/0x580 [ 1290.965902][T20688] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1290.965921][T20688] ? get_pid_task+0x106/0x250 [ 1290.965956][T20688] ? find_held_lock+0x2b/0x80 [ 1290.965979][T20688] ? __fget_files+0x215/0x3d0 [ 1290.965995][T20688] ? hook_file_ioctl_common+0x140/0x440 [ 1290.966021][T20688] ? __fget_files+0x215/0x3d0 [ 1290.966042][T20688] ? __fget_files+0x21f/0x3d0 [ 1290.966060][T20688] security_file_ioctl_compat+0xd3/0x230 [ 1290.966085][T20688] __ia32_compat_sys_ioctl+0xc2/0x360 [ 1290.966114][T20688] __do_fast_syscall_32+0xe7/0x970 [ 1290.966137][T20688] ? lockdep_hardirqs_on+0x78/0x100 [ 1290.966162][T20688] do_fast_syscall_32+0x32/0x70 [ 1290.966186][T20688] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1290.966209][T20688] RIP: 0023:0xf7fc6fec [ 1290.966253][T20688] Code: Unable to access opcode bytes at 0xf7fc6fc2. [ 1290.966262][T20688] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1290.966284][T20688] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008b32 [ 1290.966294][T20688] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1290.966303][T20688] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1290.966314][T20688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1290.966326][T20688] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1290.966347][T20688] [ 1290.966616][T20688] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1291.209665][T20688] warning: `syz.1.4162' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1291.874039][T20702] Invalid ELF header magic: != ELF [ 1292.165090][T20705] FAULT_INJECTION: forcing a failure. [ 1292.165090][T20705] name failslab, interval 1, probability 0, space 0, times 0 [ 1292.173262][T20705] CPU: 3 UID: 0 PID: 20705 Comm: syz.0.4167 Not tainted syzkaller #0 PREEMPT(full) [ 1292.173290][T20705] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1292.173302][T20705] Call Trace: [ 1292.173312][T20705] [ 1292.173321][T20705] dump_stack_lvl+0x100/0x190 [ 1292.173349][T20705] should_fail_ex.cold+0x5/0xa [ 1292.173371][T20705] should_failslab+0xc2/0x120 [ 1292.173397][T20705] __kmalloc_noprof+0xfc/0x820 [ 1292.173420][T20705] ? __pfx_dynamic_dname+0x10/0x10 [ 1292.173445][T20705] ? tomoyo_encode2+0xfb/0x3c0 [ 1292.173477][T20705] tomoyo_encode2+0xfb/0x3c0 [ 1292.173508][T20705] tomoyo_encode+0x29/0x50 [ 1292.173533][T20705] tomoyo_realpath_from_path+0x18c/0x690 [ 1292.173567][T20705] tomoyo_path_number_perm+0x23c/0x580 [ 1292.173590][T20705] ? tomoyo_path_number_perm+0x22e/0x580 [ 1292.173616][T20705] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1292.173641][T20705] ? get_pid_task+0x106/0x250 [ 1292.173687][T20705] ? find_held_lock+0x2b/0x80 [ 1292.173709][T20705] ? __fget_files+0x215/0x3d0 [ 1292.173725][T20705] ? hook_file_ioctl_common+0x140/0x440 [ 1292.173749][T20705] ? __fget_files+0x215/0x3d0 [ 1292.173770][T20705] ? __fget_files+0x21f/0x3d0 [ 1292.173792][T20705] security_file_ioctl_compat+0xd3/0x230 [ 1292.173818][T20705] __ia32_compat_sys_ioctl+0xc2/0x360 [ 1292.173848][T20705] __do_fast_syscall_32+0xe7/0x970 [ 1292.173875][T20705] ? lockdep_hardirqs_on+0x78/0x100 [ 1292.173901][T20705] do_fast_syscall_32+0x32/0x70 [ 1292.173927][T20705] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1292.173950][T20705] RIP: 0023:0xf7f46fec [ 1292.173976][T20705] Code: Unable to access opcode bytes at 0xf7f46fc2. [ 1292.173984][T20705] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1292.174003][T20705] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000ae80 [ 1292.174015][T20705] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1292.174025][T20705] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1292.174035][T20705] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1292.174046][T20705] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1292.174070][T20705] [ 1292.174099][T20705] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1293.401551][ T42] kauditd_printk_skb: 329 callbacks suppressed [ 1293.401594][ T42] audit: type=1800 audit(1786077675.370:502): pid=20720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4172" name="control" dev="configfs" ino=149793 res=0 errno=0 [ 1294.109770][T20730] loop4: detected capacity change from 0 to 7 [ 1294.811696][T20730] Dev loop4: unable to read RDB block 7 [ 1294.848307][T20730] loop4: AHDI p1 p2 p3 [ 1294.868260][T20730] loop4: partition table partially beyond EOD, truncated [ 1294.880359][T20730] loop4: p1 start 1601398130 is beyond EOD, truncated [ 1294.884101][T20730] loop4: p2 start 1702059890 is beyond EOD, truncated [ 1296.019598][T20750] ======================================================= [ 1296.019598][T20750] WARNING: The mand mount option has been deprecated and [ 1296.019598][T20750] and is ignored by this kernel. Remove the mand [ 1296.019598][T20750] option from the mount to silence this warning. [ 1296.019598][T20750] ======================================================= [ 1296.151745][ T42] audit: type=1326 audit(1786077678.120:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20751 comm="syz.0.4180" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46fec code=0x7ffc0000 [ 1296.162612][ T42] audit: type=1326 audit(1786077678.120:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20751 comm="syz.0.4180" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46fec code=0x7ffc0000 [ 1296.179125][T20752] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 1296.181289][ T42] audit: type=1326 audit(1786077678.130:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20751 comm="syz.0.4180" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46fec code=0x7ffc0000 [ 1296.182089][T20752] audit: out of memory in audit_log_start [ 1296.189797][ T42] audit: type=1326 audit(1786077678.130:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20751 comm="syz.0.4180" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46fec code=0x7ffc0000 [ 1296.215237][ T42] audit: type=1326 audit(1786077678.140:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20751 comm="syz.0.4180" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f46fec code=0x7ffc0000 [ 1296.233283][ T42] audit: type=1326 audit(1786077678.140:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20751 comm="syz.0.4180" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46fec code=0x7ffc0000 [ 1296.265987][ T42] audit: type=1326 audit(1786077678.140:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20751 comm="syz.0.4180" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46fec code=0x7ffc0000 [ 1296.701876][T14318] overlayfs: failed lookup in lower (newroot/459, name='bus', err=-40): overlapping layers [ 1296.870659][T14318] overlayfs: failed lookup in lower (newroot/459, name='bus', err=-40): overlapping layers [ 1297.775637][T20766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4184'. [ 1297.779066][T20766] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4184'. [ 1297.857805][T20767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4184'. [ 1297.862105][T20767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4184'. [ 1298.026530][T20768] netlink: 'syz.1.4184': attribute type 2 has an invalid length. [ 1298.496131][T18334] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1298.501292][T18334] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1298.518265][T18334] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1298.530840][T18334] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1298.734207][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.841603][T20774] FAULT_INJECTION: forcing a failure. [ 1298.841603][T20774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1298.901015][T20774] CPU: 2 UID: 0 PID: 20774 Comm: syz.1.4188 Not tainted syzkaller #0 PREEMPT(full) [ 1298.901050][T20774] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1298.901062][T20774] Call Trace: [ 1298.901070][T20774] [ 1298.901078][T20774] dump_stack_lvl+0x100/0x190 [ 1298.901109][T20774] should_fail_ex.cold+0x5/0xa [ 1298.901133][T20774] _copy_from_iter+0x1f4/0x1690 [ 1298.901159][T20774] ? __pfx__copy_from_iter+0x10/0x10 [ 1298.901177][T20774] ? kasan_save_track+0x14/0x30 [ 1298.901203][T20774] ? __kasan_kmalloc+0xaa/0xb0 [ 1298.901234][T20774] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 1298.901258][T20774] ? configfs_write_iter+0x388/0x4e0 [ 1298.901283][T20774] configfs_write_iter+0xb3/0x4e0 [ 1298.901309][T20774] vfs_write+0x6ac/0x1050 [ 1298.901329][T20774] ? __pfx_configfs_write_iter+0x10/0x10 [ 1298.901353][T20774] ? __pfx_vfs_write+0x10/0x10 [ 1298.901370][T20774] ? find_held_lock+0x2b/0x80 [ 1298.901415][T20774] ksys_write+0x12a/0x250 [ 1298.901432][T20774] ? __pfx_ksys_write+0x10/0x10 [ 1298.901449][T20774] ? ksys_write+0x1ac/0x250 [ 1298.901466][T20774] ? __pfx_ksys_write+0x10/0x10 [ 1298.901490][T20774] __do_fast_syscall_32+0xe7/0x970 [ 1298.901518][T20774] ? lockdep_hardirqs_on+0x78/0x100 [ 1298.901544][T20774] do_fast_syscall_32+0x32/0x70 [ 1298.901573][T20774] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1298.901600][T20774] RIP: 0023:0xf7fc6fec [ 1298.901625][T20774] Code: Unable to access opcode bytes at 0xf7fc6fc2. [ 1298.901635][T20774] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1298.901656][T20774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000400 [ 1298.901669][T20774] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1298.901680][T20774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1298.901691][T20774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1298.901702][T20774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1298.901729][T20774] [ 1299.130888][T19220] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 1299.187209][ T5758] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1299.199651][T20772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1299.206968][T20772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1299.212749][ T5758] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1299.217049][T19220] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 1299.221267][ T5758] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1299.238316][T19220] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 1299.242977][ T5758] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1299.260811][T19220] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 1299.264966][ T5758] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1299.273647][T19220] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 1299.273678][T19220] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 1299.273698][T19220] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 1299.273716][T19220] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 1299.273734][T19220] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 1299.273753][T19220] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 1299.325630][T19220] hid-generic 0004:FFFFFFFF:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz0 [ 1299.499386][T20780] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 1299.747469][T20785] FAULT_INJECTION: forcing a failure. [ 1299.747469][T20785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1299.757337][T20785] CPU: 1 UID: 0 PID: 20785 Comm: syz.1.4189 Not tainted syzkaller #0 PREEMPT(full) [ 1299.757364][T20785] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1299.757376][T20785] Call Trace: [ 1299.757385][T20785] [ 1299.757393][T20785] dump_stack_lvl+0x100/0x190 [ 1299.757428][T20785] should_fail_ex.cold+0x5/0xa [ 1299.757449][T20785] _copy_from_user+0x2e/0xd0 [ 1299.757476][T20785] kstrtouint_from_user+0xd6/0x1d0 [ 1299.757498][T20785] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1299.757517][T20785] ? __lock_acquire+0x49f/0x1a40 [ 1299.757555][T20785] proc_fail_nth_write+0x83/0x220 [ 1299.757579][T20785] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1299.757608][T20785] vfs_write+0x2aa/0x1050 [ 1299.757626][T20785] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1299.757652][T20785] ? __pfx_vfs_write+0x10/0x10 [ 1299.757666][T20785] ? find_held_lock+0x2b/0x80 [ 1299.757687][T20785] ? __fget_files+0x215/0x3d0 [ 1299.757708][T20785] ? __fget_files+0x21f/0x3d0 [ 1299.757731][T20785] ksys_write+0x12a/0x250 [ 1299.757746][T20785] ? __pfx_ksys_write+0x10/0x10 [ 1299.757769][T20785] do_int80_emulation+0x14b/0x720 [ 1299.757798][T20785] asm_int80_emulation+0x1a/0x20 [ 1299.757816][T20785] RIP: 0023:0xf71c74eb [ 1299.757833][T20785] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1299.757849][T20785] RSP: 002b:00000000f54444bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 1299.757867][T20785] RAX: ffffffffffffffda RBX: 000000000000000f RCX: 00000000f54445d0 [ 1299.757877][T20785] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1299.757887][T20785] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1299.757897][T20785] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1299.757907][T20785] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1299.757929][T20785] [ 1299.761987][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.201039][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.340485][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.973248][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.398346][ T5758] Bluetooth: hci0: command tx timeout [ 1301.662992][T20822] 9pnet_fd: Insufficient options for proto=fd [ 1301.669397][T20822] netlink: 'syz.0.4194': attribute type 7 has an invalid length. [ 1301.705434][ T13] bridge_slave_1: left allmulticast mode [ 1301.707615][ T13] bridge_slave_1: left promiscuous mode [ 1301.710452][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.770537][T20825] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4195'. [ 1301.805590][ T13] bridge_slave_0: left allmulticast mode [ 1301.812631][ T13] bridge_slave_0: left promiscuous mode [ 1301.832318][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.865041][T20826] input: syz0 as /devices/virtual/input/input16 [ 1302.330915][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1302.418486][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1302.438453][ T13] bond0 (unregistering): Released all slaves [ 1303.481714][ T5758] Bluetooth: hci0: command tx timeout [ 1303.571220][T19220] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1303.849136][T19220] usb 6-1: config 1 has an invalid descriptor of length 46, skipping remainder of the config [ 1303.853474][T19220] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1303.857045][T19220] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 1303.881746][T19220] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 1303.895705][ T5761] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1303.924391][T19220] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1303.936087][T19220] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1303.964290][ T5761] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1303.981268][T19220] usb 6-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1303.981857][ T5761] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1304.000237][T19220] usb 6-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 1304.003833][T19220] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.017708][T19220] usb 6-1: Product: syz [ 1304.019936][T19220] usb 6-1: Manufacturer: syz [ 1304.087651][ T5761] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1304.107264][ T5761] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1304.699510][T20775] bridge0: port 1(bridge_slave_0) entered blocking state [ 1304.702279][T20775] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.706476][T20775] bridge_slave_0: entered allmulticast mode [ 1304.816123][T20775] bridge_slave_0: entered promiscuous mode [ 1305.022448][ T13] hsr_slave_0: left promiscuous mode [ 1305.232878][ T13] hsr_slave_1: left promiscuous mode [ 1305.236474][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1305.279136][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1305.309231][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1305.312262][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1305.421072][ T13] veth1_macvtap: left promiscuous mode [ 1305.423587][ T13] veth0_macvtap: left promiscuous mode [ 1305.453226][T19220] usb 6-1: SerialNumber: syz [ 1305.466271][T20845] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1305.498982][T20845] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1305.512199][T20845] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1305.521651][T19220] keyspan 6-1:1.0: Keyspan 1 port adapter converter detected [ 1305.546096][T19220] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 1305.564533][ T5761] Bluetooth: hci0: command tx timeout [ 1305.565132][ T13] veth1_vlan: left promiscuous mode [ 1305.574341][ T13] veth0_vlan: left promiscuous mode [ 1305.619736][T19220] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 82 [ 1305.626322][T19220] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 1305.681470][T19220] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1305.683016][T20866] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1305.888755][T19220] usb 6-1: USB disconnect, device number 2 [ 1305.967563][T19220] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1306.052755][T19220] keyspan 6-1:1.0: device disconnected [ 1306.280679][ T5761] Bluetooth: hci2: command tx timeout [ 1306.718107][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1306.781928][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1307.007506][T20775] bridge0: port 2(bridge_slave_1) entered blocking state [ 1307.020518][T20775] bridge0: port 2(bridge_slave_1) entered disabled state [ 1307.083467][T20775] bridge_slave_1: entered allmulticast mode [ 1307.128508][T20775] bridge_slave_1: entered promiscuous mode [ 1307.392096][T20775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1307.444929][T20775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1307.494666][T20883] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4203'. [ 1307.638078][ T5761] Bluetooth: hci0: command tx timeout [ 1307.807242][T20880] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1308.044133][T20775] team0: Port device team_slave_0 added [ 1308.133869][T20775] team0: Port device team_slave_1 added [ 1308.358201][ T5761] Bluetooth: hci2: command tx timeout [ 1308.480512][ T5458] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1308.582350][T20775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1308.596127][T20775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1308.619627][T20775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1308.637846][T20775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1308.642224][T20775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1308.658092][T20775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1309.024962][T20775] hsr_slave_0: entered promiscuous mode [ 1309.032119][T20775] hsr_slave_1: entered promiscuous mode [ 1309.042328][T20775] debugfs: 'hsr0' already exists in 'hsr' [ 1309.045618][T20775] Cannot create hsr debugfs directory [ 1309.919327][T20775] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1309.953740][T20775] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1310.066013][T20775] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1310.103455][T20775] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1310.108244][ T5458] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1310.139142][T20775] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1310.169498][T20775] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1310.219052][T20856] bridge0: port 1(bridge_slave_0) entered blocking state [ 1310.222669][T20856] bridge0: port 1(bridge_slave_0) entered disabled state [ 1310.225643][T20856] bridge_slave_0: entered allmulticast mode [ 1310.246011][T20856] bridge_slave_0: entered promiscuous mode [ 1310.263336][T20856] bridge0: port 2(bridge_slave_1) entered blocking state [ 1310.269857][T20856] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.274964][T20856] bridge_slave_1: entered allmulticast mode [ 1310.296803][T20856] bridge_slave_1: entered promiscuous mode [ 1310.314413][T20775] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1310.353457][T20775] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1310.453349][ T5761] Bluetooth: hci2: command tx timeout [ 1310.583931][T20856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1310.621828][T20856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1310.859684][T20856] team0: Port device team_slave_0 added [ 1310.875722][T20856] team0: Port device team_slave_1 added [ 1311.045639][T20856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1311.081157][T20856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1311.156972][T20856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1311.167824][T20856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1311.267731][T20856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1311.296791][T20856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1311.616930][ T5458] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1311.641809][T20775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1311.719130][T20856] hsr_slave_0: entered promiscuous mode [ 1311.725873][T20856] hsr_slave_1: entered promiscuous mode [ 1311.751518][T20856] debugfs: 'hsr0' already exists in 'hsr' [ 1311.761239][T20856] Cannot create hsr debugfs directory [ 1311.815389][T20775] 8021q: adding VLAN 0 to HW filter on device team0 [ 1311.920426][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1311.924329][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1312.295203][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1312.303235][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1312.520470][T20936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4209'. [ 1312.528213][ T5761] Bluetooth: hci2: command tx timeout [ 1312.989846][T20944] input: syz1 as /devices/virtual/input/input17 [ 1313.070162][ T5458] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1313.175913][T20944] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 1313.483722][T20856] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1313.543447][T20856] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1313.579880][T20856] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1313.684946][T20856] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1313.694648][T20856] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1313.713793][T20856] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1313.723522][T20856] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1313.787677][T20856] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1314.046715][T20965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1314.074520][T20965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1314.122695][T20775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1314.406138][T20856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1314.727947][T20856] 8021q: adding VLAN 0 to HW filter on device team0 [ 1314.810723][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 1314.813548][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1314.876822][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 1314.883415][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1315.015947][T20856] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1315.038116][T20856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1315.817118][T20775] veth0_vlan: entered promiscuous mode [ 1315.837823][T20775] veth1_vlan: entered promiscuous mode [ 1315.889999][T20775] veth0_macvtap: entered promiscuous mode [ 1315.991553][T20775] veth1_macvtap: entered promiscuous mode [ 1316.048277][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1316.123546][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1316.130677][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1316.148260][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1316.179344][T20775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1316.201543][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1316.205735][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1316.212517][T20775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1316.360029][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1316.363997][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1316.433993][T20769] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.481587][T20769] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.540436][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1316.599132][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1316.676622][T20769] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.682596][T20769] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.237927][T11815] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1317.241287][T11815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1317.373664][T19258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1317.379937][T19258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1317.590958][T20856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1317.763857][T20998] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4213'. [ 1318.920321][T21009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1318.931303][T21009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1318.936672][T21009] FAULT_INJECTION: forcing a failure. [ 1318.936672][T21009] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1318.944036][T21009] CPU: 3 UID: 0 PID: 21009 Comm: syz.0.4214 Not tainted syzkaller #0 PREEMPT(full) [ 1318.944065][T21009] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1318.944077][T21009] Call Trace: [ 1318.944083][T21009] [ 1318.944092][T21009] dump_stack_lvl+0x100/0x190 [ 1318.944122][T21009] should_fail_ex.cold+0x5/0xa [ 1318.944152][T21009] _copy_from_user+0x2e/0xd0 [ 1318.944185][T21009] get_compat_msghdr+0xb3/0x480 [ 1318.944206][T21009] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1318.944235][T21009] ___sys_sendmsg+0x1b6/0x1e0 [ 1318.944261][T21009] ? __pfx____sys_sendmsg+0x10/0x10 [ 1318.944294][T21009] ? find_held_lock+0x2b/0x80 [ 1318.944335][T21009] __sys_sendmsg+0x160/0x210 [ 1318.944363][T21009] ? __pfx___sys_sendmsg+0x10/0x10 [ 1318.944397][T21009] ? __pfx_ksys_write+0x10/0x10 [ 1318.944422][T21009] __do_fast_syscall_32+0xe7/0x970 [ 1318.944450][T21009] ? lockdep_hardirqs_on+0x78/0x100 [ 1318.944477][T21009] do_fast_syscall_32+0x32/0x70 [ 1318.944505][T21009] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1318.944530][T21009] RIP: 0023:0xf7f46fec [ 1318.944556][T21009] Code: Unable to access opcode bytes at 0xf7f46fc2. [ 1318.944564][T21009] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1318.944585][T21009] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000080 [ 1318.944597][T21009] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1318.944607][T21009] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1318.944618][T21009] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1318.944629][T21009] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1318.944652][T21009] [ 1318.947687][ T5758] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 1319.215864][T20856] veth0_vlan: entered promiscuous mode [ 1319.265864][T20856] veth1_vlan: entered promiscuous mode [ 1319.392781][T20856] veth0_macvtap: entered promiscuous mode [ 1319.417188][T20856] veth1_macvtap: entered promiscuous mode [ 1319.430106][T20856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1319.446963][T20856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1319.622386][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1319.739662][T20769] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1319.744457][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1319.825892][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1319.958837][ T5758] Bluetooth: hci2: command 0x0405 tx timeout [ 1319.982675][T19258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1319.984085][T21016] FAULT_INJECTION: forcing a failure. [ 1319.984085][T21016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1319.986034][T19258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1320.048334][T21016] CPU: 2 UID: 0 PID: 21016 Comm: syz.4.4216 Not tainted syzkaller #0 PREEMPT(full) [ 1320.048365][T21016] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1320.048376][T21016] Call Trace: [ 1320.048383][T21016] [ 1320.048390][T21016] dump_stack_lvl+0x100/0x190 [ 1320.048419][T21016] should_fail_ex.cold+0x5/0xa [ 1320.048439][T21016] _copy_to_user+0x32/0xd0 [ 1320.048469][T21016] simple_read_from_buffer+0xcb/0x170 [ 1320.048500][T21016] proc_fail_nth_read+0x1af/0x230 [ 1320.048526][T21016] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1320.048551][T21016] ? rw_verify_area+0xce/0x6d0 [ 1320.048577][T21016] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1320.048600][T21016] vfs_read+0x1e4/0xb40 [ 1320.048629][T21016] ? __pfx_vfs_read+0x10/0x10 [ 1320.048645][T21016] ? find_held_lock+0x2b/0x80 [ 1320.048667][T21016] ? __fget_files+0x215/0x3d0 [ 1320.048722][T21016] ? __fget_files+0x21f/0x3d0 [ 1320.048743][T21016] ksys_read+0x12a/0x250 [ 1320.048759][T21016] ? __pfx_ksys_read+0x10/0x10 [ 1320.048783][T21016] do_int80_emulation+0x14b/0x720 [ 1320.048812][T21016] asm_int80_emulation+0x1a/0x20 [ 1320.048831][T21016] RIP: 0023:0xf71974eb [ 1320.048847][T21016] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1320.048865][T21016] RSP: 002b:00000000f542c4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1320.048885][T21016] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f542c5d0 [ 1320.048897][T21016] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1320.048908][T21016] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1320.048918][T21016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1320.048929][T21016] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1320.048952][T21016] [ 1320.341441][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1320.352483][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1320.824563][T21025] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 1321.966504][T21034] input: syz0 as /devices/virtual/input/input18 [ 1322.863518][ T5758] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1322.884623][ T5758] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1322.891983][ T5758] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1322.958198][ T5758] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1322.970870][ T5758] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1323.339125][T21033] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1324.235503][T20769] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1324.998785][ T5758] Bluetooth: hci1: command tx timeout [ 1325.271970][T20769] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.518923][T21074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4227'. [ 1325.526416][T21074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4227'. [ 1326.130862][T20769] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.198704][T21091] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4230'. [ 1326.719182][T20769] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.078818][ T5758] Bluetooth: hci1: command tx timeout [ 1328.277335][T20769] bridge_slave_1: left allmulticast mode [ 1328.280024][T20769] bridge_slave_1: left promiscuous mode [ 1328.282976][T20769] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.319987][T20769] bridge_slave_0: left allmulticast mode [ 1328.322509][T20769] bridge_slave_0: left promiscuous mode [ 1328.326210][T20769] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.811296][ T5758] Bluetooth: hci0: unexpected subevent 0x0c length: 30 > 5 [ 1328.821080][ T42] kauditd_printk_skb: 130 callbacks suppressed [ 1328.821098][ T42] audit: type=1800 audit(1786077710.790:640): pid=21127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4235" name="control" dev="configfs" ino=153810 res=0 errno=0 [ 1328.915007][T21130] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4237'. [ 1329.168182][ T5758] Bluetooth: hci1: command tx timeout [ 1329.545558][T20769] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1329.816091][T20769] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1330.096172][T20769] bond0 (unregistering): Released all slaves [ 1330.192986][ T5458] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1331.251670][ T5758] Bluetooth: hci1: command tx timeout [ 1331.978899][T21162] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4244'. [ 1332.015633][T21162] IPv6: NLM_F_CREATE should be specified when creating new route [ 1332.023239][T21164] mmap: syz.5.4244 (21164) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1332.081956][T21162] IPv6: Can't replace route, no match found [ 1332.104410][T21038] bridge0: port 1(bridge_slave_0) entered blocking state [ 1332.158323][T21038] bridge0: port 1(bridge_slave_0) entered disabled state [ 1332.161874][T21038] bridge_slave_0: entered allmulticast mode [ 1332.166194][T21038] bridge_slave_0: entered promiscuous mode [ 1332.224623][T21038] bridge0: port 2(bridge_slave_1) entered blocking state [ 1332.268394][T21038] bridge0: port 2(bridge_slave_1) entered disabled state [ 1332.273037][T21038] bridge_slave_1: entered allmulticast mode [ 1332.277238][T21038] bridge_slave_1: entered promiscuous mode [ 1332.402662][T21038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1332.694074][T21038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1332.830854][T21038] team0: Port device team_slave_0 added [ 1332.846500][T21038] team0: Port device team_slave_1 added [ 1333.048519][T21038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1333.078529][T21038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1333.100891][T21038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1333.201982][T21038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1333.218265][T21038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1333.334176][T21038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1333.515182][T20769] hsr_slave_0: left promiscuous mode [ 1333.540769][T20769] hsr_slave_1: left promiscuous mode [ 1333.543456][T20769] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1333.546089][T20769] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1333.557268][T21194] FAULT_INJECTION: forcing a failure. [ 1333.557268][T21194] name failslab, interval 1, probability 0, space 0, times 0 [ 1333.566441][T21194] CPU: 3 UID: 0 PID: 21194 Comm: syz.0.4251 Not tainted syzkaller #0 PREEMPT(full) [ 1333.566466][T21194] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1333.566475][T21194] Call Trace: [ 1333.566485][T21194] [ 1333.566493][T21194] dump_stack_lvl+0x100/0x190 [ 1333.566518][T21194] should_fail_ex.cold+0x5/0xa [ 1333.566538][T21194] should_failslab+0xc2/0x120 [ 1333.566561][T21194] __kmalloc_noprof+0xfc/0x820 [ 1333.566580][T21194] ? rcu_is_watching+0x12/0xc0 [ 1333.566765][T21194] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1333.566796][T21194] tomoyo_realpath_from_path+0xb6/0x690 [ 1333.566825][T21194] tomoyo_path_perm+0x276/0x460 [ 1333.566845][T21194] ? tomoyo_path_perm+0x262/0x460 [ 1333.566868][T21194] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 1333.566888][T21194] ? __pfx_stack_trace_save+0x10/0x10 [ 1333.566912][T21194] ? stack_depot_save_flags+0x27/0x9d0 [ 1333.566929][T21194] ? __lock_acquire+0x49f/0x1a40 [ 1333.566958][T21194] ? __kasan_slab_free+0x5f/0x80 [ 1333.566979][T21194] ? kmem_cache_free+0x127/0x6b0 [ 1333.566995][T21194] ? putname+0xb1/0x110 [ 1333.567013][T21194] ? user_path_at+0x46/0x60 [ 1333.567057][T21194] tomoyo_sb_umount+0x8c/0xd0 [ 1333.567073][T21194] ? __pfx_tomoyo_sb_umount+0x10/0x10 [ 1333.567094][T21194] security_sb_umount+0xc4/0x210 [ 1333.567115][T21194] path_umount+0x328/0x1260 [ 1333.567134][T21194] ? putname+0xb1/0x110 [ 1333.567152][T21194] ? __pfx_path_umount+0x10/0x10 [ 1333.567170][T21194] ? putname+0xb6/0x110 [ 1333.567189][T21194] __ia32_sys_umount+0x169/0x190 [ 1333.567205][T21194] ? __pfx___ia32_sys_umount+0x10/0x10 [ 1333.567227][T21194] __do_fast_syscall_32+0xe7/0x970 [ 1333.567251][T21194] ? lockdep_hardirqs_on+0x78/0x100 [ 1333.567273][T21194] do_fast_syscall_32+0x32/0x70 [ 1333.567295][T21194] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1333.567316][T21194] RIP: 0023:0xf7f46fec [ 1333.567340][T21194] Code: Unable to access opcode bytes at 0xf7f46fc2. [ 1333.567347][T21194] RSP: 002b:00000000f53e550c EFLAGS: 00000292 ORIG_RAX: 0000000000000034 [ 1333.567364][T21194] RAX: ffffffffffffffda RBX: 00000000800002c0 RCX: 0000000000000009 [ 1333.567374][T21194] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1333.567383][T21194] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1333.567392][T21194] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1333.567401][T21194] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1333.567422][T21194] [ 1333.567432][T21194] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1333.701561][T21191] can: request_module (can-proto-3) failed. [ 1333.711656][T20769] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1333.711731][T20769] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1333.941489][T20769] veth1_macvtap: left promiscuous mode [ 1333.976689][T20769] veth0_macvtap: left promiscuous mode [ 1333.992254][T20769] veth1_vlan: left promiscuous mode [ 1333.998581][T20769] veth0_vlan: left promiscuous mode [ 1334.235323][T21208] process 'syz.0.4254' launched '/dev/fd/11' with NULL argv: empty string added [ 1335.726282][T20769] team0 (unregistering): Port device team_slave_1 removed [ 1335.783536][T20769] team0 (unregistering): Port device team_slave_0 removed [ 1336.658983][T21213] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4257'. [ 1336.668740][T21218] netlink: 'syz.4.4259': attribute type 4 has an invalid length. [ 1336.674056][T21218] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4259'. [ 1336.743671][T21038] hsr_slave_0: entered promiscuous mode [ 1336.749854][T21038] hsr_slave_1: entered promiscuous mode [ 1336.753497][T21038] debugfs: 'hsr0' already exists in 'hsr' [ 1336.768512][T21038] Cannot create hsr debugfs directory [ 1338.031928][T21038] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1338.112686][T21038] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1338.120936][ T5458] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1338.125102][T21038] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1338.160465][T21038] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1338.182604][T21038] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1338.195294][T21038] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1338.229809][T21038] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1338.246460][T21038] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1338.646110][T21038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1338.894739][T21244] can: request_module (can-proto-3) failed. [ 1339.080398][T20769] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1339.163371][T20769] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.555217][ T5458] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1339.764590][T21038] 8021q: adding VLAN 0 to HW filter on device team0 [ 1339.909710][T11815] bridge0: port 1(bridge_slave_0) entered blocking state [ 1339.918536][T11815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1340.238534][T20769] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1340.265858][T20769] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.384779][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 1340.387637][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1340.654572][T20769] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1340.713781][T20769] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.548520][T20769] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1341.586911][T20769] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.752836][T21282] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 1341.770913][T21282] bridge1: entered promiscuous mode [ 1341.773345][T21282] bridge1: entered allmulticast mode [ 1341.894288][ T5458] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1342.349887][T20769] bridge_slave_1: left allmulticast mode [ 1342.353025][T20769] bridge_slave_1: left promiscuous mode [ 1342.357658][T20769] bridge0: port 2(bridge_slave_1) entered disabled state [ 1342.390717][T20769] bridge_slave_0: left allmulticast mode [ 1342.393524][T20769] bridge_slave_0: left promiscuous mode [ 1342.396522][T20769] bridge0: port 1(bridge_slave_0) entered disabled state [ 1343.067353][T20769] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1343.151498][T20769] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1343.189909][T20769] bond0 (unregistering): Released all slaves [ 1343.250092][T20769] bond1 (unregistering): (slave dummy0): Releasing backup interface [ 1343.260123][T20769] dummy0: left promiscuous mode [ 1343.264655][T20769] dummy0: left allmulticast mode [ 1343.271119][T20769] bond1 (unregistering): Released all slaves [ 1344.231727][T21038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1344.646747][ T5458] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1344.813134][T21324] bond1: entered allmulticast mode [ 1344.816903][T21334] tmpfs: Bad value for 'mpol' [ 1344.856900][T21336] netlink: 268 bytes leftover after parsing attributes in process `syz.4.4277'. [ 1344.893166][T21336] netlink: 264 bytes leftover after parsing attributes in process `syz.4.4277'. [ 1344.917627][T21336] unsupported nlmsg_type 40 [ 1345.132102][T20769] hsr_slave_0: left promiscuous mode [ 1345.149916][T20769] hsr_slave_1: left promiscuous mode [ 1345.153892][T20769] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1345.185756][T20769] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1345.200921][T20769] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1345.204360][T20769] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1345.260812][T20769] veth1_macvtap: left promiscuous mode [ 1345.263671][T20769] veth0_macvtap: left promiscuous mode [ 1345.267509][T20769] veth1_vlan: left promiscuous mode [ 1345.272232][T20769] veth0_vlan: left promiscuous mode [ 1346.231696][T21349] FAULT_INJECTION: forcing a failure. [ 1346.231696][T21349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1346.241865][T21349] CPU: 3 UID: 0 PID: 21349 Comm: syz.5.4281 Not tainted syzkaller #0 PREEMPT(full) [ 1346.241896][T21349] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1346.241908][T21349] Call Trace: [ 1346.241915][T21349] [ 1346.241923][T21349] dump_stack_lvl+0x100/0x190 [ 1346.241959][T21349] should_fail_ex.cold+0x5/0xa [ 1346.241983][T21349] _copy_to_user+0x32/0xd0 [ 1346.242019][T21349] simple_read_from_buffer+0xcb/0x170 [ 1346.242054][T21349] proc_fail_nth_read+0x1af/0x230 [ 1346.242089][T21349] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1346.242118][T21349] ? rw_verify_area+0xce/0x6d0 [ 1346.242150][T21349] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1346.242178][T21349] vfs_read+0x1e4/0xb40 [ 1346.242201][T21349] ? __pfx_vfs_read+0x10/0x10 [ 1346.242218][T21349] ? find_held_lock+0x2b/0x80 [ 1346.242749][T21349] ? __fget_files+0x215/0x3d0 [ 1346.242771][T21349] ? __fget_files+0x21f/0x3d0 [ 1346.242792][T21349] ksys_read+0x12a/0x250 [ 1346.242809][T21349] ? __pfx_ksys_read+0x10/0x10 [ 1346.242834][T21349] do_int80_emulation+0x14b/0x720 [ 1346.242863][T21349] asm_int80_emulation+0x1a/0x20 [ 1346.242881][T21349] RIP: 0023:0xf71874eb [ 1346.242899][T21349] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1346.242915][T21349] RSP: 002b:00000000f54464bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1346.242933][T21349] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54465d0 [ 1346.242944][T21349] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1346.242954][T21349] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1346.242963][T21349] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1346.242973][T21349] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1346.242995][T21349] [ 1346.444870][T20769] team0 (unregistering): Port device team_slave_1 removed [ 1346.468483][T20769] team0 (unregistering): Port device team_slave_0 removed [ 1347.661182][ T5458] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1347.693369][T21038] veth0_vlan: entered promiscuous mode [ 1347.794164][T21038] veth1_vlan: entered promiscuous mode [ 1348.733017][T21038] veth0_macvtap: entered promiscuous mode [ 1348.755417][T21038] veth1_macvtap: entered promiscuous mode [ 1348.875250][T21038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1348.984882][T21038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1349.161959][T18334] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1350.268304][T14061] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1350.268602][T14061] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1350.268773][T14061] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1350.581825][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1350.604314][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1350.818778][ T5458] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1351.091349][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1351.094489][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1351.747263][ T5458] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1351.874432][T21410] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1352.304974][ T5839] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1352.362697][T21414] nvme nvme0: failed to connect socket: -111 [ 1352.477035][ T5839] usb 9-1: Using ep0 maxpacket: 8 [ 1352.588997][ T5839] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1352.594643][ T5839] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1352.634426][ T5839] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1352.648843][ T5839] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1352.657331][ T5839] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1352.672113][ T5839] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.798496][ T5839] hub 9-1:1.0: bad descriptor, ignoring hub [ 1352.825254][ T5839] hub 9-1:1.0: probe with driver hub failed with error -5 [ 1352.829567][ T5839] cdc_wdm 9-1:1.0: skipping garbage [ 1352.831941][ T5839] cdc_wdm 9-1:1.0: skipping garbage [ 1353.203073][ T5839] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1353.226882][T21418] netlink: 'syz.4.4295': attribute type 1 has an invalid length. [ 1353.277091][ T5839] cdc_wdm 9-1:1.0: Unknown control protocol [ 1354.056796][T21418] bond1: option mode: invalid value (7) [ 1354.218204][T21418] bond1 (unregistering): Released all slaves [ 1355.192239][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804cfa7c00: rx timeout, send abort [ 1355.389184][ T846] usb 9-1: USB disconnect, device number 2 [ 1355.691168][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804cfa6c00: rx timeout, send abort [ 1355.700288][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804cfa7c00: abort rx timeout. Force session deactivation [ 1356.200146][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804cfa6c00: abort rx timeout. Force session deactivation [ 1356.686756][T21497] program syz.6.4311 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1356.693578][T21497] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4311'. [ 1357.117462][T21507] FAULT_INJECTION: forcing a failure. [ 1357.117462][T21507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1357.126177][T21507] CPU: 2 UID: 0 PID: 21507 Comm: syz.4.4313 Not tainted syzkaller #0 PREEMPT(full) [ 1357.126204][T21507] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1357.126215][T21507] Call Trace: [ 1357.126224][T21507] [ 1357.126231][T21507] dump_stack_lvl+0x100/0x190 [ 1357.126260][T21507] should_fail_ex.cold+0x5/0xa [ 1357.126280][T21507] _copy_from_iter+0x1f4/0x1690 [ 1357.126304][T21507] ? __pfx__copy_from_iter+0x10/0x10 [ 1357.126320][T21507] ? _copy_from_iter+0x270/0x1690 [ 1357.126339][T21507] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1357.126365][T21507] skb_copy_datagram_from_iter+0x11f/0x720 [ 1357.126396][T21507] tun_get_user+0x1889/0x3c20 [ 1357.126467][T21507] ? __pfx_tun_get_user+0x10/0x10 [ 1357.126488][T21507] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1357.126515][T21507] ? find_held_lock+0x2b/0x80 [ 1357.126536][T21507] ? tun_get+0x191/0x370 [ 1357.126552][T21507] ? tun_get+0x191/0x370 [ 1357.126573][T21507] tun_chr_write_iter+0xdc/0x200 [ 1357.126593][T21507] vfs_write+0x6ac/0x1050 [ 1357.126611][T21507] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1357.126632][T21507] ? __pfx_vfs_write+0x10/0x10 [ 1357.126646][T21507] ? find_held_lock+0x2b/0x80 [ 1357.126676][T21507] ksys_write+0x12a/0x250 [ 1357.126691][T21507] ? __pfx_ksys_write+0x10/0x10 [ 1357.126705][T21507] ? ksys_write+0x1ac/0x250 [ 1357.126719][T21507] ? __pfx_ksys_write+0x10/0x10 [ 1357.126738][T21507] __do_fast_syscall_32+0xe7/0x970 [ 1357.126787][T21507] ? lockdep_hardirqs_on+0x78/0x100 [ 1357.126810][T21507] do_fast_syscall_32+0x32/0x70 [ 1357.126834][T21507] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1357.126856][T21507] RIP: 0023:0xf705efec [ 1357.126881][T21507] Code: Unable to access opcode bytes at 0xf705efc2. [ 1357.126888][T21507] RSP: 002b:00000000f542c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1357.126906][T21507] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 1357.126917][T21507] RDX: 0000000000000088 RSI: 0000000000000000 RDI: 0000000000000000 [ 1357.126927][T21507] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1357.126936][T21507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1357.126946][T21507] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1357.126968][T21507] [ 1357.535191][T21519] : renamed from bridge_slave_1 (while UP) [ 1359.965087][T21563] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 1361.279390][T21580] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4328'. [ 1361.670313][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.908424][T21600] FAULT_INJECTION: forcing a failure. [ 1362.908424][T21600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1362.951336][T21600] CPU: 3 UID: 0 PID: 21600 Comm: syz.5.4334 Not tainted syzkaller #0 PREEMPT(full) [ 1362.951378][T21600] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1362.951388][T21600] Call Trace: [ 1362.951397][T21600] [ 1362.951404][T21600] dump_stack_lvl+0x100/0x190 [ 1362.951429][T21600] should_fail_ex.cold+0x5/0xa [ 1362.951448][T21600] _copy_from_user+0x2e/0xd0 [ 1362.951475][T21600] io_uring_setup+0xc0/0x160 [ 1362.951492][T21600] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1362.951513][T21600] ? find_held_lock+0x2b/0x80 [ 1362.951531][T21600] ? __pfx_io_uring_setup+0x10/0x10 [ 1362.951546][T21600] ? ksys_write+0x190/0x250 [ 1362.951563][T21600] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1362.951593][T21600] ? fput+0x79/0x100 [ 1362.951610][T21600] ? ksys_write+0x1ac/0x250 [ 1362.951623][T21600] ? __pfx_ksys_write+0x10/0x10 [ 1362.951638][T21600] __ia32_sys_io_uring_setup+0xc2/0x170 [ 1362.951655][T21600] __do_fast_syscall_32+0xe7/0x970 [ 1362.951676][T21600] ? lockdep_hardirqs_on+0x78/0x100 [ 1362.951696][T21600] do_fast_syscall_32+0x32/0x70 [ 1362.951717][T21600] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1362.951736][T21600] RIP: 0023:0xf7f83fec [ 1362.951788][T21600] Code: Unable to access opcode bytes at 0xf7f83fc2. [ 1362.951796][T21600] RSP: 002b:00000000f542543c EFLAGS: 00000286 ORIG_RAX: 00000000000001a9 [ 1362.951811][T21600] RAX: ffffffffffffffda RBX: 0000000000000e26 RCX: 0000000080000808 [ 1362.951820][T21600] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1362.951828][T21600] RBP: 00000000f54254fc R08: 0000000000000000 R09: 0000000000000000 [ 1362.951837][T21600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1362.951845][T21600] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1362.951863][T21600] [ 1364.081016][T21613] nvmet: adding nsid 1 to subsystem testnqn [ 1364.153832][T21617] nvmet: failed to open block device (null): (-22) [ 1364.157190][ T42] audit: type=1800 audit(1786077746.110:641): pid=21617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4339" name="enable" dev="configfs" ino=156773 res=0 errno=0 [ 1364.159641][T21613] nvme_fabrics: missing parameter 'host_traddr=%s' [ 1365.064845][T21634] input: syz0 as /devices/virtual/input/input19 [ 1365.102118][T21634] FAULT_INJECTION: forcing a failure. [ 1365.102118][T21634] name failslab, interval 1, probability 0, space 0, times 0 [ 1365.112000][T21634] CPU: 3 UID: 0 PID: 21634 Comm: syz.6.4342 Not tainted syzkaller #0 PREEMPT(full) [ 1365.112030][T21634] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1365.112041][T21634] Call Trace: [ 1365.112057][T21634] [ 1365.112064][T21634] dump_stack_lvl+0x100/0x190 [ 1365.112092][T21634] should_fail_ex.cold+0x5/0xa [ 1365.112112][T21634] should_failslab+0xc2/0x120 [ 1365.112137][T21634] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1365.112160][T21634] ? do_getname+0x35/0x390 [ 1365.112188][T21634] do_getname+0x35/0x390 [ 1365.112213][T21634] do_sys_openat2+0xc7/0x1e0 [ 1365.112239][T21634] ? __pfx_do_sys_openat2+0x10/0x10 [ 1365.112266][T21634] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1365.112297][T21634] __ia32_compat_sys_openat+0x12d/0x210 [ 1365.112324][T21634] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1365.112348][T21634] ? fput+0x79/0x100 [ 1365.112365][T21634] ? ksys_write+0x1ac/0x250 [ 1365.112383][T21634] ? __pfx_ksys_write+0x10/0x10 [ 1365.112406][T21634] __do_fast_syscall_32+0xe7/0x970 [ 1365.112431][T21634] ? lockdep_hardirqs_on+0x78/0x100 [ 1365.112455][T21634] do_fast_syscall_32+0x32/0x70 [ 1365.112481][T21634] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1365.112504][T21634] RIP: 0023:0xf703efec [ 1365.112529][T21634] Code: Unable to access opcode bytes at 0xf703efc2. [ 1365.112538][T21634] RSP: 002b:00000000f540c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 1365.112558][T21634] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000380 [ 1365.112570][T21634] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1365.112581][T21634] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1365.112592][T21634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1365.112603][T21634] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1365.112626][T21634] [ 1365.699715][T21641] input: syz0 as /devices/virtual/input/input20 [ 1366.131865][ T42] audit: type=1800 audit(1786077748.100:642): pid=21641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4344" name="ep_name" dev="configfs" ino=155560 res=0 errno=0 [ 1366.777423][T21665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4350'. [ 1366.802723][T21667] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4349'. [ 1367.440148][T21665] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1367.440210][T21665] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1367.473992][T21665] vhci_hcd vhci_hcd.0: Device attached [ 1367.809458][ T5832] usb 38-1: SetAddress Request (2) to port 0 [ 1367.824335][ T5832] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1369.258080][T21671] vhci_hcd: connection reset by peer [ 1369.287867][T14061] vhci_hcd vhci_hcd.0: stop threads [ 1369.291966][T14061] vhci_hcd vhci_hcd.0: release socket [ 1369.305901][T14061] vhci_hcd vhci_hcd.0: disconnect device [ 1370.392214][T21719] FAULT_INJECTION: forcing a failure. [ 1370.392214][T21719] name failslab, interval 1, probability 0, space 0, times 0 [ 1370.402427][T21719] CPU: 1 UID: 0 PID: 21719 Comm: syz.4.4357 Not tainted syzkaller #0 PREEMPT(full) [ 1370.402457][T21719] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1370.402466][T21719] Call Trace: [ 1370.402474][T21719] [ 1370.402482][T21719] dump_stack_lvl+0x100/0x190 [ 1370.402509][T21719] should_fail_ex.cold+0x5/0xa [ 1370.402527][T21719] should_failslab+0xc2/0x120 [ 1370.402550][T21719] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1370.402578][T21719] ? stack_trace_save+0x8e/0xc0 [ 1370.402601][T21719] ? alloc_empty_file+0x5b/0x1c0 [ 1370.402625][T21719] alloc_empty_file+0x5b/0x1c0 [ 1370.402646][T21719] path_openat+0xe7/0x4280 [ 1370.402663][T21719] ? kasan_save_track+0x14/0x30 [ 1370.402682][T21719] ? __kasan_slab_alloc+0x89/0x90 [ 1370.402702][T21719] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 1370.402720][T21719] ? do_getname+0x35/0x390 [ 1370.402740][T21719] ? do_sys_openat2+0xc7/0x1e0 [ 1370.402761][T21719] ? __ia32_compat_sys_openat+0x12d/0x210 [ 1370.402783][T21719] ? __do_fast_syscall_32+0xe7/0x970 [ 1370.402813][T21719] ? __pfx_path_openat+0x10/0x10 [ 1370.402836][T21719] do_file_open+0x20e/0x430 [ 1370.402851][T21719] ? __lock_acquire+0x49f/0x1a40 [ 1370.402876][T21719] ? __pfx_do_file_open+0x10/0x10 [ 1370.402910][T21719] ? _raw_spin_unlock+0x28/0x50 [ 1370.402928][T21719] ? alloc_fd+0x471/0x7a0 [ 1370.402951][T21719] do_sys_openat2+0x10f/0x1e0 [ 1370.402974][T21719] ? __pfx_do_sys_openat2+0x10/0x10 [ 1370.403000][T21719] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1370.403028][T21719] __ia32_compat_sys_openat+0x12d/0x210 [ 1370.403053][T21719] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1370.403075][T21719] ? fput+0x79/0x100 [ 1370.403094][T21719] ? ksys_write+0x1ac/0x250 [ 1370.403110][T21719] ? __pfx_ksys_write+0x10/0x10 [ 1370.403128][T21719] __do_fast_syscall_32+0xe7/0x970 [ 1370.403151][T21719] ? lockdep_hardirqs_on+0x78/0x100 [ 1370.403175][T21719] do_fast_syscall_32+0x32/0x70 [ 1370.403199][T21719] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1370.403220][T21719] RIP: 0023:0xf705efec [ 1370.403245][T21719] Code: Unable to access opcode bytes at 0xf705efc2. [ 1370.403252][T21719] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 1370.403271][T21719] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000080 [ 1370.403282][T21719] RDX: 0000000000181603 RSI: 0000000000000000 RDI: 0000000000000000 [ 1370.403291][T21719] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1370.403301][T21719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1370.403310][T21719] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1370.403352][T21719] [ 1370.527200][T21721] /dev/sg0: Can't lookup blockdev [ 1372.642837][T21750] lo: entered allmulticast mode [ 1372.676094][T21750] lo: left allmulticast mode [ 1372.692027][T21750] bond0: entered promiscuous mode [ 1372.700932][T21750] bond_slave_0: entered promiscuous mode [ 1372.705410][T21750] bond_slave_1: entered promiscuous mode [ 1372.715198][T21752] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4366'. [ 1372.738430][T21750] batadv0: entered promiscuous mode [ 1372.742358][T21750] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1372.761574][T21750] bond0: left promiscuous mode [ 1372.772178][T21750] bond_slave_0: left promiscuous mode [ 1372.775555][T21750] bond_slave_1: left promiscuous mode [ 1372.836618][T21750] batadv0: left promiscuous mode [ 1372.977062][T21754] bridge0: port 2(4) entered disabled state [ 1372.986779][T21754] bridge0: port 1(bridge_slave_0) entered disabled state [ 1373.740970][ T5832] usb 38-1: device descriptor read/8, error -110 [ 1374.785661][ T5832] usb usb38-port1: attempt power cycle [ 1375.430247][T21806] FAULT_INJECTION: forcing a failure. [ 1375.430247][T21806] name failslab, interval 1, probability 0, space 0, times 0 [ 1375.437284][T21806] CPU: 1 UID: 0 PID: 21806 Comm: syz.5.4382 Not tainted syzkaller #0 PREEMPT(full) [ 1375.437312][T21806] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1375.437322][T21806] Call Trace: [ 1375.437334][T21806] [ 1375.437342][T21806] dump_stack_lvl+0x100/0x190 [ 1375.437370][T21806] should_fail_ex.cold+0x5/0xa [ 1375.437391][T21806] should_failslab+0xc2/0x120 [ 1375.437416][T21806] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1375.437439][T21806] ? __alloc_skb+0x5b7/0x710 [ 1375.437462][T21806] ? __alloc_skb+0x140/0x710 [ 1375.437488][T21806] __alloc_skb+0x140/0x710 [ 1375.437510][T21806] ? __alloc_skb+0x5b7/0x710 [ 1375.437554][T21806] ? __pfx___alloc_skb+0x10/0x10 [ 1375.437586][T21806] netlink_alloc_large_skb+0x69/0x150 [ 1375.437646][T21806] netlink_sendmsg+0x680/0xda0 [ 1375.437671][T21806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1375.437696][T21806] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1375.437720][T21806] ____sys_sendmsg+0xa4d/0xbe0 [ 1375.437738][T21806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1375.437760][T21806] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1375.437789][T21806] ___sys_sendmsg+0x190/0x1e0 [ 1375.437811][T21806] ? __pfx____sys_sendmsg+0x10/0x10 [ 1375.437842][T21806] ? find_held_lock+0x2b/0x80 [ 1375.437877][T21806] __sys_sendmsg+0x160/0x210 [ 1375.437901][T21806] ? __pfx___sys_sendmsg+0x10/0x10 [ 1375.437933][T21806] ? __pfx_ksys_write+0x10/0x10 [ 1375.437962][T21806] __do_fast_syscall_32+0xe7/0x970 [ 1375.437987][T21806] ? lockdep_hardirqs_on+0x78/0x100 [ 1375.438012][T21806] do_fast_syscall_32+0x32/0x70 [ 1375.438038][T21806] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1375.438061][T21806] RIP: 0023:0xf7f83fec [ 1375.438084][T21806] Code: Unable to access opcode bytes at 0xf7f83fc2. [ 1375.438092][T21806] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1375.438111][T21806] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000580 [ 1375.438122][T21806] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1375.438132][T21806] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1375.438141][T21806] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1375.438151][T21806] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1375.438174][T21806] [ 1375.469515][ T5832] usb usb38-port1: unable to enumerate USB device [ 1375.477814][T21807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1375.964428][T21803] ftl_cs: FTL header not found. [ 1376.101376][T21814] capability: warning: `syz.6.4380' uses 32-bit capabilities (legacy support in use) [ 1377.219997][T21803] block2mtd: mtd1: [/dev/loop0] erase_size = 4KiB [4096] [ 1379.011605][ T5853] libceph: connect (1)[c::]:6789 error -101 [ 1379.059756][ T5853] libceph: mon0 (1)[c::]:6789 connect error [ 1379.130207][ T5853] libceph: connect (1)[c::]:6789 error -101 [ 1379.134044][ T5853] libceph: mon0 (1)[c::]:6789 connect error [ 1379.539191][ T5853] libceph: connect (1)[c::]:6789 error -101 [ 1379.653470][ T5853] libceph: mon0 (1)[c::]:6789 connect error [ 1379.710361][T21832] ceph: No mds server is up or the cluster is laggy [ 1380.504117][T21854] fuse: fd is not a fuse device [ 1383.228144][ T42] audit: type=1326 audit(1786077765.190:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21886 comm="syz.0.4403" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46fec code=0x7ffc0000 [ 1383.251875][ T42] audit: type=1326 audit(1786077765.190:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21886 comm="syz.0.4403" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46fec code=0x7ffc0000 [ 1383.306233][ T42] audit: type=1326 audit(1786077765.220:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21886 comm="syz.0.4403" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f46fec code=0x7ffc0000 [ 1383.322261][ T42] audit: type=1326 audit(1786077765.220:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21886 comm="syz.0.4403" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46fec code=0x7ffc0000 [ 1383.344522][ T42] audit: type=1326 audit(1786077765.220:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21886 comm="syz.0.4403" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46fec code=0x7ffc0000 [ 1383.389442][ T42] audit: type=1326 audit(1786077765.270:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21886 comm="syz.0.4403" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f46fec code=0x7ffc0000 [ 1383.418710][ T42] audit: type=1326 audit(1786077765.270:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21886 comm="syz.0.4403" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46fec code=0x7ffc0000 [ 1383.445518][ T42] audit: type=1326 audit(1786077765.280:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21886 comm="syz.0.4403" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46fec code=0x7ffc0000 [ 1383.663328][T21894] orangefs_devreq_open: device cannot be opened in blocking mode [ 1383.784635][T21896] syzkaller0: entered promiscuous mode [ 1383.809257][T21896] syzkaller0: entered allmulticast mode [ 1383.814024][T21896] FAULT_INJECTION: forcing a failure. [ 1383.814024][T21896] name failslab, interval 1, probability 0, space 0, times 0 [ 1383.852152][T21896] CPU: 3 UID: 0 PID: 21896 Comm: syz.0.4404 Not tainted syzkaller #0 PREEMPT(full) [ 1383.852198][T21896] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1383.852209][T21896] Call Trace: [ 1383.852242][T21896] [ 1383.852251][T21896] dump_stack_lvl+0x100/0x190 [ 1383.852309][T21896] should_fail_ex.cold+0x5/0xa [ 1383.852342][T21896] should_failslab+0xc2/0x120 [ 1383.852378][T21896] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1383.852412][T21896] ? __alloc_skb+0x5b7/0x710 [ 1383.852471][T21896] ? __alloc_skb+0x140/0x710 [ 1383.852499][T21896] __alloc_skb+0x140/0x710 [ 1383.852523][T21896] ? __alloc_skb+0x5b7/0x710 [ 1383.852545][T21896] ? __pfx___alloc_skb+0x10/0x10 [ 1383.852570][T21896] ? up_write+0x2e5/0x5c0 [ 1383.852604][T21896] alloc_skb_with_frags+0xdd/0x760 [ 1383.852639][T21896] sock_alloc_send_pskb+0x801/0x980 [ 1383.852665][T21896] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1383.852703][T21896] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1383.852728][T21896] ? find_held_lock+0x2b/0x80 [ 1383.852750][T21896] ? dev_get_by_index+0x180/0x380 [ 1383.852775][T21896] ? dev_get_by_index+0x180/0x380 [ 1383.852806][T21896] packet_sendmsg+0x1eda/0x5100 [ 1383.852849][T21896] ? __pfx___might_resched+0x10/0x10 [ 1383.852894][T21896] ? aa_sk_perm+0x309/0xaa0 [ 1383.852939][T21896] ? __pfx_aa_sk_perm+0x10/0x10 [ 1383.852964][T21896] ? __pfx_packet_sendmsg+0x10/0x10 [ 1383.852996][T21896] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1383.853031][T21896] ____sys_sendmsg+0xa4d/0xbe0 [ 1383.853051][T21896] ? __pfx_packet_sendmsg+0x10/0x10 [ 1383.853076][T21896] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1383.853103][T21896] ? clockevents_program_event+0x1ef/0x820 [ 1383.853137][T21896] ___sys_sendmsg+0x190/0x1e0 [ 1383.853161][T21896] ? __pfx____sys_sendmsg+0x10/0x10 [ 1383.853181][T21896] ? find_held_lock+0x2b/0x80 [ 1383.853201][T21896] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 1383.853236][T21896] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 1383.853266][T21896] ? lockdep_hardirqs_on+0x78/0x100 [ 1383.853330][T21896] ? irqentry_exit+0x24d/0xa00 [ 1383.853369][T21896] __sys_sendmsg+0x160/0x210 [ 1383.853397][T21896] ? __pfx___sys_sendmsg+0x10/0x10 [ 1383.853430][T21896] ? __pfx_ksys_write+0x10/0x10 [ 1383.853459][T21896] __do_fast_syscall_32+0xe7/0x970 [ 1383.853485][T21896] ? lockdep_hardirqs_on+0x78/0x100 [ 1383.853511][T21896] do_fast_syscall_32+0x32/0x70 [ 1383.853537][T21896] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1383.853558][T21896] RIP: 0023:0xf7f46fec [ 1383.853584][T21896] Code: Unable to access opcode bytes at 0xf7f46fc2. [ 1383.853601][T21896] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1383.853621][T21896] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 1383.853633][T21896] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 1383.853644][T21896] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1383.853653][T21896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1383.853662][T21896] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1383.853685][T21896] [ 1384.780947][T21904] netlink: 'syz.0.4407': attribute type 5 has an invalid length. [ 1384.786986][T21904] netlink: 'syz.0.4407': attribute type 9 has an invalid length. [ 1384.837392][T21904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4407'. [ 1385.828183][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 1387.284330][T21929] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1387.656266][T21929] syz_tun: entered allmulticast mode [ 1387.665132][T21940] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4417'. [ 1387.684425][T21940] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4417'. [ 1388.001354][T21945] fuse: Bad value for 'rootmode' [ 1388.551257][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1388.618033][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 1388.709700][T21954] tipc: Started in network mode [ 1388.718205][T21954] tipc: Node identity 4, cluster identity 4711 [ 1388.728513][T21954] tipc: Node number set to 4 [ 1388.748039][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 1389.250995][T21965] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1389.258459][T21965] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1389.387522][T21971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4421'. [ 1389.538459][T21974] vivid-007: disconnect [ 1389.548518][T21965] vhci_hcd vhci_hcd.0: Device attached [ 1389.596572][T21967] vivid-007: reconnect [ 1389.775203][T21972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4421'. [ 1389.855028][T17680] usb 38-1: SetAddress Request (6) to port 0 [ 1389.857590][T17680] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1390.070116][T21969] vhci_hcd: connection reset by peer [ 1390.076672][T14061] vhci_hcd vhci_hcd.0: stop threads [ 1390.094801][T14061] vhci_hcd vhci_hcd.0: release socket [ 1390.139906][T14061] vhci_hcd vhci_hcd.0: disconnect device [ 1390.192293][T21966] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1391.207155][T21983] block device autoloading is deprecated and will be removed. [ 1391.781851][T21994] binder_alloc: 21993: pid 21993 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1391.974325][T21998] netlink: 136 bytes leftover after parsing attributes in process `syz.4.4433'. [ 1392.018193][T21998] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1392.246673][ T42] audit: type=1800 audit(1786077774.190:651): pid=22000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4434" name="zone_nr_conv" dev="configfs" ino=157076 res=0 errno=0 [ 1392.535719][T22002] FAULT_INJECTION: forcing a failure. [ 1392.535719][T22002] name failslab, interval 1, probability 0, space 0, times 0 [ 1392.551704][T22005] netlink: 'syz.4.4435': attribute type 2 has an invalid length. [ 1392.555724][T22005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4435'. [ 1392.583354][T22002] CPU: 3 UID: 0 PID: 22002 Comm: syz.0.4437 Tainted: G L syzkaller #0 PREEMPT(full) [ 1392.583385][T22002] Tainted: [L]=SOFTLOCKUP [ 1392.583390][T22002] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1392.583400][T22002] Call Trace: [ 1392.583407][T22002] [ 1392.583415][T22002] dump_stack_lvl+0x100/0x190 [ 1392.583442][T22002] should_fail_ex.cold+0x5/0xa [ 1392.583461][T22002] should_failslab+0xc2/0x120 [ 1392.583485][T22002] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1392.583508][T22002] ? dst_alloc+0x99/0x1a0 [ 1392.583535][T22002] dst_alloc+0x99/0x1a0 [ 1392.583560][T22002] rt_dst_alloc+0x35/0x3a0 [ 1392.583585][T22002] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 1392.583648][T22002] ip_route_output_key_hash+0x118/0x2b0 [ 1392.583677][T22002] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1392.583710][T22002] ? find_held_lock+0x2b/0x80 [ 1392.583733][T22002] ip_route_output_flow+0x27/0x150 [ 1392.583750][T22002] udp_sendmsg+0x198a/0x2720 [ 1392.583778][T22002] ? __pfx_udp_sendmsg+0x10/0x10 [ 1392.583811][T22002] ? __handle_mm_fault+0x4ef/0x2a00 [ 1392.583847][T22002] ? __lock_acquire+0x49f/0x1a40 [ 1392.583870][T22002] ? __css_rstat_updated+0x1ce/0x5a0 [ 1392.583917][T22002] udpv6_sendmsg+0x1420/0x2c20 [ 1392.583934][T22002] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1392.583964][T22002] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1392.584017][T22002] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1392.584038][T22002] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1392.584058][T22002] ? inet6_sendmsg+0x105/0x140 [ 1392.584075][T22002] inet6_sendmsg+0x105/0x140 [ 1392.584095][T22002] ____sys_sendmsg+0x704/0xbe0 [ 1392.584116][T22002] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1392.584137][T22002] ? _kstrtoull+0x13c/0x1f0 [ 1392.584168][T22002] ? __pfx__kstrtoull+0x10/0x10 [ 1392.584190][T22002] ___sys_sendmsg+0x190/0x1e0 [ 1392.584211][T22002] ? __pfx____sys_sendmsg+0x10/0x10 [ 1392.584229][T22002] ? __lock_acquire+0x49f/0x1a40 [ 1392.584284][T22002] __sys_sendmmsg+0x309/0x440 [ 1392.584313][T22002] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1392.584336][T22002] ? find_held_lock+0x2b/0x80 [ 1392.584362][T22002] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1392.584400][T22002] ? fput+0x79/0x100 [ 1392.584420][T22002] ? ksys_write+0x1ac/0x250 [ 1392.584439][T22002] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 1392.584458][T22002] ? lockdep_hardirqs_on+0x78/0x100 [ 1392.584481][T22002] __do_fast_syscall_32+0xe7/0x970 [ 1392.584504][T22002] ? lockdep_hardirqs_on+0x78/0x100 [ 1392.584528][T22002] do_fast_syscall_32+0x32/0x70 [ 1392.584551][T22002] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1392.584571][T22002] RIP: 0023:0xf7f46fec [ 1392.584597][T22002] Code: Unable to access opcode bytes at 0xf7f46fc2. [ 1392.584604][T22002] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 1392.584622][T22002] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080003cc0 [ 1392.584633][T22002] RDX: 0000000000000172 RSI: 0000000004001c00 RDI: 0000000000000000 [ 1392.584643][T22002] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1392.584652][T22002] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1392.584662][T22002] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1392.584684][T22002] [ 1392.914852][T22015] FAULT_INJECTION: forcing a failure. [ 1392.914852][T22015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1392.934147][T22015] CPU: 2 UID: 0 PID: 22015 Comm: syz.4.4439 Tainted: G L syzkaller #0 PREEMPT(full) [ 1392.934195][T22015] Tainted: [L]=SOFTLOCKUP [ 1392.934202][T22015] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1392.934212][T22015] Call Trace: [ 1392.934219][T22015] [ 1392.934226][T22015] dump_stack_lvl+0x100/0x190 [ 1392.934253][T22015] should_fail_ex.cold+0x5/0xa [ 1392.934272][T22015] _copy_from_iter+0x1f4/0x1690 [ 1392.934293][T22015] ? __asan_memset+0x23/0x50 [ 1392.934313][T22015] ? __pfx__copy_from_iter+0x10/0x10 [ 1392.934329][T22015] ? __pfx___alloc_skb+0x10/0x10 [ 1392.934361][T22015] netlink_sendmsg+0x808/0xda0 [ 1392.934387][T22015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1392.934411][T22015] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1392.934435][T22015] ____sys_sendmsg+0xa4d/0xbe0 [ 1392.934452][T22015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1392.934473][T22015] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1392.934501][T22015] ___sys_sendmsg+0x190/0x1e0 [ 1392.934522][T22015] ? __pfx____sys_sendmsg+0x10/0x10 [ 1392.934554][T22015] ? find_held_lock+0x2b/0x80 [ 1392.934591][T22015] __sys_sendmsg+0x160/0x210 [ 1392.934615][T22015] ? __pfx___sys_sendmsg+0x10/0x10 [ 1392.934643][T22015] ? __pfx_ksys_write+0x10/0x10 [ 1392.934664][T22015] __do_fast_syscall_32+0xe7/0x970 [ 1392.934687][T22015] ? lockdep_hardirqs_on+0x78/0x100 [ 1392.934711][T22015] do_fast_syscall_32+0x32/0x70 [ 1392.934735][T22015] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1392.934756][T22015] RIP: 0023:0xf705efec [ 1392.934788][T22015] Code: Unable to access opcode bytes at 0xf705efc2. [ 1392.934796][T22015] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1392.934814][T22015] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 1392.934825][T22015] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1392.934835][T22015] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1392.934845][T22015] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1392.934855][T22015] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1392.934878][T22015] [ 1394.062797][T22026] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input21 [ 1394.526951][T22038] FAULT_INJECTION: forcing a failure. [ 1394.526951][T22038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1394.585908][T22033] can0: slcan on ttyS3. [ 1394.595917][T22038] CPU: 0 UID: 0 PID: 22038 Comm: syz.6.4446 Tainted: G L syzkaller #0 PREEMPT(full) [ 1394.595947][T22038] Tainted: [L]=SOFTLOCKUP [ 1394.595953][T22038] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1394.595963][T22038] Call Trace: [ 1394.595971][T22038] [ 1394.595977][T22038] dump_stack_lvl+0x100/0x190 [ 1394.596003][T22038] should_fail_ex.cold+0x5/0xa [ 1394.596021][T22038] _copy_to_user+0x32/0xd0 [ 1394.596047][T22038] simple_read_from_buffer+0xcb/0x170 [ 1394.596089][T22038] proc_fail_nth_read+0x1af/0x230 [ 1394.596120][T22038] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1394.596144][T22038] ? rw_verify_area+0xce/0x6d0 [ 1394.596168][T22038] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1394.596190][T22038] vfs_read+0x1e4/0xb40 [ 1394.596209][T22038] ? __pfx_vfs_read+0x10/0x10 [ 1394.596221][T22038] ? find_held_lock+0x2b/0x80 [ 1394.596241][T22038] ? __fget_files+0x215/0x3d0 [ 1394.596261][T22038] ? __fget_files+0x21f/0x3d0 [ 1394.596284][T22038] ksys_read+0x12a/0x250 [ 1394.596299][T22038] ? __pfx_ksys_read+0x10/0x10 [ 1394.596312][T22038] ? arch_syscall_is_vdso_sigreturn+0x19b/0x200 [ 1394.596362][T22038] ? syscall_user_dispatch+0x76/0x130 [ 1394.596383][T22038] do_int80_emulation+0x14b/0x720 [ 1394.596408][T22038] asm_int80_emulation+0x1a/0x20 [ 1394.596424][T22038] RIP: 0023:0xf71774eb [ 1394.596438][T22038] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1394.596452][T22038] RSP: 002b:00000000f542d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1394.596470][T22038] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f542d5d0 [ 1394.596481][T22038] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1394.596491][T22038] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1394.596500][T22038] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1394.596510][T22038] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1394.596533][T22038] [ 1394.795263][T22045] fuse: Bad value for 'fd' [ 1394.844212][T22044] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1395.045080][T17680] usb 38-1: device descriptor read/8, error -110 [ 1395.064299][T22049] FAULT_INJECTION: forcing a failure. [ 1395.064299][T22049] name failslab, interval 1, probability 0, space 0, times 0 [ 1395.077768][T22049] CPU: 0 UID: 0 PID: 22049 Comm: syz.6.4450 Tainted: G L syzkaller #0 PREEMPT(full) [ 1395.077804][T22049] Tainted: [L]=SOFTLOCKUP [ 1395.077809][T22049] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1395.077818][T22049] Call Trace: [ 1395.077825][T22049] [ 1395.077832][T22049] dump_stack_lvl+0x100/0x190 [ 1395.077872][T22049] should_fail_ex.cold+0x5/0xa [ 1395.077889][T22049] should_failslab+0xc2/0x120 [ 1395.077909][T22049] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 1395.077930][T22049] ? sock_alloc_inode+0x26/0x2c0 [ 1395.077947][T22049] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1395.077962][T22049] sock_alloc_inode+0x26/0x2c0 [ 1395.077975][T22049] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1395.077989][T22049] alloc_inode+0x68/0x250 [ 1395.078009][T22049] sock_alloc+0x44/0x280 [ 1395.078029][T22049] ? security_socket_create+0x7f/0x250 [ 1395.078048][T22049] __sock_create+0xc2/0x860 [ 1395.078068][T22049] mptcp_subflow_create_socket+0xec/0xa30 [ 1395.078102][T22049] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 1395.078129][T22049] __mptcp_nmpc_sk+0x17f/0x880 [ 1395.078148][T22049] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 1395.078167][T22049] ? __local_bh_enable_ip+0x9e/0x120 [ 1395.078200][T22049] mptcp_getsockopt+0xce7/0xe50 [ 1395.078216][T22049] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 1395.078233][T22049] ? lock_acquire+0x1b9/0x370 [ 1395.078257][T22049] ? aa_sock_opt_perm+0xfe/0x1b0 [ 1395.078275][T22049] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1395.078291][T22049] do_sock_getsockopt+0x50a/0x6e0 [ 1395.078306][T22049] ? __lock_acquire+0x49f/0x1a40 [ 1395.078333][T22049] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1395.078354][T22049] ? find_held_lock+0x2b/0x80 [ 1395.078376][T22049] ? __fget_files+0x21f/0x3d0 [ 1395.078394][T22049] __sys_getsockopt+0x133/0x1d0 [ 1395.078415][T22049] ? handle_softirqs+0x835/0x9b0 [ 1395.078434][T22049] ? __ia32_sys_getsockopt+0xbc/0x160 [ 1395.078454][T22049] __ia32_sys_getsockopt+0xbc/0x160 [ 1395.078473][T22049] ? __do_fast_syscall_32+0x98/0x970 [ 1395.078493][T22049] ? lockdep_hardirqs_on+0x78/0x100 [ 1395.078511][T22049] __do_fast_syscall_32+0xe7/0x970 [ 1395.078534][T22049] do_fast_syscall_32+0x32/0x70 [ 1395.078554][T22049] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1395.078573][T22049] RIP: 0023:0xf703efec [ 1395.078594][T22049] Code: Unable to access opcode bytes at 0xf703efc2. [ 1395.078601][T22049] RSP: 002b:00000000f540c50c EFLAGS: 00000292 ORIG_RAX: 000000000000016d [ 1395.078616][T22049] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000000006 [ 1395.078625][T22049] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 1395.078634][T22049] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1395.078642][T22049] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1395.078650][T22049] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1395.078669][T22049] [ 1395.300515][T22049] socket: no more sockets [ 1395.534859][T17680] usb usb38-port1: attempt power cycle [ 1395.568124][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 1396.408610][T22036] can0 (unregistered): slcan off ttyS3. [ 1396.771443][T17680] usb usb38-port1: unable to enumerate USB device [ 1398.406079][T22057] block nbd4: shutting down sockets [ 1401.090306][T22068] FAULT_INJECTION: forcing a failure. [ 1401.090306][T22068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1401.097319][T22068] CPU: 1 UID: 0 PID: 22068 Comm: syz.4.4454 Tainted: G L syzkaller #0 PREEMPT(full) [ 1401.097350][T22068] Tainted: [L]=SOFTLOCKUP [ 1401.097355][T22068] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1401.097366][T22068] Call Trace: [ 1401.097373][T22068] [ 1401.097380][T22068] dump_stack_lvl+0x100/0x190 [ 1401.097408][T22068] should_fail_ex.cold+0x5/0xa [ 1401.097428][T22068] _copy_from_user+0x2e/0xd0 [ 1401.097455][T22068] get_compat_msghdr+0xb3/0x480 [ 1401.097473][T22068] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1401.097515][T22068] ___sys_sendmsg+0x1b6/0x1e0 [ 1401.097537][T22068] ? __pfx____sys_sendmsg+0x10/0x10 [ 1401.097566][T22068] ? find_held_lock+0x2b/0x80 [ 1401.097601][T22068] __sys_sendmsg+0x160/0x210 [ 1401.097626][T22068] ? __pfx___sys_sendmsg+0x10/0x10 [ 1401.097655][T22068] ? __pfx_ksys_write+0x10/0x10 [ 1401.097677][T22068] __do_fast_syscall_32+0xe7/0x970 [ 1401.097702][T22068] ? lockdep_hardirqs_on+0x78/0x100 [ 1401.097725][T22068] do_fast_syscall_32+0x32/0x70 [ 1401.097748][T22068] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1401.097771][T22068] RIP: 0023:0xf705efec [ 1401.097795][T22068] Code: Unable to access opcode bytes at 0xf705efc2. [ 1401.097801][T22068] RSP: 002b:00000000f540b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1401.097818][T22068] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800001c0 [ 1401.097828][T22068] RDX: 0000000000044004 RSI: 0000000000000000 RDI: 0000000000000000 [ 1401.097838][T22068] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1401.097848][T22068] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1401.097864][T22068] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1401.097889][T22068] [ 1401.522598][T22070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1401.817662][T22081] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4458'. [ 1401.818092][ T41] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 1401.821349][T22081] openvswitch: netlink: Flow key attr not present in new flow. [ 1402.313892][ T41] usb 11-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1402.339955][ T41] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.345047][ T41] usb 11-1: Product: syz [ 1402.348038][ T41] usb 11-1: Manufacturer: syz [ 1402.351245][ T41] usb 11-1: SerialNumber: syz [ 1402.358470][ T41] usb 11-1: config 0 descriptor?? [ 1403.961249][T22095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4462'. [ 1403.982592][T22095] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4462'. [ 1404.592063][T17680] usb 11-1: USB disconnect, device number 2 [ 1404.862840][ T42] audit: type=1800 audit(1786077784.831:652): pid=22102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4465" name="zone_nr_conv" dev="configfs" ino=159880 res=0 errno=0 [ 1404.913134][T22102] FAULT_INJECTION: forcing a failure. [ 1404.913134][T22102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1404.921875][T22102] CPU: 3 UID: 0 PID: 22102 Comm: syz.5.4465 Tainted: G L syzkaller #0 PREEMPT(full) [ 1404.921941][T22102] Tainted: [L]=SOFTLOCKUP [ 1404.921949][T22102] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1404.921964][T22102] Call Trace: [ 1404.921971][T22102] [ 1404.921980][T22102] dump_stack_lvl+0x100/0x190 [ 1404.922045][T22102] should_fail_ex.cold+0x5/0xa [ 1404.922102][T22102] _copy_from_iter+0x1f4/0x1690 [ 1404.922126][T22102] ? __pfx__copy_from_iter+0x10/0x10 [ 1404.922193][T22102] configfs_write_iter+0xb3/0x4e0 [ 1404.922371][T22102] vfs_write+0x6ac/0x1050 [ 1404.922537][T22102] ? __pfx_configfs_write_iter+0x10/0x10 [ 1404.922589][T22102] ? __pfx_vfs_write+0x10/0x10 [ 1404.922602][T22102] ? find_held_lock+0x2b/0x80 [ 1404.922853][T22102] ksys_write+0x12a/0x250 [ 1404.922911][T22102] ? __pfx_ksys_write+0x10/0x10 [ 1404.922928][T22102] ? ksys_write+0x1ac/0x250 [ 1404.922943][T22102] ? __pfx_ksys_write+0x10/0x10 [ 1404.923176][T22102] __do_fast_syscall_32+0xe7/0x970 [ 1404.923238][T22102] ? lockdep_hardirqs_on+0x78/0x100 [ 1404.923263][T22102] do_fast_syscall_32+0x32/0x70 [ 1404.923401][T22102] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1404.923424][T22102] RIP: 0023:0xf7f83fec [ 1404.923746][T22102] Code: Unable to access opcode bytes at 0xf7f83fc2. [ 1404.923755][T22102] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1404.923809][T22102] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 1404.923821][T22102] RDX: 0000000000000046 RSI: 0000000000000000 RDI: 0000000000000000 [ 1404.923831][T22102] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1404.923840][T22102] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1404.923850][T22102] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1404.924083][T22102] [ 1405.461910][T22109] binder_alloc: 22108: pid 22108 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1405.550291][T22111] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1405.665799][T22113] [ 1405.667638][T22113] ====================================================== [ 1405.671995][T22113] WARNING: possible circular locking dependency detected [ 1405.677330][T22113] syzkaller #0 Tainted: G L [ 1405.681389][T22113] ------------------------------------------------------ [ 1405.685275][T22113] syz.0.4470/22113 is trying to acquire lock: [ 1405.688640][T22113] ffff88801e4e3a40 (&sb->s_type->i_mutex_key#25){++++}-{4:4}, at: configfs_depend_item_unlocked+0xf3/0x6a0 [ 1405.695752][T22113] [ 1405.695752][T22113] but task is already holding lock: [ 1405.700700][T22113] ffff888060095518 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x1a4/0x620 [ 1405.706869][T22113] [ 1405.706869][T22113] which lock already depends on the new lock. [ 1405.706869][T22113] [ 1405.712715][T22113] [ 1405.712715][T22113] the existing dependency chain (in reverse order) is: [ 1405.717036][T22113] [ 1405.717036][T22113] -> #2 (&opts->dep_lock){+.+.}-{4:4}: [ 1405.721904][T22113] lock_acquire+0x1b9/0x370 [ 1405.724163][T22113] __mutex_lock+0x1a4/0x1bd0 [ 1405.727200][T22113] tcm_set_name+0x29/0xb0 [ 1405.730005][T22113] function_make+0x21c/0x3f0 [ 1405.733206][T22113] configfs_mkdir+0x51e/0xb70 [ 1405.736400][T22113] vfs_mkdir+0x361/0x850 [ 1405.738603][T22113] filename_mkdirat+0x48b/0x5e0 [ 1405.741584][T22113] __ia32_sys_mkdir+0x6a/0x90 [ 1405.744057][T22113] __do_fast_syscall_32+0xe7/0x970 [ 1405.746691][T22113] do_fast_syscall_32+0x32/0x70 [ 1405.749711][T22113] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1405.753202][T22113] [ 1405.753202][T22113] -> #1 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 1405.758210][T22113] lock_acquire+0x1b9/0x370 [ 1405.761926][T22113] __mutex_lock+0x1a4/0x1bd0 [ 1405.765617][T22113] configfs_rmdir+0x5ae/0x950 [ 1405.768929][T22113] vfs_rmdir+0x328/0x8a0 [ 1405.771501][T22113] filename_rmdir+0x31a/0x5c0 [ 1405.773828][T22113] __ia32_sys_unlinkat+0xf5/0x130 [ 1405.776199][T22113] __do_fast_syscall_32+0xe7/0x970 [ 1405.779407][T22113] do_fast_syscall_32+0x32/0x70 [ 1405.782121][T22113] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1405.785498][T22113] [ 1405.785498][T22113] -> #0 (&sb->s_type->i_mutex_key#25){++++}-{4:4}: [ 1405.789319][T22113] check_prev_add+0xeb/0xe60 [ 1405.792134][T22113] __lock_acquire+0x136c/0x1a40 [ 1405.794117][T22113] lock_acquire+0x1b9/0x370 [ 1405.796003][T22113] down_write+0x8b/0x1f0 [ 1405.797853][T22113] configfs_depend_item_unlocked+0xf3/0x6a0 [ 1405.800877][T22113] usbg_make_tpg+0x261/0x620 [ 1405.803820][T22113] target_fabric_make_tpg+0xab/0x8c0 [ 1405.806591][T22113] configfs_mkdir+0x51e/0xb70 [ 1405.809321][T22113] vfs_mkdir+0x361/0x850 [ 1405.811589][T22113] filename_mkdirat+0x48b/0x5e0 [ 1405.813839][T22113] __ia32_sys_mkdirat+0x88/0xc0 [ 1405.816049][T22113] __do_fast_syscall_32+0xe7/0x970 [ 1405.818498][T22113] do_fast_syscall_32+0x32/0x70 [ 1405.820671][T22113] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1405.824792][T22113] [ 1405.824792][T22113] other info that might help us debug this: [ 1405.824792][T22113] [ 1405.839030][T22113] Chain exists of: [ 1405.839030][T22113] &sb->s_type->i_mutex_key#25 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 1405.839030][T22113] [ 1405.848845][T22113] Possible unsafe locking scenario: [ 1405.848845][T22113] [ 1405.851963][T22113] CPU0 CPU1 [ 1405.854162][T22113] ---- ---- [ 1405.872674][T22113] lock(&opts->dep_lock); [ 1405.874581][T22113] lock(gadget_subsys.su_mutex); [ 1405.877920][T22113] lock(&opts->dep_lock); [ 1405.881478][T22113] lock(&sb->s_type->i_mutex_key#25); [ 1405.884206][T22113] [ 1405.884206][T22113] *** DEADLOCK *** [ 1405.884206][T22113] [ 1405.902059][T22113] 5 locks held by syz.0.4470/22113: [ 1405.904283][T22113] #0: ffff8880225fc450 (sb_writers#14){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 1405.908317][T22113] #1: ffff888013499dc0 (&sb->s_type->i_mutex_key#8/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400 [ 1405.912854][T22113] #2: ffffffff8fd8ad28 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_mkdir+0x4b5/0xb70 [ 1405.923737][T22113] #3: ffffffff90256040 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x620 [ 1405.940159][T22113] #4: ffff888060095518 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x1a4/0x620 [ 1405.943970][T22113] [ 1405.943970][T22113] stack backtrace: [ 1405.946171][T22113] CPU: 3 UID: 0 PID: 22113 Comm: syz.0.4470 Tainted: G L syzkaller #0 PREEMPT(full) [ 1405.946196][T22113] Tainted: [L]=SOFTLOCKUP [ 1405.946204][T22113] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1405.946214][T22113] Call Trace: [ 1405.946224][T22113] [ 1405.946236][T22113] dump_stack_lvl+0x100/0x190 [ 1405.946256][T22113] print_circular_bug.cold+0x178/0x1c7 [ 1405.946285][T22113] check_noncircular+0x146/0x160 [ 1405.946315][T22113] check_prev_add+0xeb/0xe60 [ 1405.946340][T22113] __lock_acquire+0x136c/0x1a40 [ 1405.946368][T22113] ? rcu_is_watching+0x12/0xc0 [ 1405.946393][T22113] lock_acquire+0x1b9/0x370 [ 1405.946418][T22113] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 1405.946438][T22113] ? __pfx___might_resched+0x10/0x10 [ 1405.946464][T22113] down_write+0x8b/0x1f0 [ 1405.946488][T22113] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 1405.946506][T22113] ? __pfx_down_write+0x10/0x10 [ 1405.946534][T22113] configfs_depend_item_unlocked+0xf3/0x6a0 [ 1405.946555][T22113] ? __lock_acquire+0x49f/0x1a40 [ 1405.946581][T22113] usbg_make_tpg+0x261/0x620 [ 1405.946603][T22113] ? __pfx_usbg_make_tpg+0x10/0x10 [ 1405.946624][T22113] ? find_held_lock+0x2b/0x80 [ 1405.946643][T22113] ? __pfx_usbg_make_tpg+0x10/0x10 [ 1405.946664][T22113] target_fabric_make_tpg+0xab/0x8c0 [ 1405.946697][T22113] configfs_mkdir+0x51e/0xb70 [ 1405.946719][T22113] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 1405.946745][T22113] ? __pfx_configfs_mkdir+0x10/0x10 [ 1405.946768][T22113] vfs_mkdir+0x361/0x850 [ 1405.946797][T22113] filename_mkdirat+0x48b/0x5e0 [ 1405.946817][T22113] ? __pfx_filename_mkdirat+0x10/0x10 [ 1405.946837][T22113] ? strncpy_from_user+0x19d/0x2d0 [ 1405.946869][T22113] ? do_getname+0x191/0x390 [ 1405.946892][T22113] __ia32_sys_mkdirat+0x88/0xc0 [ 1405.946910][T22113] __do_fast_syscall_32+0xe7/0x970 [ 1405.946934][T22113] do_fast_syscall_32+0x32/0x70 [ 1405.946957][T22113] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1405.946978][T22113] RIP: 0023:0xf7f46fec [ 1405.947003][T22113] Code: Unable to access opcode bytes at 0xf7f46fc2. [ 1405.947012][T22113] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000128 [ 1405.947031][T22113] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000680 [ 1405.947042][T22113] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000000 [ 1405.947052][T22113] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1405.947062][T22113] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1405.947072][T22113] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1405.947087][T22113]