last executing test programs: 3m30.277500524s ago: executing program 1 (id=75): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x1e0, 0x268, 0x33a, 0x0, 0x268, 0x318, 0x460, 0x460, 0x318, 0x460, 0xc, 0x0, {[{{@uncond, 0x0, 0x18c, 0x1d4, 0xd8000000, {0x9402}, [@inet=@rpfilter={{0x24}, {0xc}}, @common=@unspec=@conntrack3={{0xc4}, {{@ipv6=@private2={0xfc, 0x2, '\x00', 0x5}, [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], @ipv4=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xff, 0xff, 0xff], @ipv4=@loopback, [0x0, 0x0, 0xff], 0xa, 0x6, 0x21, 0x4e20, 0x4e21, 0x4e21, 0x4e23, 0x4, 0x4}, 0x1, 0x808, 0x4e22, 0x4e20, 0x4e23, 0x4e23}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'veth1_to_bond\x00', {0xfff}}}}, {{@uncond, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x404) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) fchmod(0xffffffffffffffff, 0x22) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r0 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x10dd722b6e14c351) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_DEFRAG(r0, 0xc0401273, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r2 = fsopen(&(0x7f0000000280)='squashfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0x15, 0x8, 0x0, 0x2, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r6) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000020040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="208edb00005d95b46500000000"], 0x50) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3m30.065245622s ago: executing program 1 (id=77): io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x4, 0x402c1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3000000, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x20000000) sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/block/sda/hctx0/tags\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000440)={0x10, 0x1403, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xfffff000) r3 = memfd_create(&(0x7f0000000500)='\x14\xa3\xbb\a\x002RgZ*\xc5\x9e[,\xe5uR\x94\xaa\xdc0\xe6n\xb8\xea\xe8\x99Lh(\xc7\xbb_\x81\x15f\xe7\x100\r\x1fE\x82\xf5\xfd\x83\xff{\xa0\x15\xffK\xe4\x98\x93\xf9\xc4!_\x96\xe8&,\xdf\x12\xc0\xa7Y1\x8bUs\x91)\x89\xd0\xa1OF4\xa4fI\a\x84_r\xc6\xdaq%\xd3\x98\n\x7fmF\xa9\xbb\x16\x8bxb\xc8\xfc\xad?\x01\xf40\xf5\xc3\xf3+\xa7\x94=\x96\xe6*~\x18\x9c\xfe\xfe\xdcNWGn\xfa\xf8,\xa9\x84\xf7\xe1RA9\xfeD@\x18b\x1dgz\xdfc\x05>O\xa0\x8b\xce\xe0\x8cS\xfanA\xecx\xc4\xdd\x82aT\xb5b\xc5\xaa\x8fj\xb2\xc3\x96\x96\"&)!Z\x1e\tBq\x96L\x97\xc9G\xaa\x85\xc3C \xa1\x98o\f\xf2\x02\x05oV\a\x82\x9e\")\xfb\xa09b\xb6\v\xb3\xe1p\x97\xe9\x13\xb5-\xc1x<\xc9]\x85\xbb\xb6h\xee\x91Q\xd0V\x80\xbc\x88?\x9cr\x13<\xa5g=CA\xd8d\x86\fr\xee=0x0}) unshare(0x6020400) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048881}, 0x40) 3m28.356877873s ago: executing program 1 (id=83): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x4081, 0x105) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000300)={@remote, r4}, 0x14) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x10000, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x6}, 0x1c) bind$inet6(r0, &(0x7f0000002ec0)={0xa, 0x4e22, 0x50, @private2, 0x3}, 0x1c) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000340)={'\x00', 0x1ff, 0x2, 0x7f, 0x4, 0x100000001}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x79, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) ioctl$SG_BLKTRACETEARDOWN(r5, 0x1276, 0x3800) r8 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x0, 0x8, 0xb, 0x4}, {0x4, 0x7, 0x73, 0x7}, {0x5, 0x80, 0x4, 0xd}, {0x3, 0x3, 0x5, 0x10}, {0x8, 0x8, 0x79, 0xab8}]}) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x8, 0x14b, 0x0, 0x1, [@typed={0x4, 0x8}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048015}, 0xc0d4) r9 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, 0x0, 0x0) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x6, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) r10 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000240)="bc3087", 0x3, r9) keyctl$revoke(0x3, r10) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r11, 0x0, 0x30, 0x0, 0x0) 3m28.199378577s ago: executing program 1 (id=85): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x1000) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xfffffffffffffffe) write(r0, &(0x7f0000000000)='7', 0x1) getdents64(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000100)='./proc\x00', r0}, 0x14) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c033, 0xffffffffffffffff, 0x0) 3m28.06002736s ago: executing program 1 (id=86): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2702, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd2(0xe5c, 0x80000) r4 = eventfd2(0x7e, 0x80800) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000100)={r3, 0x0, 0x2, r4}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000280)={0x2}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000080)={[{0x2, 0x95c, 0x61, 0x7, 0x2, 0xe, 0x1, 0x47, 0x8b, 0x3, 0x3, 0x18, 0x7}, {0x9, 0x6, 0x0, 0x2, 0x0, 0x4, 0x5, 0x1, 0x7a, 0xc0, 0x5, 0x3, 0x401}, {0x4, 0x5, 0x40, 0x5, 0x20, 0xc8, 0xad, 0xe, 0x7, 0x0, 0xf, 0x2c, 0xc}], 0x6}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0x3, 0x6, 0x10, 0x5, 0x6, 0x6, 0x7, 0x3, 0x9, 0xff, 0x7, 0x64, 0xf6, 0x3, 0x9}}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0xcb, 0xd, 0x1, 0x6d, 0x2, 0x1002, 0xf1, 0x200, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x5, 0x3, 0xbde], 0x1000, 0x67a64fa265d09613}) ioctl$KVM_RUN(r6, 0xae80, 0x0) listen(r0, 0x800002) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x8) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x3) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r9, 0x4068aea3, &(0x7f0000000280)) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r10, 0x4138ae84, &(0x7f0000000140)={{0xffff1000, 0xeeee8000, 0x4, 0xf6, 0x2, 0xf3, 0xd7, 0x8, 0x7, 0x1, 0x9, 0x1}, {0x70000, 0xc0a0c0f0f5000ded, 0xd, 0x5, 0x3, 0x18, 0x6, 0x0, 0x80, 0xfc, 0xfc, 0x4}, {0x200000, 0x4000, 0xb, 0x6, 0xff, 0x3, 0x0, 0x6, 0xef, 0x27, 0xd5, 0x2}, {0x4000, 0x50000, 0x9, 0x9, 0x8f, 0x4, 0x81, 0xfc, 0xb, 0x1, 0x9, 0x3}, {0xffffffff, 0x0, 0x3, 0x2, 0x6, 0x1, 0x9, 0x2, 0x3, 0x3, 0x0, 0xe4}, {0x200000, 0xffff1000, 0xf, 0x0, 0x3, 0x0, 0xde, 0x9, 0x3, 0x0, 0x4, 0x30}, {0xdddd0000, 0x9000, 0xc, 0x3, 0x8, 0x3, 0x2, 0x9, 0x91, 0x8, 0x9, 0x88}, {0x8000000, 0xeeee0000, 0x10, 0x6, 0xc2, 0x8, 0x6, 0x5, 0x7, 0x3, 0x80, 0x68}, {0x6000, 0x8000}, {0xe9eb89d253be8b8b, 0x9}, 0x50000, 0x0, 0x0, 0x400408, 0x6, 0x4000, 0xeeef0000, [0x6, 0x1, 0x5, 0xe]}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00068008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) r12 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r12, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) getsockname$llc(r12, 0x0, &(0x7f0000000100)) 3m12.953617295s ago: executing program 32 (id=86): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2702, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd2(0xe5c, 0x80000) r4 = eventfd2(0x7e, 0x80800) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000100)={r3, 0x0, 0x2, r4}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000280)={0x2}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000080)={[{0x2, 0x95c, 0x61, 0x7, 0x2, 0xe, 0x1, 0x47, 0x8b, 0x3, 0x3, 0x18, 0x7}, {0x9, 0x6, 0x0, 0x2, 0x0, 0x4, 0x5, 0x1, 0x7a, 0xc0, 0x5, 0x3, 0x401}, {0x4, 0x5, 0x40, 0x5, 0x20, 0xc8, 0xad, 0xe, 0x7, 0x0, 0xf, 0x2c, 0xc}], 0x6}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0x3, 0x6, 0x10, 0x5, 0x6, 0x6, 0x7, 0x3, 0x9, 0xff, 0x7, 0x64, 0xf6, 0x3, 0x9}}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0xcb, 0xd, 0x1, 0x6d, 0x2, 0x1002, 0xf1, 0x200, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x5, 0x3, 0xbde], 0x1000, 0x67a64fa265d09613}) ioctl$KVM_RUN(r6, 0xae80, 0x0) listen(r0, 0x800002) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x8) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x3) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r9, 0x4068aea3, &(0x7f0000000280)) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r10, 0x4138ae84, &(0x7f0000000140)={{0xffff1000, 0xeeee8000, 0x4, 0xf6, 0x2, 0xf3, 0xd7, 0x8, 0x7, 0x1, 0x9, 0x1}, {0x70000, 0xc0a0c0f0f5000ded, 0xd, 0x5, 0x3, 0x18, 0x6, 0x0, 0x80, 0xfc, 0xfc, 0x4}, {0x200000, 0x4000, 0xb, 0x6, 0xff, 0x3, 0x0, 0x6, 0xef, 0x27, 0xd5, 0x2}, {0x4000, 0x50000, 0x9, 0x9, 0x8f, 0x4, 0x81, 0xfc, 0xb, 0x1, 0x9, 0x3}, {0xffffffff, 0x0, 0x3, 0x2, 0x6, 0x1, 0x9, 0x2, 0x3, 0x3, 0x0, 0xe4}, {0x200000, 0xffff1000, 0xf, 0x0, 0x3, 0x0, 0xde, 0x9, 0x3, 0x0, 0x4, 0x30}, {0xdddd0000, 0x9000, 0xc, 0x3, 0x8, 0x3, 0x2, 0x9, 0x91, 0x8, 0x9, 0x88}, {0x8000000, 0xeeee0000, 0x10, 0x6, 0xc2, 0x8, 0x6, 0x5, 0x7, 0x3, 0x80, 0x68}, {0x6000, 0x8000}, {0xe9eb89d253be8b8b, 0x9}, 0x50000, 0x0, 0x0, 0x400408, 0x6, 0x4000, 0xeeef0000, [0x6, 0x1, 0x5, 0xe]}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00068008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) r12 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r12, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) getsockname$llc(r12, 0x0, &(0x7f0000000100)) 1m47.66112579s ago: executing program 0 (id=564): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x0, 0x11, 0x148, 0x13c, 0x0, 0x1cc, 0x2a8, 0x2a8, 0x1cc, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @empty, 0x0, 0xffffffff, 'wg1\x00', 'virt_wifi0\x00', {}, {0xff}, 0xff, 0x3}, 0x0, 0xdc, 0x13c, 0x0, {}, [@common=@unspec=@connmark={{0x2c}, {0x2, 0x3, 0x1}}, @common=@set={{0x40}, {{0x2, [0x0, 0x4, 0x6, 0x5, 0x2, 0x7], 0x1, 0x2}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x0, 0x2, 0x5, 0x2, 0x3, 0x1], 0x1, 0x4}, {0xfffd, [0x0, 0x7, 0x0, 0x7, 0x1, 0x2], 0x4, 0x5}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0x0, 0xffffffff, 'gre0\x00', 'netdevsim0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2bc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) setns(0xc9, 0x0) r2 = socket(0x2a, 0x2, 0x9) bind$inet(r2, &(0x7f00000001c0)={0x2a, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r3, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r4, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000001300)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c) bind$inet6(r5, 0x0, 0x0) io_setup(0x5, &(0x7f0000000240)=0x0) r7 = inotify_init() io_submit(r6, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) io_cancel(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0) 1m46.545050093s ago: executing program 0 (id=572): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xfffffee2) r2 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000480)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r5, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x1016, &(0x7f0000001b40)=ANY=[], 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[], 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/195, 0xc3}], 0x1}, 0x0) timerfd_create(0x3, 0x80000) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002"], 0xcd0}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b", 0x33}], 0x1}, 0x40085) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xac, 0x1, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xe00}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x26}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_NAT_SRC={0x4}, @CTA_TUPLE_ORIG={0x64, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x44}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x8001}, 0x4b75817543f1005e) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xfe33) r9 = timerfd_create(0x9, 0x0) timerfd_gettime(r9, &(0x7f0000000380)) 1m45.680842642s ago: executing program 0 (id=576): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000380)={0x1, 0x2, @raw_data=[0x7ff, 0x0, 0x5, 0xf5088d3e, 0x3, 0x1e7, 0x4, 0x0, 0xffff, 0x4, 0x549, 0x8, 0x5, 0x9, 0x0, 0x6]}) 1m45.511782996s ago: executing program 0 (id=577): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40880) write(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e04a1f29f656e642c6163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x200, &(0x7f0000000480)={&(0x7f0000001240)=""/4096, 0x1000}) r2 = open(&(0x7f0000000040)='./bus\x00', 0x24040, 0x10) truncate(0x0, 0x946e) finit_module(r2, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000a723d73dd0aeb559f89b45931100000000dd5144dd0000090000000000000000000000000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r3}, 0x0, 0x0}, 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) fcntl$lock(r4, 0x26, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r5) 1m45.391703668s ago: executing program 0 (id=578): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000d40)="01", 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d03, 0x0, 0x10001001}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m44.889056376s ago: executing program 0 (id=584): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000100)={0x1, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10000, 0x1}}) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x844e, 0x0, 0x20000000, 0xe4, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x100, 0x2, 0x80000250}}], 0x1, &(0x7f0000000340)={0x2e, 0x45, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 1m44.822001314s ago: executing program 33 (id=584): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000100)={0x1, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10000, 0x1}}) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x844e, 0x0, 0x20000000, 0xe4, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x100, 0x2, 0x80000250}}], 0x1, &(0x7f0000000340)={0x2e, 0x45, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 1m44.262062653s ago: executing program 3 (id=588): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) write$tcp_mem(r1, &(0x7f0000000140)={0x7, 0x2d, 0x0, 0x3a, 0x800000, 0x2c}, 0x48) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x1, 0x28) ioctl$XFS_IOC_COMMIT_RANGE(r2, 0x40585883, &(0x7f0000000140)={r0, 0x0, 0xd, 0x1, 0x8, 0x4, [0x59, 0xb, 0x1ff, 0x6, 0x4, 0x100]}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14}, 0x94) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1feff, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 1m43.582134773s ago: executing program 3 (id=591): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x4, 0x4, 0xa, 0x140, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1}, 0x4) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000000000000008004a0101000084db3a1c1fcd1db1c0396ac1dd8960f69ce51dadd10092428160f40008000300feffdf7f08004a000100777856e73ba172ec8b7a0c9c40aee5"], 0x48}, 0x1, 0x0, 0x0, 0x24000844}, 0x0) 1m43.531548179s ago: executing program 3 (id=592): ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='uid_map\x00') openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe55, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0xe43986f95b0e4309}) ioctl$TUNGETSNDBUF(r2, 0x400454dc, &(0x7f0000001700)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0xb3b54c18e0590239, 0x0, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0xae0c, 0x2, 0x3, 0x28e, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x509b, 0x10, 0x2100, 0x11c, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4c0c3, 0x1000, 0xfffffffe, 0x15c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa6c8, 0x0, 0x0, 0x1f0, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x3fff, 0x6, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) ioctl$COMEDI_SETWSUBD(r11, 0x6411) 1m42.505740026s ago: executing program 5 (id=585): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r3, &(0x7f0000000000)='7', 0x1) fanotify_init(0x10, 0x80000) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20886}, 0x20040001) r4 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r4, 0xc02063a1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x33, 0x0, @multicast2, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0xe, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0xf, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}]}]}}}}}}}, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x80, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x7, 0x9, 0x0, 0xa, 0x80000009, 0x400}, 0x0, 0x0) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r1, 0x80000}) ioctl$DMA_BUF_SET_NAME_A(r6, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000540)=0x1) close_range(r1, r5, 0x0) 1m42.135132495s ago: executing program 5 (id=594): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7f, 0x1000001, 0x4000010, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x40100) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) listns(&(0x7f0000000000)={0x20, 0x0, 0x2}, &(0x7f0000000040)=[0x0], 0xf4240, 0x0) writev(r0, &(0x7f0000000840), 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYRES64], &(0x7f0000000140)='GPL\x00', 0x4, 0xfffffffffffffea3, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r4, 0xf, 0x25, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x40) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) openat$vhost_vsock(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') r6 = socket(0x10, 0x3, 0x0) pipe(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1m41.631379604s ago: executing program 3 (id=595): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x101000, 0x190) ioctl(r2, 0xc138fd0a, &(0x7f0000000300)="0400000000000000000000003801") ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'vcan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./debug\x00', 0x1ff) r3 = openat$nmem0(0xffffff9c, &(0x7f0000000340), 0x428000, 0x0) openat$cgroup_ro(r3, &(0x7f0000000380)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./debug\x00', &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/netdevsim/netdevsim0/ports/0/queue_reset\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f00000004c0)="2087c59b005aeed634ddc0d490022c945266ec32", 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r4}, 0xc) sendmmsg$inet6(r1, &(0x7f0000003f40)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="14000004290000000400000002000000000000001400000029000000040000000600000000000000"], 0x28}}], 0x1, 0x20002040) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000005c0)={0x9, {"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", 0x1000}}, 0x1006) socket$inet6(0xa, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='lp', 0x2) connect$inet(r5, &(0x7f0000000440)={0x2, 0x4e21, @rand_addr=0x64010103}, 0x10) sendto$inet(r5, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='westwood', 0x8) recvfrom$inet(r5, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x76d800, 0x3, 0x81, 0xffffffff, 0x5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fcffffff00000000800000af18010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x51, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) shutdown(r5, 0x1) 1m41.63109263s ago: executing program 3 (id=596): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x7, &(0x7f0000000000)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x30) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @remote}, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6b, 0x1, 0x1, 0x500, 0xa33e, 0x80200000}) 1m41.471462231s ago: executing program 5 (id=597): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vicodec0(0xffffff9c, &(0x7f0000000440), 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[], 0x30}}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x20, 0xfffff034}, {0x6}]}, 0x8) sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000004c0)) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f00000000c0)=@arm64_core={0x603000000010003e, &(0x7f0000000000)=0x9}) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r3, 0x0, 0xcf, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="4018000000000000240012800b00010062726964676500001400028005002c00010000000800040000000000"], 0x44}}, 0x0) ptrace$pokeuser(0x6, r4, 0x118, 0x8137da) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x48}, 0x94) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r7, &(0x7f0000000080)={0x1d, r8, 0x0, {0x0, 0xf0}, 0xfd}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) 1m41.311886336s ago: executing program 5 (id=599): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newqdisc={0x90, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x60, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0xe, 0x0, 0xc], 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffa], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x90}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000600000000000070a11173857249d8881937ecfbd3cde5a9810000009500ff01"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$sndseq(0xffffff9c, &(0x7f00000005c0), 0x668080) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b80)=@filter={'filter\x00', 0x4, 0x4, 0x6bc, 0xffffffff, 0x470, 0x0, 0x470, 0xfeffffff, 0xffffffff, 0x5f4, 0x5f4, 0x5f4, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, [0x0, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffff00], 'ip6gre0\x00', 'veth0_to_bond\x00', {}, {}, 0x32, 0x7, 0x5, 0x4}, 0x2f2, 0x304, 0x344, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x7f}}}, @common=@ah={{0x30}, {[0x4d5, 0x4d2], 0xc8, 0x4}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x2, "7bb9e202c328195132db405277bbb7a6b21cf6ae22238cb8f38000"}}}, {{@uncond, 0x0, 0xec, 0x12c, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xa, 0x7ffb]}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x57, {0x2000000}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xc}, @mcast2, [0xffffffff], [0x0, 0x0, 0x0, 0xffffffff], 'veth1_macvtap\x00', 'vcan0\x00'}, 0x0, 0x160, 0x184, 0x0, {}, [@common=@frag={{0x30}, {[0x1, 0xa60], 0x0, 0x2, 0x2}}, @common=@srh1={{0x8c}, {0x4, 0x0, 0x0, 0x0, 0x0, @dev, @remote, @private1, [0x0, 0xff000000, 0xff000000, 0xffffff00], [0x0, 0xff000000], [0x0, 0xff, 0x0, 0xffffffff], 0x968, 0x2}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x718) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port1\x00', 0x0, 0x150014, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @name="a13c4dacaace7477f3f8f1d68f8a0c4a4b407126d4a332ea110a356827492a5c"}) r7 = add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b"], 0x38}}, 0x0) sendmmsg$alg(r8, &(0x7f0000000140), 0x4924b68, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, 0x0, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x1, 0x41) connect$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r10 = fcntl$dupfd(r9, 0x406, r9) write$binfmt_elf64(r10, &(0x7f0000000340)=ANY=[@ANYRESOCT=r6, @ANYRES64=r9, @ANYRES32=r9, @ANYRESDEC, @ANYRES64, @ANYRES64=r7, @ANYRES8=r1], 0xfffffdcf) 1m40.484343468s ago: executing program 2 (id=600): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x1]}, 0x8, 0x0) faccessat2(r1, &(0x7f0000001400)='\x00', 0x0, 0x1100) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000400)={0x8, {"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", 0x1000}}, 0x1006) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='smaps_rollup\x00') close_range(r6, r6, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0xff}}, './file0\x00'}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f00000014c0)={0x2, 0x0, [{0xc000, 0xfa, &(0x7f00000002c0)=""/250}, {0x25000, 0x58, &(0x7f0000001440)=""/88}]}) sendto$inet6(r0, 0x0, 0x0, 0x20000080, 0x0, 0x0) 1m40.484058843s ago: executing program 2 (id=601): r0 = semget$private(0x0, 0x2, 0x270) semctl$GETZCNT(r0, 0x1, 0xf, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000010100)='proc\x00', 0x0, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)="62043c00be0101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee844", 0x46}], 0x1}, 0x20000040) r3 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2, 0x0, &(0x7f0000000100)) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0205710, &(0x7f00000000c0)={0x1, 0x4d2, 0x8, 0x1, 0x4}) r5 = openat(0xffffffffffffff9c, &(0x7f0000010140)='./proc/sys/kernel/kptr_restrict\x00', 0x1, 0x0) write(r5, 0x0, 0x0) syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x96cd, 0x400, 0x0, 0x279}, 0x0, 0x0, 0x0) 1m40.341684693s ago: executing program 2 (id=602): sched_setscheduler(0x0, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) pipe2$9p(&(0x7f0000000000), 0x4080) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4d2, @rand_addr=0xac141415}, 0x10) listen(r0, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x8000000000000, 0x1, 0x5, 0x2000000009, 0x3, 0x80000002, 0x48cd, 0x5, 0xa}) r2 = add_key$user(&(0x7f0000000400), &(0x7f0000000380)={'syz', 0x0}, &(0x7f0000000300)='\x00', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/67, 0x43, 0x0) connect$inet(r1, &(0x7f0000000400)={0x2, 0x4d2, @rand_addr=0xac141415}, 0x10) ppoll(&(0x7f0000000240)=[{r0, 0x5400}], 0x1, &(0x7f00000002c0), 0x0, 0x0) 1m39.482111796s ago: executing program 2 (id=603): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x81}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (fail_nth: 3) 1m39.481860777s ago: executing program 2 (id=604): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x6a7, 0x0, 0x1}]}) 1m39.253192955s ago: executing program 2 (id=605): r0 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) (async, rerun: 32) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r1, 0x4, 0x42000) (async) read$FUSE(r1, &(0x7f0000000d00)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async, rerun: 32) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4c1e, @multicast1}, 0x10) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (rerun: 64) ftruncate(r1, 0x10000) (async) sendfile(r3, r0, 0x0, 0x102) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x101001, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async) fanotify_init(0xf00, 0x0) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x2000001, &(0x7f0000000400)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r2, @ANYRES64=0x0, @ANYBLOB="6b2ae7b2ec33716a763331443d711dd605c8b5a4cdc0fd8f9c1caaf71bb95e6c153091ced1f76163c4d37b8a145db8bc27f9f6fffffffbdf8314fb2415976f894025d69b8bd1cd113cc887d617e8d27eb0504d24d1c5d980480e5d518fb70e2e9fb7f064946bbfb2096348b0f4b78fd6655064cc8fe841123746f266", @ANYBLOB=', ']) (rerun: 32) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20004001}, 0x4c000) (async, rerun: 32) syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) (async, rerun: 32) setns(0xc9, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0xfdef) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, r0, 0x0) (async) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) (async) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f00000002c0)={0x1, 'syzkaller1\x00', {}, 0x8}) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 1m39.246236942s ago: executing program 3 (id=606): r0 = socket(0x2b, 0x1, 0x1) r1 = openat$sr(0xffffff9c, &(0x7f0000001300), 0x4000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001340)={&(0x7f0000000040)="1004919cb5c93742cdf7f18677741a03c40aef2ef5d0ed32b30f02108c7a007f3aeeec925be0f31c1317333523ac75f52d93d691b9f3c091ae61727ff7e9ffeb0949972a40701f94e38c752401f57e764774d89203c05fd9eb436e79a3d3d5f1c4d58bab9c4c089b59c7c5cd6bb5cdc094273f0cbf9d3ed206dc182becd28644513bb46b41dda17bf6d696cb5a36d2587e3f8e06d250a4283f241ffd5e62e35d88ec3844e5d2355b8c", &(0x7f0000000200)=""/4096, &(0x7f0000001200)="9e10f1f8458f520953", &(0x7f0000001240)="5d2ffb865d120d84b6d4ba7f3641f3b797fbc733b32e1069a7c36fbe14d217b6ad8e184b11cd432f91e83403ecdba3d4b6de47a6e311c26b5e8cdd76533d7b81d56f69f41d24f2b98a172baecf915536d41bcebe10979ade0350bcaf52448f928c464f5ae9de42b7e7b15c824a22237e7666c041f1363c2c9935128a9fc977d657f9948a5637ef2b97e29dec44bb34094c9709787d80", 0xffffff35, r1, 0x4}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) 1m26.228664211s ago: executing program 34 (id=599): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newqdisc={0x90, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x60, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0xe, 0x0, 0xc], 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffa], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x90}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000600000000000070a11173857249d8881937ecfbd3cde5a9810000009500ff01"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$sndseq(0xffffff9c, &(0x7f00000005c0), 0x668080) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b80)=@filter={'filter\x00', 0x4, 0x4, 0x6bc, 0xffffffff, 0x470, 0x0, 0x470, 0xfeffffff, 0xffffffff, 0x5f4, 0x5f4, 0x5f4, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, [0x0, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffff00], 'ip6gre0\x00', 'veth0_to_bond\x00', {}, {}, 0x32, 0x7, 0x5, 0x4}, 0x2f2, 0x304, 0x344, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x7f}}}, @common=@ah={{0x30}, {[0x4d5, 0x4d2], 0xc8, 0x4}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x2, "7bb9e202c328195132db405277bbb7a6b21cf6ae22238cb8f38000"}}}, {{@uncond, 0x0, 0xec, 0x12c, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xa, 0x7ffb]}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x57, {0x2000000}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xc}, @mcast2, [0xffffffff], [0x0, 0x0, 0x0, 0xffffffff], 'veth1_macvtap\x00', 'vcan0\x00'}, 0x0, 0x160, 0x184, 0x0, {}, [@common=@frag={{0x30}, {[0x1, 0xa60], 0x0, 0x2, 0x2}}, @common=@srh1={{0x8c}, {0x4, 0x0, 0x0, 0x0, 0x0, @dev, @remote, @private1, [0x0, 0xff000000, 0xff000000, 0xffffff00], [0x0, 0xff000000], [0x0, 0xff, 0x0, 0xffffffff], 0x968, 0x2}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x718) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port1\x00', 0x0, 0x150014, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @name="a13c4dacaace7477f3f8f1d68f8a0c4a4b407126d4a332ea110a356827492a5c"}) r7 = add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b"], 0x38}}, 0x0) sendmmsg$alg(r8, &(0x7f0000000140), 0x4924b68, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, 0x0, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x1, 0x41) connect$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r10 = fcntl$dupfd(r9, 0x406, r9) write$binfmt_elf64(r10, &(0x7f0000000340)=ANY=[@ANYRESOCT=r6, @ANYRES64=r9, @ANYRES32=r9, @ANYRESDEC, @ANYRES64, @ANYRES64=r7, @ANYRES8=r1], 0xfffffdcf) 1m24.227947561s ago: executing program 35 (id=605): r0 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) (async, rerun: 32) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r1, 0x4, 0x42000) (async) read$FUSE(r1, &(0x7f0000000d00)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async, rerun: 32) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4c1e, @multicast1}, 0x10) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (rerun: 64) ftruncate(r1, 0x10000) (async) sendfile(r3, r0, 0x0, 0x102) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x101001, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async) fanotify_init(0xf00, 0x0) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x2000001, &(0x7f0000000400)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r2, @ANYRES64=0x0, @ANYBLOB="6b2ae7b2ec33716a763331443d711dd605c8b5a4cdc0fd8f9c1caaf71bb95e6c153091ced1f76163c4d37b8a145db8bc27f9f6fffffffbdf8314fb2415976f894025d69b8bd1cd113cc887d617e8d27eb0504d24d1c5d980480e5d518fb70e2e9fb7f064946bbfb2096348b0f4b78fd6655064cc8fe841123746f266", @ANYBLOB=', ']) (rerun: 32) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20004001}, 0x4c000) (async, rerun: 32) syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) (async, rerun: 32) setns(0xc9, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0xfdef) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, r0, 0x0) (async) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) (async) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f00000002c0)={0x1, 'syzkaller1\x00', {}, 0x8}) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 1m24.201205248s ago: executing program 36 (id=606): r0 = socket(0x2b, 0x1, 0x1) r1 = openat$sr(0xffffff9c, &(0x7f0000001300), 0x4000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001340)={&(0x7f0000000040)="1004919cb5c93742cdf7f18677741a03c40aef2ef5d0ed32b30f02108c7a007f3aeeec925be0f31c1317333523ac75f52d93d691b9f3c091ae61727ff7e9ffeb0949972a40701f94e38c752401f57e764774d89203c05fd9eb436e79a3d3d5f1c4d58bab9c4c089b59c7c5cd6bb5cdc094273f0cbf9d3ed206dc182becd28644513bb46b41dda17bf6d696cb5a36d2587e3f8e06d250a4283f241ffd5e62e35d88ec3844e5d2355b8c", &(0x7f0000000200)=""/4096, &(0x7f0000001200)="9e10f1f8458f520953", &(0x7f0000001240)="5d2ffb865d120d84b6d4ba7f3641f3b797fbc733b32e1069a7c36fbe14d217b6ad8e184b11cd432f91e83403ecdba3d4b6de47a6e311c26b5e8cdd76533d7b81d56f69f41d24f2b98a172baecf915536d41bcebe10979ade0350bcaf52448f928c464f5ae9de42b7e7b15c824a22237e7666c041f1363c2c9935128a9fc977d657f9948a5637ef2b97e29dec44bb34094c9709787d80", 0xffffff35, r1, 0x4}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) 1m7.509807653s ago: executing program 7 (id=656): r0 = io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x4, 0x402c1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3000000, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x20000000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/block/sda/hctx0/tags\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000440)={0x10, 0x1403, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xfffff000) read(r3, &(0x7f00000002c0)=""/153, 0x99) r4 = memfd_create(&(0x7f0000000500)='\x14\xa3\xbb\a\x002RgZ*\xc5\x9e[,\xe5uR\x94\xaa\xdc0\xe6n\xb8\xea\xe8\x99Lh(\xc7\xbb_\x81\x15f\xe7\x100\r\x1fE\x82\xf5\xfd\x83\xff{\xa0\x15\xffK\xe4\x98\x93\xf9\xc4!_\x96\xe8&,\xdf\x12\xc0\xa7Y1\x8bUs\x91)\x89\xd0\xa1OF4\xa4fI\a\x84_r\xc6\xdaq%\xd3\x98\n\x7fmF\xa9\xbb\x16\x8bxb\xc8\xfc\xad?\x01\xf40\xf5\xc3\xf3+\xa7\x94=\x96\xe6*~\x18\x9c\xfe\xfe\xdcNWGn\xfa\xf8,\xa9\x84\xf7\xe1RA9\xfeD@\x18b\x1dgz\xdfc\x05>O\xa0\x8b\xce\xe0\x8cS\xfanA\xecx\xc4\xdd\x82aT\xb5b\xc5\xaa\x8fj\xb2\xc3\x96\x96\"&)!Z\x1e\tBq\x96L\x97\xc9G\xaa\x85\xc3C \xa1\x98o\f\xf2\x02\x05oV\a\x82\x9e\")\xfb\xa09b\xb6\v\xb3\xe1p\x97\xe9\x13\xb5-\xc1x<\xc9]\x85\xbb\xb6h\xee\x91Q\xd0V\x80\xbc\x88?\x9cr\x13<\xa5g=CA\xd8d\x86\fr\xee=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0xae0c, 0x2, 0x3, 0x28e, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x509b, 0x10, 0x2100, 0x11c, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4c0c3, 0x1000, 0xfffffffe, 0x15c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa6c8, 0x0, 0x0, 0x1f0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x3fff, 0x6, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) ioctl$COMEDI_SETWSUBD(r10, 0x6411) 1m4.200696329s ago: executing program 7 (id=667): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x6300) 1m3.860600163s ago: executing program 7 (id=670): r0 = io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x4, 0x402c1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3000000, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x20000000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/block/sda/hctx0/tags\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000440)={0x10, 0x1403, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xfffff000) read(r3, &(0x7f00000002c0)=""/153, 0x99) r4 = memfd_create(&(0x7f0000000500)='\x14\xa3\xbb\a\x002RgZ*\xc5\x9e[,\xe5uR\x94\xaa\xdc0\xe6n\xb8\xea\xe8\x99Lh(\xc7\xbb_\x81\x15f\xe7\x100\r\x1fE\x82\xf5\xfd\x83\xff{\xa0\x15\xffK\xe4\x98\x93\xf9\xc4!_\x96\xe8&,\xdf\x12\xc0\xa7Y1\x8bUs\x91)\x89\xd0\xa1OF4\xa4fI\a\x84_r\xc6\xdaq%\xd3\x98\n\x7fmF\xa9\xbb\x16\x8bxb\xc8\xfc\xad?\x01\xf40\xf5\xc3\xf3+\xa7\x94=\x96\xe6*~\x18\x9c\xfe\xfe\xdcNWGn\xfa\xf8,\xa9\x84\xf7\xe1RA9\xfeD@\x18b\x1dgz\xdfc\x05>O\xa0\x8b\xce\xe0\x8cS\xfanA\xecx\xc4\xdd\x82aT\xb5b\xc5\xaa\x8fj\xb2\xc3\x96\x96\"&)!Z\x1e\tBq\x96L\x97\xc9G\xaa\x85\xc3C \xa1\x98o\f\xf2\x02\x05oV\a\x82\x9e\")\xfb\xa09b\xb6\v\xb3\xe1p\x97\xe9\x13\xb5-\xc1x<\xc9]\x85\xbb\xb6h\xee\x91Q\xd0V\x80\xbc\x88?\x9cr\x13<\xa5g=CA\xd8d\x86\fr\xee=0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000003680)={r6, r4, "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", "1c7fda67651b92bb1fa47b6ace50b2941ba0cfa4af037726eb1a0029cdd2c3487b7db00248bdcb8e58fca068893a03d5f41253e825ae8a98b85a9ed4f7395d499550ee7cb4c7e634ddd43e0262519bac5aa1a9becda8a594421168bbc0a602ad812ef02bd37742f388b38aab2d9143bbd8d7a09ed0faa5506b3eb1788bac2cf54b76be8bb48d8414a8b168bf75c1ba404245e115b85890347aa8f605e88e78e0631fd3600020197eeb561c74e0ec2f9a706ec72fad07d8ec2763c5b721ccca14ff3d874b356409bf16aee68893b8047760da43c5cf3a8eee894d564f23fc2fbc5e244ffd9e105377130f467df3d5b91eaf8295a5ac952c477376f55958b43eb0a11a97875dff444c3e34e737d089a5a25a6f139ceaa209aae3b90c10a845d638b393d71ed5af8e0b0afedb40a9da26d47b59761a3b1d95ea5e6045902b95c559ea0f9926017a225f79f00d93c4f39987ccccc868fb8544ce80262a28e3d9024cc19003d75eeb05e93ae45fc01df78207b1c2a1b4e775a3680a43651cc01d0c80d1d6f1be573025f309ae33cf59f4a1592da6aeda71fa3b2b94d54a5ff5c44ad537fd2389937611e72a5b966b726192e3be83f113dee9c956f821d5c5a1b143b180eade364ce15690ba7efd4d8d98dabb6a7164e3dd4342cee64d68e5efa5cf3c2a6bd30166503d276cba39ce852f63b3bcfe9d1b773905e829f6d4bdf2e32c18e6d990a27e0c11d057fcb53572e95dc2eb7a1e20bd9fb7034474b86ce847c6cc9dc3bcd8a59b5e3032dba0daca2306b8252a84f701a07777c591864c9e86f0927c58b99ef0b18da8bcdbabad8020aef456ee500d741288a75a5676836282e7b506a7342e838e416473fb90f978966d1ded9134b3dbd612f1043b0d2d92e03ffd8561c4e971b203fc64abacee56c3f2019324bf176de2c8dd4ea7832b08b63e36a91c2263a2582f18ffd3d7acb19171a577e1bcf032390b53f892165611740f1312afafc48b20dd510983cc0257e56d1c882188af31f131c2cf6cf688f9ba8e253128fc18716257eb804e0cdda7a9e511810c818b59f784b8cf63bf215dfd10c6d28f5f9d3b91b7f13e456bb4a9227e9c87ae093eaa57f838331db3d6013dfe5d0072c65485c75fceb22afd4b25ecbe26a7e0888b123389e77e892ac4d7fae064dd7528220855188a870b0e7a2157a5a01411fe65331cf9011fb1340361bfd1500eee76ad0cb95fc6dc428d460d072542251a431ed18d38251d800c393e4ece20b1c5af0a6269e11cefe07bb708b9b5bb57fb7c0007069d625caa3bd7831c1cdc102d4bc091904141ce5b3b471ea23e0a0372841ee9e626af3f2afbbb85b3de32357bb91bdc382346385852344e937cc0d5b363963a2e88e7956e9f8c1f64663ef37ae0dfdf56e53b70033c4f7d9b13bbcbdf036e12ad8debc1caae02a2f27f1d0fa49615026bdeae1366ce3282efe1cf4ac4a33d8704e7b012140b0d66edd3fe8665e4562000e7b3b6306b416fdbf868cf6456a497c895461b1a10ecf0f429e9927ae1efdc505bf5a2b758aff33aad9c637a909f5b0e3d41815bc8015e4d6f8c79a5b37d7145ec51fdd4e7a7edbf82bccb2d0e334dc4bca33a94af768ed3d4c205e1f3e8b92fbe6b00be5ad65c4407f34b35bcb1aad9e0a6ad752c193ef94b3114119a6cb295af5a3d0757bcf8321072cb603ac0d319389c9744df9dca065745b137a008ad2a4a9aabcf237351f3d1ccc36a2e94f1ef2928814586e5158e9102219a9dd4483d2aed93425cf64f1265f963b2914dc1a73433e3f32e4506bbd2bcd8ee43a5c642c68dbf987660941397f7fecb95c94e0dbed7412abddfa79203f47ef9882e5d6456f133df1662f2d3095c1f0f15154752c3b720adb965fbfd012991cb7cc806efb3159528f8b896d605abf613063be660092a5861d9b5ad04007f2cc217cc3113ff7c86ed107223dceaf73a83e45dd46a7d206eb1abe8e4eb1c822f918293faac936fcd38e0d4634dfa7ba38e6d061c42173cf52a8231d03da9e4687358c406c36467b2bcf04e70e39960421376ce88ab96ce0c720bb87bc9821f61410e477932e014de258beca5ef487d5ff5557195e54f681ab70962c220138291737491fdd20b1808fcfc8e9fca4ae9fe9e9aa5dbe6a08797ce19df126cef7627ae7322dd03e9028f1f3b4ce744c6d52e5d0d2c8bedf105b7ba54fc147245cd72b7e672017253f730945e0b732452d8a8e18fc25de64cec5fd26b36c65911fdd6ffeef46c2d8e33bb5cfc37000fb9cc09943a8f7594db74e0442a9aaa16f3154f8c2808a6c50f1c9026945ca48fd34a44d0ff9ed118c4129091fa765ff7db715d1fd9045ebb1d3451d9f31bc4dc53ebe685351a5c90f2ae89de25d0c88c368cf6857d4a577738b9f44dda766c7dda0c5ef913b4d34304e6c37bbe4e9ce0701305f590e81375fc94a3f319f878fd864d4d6f755b0c36d61aa98d9b19c079b24d5f52de0fa153515026758e66a6c9145fb84e241f6bde79b98e35153b88eafb5ffa980a4d3a8a40dd8fef8a121123dfbad6626e463c159f81476ebc05533f89770ccf65ba57d6879dd5db2ea6efe63e0938a14cd8612a9ad43cb67973990526747346b6d80088d3df2ebcc9bb492b5374af684daf9ba0607126e9a102f2d2cc92bb4c3900d13c229a0d57a4beae420df2e0e5567715659c51464d063beea7845144ccfe5d02270af7f1a6f4ec496953fa807234215721733ee10b3eee18c506e5b7634d3c0910a687d78296bba7ce372ca0fcc064ab60a2911bce02877a6dfd06ce75c544c8d2bf8ad3d3ede12b86d7aa96e953645291966a454fdbfee39480b5dfd00370089fa5a4538961fe66bbf555dccc59fa52b990467ba8a65ea350ae7dd211132ae2cf462c767e83861e214a3d72716693f8d1594c509aa706dc944340fce5aae8791c2a7da6d25b62f59bbce86d6241fb9fa73ea254de3df1c60368d07dad324aab6d43a2d13945193de4ee24130eeb91bea00f6bad489cdb2838a17a23228b2ab285a3f09162368947b8a8faefc878c5edc341d9546254b931f4107faac75857e9685ccde5a5597a5f41802c32d48f5c434f1469ca5dddba455b662afa6f66a14ee5552e9add423ffed2920f79f1f2c3d1e48486cc011d40d19ae487b9c904662aba7c33b8af2aa7174db741d6cd13965d8ce54f1ccd4a4dd906f834c970eeb12070c5e744386a9fdb3780673b15ea6000fb4e2f82785a2a8b9d48ebda5a17b0728b728593551f13dc7d5c0c76e5c6e66ee6b609a734cd1f678f34503303597a08f465fd3f69921f0462e190b07141b61e5037d30b42ec1cdca7e91b3b4b72e34ef1f76417e244e4bbdb63211ea1cc9d282426d2d7e674cd033943e8bc1d5b261cfe7e9e5a385aaeff07f378dc9268c7405206ea5f4d6889c8d030b4ca5582cf9b756017b58308449f70fd4820f6a0b982843d98845f18f37f86b6f473e8ac90e4172e4226931926e698cf1592481e0242af577b183ce03411ca644d5bb3f2c400f37e92dd70c0cb83de8dc46d0f4019cbc70cc381bfeb194f9b9efc0ed52b16be6783d6f610ba94b62d0179a7fe9246d294aea6f282278365e11c38ca8951f370a78325b1183301f9c2c9e8e79abfc210151c8e5396dd9980d9842b823c298eb92d718add9516f8a63e39cb3a8667ac0b9f5fab4d1a6776b48417c060b4e14956c4f48a5d6d4152d7d1fdc5e89445c49cdf38720dbe41e7356958353331ccaf6d6f509d505b6d93ef4e76b55a23b153f7764bce39023f36424248ef5e877ae2e46ad0adbdbbb05d2585b99d170c502277da18b5f5f374cf4708407af553404b26c6260ed2ca7856d76daac9025e7a6b30f383dc8ac26f415e8813f2381d72d187e59fe8de4fc527edb9c55416d478e08842cdd3f4322af1bf935e378cc5672a822794f168da394b5acfc8d1d09e316e65d2d14e34d3cb00ef1d57fbe80d9fe02c27c3498434c22656f7f0962abd4c23d8f52e4f27cf59059cdd4a83b2eb01e97c8d48d53e7e3df4e7381b5bf995d3871b9e7d8e5828e2effe9e73023b2938881dd186a3e4b7ba42ad35eb53d54b14e244a4f37703b798ccef20bcd820ff44b84f0f65ccc72cd11d659175ce1bf9183a962479f8d11e7ad422239eaab8b39eb9485d738a37cb22439924d2f8619f3d99321c3ddbf0a9d78c050ea1f4e88aef9f146e3e2f973ad82faaab295f1cc2f069704d98fef546987c8f1a5667e75d85966aae92dd14e5706e495201ef84a1e5b3238ed0fe3646d88df81d6e90a998a41356e8598256fd76c962bddc7e2d2c7eeaaebfc0185080cdb8d111c43bba7d2e15869315f7e14dfab198bf32ea440610e18f84a3db856569d3f0ba454c491d824c1657870cbfe79adde32aa2b793f305ccb08850c9942a978c9086342a3024ac91ee9f75739e12bc991cff171b01cd6f0a1dcc7778260c3b1f24ca6eb6dc273e848ac7c9a58f37b9918fb909a473dfc255cd6c9db962a5c652f7e9bdf70a4587d16808ae568ee71620135ceed9312060aa58a708c0a59f41d6c8b1e433ad42e9945d26a79b4832fbaf5d03d489892e4e8b7e4ce14ceed9210d9802e05d91e8715dd8c0eae95962da87cb06cfb08b98b17c0db57dccdf531bb3b091416077ff83ca1df43c8dbae6a3fe12b1bb869cf9bb1bed6e9d4e76cbccbdd1a238d1d26d78a5b0d5ce92e3c9d7a4267bdbc69a34e95f090970a0b9508e593aabb16b08b7d898c72f6c822a4b8d568db60f5b20c1fd0a8ee42b7c3ee9d95a7042612f7cfb1d87f4457ab9a4ce75f25c595704c862921264bfeda9476912abb674fbff29a0ae9c32e015fcade832911615609874284a1779b816f074e93c566fd93dbb9074c83ee21642dc37a099ad8a1244b68ddecca26fe596067e71d715bf875e290269a97d7bdf4bec785fe2ef0cb404ba7ec1252e38519daa52e0feebcf1adbf489cee79e9ae418a879c0f6879f0ed1fb56a923078251b9bb07d337fdaa6ab088642952f9d98040b4970297b4d7838aa200b598b5e65bcf2c369273a90db4a5a4108b98cf892c9e35884efa7768fb025494c2d6e8f248d3c3d97b4666bf7de3c32420cb530d9ce785852abfd7ab3b9b360ced6afc26972ea3c803d88573fc46b8f3c5d553f2e8668179b4b33b184dc18f5cfbe5cc47b45ecb3a7287470420941182f77819a67ab6cff7411bab6ae95e3f0639823e20d6bb9b6116bc234c5c61aab5f675616e01c4d6d80fc620801291d0ae954179c733e0d706cf2c2a33be3d75da3a6fba41e55935193b0af315d6a25ff77274c649f25871f8b37f06b97a6ae0e1bd46aff602f72de10c728ea5d8be4fd34b23b40b389d7b4e3f12ed705c06dc41de7a8c0f30a747a31ef44a599943e1"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000006c0)={0x9304, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x7f, "f8103033e4ce04"}) socket$kcm(0x29, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/video4linux/video0/dev_debug\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) write(r10, &(0x7f0000000100)='3', 0x1) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000700039022abd7000fbdbdf2507060000", @ANYRES32=r12, @ANYBLOB="0c000180080001"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f00000016c0)={r6, r9, "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", "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"}) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r13, 0x1, 0x0, 0x0, {0x53}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6}}]}, 0x44}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd0, r13, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x99ce}, {0x6, 0x16, 0x8}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x800}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB="040f0402000104"], 0x7) 1m2.791841611s ago: executing program 7 (id=681): quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, 0x0, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000400)={0x1, 0x0, &(0x7f0000010000), &(0x7f0000020000), &(0x7f0000018000)}) write(r2, &(0x7f0000018000)="000001", 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x41102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r4, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r4, 0x1) (fail_nth: 1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) 47.767014625s ago: executing program 37 (id=681): quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, 0x0, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000400)={0x1, 0x0, &(0x7f0000010000), &(0x7f0000020000), &(0x7f0000018000)}) write(r2, &(0x7f0000018000)="000001", 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x41102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r4, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r4, 0x1) (fail_nth: 1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) 4.992590185s ago: executing program 6 (id=1024): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x4081, 0x105) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000300)={@remote, r4}, 0x14) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x10000, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x6}, 0x1c) bind$inet6(r0, &(0x7f0000002ec0)={0xa, 0x4e22, 0x50, @private2, 0x3}, 0x1c) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000340)={'\x00', 0x1ff, 0x2, 0x7f, 0x4, 0x100000001}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="2300000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x79, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) ioctl$SG_BLKTRACETEARDOWN(r5, 0x1276, 0x3800) r8 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x0, 0x8, 0xb, 0x4}, {0x4, 0x7, 0x73, 0x7}, {0x5, 0x80, 0x4, 0xd}, {0x3, 0x3, 0x5, 0x10}, {0x8, 0x8, 0x79, 0xab8}]}) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x8, 0x14b, 0x0, 0x1, [@typed={0x4, 0x8}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048015}, 0xc0d4) r9 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, 0x0, 0x0) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x6, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) r10 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000240)="bc3087", 0x3, r9) keyctl$revoke(0x3, r10) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r11, 0x0, 0x30, 0x0, 0x0) 4.870793064s ago: executing program 8 (id=1025): r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x1) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x406}}}, 0x7) socket$nl_generic(0x10, 0x3, 0x10) openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/fail_make_request/probability\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x6000000d, 0x2000000}) 4.7999643s ago: executing program 6 (id=1026): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, 0x0) 4.711194824s ago: executing program 6 (id=1028): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000180000001803000080c600000f02ffffffe5000000000000120100000000615f3000"], 0x0, 0x35}, 0x28) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000740)={0x0, 0xc436, 0x4, 0x2, 0x1e7}, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000000100)={0x1, 0xa}, 0x1) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r2 = socket$inet6(0xa, 0x3, 0x2f) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f0000000080)) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3f5, 0x1, 0x70bd2c, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24004801}, 0x20040000) r3 = openat$uhid(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f0000000340)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000180)=""/186, 0xba, 0x1, 0x1, 0x4, 0x3, 0x3}}, 0x11c) 4.287995613s ago: executing program 6 (id=1032): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) r2 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) syz_usb_ep_read(r2, 0x1, 0x0, 0x0) syz_usb_ep_write(r2, 0x81, 0x40, &(0x7f0000000100)="900100"/64) syz_usb_control_io(r2, &(0x7f0000000400)={0x18, &(0x7f0000000140)={0x4ec54299aedc980, 0x10, 0x7d, {0x7d, 0x23, "fd443a0254703b19299fad4e63cd190bace4abba975707c150d4c53bd1895f7e0835aa384ea930172a957a1eb5cc4d4e4f880a6ea41a6c4a06f5c90873abaa860d432c351662551b019f02027bab93b4d3560912783c7fafb3ceb32222bae3902f1329b63590bf523270bd2a8541b7e7504aec20cd662e51588cd9"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, &(0x7f00000002c0)={0x0, 0xf, 0x8a, {0x5, 0xf, 0x8a, 0x6, [@generic={0x38, 0x10, 0x0, "8100baf3af4ca1ec24d40684fde0a593aec5ab83ee96a0b429351f5290789ab0ca56c11f91b45754b00275a09cedeb6f5a6ee89e56"}, @ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0x6, 0xff00, 0x2000, [0xf0, 0x3f00, 0x3f00, 0x0, 0xffc030]}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x7, 0x6, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x9, 0x9, 0x4}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc8, 0x5, 0xff, 0xa000, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "2591b14203198eb3d88c9cd8b41f36f8"}]}}, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0xb, 0xb, 0x0, "5414a838", "c6014c72"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf, 0x0, 0x88, 0x6b, 0x1, 0x6, 0x800}}}, &(0x7f0000000900)={0x44, &(0x7f0000000440)={0x20, 0xe, 0xc9, "a32c960482c9e1632a65d2f4f56ad7829740d12052637d5cdd6cda3694553ba1d2a05c726882f9eea5ab28e191eccf2ce388ca231a9d555944ec233e4bc5cf799820498131f3777529ce4ca8a94132353d627e4a57d22d2055ea84be446ac501c7acbeb0216d5ec1069d0f0ab87944213d0de2419d834c21cf9cbb46368131f6978626b2d3622961eb6dabb19ae6dc4b481c733ae2592eaf09d28e58ea2603a740676225693a0d4052925be688b2cb6090a02654f689e224c9ef081af5081ba900e89eca8360610fd4"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x81}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0xc0, 0x8}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0x2}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "3918"}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000740)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000780)={0x40, 0x17, 0x6}, &(0x7f00000007c0)={0x40, 0x19, 0x2, 'W:'}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0xfdca}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0xc0}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x4}}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', r1, 0xffffffffffffffff, 0x2, 0x1, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x6}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0xa7}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x15, &(0x7f0000000240)=""/21, 0x40f00, 0xc, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000009c0)={0x3, 0xe, 0x8001, 0x38}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a80)=[r3, 0xffffffffffffffff], &(0x7f0000000ac0)=[{0x2, 0x3, 0x0, 0x2}, {0x4, 0x4}, {0x0, 0x4, 0x4, 0x8}], 0x10, 0x5}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff}, {0xb, 0x7}}}, 0x24}}, 0x4008000) socket(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x2) 4.287392647s ago: executing program 8 (id=1033): r0 = io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x4, 0x402c1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3000000, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e"], 0x88}}, 0x20000000) sendmsg$key(r1, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/block/sda/hctx0/tags\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000440)={0x10, 0x1403, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xfffff000) read(r4, &(0x7f00000002c0)=""/153, 0x99) r5 = memfd_create(&(0x7f0000000500)='\x14\xa3\xbb\a\x002RgZ*\xc5\x9e[,\xe5uR\x94\xaa\xdc0\xe6n\xb8\xea\xe8\x99Lh(\xc7\xbb_\x81\x15f\xe7\x100\r\x1fE\x82\xf5\xfd\x83\xff{\xa0\x15\xffK\xe4\x98\x93\xf9\xc4!_\x96\xe8&,\xdf\x12\xc0\xa7Y1\x8bUs\x91)\x89\xd0\xa1OF4\xa4fI\a\x84_r\xc6\xdaq%\xd3\x98\n\x7fmF\xa9\xbb\x16\x8bxb\xc8\xfc\xad?\x01\xf40\xf5\xc3\xf3+\xa7\x94=\x96\xe6*~\x18\x9c\xfe\xfe\xdcNWGn\xfa\xf8,\xa9\x84\xf7\xe1RA9\xfeD@\x18b\x1dgz\xdfc\x05>O\xa0\x8b\xce\xe0\x8cS\xfanA\xecx\xc4\xdd\x82aT\xb5b\xc5\xaa\x8fj\xb2\xc3\x96\x96\"&)!Z\x1e\tBq\x96L\x97\xc9G\xaa\x85\xc3C \xa1\x98o\f\xf2\x02\x05oV\a\x82\x9e\")\xfb\xa09b\xb6\v\xb3\xe1p\x97\xe9\x13\xb5-\xc1x<\xc9]\x85\xbb\xb6h\xee\x91Q\xd0V\x80\xbc\x88?\x9cr\x13<\xa5g=CA\xd8d\x86\fr\xee=0xffffffffffffffff}) (async, rerun: 32) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000403807091700000000000109022400010000a00209041005420300020009210000400122180009058103"], 0x0) (rerun: 32) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r6 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x80, 0x1, {0x60, 0x0, 0x0, r8, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) bind$bt_hci(r6, &(0x7f0000000340)={0x1f, 0x2, 0x2}, 0x6) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) (async) shutdown(r4, 0x1) (async) ioctl$XFS_IOC_GETBMAPX(r2, 0xc0205838, &(0x7f0000000300)={0x8, 0xffffffff, 0x1, 0x8, 0x5, 0x20, 0x4}) (async) openat$nullb(0xffffff9c, &(0x7f00000002c0), 0x141000, 0x0) 3.220955696s ago: executing program 4 (id=1041): openat$dsp1(0xffffffffffffff9c, 0x0, 0x80, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) pwrite64(r0, &(0x7f0000000080)="ad9cd640b6652dfd52bf3d00000000000007002c66", 0x15, 0x8) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$dir(0xffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x70) mknodat$loop(r2, &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) listen(r4, 0x5) accept4(r4, 0x0, 0x0, 0x800) setsockopt$inet_tcp_int(r4, 0x6, 0x9, &(0x7f0000000040)=0xa, 0x4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x6, 0x41, 0x2000000, 0x204, 0x2004cf, 0x7f, 0x2, 0x4068ff, 0x5, 0x0, 0x3, 0x10000000a], 0xdddd0000, 0x156201}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.939720615s ago: executing program 8 (id=1042): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000c40), r0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000280)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setscheduler(r4, 0x1, &(0x7f0000000000)=0x40) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r7 = socket$netlink(0x10, 0x3, 0xf) ioctl$OCFS2_IOC_INFO(r7, 0x80106f05, &(0x7f0000008800)={&(0x7f0000008640)=[&(0x7f0000000100)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x60fa67818be22848}}, &(0x7f0000002480)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000001}, [{0x80, 0x7}, {0xffffffffffffffff, 0x2}, {0x4, 0x7f}, {0x2, 0x9}, {0x5, 0x9eb}, {0x0, 0x29ad}, {0x59, 0x4}, {0x10001, 0x2}, {0xffffffffffffffff, 0x8}, {0xff, 0x6}, {0x7, 0x65}, {0x52c0}, {0x8000, 0x6}, {0x0, 0xae}, {0x2, 0xc}, {0x3, 0xe}, {0x2, 0x1}, {0x54, 0x1}, {0xc96, 0x8}, {0x6aec, 0x80000101}, {0x8, 0x3}, {0x2, 0xff}, {0x81, 0xf1}, {0xb, 0xfffffffffffffff9}, {0x2, 0xfffffffffffffffe}, {0xe}, {0x4, 0x3}, {0xff, 0x2}, {0x8515, 0xa}, {0x800, 0xffff}, {0xfffffffffffffe00, 0x9}, {0x779e, 0xc8}, {0x4, 0x4}, {0x200, 0x6}, {0x3ff, 0x3}, {0x2, 0x8}, {0x9, 0xe}, {0x3ff, 0x9}, {0xf, 0x3}, {0x0, 0x1bb}, {0x0, 0x3e42fd43}, {0x9, 0xe}, {0x1, 0x7}, {0x3, 0xa}, {0xfffffffffffffe00, 0xffffffff80000000}, {0x8c, 0xfffffffffffff248}, {0x80000000, 0xe1}, {0x2, 0x9}, {0x1, 0xfffffffffffffff0}, {0x80000000, 0x3}, {0x80000000, 0x8001}, {0x93, 0x7}, {0x7}, {0x9, 0x6}, {0xfffffffffffffff8, 0x8000000000000001}, {0x0, 0xf9d0}, {0xffffffffffff7fff, 0x1}, {0x9, 0x6}, {0x4, 0x60e5}, {0x1ff, 0x2}, {0x101}, {0x7, 0xe}, {0x621f, 0x6}, {0x1, 0x4}, {0xd9, 0x10}, {0x8, 0x2}, {0x3, 0x6}, {0x8, 0x95}, {0x770, 0x8}, {0xeb, 0x40}, {0x0, 0x8801}, {0x9, 0x1}, {0x8000000000000001, 0x8}, {0x200, 0xa01}, {0x7, 0x73}, {0x7}, {0x9, 0x1}, {0x10001, 0x4}, {0x4, 0x7}, {0x5, 0xd70}, {0x0, 0x3}, {0x5490000000000, 0x7e90}, {0x6, 0x7}, {0xe5, 0x1000}, {0x1000, 0x5}, {0x8, 0x100000000}, {0x9, 0x10000}, {0x9, 0x7f}, {0xfffffffffffff800, 0x1}, {0xfffffffffffffff8, 0x7fffffff}, {0x3, 0x8}, {0x100000001, 0x2}, {0x80000000, 0x5}, {0xa2c9, 0x7}, {0x4, 0xf8d}, {0x101, 0x5}, {0x0, 0x40}, {0x9, 0x7ff}, {0xc8, 0x40}, {0xffffffff00000001, 0x80000000}, {0x800, 0x1b4266d9}, {0x7fffffff, 0xa683}, {0x7fffffff, 0x1}, {0x588b, 0x7fff}, {0xaa, 0xfffffffffffffff9}, {0x6, 0x2}, {0x3e72ca6f, 0xf7}, {0x11}, {0x6, 0xb96}, {0x8000000000000000, 0xf}, {0x5, 0x8}, {0x2, 0x401}, {0x6, 0x5}, {0x5, 0x1}, {0x1, 0x6}, {0xfffffffffffffff7, 0x5}, {0x6, 0x9}, {0x8, 0x546f}, {0x7, 0x8001}, {0xc, 0x3f}, {0xfff, 0x4de6}, {0x1, 0x1}, {0x5, 0x376}, {0x9, 0x8}, {0x2, 0x50ad8ce3}, {0x22, 0xfffffffffffffffc}, {0x7fff, 0x2}, {0xd, 0xf}, {0x1, 0x9}, {0xffff, 0x7}, {0xf14, 0xf027}, {0x642, 0x8}, {0x1, 0x9}, {0xffffffff}, {0x3, 0x7b}, {0x2, 0x794}, {0x4, 0x8}, {0xa, 0x8}, {0x7f909889, 0x1}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0xaa6d}, {0x8, 0x9}, {0xe7, 0xb55}, {0xfffffffffffffff8, 0x9}, {0x40, 0x75}, {0x5e4e, 0x9}, {0x7, 0x1}, {0x89, 0x8}, {0x7, 0x9}, {0x0, 0x1}, {0x3, 0x100}, {0x81, 0x4}, {}, {0x5, 0x38}, {0x2, 0x5}, {0x6, 0x6}, {0xfffffffffffffffe, 0x4}, {0x7f, 0x3}, {0x81, 0x8}, {0x6, 0x4}, {0x7e7}, {0x8, 0xf}, {0x628d, 0x3}, {0x2, 0x9}, {0xffffffff, 0xe}, {0xffffffff80000000, 0xfffffffffffffffc}, {0x59, 0x3}, {0xf, 0x3}, {0x5, 0x8}, {0x2b36, 0x3}, {0x80000001, 0x7b}, {0x10, 0xa02}, {0x2, 0xc3}, {0x0, 0xff}, {0x9, 0x7}, {0x80, 0x7ff}, {0x10, 0x3}, {0x6, 0xde}, {0x6, 0xc3}, {0x4, 0x7fffffff}, {0x5, 0x5b5}, {0xf47, 0x1}, {0xa93, 0x1}, {0x8, 0x5}, {0x8, 0x4}, {0x8}, {0x9, 0x7b91}, {0x0, 0x4}, {0x7, 0x9}, {0x1, 0x6}, {0x1, 0xffffffffb676b8b1}, {0x80000000, 0x400}, {0x0, 0xfffffffffffffffe}, {0x3, 0x2}, {0x5ca1, 0x100000001}, {0xfffffffffffffff7, 0x40}, {0x6, 0xe0}, {0x9, 0x5}, {0x3ff, 0x1}, {0x8, 0xcd}, {0x9, 0x1}, {0xe0b, 0x1}, {0x10000000000000, 0x8}, {0x0, 0x3}, {0x8, 0x5c8c}, {0x2, 0x861}, {0x90000000000, 0x80}, {0x7, 0x2}, {0x7, 0x7}, {0x7, 0xab24}, {0x3, 0x100000000}, {0x7, 0x5}, {0xffffffffffffffff, 0x40}, {0x6, 0x4}, {0x3ff, 0x265}, {0x800, 0x2f5f}, {0x7, 0x7}, {0x0, 0x3}, {0xf, 0x1}, {0x3ff, 0x6}, {0x1, 0x6df}, {0x2, 0x8}, {0x3ff, 0x2}, {0x101, 0xffffffffffffffff}, {0x7, 0x7f}, {0x7fffffff, 0x587f}, {0x6, 0x6}, {0x51f9fdf, 0x1}, {0x45, 0xe50c}, {0xfffffffffffffb35, 0xfffffffffffffffa}, {0x7, 0xc754}, {0x9, 0xff}, {0x5, 0xd}, {0x5, 0xda9a}, {0x0, 0x2}, {0x5, 0x401}, {0x89, 0x7}, {0x9, 0x9}, {0x8, 0x10}, {0x7, 0x1}, {0xa81d}, {0x0, 0x1000}, {0x10, 0xd6}, {0x3, 0x9ef}, {0x411d, 0x7}, {0x1, 0x970}, {0x3, 0x100000001}, {0x80000000, 0x7}, {0x7, 0x5}, {0x3, 0x8}, {0x101, 0x3ff}, {0x7fff, 0x80000001}, {0x6, 0x1bd}, {0x1, 0x4}]}, &(0x7f00000034c0)=@features={{0x4f32494e, 0x6, 0x10, 0xc0000000}}, &(0x7f0000003500)=@journal={{0x4f32494e, 0x7, 0x10, 0x1}}, &(0x7f0000003540)=@label={{0x4f32494e, 0x4, 0x10, 0x80000001}}, &(0x7f00000035c0)=@features={{0x4f32494e, 0x6, 0x10, 0x80000001}}, &(0x7f0000003600)=@features={{0x4f32494e, 0x6, 0x10, 0x40000000}}, &(0x7f0000003640)=@features={{0x4f32494e, 0x6, 0x10}}, &(0x7f0000003680)=@features={{0x4f32494e, 0x6, 0x10, 0x80000001}}, &(0x7f00000036c0)=@features={{0x4f32494e, 0x6, 0x10}}, &(0x7f0000003700)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xc0000000}}, &(0x7f0000003740)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f0000003780)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000001}}, &(0x7f00000037c0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x1}}, &(0x7f0000003800)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x180000000}}, &(0x7f0000003840)=@uuid={{0x4f32494e, 0x5, 0x10, 0xc0000000}}, &(0x7f0000003880)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000001}, {}, 0xd6}, &(0x7f00000039c0)=@blocksize={{0x4f32494e, 0x2, 0x10, 0xc0000001}}, &(0x7f0000003a00)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000000}}, &(0x7f0000003a40)=@blocksize={{0x4f32494e, 0x2, 0x10, 0xc0000001}}, &(0x7f0000003a80)=@freefrag={{0x4f32494e, 0x9, 0x10, 0xc0000000}, {}, 0x3}, &(0x7f0000003bc0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x1}}, &(0x7f0000003c00)=@features={{0x4f32494e, 0x6, 0x10, 0x80000001}}, &(0x7f0000003c40)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000000}}, &(0x7f0000003c80)=@uuid={{0x4f32494e, 0x5, 0x10}}, &(0x7f0000003cc0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000001}, [{0x1, 0x100000001}, {0x2, 0x8000000000000000}, {0x2c40000000000000, 0xffffffffffff7fff}, {0x5, 0xe76}, {0x99}, {0x7fffffff, 0xffffffffffffff34}, {0x9d6, 0x4}, {0x5, 0xb99a}, {0x9bf, 0x9}, {0xa, 0x3}, {0x4, 0x10000}, {0xffffffffffffff80, 0x9}, {0xfffffffffffffffb, 0xcd}, {0x6, 0x3}, {0x100000000, 0x3}, {0xb}, {0x841, 0x3}, {0xa, 0x9}, {0x4, 0x724c00000000000}, {0x5, 0x1000}, {0x6, 0x1000}, {0x4, 0x400}, {0x0, 0x10}, {0x7ff, 0x200}, {0x6, 0x400}, {0xe0}, {0x7f4, 0x5}, {0x2, 0x63}, {0x2, 0x68}, {0x6, 0x2}, {0x4cf, 0x6}, {0x401, 0x2}, {0xe, 0x7}, {0x1, 0x2}, {0xf0c, 0x100}, {0x7fffffff, 0x2}, {0x8bc, 0xe}, {0x8b, 0x7fffffffffffffff}, {0x4, 0x9}, {0x100000001, 0xfff}, {0x0, 0x2}, {0x4, 0x6}, {0x7, 0xb04}, {0x8, 0x8}, {0x6, 0x2}, {0xffffffffffffffff, 0x2}, {0x4, 0x9e}, {0x7, 0x7}, {0x3, 0x986}, {0x10001, 0x3}, {0xffffffff80000000, 0x35a7}, {0x4, 0x4}, {0xf, 0xfbc7}, {0x7, 0x2}, {0x81, 0x2}, {0x101, 0x7fffffffffffffff}, {0x400, 0x1}, {0x5, 0x7}, {0x1, 0x5}, {0x7, 0x3}, {0x1, 0x4}, {0x7000000000000000, 0xfffffffffffffff9}, {0x4, 0xc}, {0x5, 0x8}, {0x0, 0x54}, {0x6, 0x2}, {0x4, 0x5}, {0x4}, {0x4, 0xf31}, {0x7fffffff, 0x7f}, {0x84b, 0xf58c}, {0xfb, 0x158ffc09}, {0x10001, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x4, 0x8}, {0x6, 0x2}, {0x9b, 0x5}, {0xfffffffffffffff7, 0x2}, {0x10000, 0x7f}, {0x1, 0x5}, {0x7054, 0x70f}, {0x3019, 0x1}, {0x6, 0x80}, {0x3a, 0x7}, {0x1, 0x8}, {0x9, 0x7}, {0x6, 0x1}, {0xffffffffffffffb1, 0xd1d}, {0xa, 0xea38}, {0x9, 0xa000000000000000}, {0x100, 0x7}, {0xb42a, 0x1}, {0x3, 0x5aa}, {0x9, 0x8}, {0x82, 0x8}, {0x7, 0xffff}, {0x599, 0xfffffffffffffff0}, {0x9, 0x20}, {0x63a5605f, 0x7fffffffffffffff}, {0x2, 0x1}, {0x1, 0x200}, {0xc, 0x9}, {0x3, 0x8001}, {0xfff, 0x3ff}, {0x3ff, 0x401}, {0x2, 0x656f993c}, {0x8d8, 0x8001}, {0x3, 0xe3f6000000000000}, {0x800, 0x100}, {0xf08, 0x4}, {0xc14, 0x9}, {0x3, 0x2}, {0xe9c, 0x8dc}, {0x5, 0xf}, {0xfffffffffffffbff, 0x4}, {0x5, 0x8000}, {0x53f67c6e, 0x3}, {0x3, 0x7f}, {0x80000001, 0x4}, {0x70000000, 0x100000000}, {0x866e, 0x3}, {0x8, 0xffffffffffffdbce}, {0x6, 0x7}, {0x6, 0x5}, {0x1, 0x200}, {0x5c, 0x7}, {0x3, 0x18000000000}, {0x8, 0x1}, {0xc0, 0x1}, {0x7, 0x5}, {0x721, 0x8000000000000001}, {0xfffffffffffffc00, 0xba7}, {0x5, 0x81}, {0xffffffffffffffff, 0x8}, {0x1000000000, 0x95}, {0x5, 0xbbe}, {0x5, 0xc}, {0xffffffff, 0x8}, {0x0, 0x7}, {0x8, 0x3}, {0x7fff, 0x4}, {0x7, 0x4}, {0x8, 0x3}, {0x0, 0x55}, {0x5, 0x9}, {0x2, 0x8}, {0xffff, 0x3d40000}, {0x7, 0x5}, {0x4, 0x7}, {0x22, 0x4}, {0xffffffffffffffff, 0xffff}, {0x5, 0x7}, {0x4, 0x8}, {0x4, 0x9}, {0x7, 0x80}, {0x4, 0x2}, {0x4, 0x9}, {0x4, 0x6}, {0x100000001, 0x3ff}, {0x8, 0x1a}, {0x1, 0x46}, {0x7ff, 0x7fffffff}, {0x80, 0x8}, {0x0, 0x3}, {0x7, 0xd0c}, {0x2, 0x754}, {0x2, 0x24}, {0x8, 0x100}, {0x8, 0x1}, {0x5, 0x5}, {0xffffffff, 0x6}, {0x3, 0x159}, {0x5, 0x6}, {0x1, 0xfffffffffffff762}, {0xd17d, 0x1}, {0xd, 0x2}, {0x9d, 0x6}, {0x7, 0xff}, {0x80, 0x22fa}, {0x6}, {0x0, 0x7}, {0x3, 0x40}, {0x2, 0x9}, {0x9, 0x1}, {0x3, 0x7ff}, {0x6, 0xfffffffffffffffa}, {0x3, 0x8}, {0x8, 0x7}, {0x55, 0x3}, {0x0, 0x7}, {0xb, 0x10001}, {0x80000001, 0x3}, {0x8b2, 0xd}, {0xffffffffffffffff, 0x9}, {0x5, 0x8}, {0x3, 0x6bfb}, {0x4, 0x3}, {0x3, 0x1}, {0x4, 0x6589}, {0x1, 0xfffffffffffffffc}, {0x9, 0x2}, {0x7f, 0x2}, {0x5, 0x81}, {0x0, 0x1}, {0x7, 0x670}, {0x6, 0x76}, {0xfff, 0x10001000}, {0x8, 0x1ff}, {0x9, 0x401}, {0xff, 0x1ff}, {0x6, 0xa8}, {0x0, 0x56}, {0xc2e0, 0x8001}, {0x7, 0x60}, {0x5, 0x5e}, {0x80000001, 0x8}, {0x5}, {0xfffffffffffffff8, 0x9}, {0x7, 0x2}, {0x8b99, 0x20000000}, {0x100000001, 0x7}, {0x1, 0x89}, {0xc4, 0x8001}, {0xc628, 0x7}, {0x2, 0x40}, {0x7ff, 0xf04}, {0x1, 0xfff}, {0x7ff, 0x9e4}, {0xa, 0x37d}, {0x1, 0x80}, {0x9, 0x1000}, {0x4, 0x9}, {0x0, 0x4}, {0x6}, {0x8000, 0x4}, {0x0, 0x7}, {0x1, 0x6}, {0x9, 0x2}, {0x401, 0xd85}, {0x7, 0x1}, {0x133198a1, 0x7fffffffffffffff}, {0x9, 0x7f}, {0x0, 0xf}, {0x97d, 0x4}, {0x9d, 0x60f}, {0x9, 0x1}, {0x7, 0x8}, {0xb6bf, 0x3}, {0x8, 0xb}, {0x1, 0x4}, {0x7fffffff, 0x8001}, {0x8, 0x1}, {0x0, 0x3}, {0x3, 0x9b1}]}, &(0x7f0000004d00)=@features={{0x4f32494e, 0x6, 0x10, 0x80000000}}, &(0x7f0000004d40)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x40000001}}, &(0x7f0000004d80)=@freeinode={{0x4f32494e, 0x8, 0x10, 0xc0000000}, [{0x6}, {0x1, 0x6}, {0x1ff, 0x101}, {0x8, 0x6}, {0x6, 0x5}, {0x2, 0x4}, {0x5, 0x3}, {0x83e, 0x7c}, {0x7, 0x8}, {0x73f}, {0x4}, {0x10, 0x3}, {0x81, 0x101}, {0xd6e, 0x4}, {0x100000001, 0x100000001}, {0xffffffff, 0x1ff}, {0x8, 0x3}, {0x9, 0xfffffffffffffffa}, {0x7, 0x7fff}, {0x100, 0x6}, {0x101, 0x5}, {0x5, 0x7}, {0x6, 0xf9a}, {0x48, 0x7ff}, {0x80000000, 0x40}, {0x8001, 0x7fffffff}, {0x0, 0xa136}, {0x800, 0xd5}, {0x3fe6}, {0x7fffffffffffffff, 0xfffffffffffff606}, {0xdc2e, 0x21f}, {0x5, 0x9}, {0x9, 0x2}, {0x40, 0x80}, {0x2, 0xfff}, {0x200, 0x7}, {0xffffffffffffffff, 0x8}, {0xfd, 0x100000001}, {0x81, 0x101}, {0x3, 0x6b4}, {0xdc6f, 0x3}, {0x62f, 0x1}, {0x0, 0x4}, {0x8001}, {0x5, 0x81}, {0x8, 0x6}, {0xffffffffffffffff, 0x6}, {0x80, 0x7}, {0x9, 0x4}, {0x9, 0x9}, {0x3, 0x8b2f}, {0xfffffffffffffffb, 0x8}, {0xa5, 0x3}, {0x4, 0xe65e}, {0x1869, 0xfffffffffffffff9}, {0x8000, 0x3}, {0x4, 0x8000000000000000}, {0x0, 0x993}, {0x5}, {0x0, 0x3}, {0x3, 0xa8}, {0x4fe, 0x52ca}, {0x9, 0x1}, {0x8, 0x1}, {0x33bd, 0x6}, {0x80, 0x1}, {0xd1d7, 0x9}, {0x7, 0xffffffffffffffc3}, {0xffffffff80000001, 0x6c9a}, {0x7, 0x7ff}, {0x8000000000000000, 0x8000000000000000}, {0x6, 0x7fffffffffffffff}, {0xdba7, 0x9}, {0x100000001, 0x1}, {0x2, 0x6}, {0x8, 0xe}, {0x4, 0x8000000000000001}, {0x4}, {0x8, 0xe2e}, {0x0, 0x7}, {0x72da9094, 0xa}, {0x31dd, 0x3ff}, {0x81, 0x9}, {0x0, 0x2}, {0x9, 0x5}, {0x1, 0x6}, {0x5, 0x2}, {0x2, 0x98e}, {0xfffffffffffffffe, 0x1}, {0x2, 0x3}, {0xa}, {0x6, 0xd0b2}, {0x2, 0x8000}, {0xa, 0x3}, {0x400, 0x3}, {0x8}, {0x8, 0x3}, {0x2, 0x4}, {0x40, 0xd}, {0x4, 0x800}, {0x9, 0xffffffff}, {0xcb1d, 0x4451}, {0x3, 0x79749ec1}, {0x42e6, 0x20}, {0x5}, {0x200005, 0x2}, {0x5, 0x7}, {0x0, 0x40008}, {0x6, 0x400}, {0x1, 0x100000001}, {0x8e1, 0x3}, {0x8}, {0x2, 0x8}, {0x101, 0x4}, {0xfffffffffffffff7, 0x5}, {0x80000000, 0x8}, {0x2, 0x8000000000000000}, {0x5, 0x101}, {0x2, 0x9}, {0x11, 0x50}, {0xfff, 0x3665}, {0x81, 0x2}, {0x4b27, 0x4}, {0x4, 0x6}, {0x1, 0x100}, {0xc, 0x4867dd16}, {0xffff, 0xd}, {0x1e000000000, 0xfffffffffffffff7}, {0x80, 0x3}, {0xc, 0x7}, {0x8, 0x8000}, {0x10, 0x2}, {0x1, 0x6}, {0x6, 0x4}, {0x2, 0x2}, {0x5, 0x3}, {0x70000000000000, 0x4}, {0x3ff, 0x100}, {0xb6, 0x8}, {0x100000001, 0x4}, {0xd, 0xa}, {0x2, 0xfffffffffffffffa}, {0x0, 0x9298}, {0x6, 0x6}, {0x7, 0x2}, {0x60, 0xffffffff00000001}, {0x8, 0x8}, {0x7, 0xd546}, {0x6, 0x1ff}, {0x4, 0xb}, {0x0, 0x2}, {0x9, 0x4169}, {0x0, 0xe67}, {0x4, 0x8}, {0x2, 0x18a}, {0x0, 0x8}, {0x5, 0x9}, {0x8, 0x1}, {0xffffffff, 0xfea}, {0x8}, {0x2, 0x10001}, {0x0, 0x2}, {0xffffffffffffffff, 0x6}, {0x6, 0x1ff}, {0x100000000, 0x8}, {0x8, 0x6}, {0x60000, 0x5}, {0x3}, {0xe, 0x3}, {0x2, 0x2b79}, {0x93ef, 0x7fffffff}, {0x0, 0x7}, {0x548c, 0x2}, {0xf, 0x5d}, {0x5, 0x5}, {0x5, 0x5}, {0x1, 0x4}, {0x8000000000000001, 0x5fc1}, {0x9}, {0xfff, 0xa}, {0x2ba5fd8d, 0x3356}, {0x72}, {0xfffffffffffffffe, 0x400}, {0x6, 0x4b8f}, {0x3, 0x6}, {0x40, 0xca9}, {0x0, 0x8}, {0xffff, 0x6a65}, {0x3ff, 0x7}, {0x7fffffff, 0x9}, {0x6f0, 0xd2}, {0x5, 0xff}, {0x90, 0x5}, {0x6, 0x4}, {0xfffffffffffffff9, 0x8}, {0x3, 0x5}, {0x4, 0xfffffffffffff194}, {0xfffffffffffffffe, 0x3}, {0x40, 0x1f}, {0x3}, {0x3, 0x4}, {0x5, 0x6}, {0x10, 0x5}, {0x4, 0x1}, {0x1000, 0x6}, {0x3, 0x7}, {0x62e494ea, 0x10000}, {0xd}, {0x8000000000000000, 0x4}, {0x2, 0x236de77f}, {0x4, 0xb59a}, {0xf2, 0x2}, {0x9}, {0xd274, 0x5a1a}, {0x8000000000000001, 0x1}, {0x362}, {0x4, 0x6}, {0x77f4}, {0x1, 0x5}, {0x40, 0x3}, {0x6, 0xfffffffffffffff7}, {0x6, 0x7}, {0x8000, 0x6}, {0x4, 0x1000}, {0x4, 0x7}, {0x9dbc, 0x2}, {0x200, 0xbc}, {0xfffffffffffffffc, 0x2}, {0x3, 0x100000000}, {0xec, 0x6}, {0x87c4, 0xffffffff80000000}, {0x7, 0x2}, {0x8}, {0x8000, 0x5}, {0x2c}, {0xd, 0x4}, {0x8001, 0x4}, {0xa, 0x7fff}, {0x80000000, 0x80000001}, {0x1, 0x4}, {0x6, 0xa388}, {0x6, 0x7ff}, {0x8, 0x8000000000000000}, {0x38, 0xdca}, {0x2800000000000, 0x9}, {0x3}, {0x5}, {0xe5a, 0x80000000}, {0x5, 0x5}, {0x8, 0x6}, {0x5, 0x9}, {0x0, 0x2}, {0x6}, {0x2, 0x3}, {0xfffffffffffffffe, 0x4fa86bad}]}, &(0x7f0000005dc0)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000000}}, &(0x7f0000005e00)=@freefrag={{0x4f32494e, 0x9, 0x10, 0xc0000001}, {}, 0x8fb}, &(0x7f0000005f40)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000001}}, &(0x7f0000005f80)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000001}}, &(0x7f0000005fc0)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000000}, {}, 0x8}, &(0x7f0000006100)=@freeinode={{0x4f32494e, 0x8, 0x10, 0xc0000000}, [{0x3, 0x7}, {0x1, 0x8}, {0xffffffff, 0xf9}, {0x3, 0x7}, {0xffffffffffffffff, 0x10}, {0x800, 0x6}, {0x9, 0x180000000000}, {0xff, 0x8001}, {0x8, 0x73d}, {0x2, 0x7}, {0x9, 0x3}, {0x0, 0x7fff}, {0x9, 0x1}, {0x3, 0xfffffffffffffffb}, {0x9, 0x7}, {0x6, 0x4}, {0x47e0, 0x200}, {0x9, 0x4}, {0xffffffffffff8001, 0x7}, {0x2, 0xffff}, {0x0, 0x39}, {0x7a, 0x2}, {0x9, 0x27}, {0x9, 0x2}, {0xc5, 0x7f}, {0x7, 0xfffffffffffffffa}, {0x2, 0xfffffffffffffa72}, {0xb}, {0xfff, 0x2}, {0xffffffffffffffff, 0x8}, {0x3, 0xe32}, {0x9, 0x7}, {0x2, 0x4}, {0x3, 0xb0}, {0x9, 0x8}, {0xf10, 0x9}, {0x100000001, 0x8}, {0x9, 0x3ff}, {0xb27, 0x9f4}, {0x40, 0x3b}, {0x800, 0x401}, {0x400, 0x4}, {0x0, 0x100000000}, {0x7, 0x3}, {0x6, 0x7e14}, {0x8, 0x3}, {0xed7, 0x441}, {0x8, 0x8000000000000000}, {0x3, 0xfb}, {0x4, 0x401}, {0x1ff, 0x231}, {0x0, 0x1}, {0x4, 0x5}, {0xc43, 0x2}, {0x6, 0x3}, {0x3ff, 0x2}, {0x800, 0xee}, {0x1, 0xd1dbae30000000}, {0x2, 0x6438}, {0x5, 0xfffffffffffff000}, {0x3, 0x7fffffffffffffff}, {0x9, 0x5}, {0x0, 0x6}, {0xe58, 0x400}, {0x7, 0x40}, {0x7, 0x3}, {0x8, 0xa8}, {0x2, 0xffffffff00000001}, {0x8eff, 0x100000000}, {0x1ab0, 0x5}, {0xffffffff, 0xc83}, {0x166, 0x6}, {0x7fffffff, 0x7}, {0x400, 0xc}, {0x9, 0x5}, {0x7, 0xff}, {0x80000001}, {0x9}, {0xc, 0x8}, {0x80000001, 0xfe}, {0x90, 0x4}, {0x6, 0x7d4}, {0x3, 0x56a}, {0x8000000000000000, 0x9}, {0x1a, 0xffffffffffffffff}, {0x5, 0x1}, {0x81, 0x5}, {0x7fffffffffffffff, 0x7}, {0x4, 0xffffffffffff0000}, {0x3, 0x1000}, {0x0, 0x9}, {0x0, 0x3ff}, {0x9, 0x800}, {0x1000, 0x2}, {0x9, 0x9}, {0x5, 0x8}, {0x1, 0xa65}, {0xcda2}, {0x858, 0x7fffffff}, {0x3, 0x2}, {0xff, 0x3ff}, {0x5, 0x7}, {0x18e, 0x1}, {0x4, 0xa}, {0x8}, {0x6, 0x7}, {0x2, 0x7}, {0x7, 0xad}, {0xc9}, {0x3, 0x40}, {0xa, 0xdf9}, {0xfffffffffffffc00, 0x2}, {0x7, 0x5af}, {0xbeb, 0x8000000000000001}, {0x9376, 0x1}, {0x5, 0x8000}, {0x9}, {0x97, 0x1}, {0xb, 0x81}, {0x2, 0xb84}, {0x1, 0x5}, {0x6, 0x8}, {0xbc, 0x4}, {0x3, 0x7f}, {0x80, 0xbce}, {0x1, 0x8}, {0x7, 0x6}, {0x0, 0x6}, {0x7, 0x80000000}, {}, {0x4, 0xb8}, {0x5, 0x3}, {0x5, 0x994}, {0x1, 0x190f}, {0x7, 0x4}, {0x3, 0x7}, {0x9, 0x5}, {0x0, 0x7}, {0x5, 0x6a}, {0x6, 0x600000000000}, {0x7, 0x1}, {}, {0x6, 0x6}, {0x1e, 0x7fffffffffffffff}, {0x8, 0x8}, {0xf0, 0x8}, {0x5, 0xd94f}, {0x8000000000000001}, {0x8000000000000001, 0xffffffff}, {0x1, 0x5}, {0xffffffffffff7fff, 0x5}, {0xd, 0x5}, {0xa1c0000, 0x200000000000000}, {0x7, 0x9}, {0x2, 0xfffffffffffffff3}, {0xb220, 0xc}, {0x200, 0x2}, {0x417, 0x1}, {0x49f2, 0x8}, {0x7, 0xfffffffffffffffc}, {0x3ff, 0x6}, {0x5, 0xa}, {0x4, 0x5}, {0xffffffffffffffff, 0x1}, {0x6, 0x5}, {0x0, 0x8}, {0x205, 0x10}, {0x0, 0x2}, {0x54a0000, 0x7}, {0x2, 0x3}, {0x8, 0xb60a}, {0x6, 0x8}, {0x9699, 0x4}, {0xffffffffffffffea, 0x4}, {0x7f8, 0x2}, {0x7, 0x2}, {0x0, 0x2}, {0x5, 0x2}, {0x7, 0xfffffffffffffffd}, {0x400, 0x94}, {0x1, 0x8}, {0x1}, {0xa2c, 0x100000001}, {0x4, 0x3d72e7bf}, {0x7, 0x83d}, {0x8f9, 0x3ff}, {0x0, 0x9}, {0x80, 0xfff}, {0x7a67, 0x8000}, {0x9bb, 0x5}, {0x8, 0x8}, {0x2}, {0xd12f, 0x6}, {0x10000, 0x8}, {0x0, 0x8}, {0x4, 0x3}, {0x7, 0x400}, {0xc4, 0x100}, {0x9}, {0xdb2, 0x8}, {0xb, 0x9}, {0x7, 0x7}, {0x57b, 0xb}, {0x8, 0x80}, {0x5, 0x8}, {0x35, 0x7fffffff}, {0x3, 0xffffffffbfc10551}, {0x8, 0x7fff}, {0x8b5f, 0x7}, {0x8, 0x5}, {0x40, 0xa979a70}, {0xfffffffffffffff3, 0x7}, {0x1, 0x100}, {0x9, 0xfffffffffffffffc}, {0xdd9, 0xffffffffffffffcd}, {0x1, 0x1}, {0x10001, 0x7}, {0x2, 0x5d}, {0x3, 0x2}, {0x8, 0x6}, {0x8000000000000000, 0x1}, {0xd6}, {0x8, 0x9}, {0x8, 0x9}, {0x2, 0x401}, {0xc, 0xf80}, {0x3ff, 0x7}, {0xf5}, {0x2, 0xffffffffffffffff}, {0x5c4, 0x6}, {0x8000, 0xfffffffeffffffff}, {0x1, 0x9}, {0x6, 0x7fff}, {0x100000000, 0x3}, {0x8eba, 0x4}, {0x48331bb}, {0x5, 0x7}, {0x6, 0xf}, {0x1, 0x81b}, {0x0, 0x6}, {0xc818, 0x9}, {0xffffffff, 0xe71}, {0x2, 0x200}, {0x989, 0x200}, {0x2, 0x330}, {0xa, 0xa}, {0x7, 0xae2}, {0xfff, 0x81}, {0x8, 0x7}, {0xfffffffffffffeda, 0xf}, {}, {0x80000000, 0x5}, {0x10000, 0x1}, {0x100000000, 0x7}, {0xa5, 0xb1}]}, &(0x7f0000007140)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000000}}, &(0x7f0000007180)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000000}}, &(0x7f00000071c0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x1}, [{0x6}, {0x3, 0x7}, {0x7fffffffffffffff, 0x2}, {0xfff, 0x80000001}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x6}, {0x8000, 0x1}, {0x2, 0x1}, {0x658b, 0x5d}, {0x10000, 0x7f}, {0x800, 0x4}, {0x3, 0x40f}, {0x9, 0x7}, {0x8, 0x5}, {0xff, 0x3}, {0x100, 0x2c4}, {0x8000, 0x237b}, {0x7f, 0x2}, {0x480000000, 0x5}, {0x10001, 0xcc30}, {0x3, 0x3ff}, {0x53f, 0x7}, {0x7, 0x8}, {0x3, 0x4}, {0xe, 0xa577}, {0x1ff, 0x5}, {0x2, 0x7289}, {0x2, 0x8743}, {0x6, 0x100000000}, {0x3, 0x7}, {0x7, 0xfffffffffffffffd}, {0x8, 0x7fffffffffffffff}, {0xffffffff, 0x1ff}, {0x7, 0x1}, {0x0, 0xc674}, {0xfff, 0x6}, {0x3d, 0x3}, {0x1, 0x6}, {0x31, 0x9}, {0x3, 0xfffffffffffff122}, {0x8000000000000001, 0x101}, {0x2, 0x100}, {0x100, 0x7}, {0x6, 0x8}, {0x892, 0xfffffffffffffff6}, {0x0, 0x41}, {0x78b9}, {0x3, 0x670a}, {0x9, 0x1}, {0xd, 0x3}, {0x3, 0x100000000000000}, {0x81, 0x4}, {0x8, 0xfffffffffffffff9}, {0x8000, 0x4}, {0x7, 0xfffffffffffffffa}, {0x1}, {0x80000000, 0x8}, {0x6, 0x7}, {0xaa25, 0x6}, {0x7f, 0x5}, {0x0, 0x2}, {0x101, 0xfffffffffffff801}, {0x7, 0x1}, {0x5641af, 0x7}, {0x4, 0x8}, {0x3, 0x8000000000000001}, {0x7, 0x1}, {0x5, 0xe0d}, {0xae, 0x9}, {0x5, 0x8001}, {0x6, 0x2}, {0x8000, 0x9}, {0x1, 0xb}, {0x8000, 0x9}, {0x5}, {0x3, 0xfe8}, {0x7f, 0x9e4}, {0x0, 0x2}, {0xfff, 0xffffffffffffffff}, {0x9, 0x1}, {0x1, 0x9}, {0x5c44df21, 0x3ff}, {0x921, 0x8}, {0x408, 0x1}, {0x8, 0x4}, {0x3, 0x7}, {0xfffffffffffffffd, 0x4}, {0x6, 0x2}, {0x4, 0xd8eb}, {0x2, 0xfff}, {0xfffffffffffffff7, 0x5}, {0x1, 0xffffffffffffff80}, {0x2f, 0xc}, {0x6, 0x1}, {0x5, 0x24830477}, {0x8e68, 0x7fff}, {0x2}, {0x1, 0x8}, {0x9, 0x1d}, {0x80000000, 0x9}, {0x4, 0x400}, {0x97, 0xf245}, {0x80, 0x1}, {}, {0x9, 0x8}, {0x2000000000000, 0xba}, {0xf8}, {0x5, 0x7fff}, {0xfc, 0x1}, {0x401, 0x9}, {0x12a, 0xfffffffffffffffb}, {0x20000000000, 0x5}, {0xfff, 0x3}, {0x1, 0xed5}, {0x8, 0x2}, {0x1, 0x7fffffffffffffff}, {0x4, 0x1}, {0x66, 0x8}, {0x7, 0xe950}, {0x100000000}, {0x3}, {0x69fd, 0x162}, {0x7, 0x80000000}, {0x9, 0x8}, {0x5, 0x10}, {0x8}, {0x8, 0x10000}, {0x4, 0xdb2}, {0x2, 0x80000000}, {0xfffffffffffffff4, 0x100000001}, {0x6, 0x101}, {0x4, 0x7}, {0xf0, 0x140000000000}, {0x9}, {0x8e9e, 0x2}, {0x1, 0x1}, {0xa, 0x6}, {0x7, 0xd}, {0x8, 0x4}, {0x0, 0x7}, {0x100000000, 0x9}, {0x7fff, 0x1000}, {0x1, 0x2}, {0x9}, {0x4d193d77, 0xe7}, {0x4689, 0x200000000000000}, {0x9}, {0x7fffffffffffffff}, {0x8001, 0xc}, {0x81000000000, 0x8}, {0xc, 0x4}, {0x11f1, 0x800}, {0x3ff, 0x8}, {0x5, 0xa}, {0x5, 0x7}, {0xffffffff, 0xe}, {0x80000000, 0xfffffffffffffffe}, {0x100000001, 0x6}, {0x4, 0x23b}, {0xfff, 0xffffffffffff7fff}, {0x4, 0x6}, {0x1, 0x8001}, {0x8, 0x3}, {0x6, 0x6e}, {0x7fffffffffffffff, 0x8000000000000000}, {0xf9, 0x7ff}, {0xbc6b, 0x7ff}, {0x10001, 0x88}, {0xa, 0x401}, {0x3, 0x7}, {0x7, 0x2}, {0x8, 0x3}, {0x1, 0x2b}, {0x100000000, 0x9}, {0xa, 0x9}, {0xfffffffffffffffa, 0x100000000}, {0x0, 0x744}, {0x39, 0x2}, {0x3, 0x8}, {0x1, 0xb}, {0x3, 0x5d7}, {0x101}, {0x56, 0x7}, {0x32b, 0x101}, {0xc425, 0x1}, {0x8, 0x4}, {0x2, 0x7}, {0x43, 0xfffffffffffffffb}, {}, {0x1, 0x8000}, {0x1, 0xfffffffffffffffb}, {0x6, 0x4}, {0x40, 0x6}, {0xe18, 0x9}, {0x8}, {0x3, 0x7fff}, {0x7, 0x9}, {0x9, 0x2}, {0xf, 0xd06}, {0x5, 0x4000000000}, {0x4, 0x10001}, {0x5, 0x1}, {0x1, 0x9}, {0x0, 0x4}, {0x5, 0x9}, {0x5, 0x6}, {0x80000000, 0x2}, {0x544, 0x7fffffffffffffff}, {0x1, 0xb}, {0x6, 0x1}, {0x1ff, 0x2d29}, {0x0, 0xb}, {0x7, 0x1}, {0x475, 0xfeb3}, {0xa61, 0x8}, {0x9, 0x8}, {0x2, 0x55}, {0x34}, {0x6, 0x3}, {0x3, 0xc3}, {0x9, 0xf6b}, {0x7, 0x4}, {0x200, 0x3}, {0x8, 0x1}, {0x2, 0x1}, {0xffffffff, 0x9}, {0x5, 0xc07}, {0x4, 0x5}, {0xff, 0x3}, {0x8000000000000001, 0x8}, {0x200, 0xf8}, {0x1, 0x4}, {0x8, 0x5}, {0x400, 0x8}, {0x6, 0x5}, {0x101, 0xb1dd}, {0x3, 0xb48}, {0x71e7f4a3, 0xa10}, {0x948, 0x100000000}, {0x7, 0x2}, {0x7, 0x3}, {0x2, 0x4}, {0x5, 0xf2}, {0x3, 0x1}, {0x9, 0x7}, {0xffff, 0x3}, {0x0, 0x8000000000000001}, {0xffffffffffff0001, 0x8}, {0x0, 0x5}, {0xfff, 0x3}, {0x1, 0xffff}, {0x401, 0xe7a}, {0x2, 0x1}, {0x8000000000000000, 0x1}]}, &(0x7f0000008200)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f0000008240)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000001}}, &(0x7f0000008280)=@features={{0x4f32494e, 0x6, 0x10, 0x1}}, &(0x7f00000082c0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000000}}, &(0x7f0000008300)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000001}}, &(0x7f0000008340)=@uuid={{0x4f32494e, 0x5, 0x10, 0xc0000001}}, &(0x7f0000008380)=@uuid={{0x4f32494e, 0x5, 0x10, 0xc0000001}}, &(0x7f00000083c0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x1}}, &(0x7f0000008400)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x40000001}}, &(0x7f0000008440)=@uuid={{0x4f32494e, 0x5, 0x10, 0xc0000000}}, &(0x7f0000008480)=@label={{0x4f32494e, 0x4, 0x10, 0x80000001}}, &(0x7f0000008500)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000001}, {}, 0x9}], 0x32}) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000240)={0x1, 0x1ff}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) r10 = syz_open_procfs(0x0, &(0x7f0000002440)='net/ipv6_route\x00') preadv(r10, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1, 0x5fae, 0x4) ioctl$KVM_PRE_FAULT_MEMORY(r9, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x44}], 0x1, 0xe6) acct(0x0) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x3) 2.850311971s ago: executing program 9 (id=1043): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x3c) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x20) (async, rerun: 64) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x7fff, 0x7, 0xc, 0x6}) (async, rerun: 64) r3 = openat$vimc0(0xffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_ENCODER_CMD(r3, 0xc028564d, 0x0) (async, rerun: 64) syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') (async, rerun: 64) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) (async) ioperm(0x0, 0x8001, 0x9) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x612d, 0x0, 0x3, 0xbd}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x102100, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x24c}}], 0x1, &(0x7f0000000340)={0x2e, 0x4c, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) (async) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r13, 0x0, 0x2, 0x0, 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc)=0xfffffffe, 0x1, 0xfffffffd, 0x0, 0x0, 0x1) (async, rerun: 32) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) (async, rerun: 32) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 2.590207779s ago: executing program 9 (id=1044): r0 = io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x4, 0x402c1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3000000, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e"], 0x88}}, 0x20000000) sendmsg$key(r1, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/block/sda/hctx0/tags\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000440)={0x10, 0x1403, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xfffff000) read(r4, &(0x7f00000002c0)=""/153, 0x99) r5 = memfd_create(&(0x7f0000000500)='\x14\xa3\xbb\a\x002RgZ*\xc5\x9e[,\xe5uR\x94\xaa\xdc0\xe6n\xb8\xea\xe8\x99Lh(\xc7\xbb_\x81\x15f\xe7\x100\r\x1fE\x82\xf5\xfd\x83\xff{\xa0\x15\xffK\xe4\x98\x93\xf9\xc4!_\x96\xe8&,\xdf\x12\xc0\xa7Y1\x8bUs\x91)\x89\xd0\xa1OF4\xa4fI\a\x84_r\xc6\xdaq%\xd3\x98\n\x7fmF\xa9\xbb\x16\x8bxb\xc8\xfc\xad?\x01\xf40\xf5\xc3\xf3+\xa7\x94=\x96\xe6*~\x18\x9c\xfe\xfe\xdcNWGn\xfa\xf8,\xa9\x84\xf7\xe1RA9\xfeD@\x18b\x1dgz\xdfc\x05>O\xa0\x8b\xce\xe0\x8cS\xfanA\xecx\xc4\xdd\x82aT\xb5b\xc5\xaa\x8fj\xb2\xc3\x96\x96\"&)!Z\x1e\tBq\x96L\x97\xc9G\xaa\x85\xc3C \xa1\x98o\f\xf2\x02\x05oV\a\x82\x9e\")\xfb\xa09b\xb6\v\xb3\xe1p\x97\xe9\x13\xb5-\xc1x<\xc9]\x85\xbb\xb6h\xee\x91Q\xd0V\x80\xbc\x88?\x9cr\x13<\xa5g=CA\xd8d\x86\fr\xee=0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0xfffffffffffffdf5, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x0) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e22, 0x1, @mcast2, 0x480000}, {0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0xe}, 0x2}, 0x1, {[0x0, 0xe, 0x0, 0x5, 0x401, 0x1252, 0x200, 0x752]}}, 0x5c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0xf863, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r4, 0xf, 0x25, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x40) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) r5 = socket$netlink(0x10, 0x3, 0xa) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') r6 = socket(0x10, 0x3, 0x0) pipe(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat$ocfs2_control(0xffffff9c, &(0x7f00000000c0), 0x200000, 0x0) 1.960438703s ago: executing program 4 (id=1046): r0 = io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x4, 0x402c1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3000000, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x20000000) sendmsg$key(r1, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/block/sda/hctx0/tags\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x14) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xfffff000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x300000b, 0x13, 0xffffffffffffffff, 0x80000) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) mincore(&(0x7f00004ce000/0x3000)=nil, 0x3000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) 1.887009169s ago: executing program 9 (id=1047): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, 0x0, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x844e, 0x0, 0x20000000, 0xe4, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x100, 0x2, 0x80000250}}], 0x1, &(0x7f0000000340)={0x2e, 0x45, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 1.530175902s ago: executing program 9 (id=1048): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x109100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000100bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f01726a067818b990b13bfddb7e78270010720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f10000"], 0x0}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x400011) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x88c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9219a1e18c488e827c1bbec", 0x89}], 0x1}, 0x0) 571.37454ms ago: executing program 4 (id=1049): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x5, 0x7d, 0x5, 0xc, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x3, 0x80000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0xd62a, @empty, 0x6}}]}, 0x60}, 0x1, 0x7}, 0x8014) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x14, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffbc0}, {}, {}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x2}, @ldst={0x2, 0x2, 0x1, 0xb, 0x2, 0xfffffffffffffffe, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94) 276.156958ms ago: executing program 9 (id=1050): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000000c0)=0xfffebffd) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@random="8563f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x7, 0x2, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x27}}, {0x1f, 0x81, 0x0, @empty}}}}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1b6}}], 0x2, 0x0) 211.107884ms ago: executing program 6 (id=1051): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x3, 0x8, 0x8, 0x40}, 0x50) r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x400000, 0x0) getpeername$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x7, 0x0, r0, 0x2, '\x00', r2, 0xffffffffffffffff, 0x4, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 209.539646ms ago: executing program 4 (id=1052): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000010300), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0xf, 0xd7, 0x4, @mcast2, @empty, 0x8000, 0x7800, 0x9, 0xc}}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03000000040000312e0000ff0000000000000000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="01000000010000000400"/28], 0x50) r7 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_G_SELECTION(r7, 0xc040565e, &(0x7f0000000080)={0x1, 0x1, 0x2, {0x0, 0x4, 0x1, 0xffffffff}}) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) r8 = userfaultfd(0x80001) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc01cf509, &(0x7f0000010640)={0xffffffffffffffff, 0x8, 0x8, 0x4}) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000010280)=ANY=[@ANYBLOB="1d00000004000000410000000000400201000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0240000005006218847c269ca486409b0000000000000000000000000000000000007ff0498a"], 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) read(r8, &(0x7f00000002c0)=""/153, 0x99) r9 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x801) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r9, 0x40026f34, &(0x7f00000000c0)=0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000000000006a0a00ff00000000850000002b000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2f01806fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c77f0979b34e1ad837ff0d10b97163c1d6d0e196bf02f46c7953ab1abda45cbe8d0d26b5069f8a98f7dc8f76b74635fc9f9de9ca3c0ec0cb9bf4e418d076df4c7df0a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d25c32aac1c7d5b5be399f6609876b5887437a172fbc02a74135b29194e533583412dff048f0000000000000000b2728a0481e9f0da43bb6cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad3e328a100000000b515a1000000000000000eb2e9c15b6c8f6198282df27badac8500bc7d202e0990"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r10, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) r11 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x1, 0x1}}}, &(0x7f0000000300)=0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000010240)={0x0, 0x0, &(0x7f0000010200)={&(0x7f00000001c0)={0x10018, 0x3f7, 0x20, 0x0, 0x25dfdbfd, {0xffff, 0x1, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', '.'}}, 0x10018}, 0x1, 0x0, 0x0, 0x24004001}, 0x4000) r14 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r11, 0x2) syz_ublk_setup_queues(r14, r13, &(0x7f0000000700)={0x0, 0xc766, 0x0, 0x0, 0x2bc}, &(0x7f0000010380)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1, 0x0, 0x1dc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80000, 0x400, 0x3, 0x351}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x40, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x10, 0x2, 0x423b}}], 0x1, &(0x7f0000000280)={0x2e, 0x0, 0x0, r14, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r12, '\x00', {0x0, 0x0, 0x0, 0x0}}, 0x0) 148.888267ms ago: executing program 6 (id=1053): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config/nvmet/subsystems/testnqn/namespaces/1/buffered_io\x00', 0x1b7) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testnqn/namespaces/1/buffered_io\x00', 0xc2d41, 0x114) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000005c0)='fd', 0x0, r6) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x2) fchdir(r8) r9 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r10 = syz_clone(0x300, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r10, r10) setpgid(0x0, r10) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r11, &(0x7f0000000040)=0x4000921, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r9, 0x9362, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x1, &(0x7f0000000400)={0x0, 0x3e8}}) io_uring_enter(r2, 0x2, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000005c0)=@IORING_OP_RECVMSG={0xa, 0x48, 0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}) io_uring_enter(r2, 0x2, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000065c0)={0x2020}, 0x2020) 640.202µs ago: executing program 9 (id=1054): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x4081, 0x105) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000300)={@remote, r4}, 0x14) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x10000, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x6}, 0x1c) bind$inet6(r0, &(0x7f0000002ec0)={0xa, 0x4e22, 0x50, @private2, 0x3}, 0x1c) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000340)={'\x00', 0x1ff, 0x2, 0x7f, 0x4, 0x100000001}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="2300000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x79, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) ioctl$SG_BLKTRACETEARDOWN(r5, 0x1276, 0x3800) r8 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x0, 0x8, 0xb, 0x4}, {0x4, 0x7, 0x73, 0x7}, {0x5, 0x80, 0x4, 0xd}, {0x3, 0x3, 0x5, 0x10}, {0x8, 0x8, 0x79, 0xab8}]}) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x8, 0x14b, 0x0, 0x1, [@typed={0x4, 0x8}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048015}, 0xc0d4) r9 = add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, 0x0, 0x0) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x6, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) r10 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000240)="bc3087", 0x3, r9) keyctl$revoke(0x3, r10) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r11, 0x0, 0x30, 0x0, 0x0) 0s ago: executing program 8 (id=1055): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x109100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000100bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f01726a067818b990b13bfddb7e78270010720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f10000"], 0x0}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x400011) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x88c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9219a1e18c488e827c1bbec", 0x89}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 859480][ T7722] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 154.864884][ T5886] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 154.892809][ T7731] netlink: 'syz.4.459': attribute type 1 has an invalid length. [ 154.960775][ T7731] bond1: entered promiscuous mode [ 154.961067][ T7731] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.000382][ T7733] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.000574][ T7733] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 155.000585][ T7733] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 155.002949][ T7733] bond1: (slave gre1): making interface the new active one [ 155.002961][ T7733] gre1: entered promiscuous mode [ 155.004158][ T7733] bond1: (slave gre1): Enslaving as an active interface with an up link [ 155.007502][ T7731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.459'. [ 155.016237][ T7731] bond1 (unregistering): (slave gre1): Releasing backup interface [ 155.016268][ T7731] gre1: left promiscuous mode [ 155.025397][ T7731] bond1 (unregistering): Released all slaves [ 155.064710][ T5886] usb 5-1: USB disconnect, device number 14 [ 155.584735][ T5845] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 155.735337][ T5845] usb 8-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 155.736285][ T5845] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 155.736306][ T5845] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 155.736336][ T5845] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.741086][ T5845] spcp8x5 8-1:1.0: SPCP8x5 converter detected [ 155.754482][ T5845] usb 8-1: SPCP8x5 converter now attached to ttyUSB0 [ 155.946636][ T7742] comedi comedi3: dt2801: I/O base address or length out of range [ 156.666252][ T5886] usb 7-1: USB disconnect, device number 10 [ 156.752894][ T7792] CIFS mount error: No usable UNC path provided in device string! [ 156.752894][ T7792] [ 156.752910][ T7792] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 156.833489][ T7798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.477'. [ 158.535156][ T7840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.486'. [ 159.491852][ T5831] usb 8-1: USB disconnect, device number 9 [ 159.582646][ T5831] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 159.593883][ T5831] spcp8x5 8-1:1.0: device disconnected [ 159.796869][ T43] audit: type=1326 audit(1790522038.056:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7845 comm="syz.4.490" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x0 [ 159.815092][ T7849] loop0: detected capacity change from 0 to 32768 [ 159.815844][ T7849] loop1: detected capacity change from 0 to 65536 [ 159.839302][ T7849] FAULT_INJECTION: forcing a failure. [ 159.839302][ T7849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.839322][ T7849] CPU: 2 UID: 0 PID: 7849 Comm: syz.2.489 Not tainted syzkaller #0 PREEMPT(full) [ 159.839334][ T7849] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 159.839341][ T7849] Call Trace: [ 159.839345][ T7849] [ 159.839349][ T7849] dump_stack_lvl+0x100/0x190 [ 159.839367][ T7849] should_fail_ex.cold+0x5/0xa [ 159.839382][ T7849] _copy_from_user+0x2e/0xd0 [ 159.839397][ T7849] ctl_ioctl+0xf3/0xcc0 [ 159.839412][ T7849] ? __pfx_ctl_ioctl+0x10/0x10 [ 159.839437][ T7849] ? __fget_files+0x21f/0x3d0 [ 159.839454][ T7849] dm_compat_ctl_ioctl+0x23/0x30 [ 159.839467][ T7849] ? __pfx_dm_compat_ctl_ioctl+0x10/0x10 [ 159.839480][ T7849] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 159.839493][ T7849] __do_fast_syscall_32+0x13a/0x8b0 [ 159.839507][ T7849] ? lockdep_hardirqs_on+0x7d/0x110 [ 159.839520][ T7849] do_fast_syscall_32+0x32/0x70 [ 159.839533][ T7849] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 159.839547][ T7849] RIP: 0023:0xf700efec [ 159.839561][ T7849] Code: Unable to access opcode bytes at 0xf700efc2. [ 159.839565][ T7849] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 159.839576][ T7849] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000c138fd09 [ 159.839583][ T7849] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 159.839590][ T7849] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 159.839596][ T7849] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 159.839602][ T7849] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 159.839615][ T7849] [ 159.943690][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 160.124972][ T7865] FAULT_INJECTION: forcing a failure. [ 160.124972][ T7865] name failslab, interval 1, probability 0, space 0, times 0 [ 160.124999][ T7865] CPU: 3 UID: 0 PID: 7865 Comm: syz.0.493 Tainted: G L syzkaller #0 PREEMPT(full) [ 160.125022][ T7865] Tainted: [L]=SOFTLOCKUP [ 160.125028][ T7865] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 160.125038][ T7865] Call Trace: [ 160.125045][ T7865] [ 160.125052][ T7865] dump_stack_lvl+0x100/0x190 [ 160.125079][ T7865] should_fail_ex.cold+0x5/0xa [ 160.125101][ T7865] should_failslab+0xc2/0x120 [ 160.125121][ T7865] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 160.125143][ T7865] ? __alloc_skb+0x140/0x710 [ 160.125172][ T7865] __alloc_skb+0x140/0x710 [ 160.125193][ T7865] ? __alloc_skb+0x5b7/0x710 [ 160.125216][ T7865] ? __pfx___alloc_skb+0x10/0x10 [ 160.125244][ T7865] mgmt_cmd_complete+0x4f/0x5a0 [ 160.125272][ T7865] set_def_system_config+0xd82/0x15b0 [ 160.125293][ T7865] ? __pfx_mgmt_init_hdev+0x10/0x10 [ 160.125312][ T7865] hci_sock_sendmsg+0x1574/0x26a0 [ 160.125333][ T7865] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 160.125344][ T7865] ? apparmor_socket_sendmsg+0x165/0x280 [ 160.125362][ T7865] sock_write_iter+0x53a/0x5b0 [ 160.125375][ T7865] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 160.125385][ T7865] ? __pfx_sock_write_iter+0x10/0x10 [ 160.125401][ T7865] ? bpf_lsm_file_permission+0x9/0x10 [ 160.125417][ T7865] ? security_file_permission+0x76/0x210 [ 160.125429][ T7865] ? rw_verify_area+0xce/0x6d0 [ 160.125442][ T7865] vfs_write+0x6af/0x1050 [ 160.125454][ T7865] ? __pfx_sock_write_iter+0x10/0x10 [ 160.125468][ T7865] ? __pfx_vfs_write+0x10/0x10 [ 160.125478][ T7865] ? find_held_lock+0x2b/0x80 [ 160.125500][ T7865] ksys_write+0x1f8/0x250 [ 160.125512][ T7865] ? __pfx_ksys_write+0x10/0x10 [ 160.125523][ T7865] ? ksys_write+0x1ac/0x250 [ 160.125541][ T7865] ? __pfx_ksys_write+0x10/0x10 [ 160.125570][ T7865] __do_fast_syscall_32+0x13a/0x8b0 [ 160.125590][ T7865] ? lockdep_hardirqs_on+0x7d/0x110 [ 160.125605][ T7865] do_fast_syscall_32+0x32/0x70 [ 160.125625][ T7865] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 160.125647][ T7865] RIP: 0023:0xf700efec [ 160.125666][ T7865] Code: Unable to access opcode bytes at 0xf700efc2. [ 160.125673][ T7865] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 160.125689][ T7865] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 160.125697][ T7865] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 160.125707][ T7865] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 160.125716][ T7865] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 160.125743][ T7865] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 160.125767][ T7865] [ 160.393846][ T7868] syzkaller0: entered promiscuous mode [ 160.393868][ T7868] syzkaller0: entered allmulticast mode [ 160.491756][ T7875] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12 [ 160.805657][ T7890] netlink: 60 bytes leftover after parsing attributes in process `syz.0.498'. [ 160.851296][ T43] audit: type=1400 audit(1790522039.106:275): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=7892 comm="syz.2.500" [ 160.860144][ T1164] IPVS: starting estimator thread 0... [ 160.913491][ T7890] loop7: detected capacity change from 0 to 7 [ 160.968321][ T7890] Dev loop7: unable to read RDB block 7 [ 160.968343][ T7890] loop7: unable to read partition table [ 160.968433][ T7890] loop7: partition table beyond EOD, truncated [ 160.968465][ T7890] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 160.973675][ T7894] IPVS: using max 43 ests per chain, 103200 per kthread [ 161.020776][ T7906] Dev loop7: unable to read RDB block 7 [ 161.020798][ T7906] loop7: unable to read partition table [ 161.020918][ T7906] loop7: partition table beyond EOD, truncated [ 161.764579][ T1485] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 161.800652][ T7954] fuse: fd is not a fuse device [ 161.914268][ T1485] usb 8-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 161.915199][ T1485] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.915221][ T1485] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 161.915241][ T1485] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.923341][ T1485] cxacru 8-1:1.0: usbatm_usb_probe: bind failed: -19! [ 162.178984][ T5743] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 162.198134][ T38] Bluetooth: hci4: Frame reassembly failed (-84) [ 162.493285][ T7979] netlink: 24 bytes leftover after parsing attributes in process `syz.2.520'. [ 162.579704][ T7978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.590232][ T7978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.704165][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.704207][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.704235][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.704263][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.670084][ T8002] gfs2: error -5 reading superblock [ 164.225430][ T5755] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 164.503371][ T1485] usb 8-1: USB disconnect, device number 10 [ 165.059886][ T8012] netlink: 'syz.2.530': attribute type 1 has an invalid length. [ 165.071984][ T8012] bond2: entered promiscuous mode [ 165.072175][ T8012] 8021q: adding VLAN 0 to HW filter on device bond2 [ 165.085640][ T8012] 8021q: adding VLAN 0 to HW filter on device bond2 [ 165.085982][ T8012] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 165.086000][ T8012] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 165.092076][ T8012] bond2: (slave gre1): making interface the new active one [ 165.092097][ T8012] gre1: entered promiscuous mode [ 165.113141][ T8012] bond2: (slave gre1): Enslaving as an active interface with an up link [ 165.121132][ T8012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.530'. [ 165.128586][ T8012] bond2 (unregistering): (slave gre1): Releasing backup interface [ 165.128616][ T8012] gre1: left promiscuous mode [ 165.129991][ T8012] bond2 (unregistering): Released all slaves [ 166.778350][ T8031] FAULT_INJECTION: forcing a failure. [ 166.778350][ T8031] name failslab, interval 1, probability 0, space 0, times 0 [ 166.778371][ T8031] CPU: 3 UID: 0 PID: 8031 Comm: syz.2.534 Tainted: G L syzkaller #0 PREEMPT(full) [ 166.778386][ T8031] Tainted: [L]=SOFTLOCKUP [ 166.778390][ T8031] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 166.778397][ T8031] Call Trace: [ 166.778401][ T8031] [ 166.778406][ T8031] dump_stack_lvl+0x100/0x190 [ 166.778425][ T8031] should_fail_ex.cold+0x5/0xa [ 166.778440][ T8031] should_failslab+0xc2/0x120 [ 166.778456][ T8031] __kmalloc_cache_noprof+0x91/0x6d0 [ 166.778467][ T8031] ? find_held_lock+0x2b/0x80 [ 166.778479][ T8031] ? alloc_fs_context+0x57/0xf40 [ 166.778497][ T8031] alloc_fs_context+0x57/0xf40 [ 166.778513][ T8031] ? __get_fs_type+0xe3/0x200 [ 166.778530][ T8031] path_mount+0xdbd/0x24c0 [ 166.778547][ T8031] ? __pfx_path_mount+0x10/0x10 [ 166.778562][ T8031] ? lockdep_hardirqs_on+0x7d/0x110 [ 166.778575][ T8031] ? putname+0xb1/0x110 [ 166.778589][ T8031] ? kmem_cache_free+0x127/0x6c0 [ 166.778604][ T8031] ? __ia32_sys_mount+0x292/0x310 [ 166.778619][ T8031] __ia32_sys_mount+0x292/0x310 [ 166.778638][ T8031] ? __pfx___ia32_sys_mount+0x10/0x10 [ 166.778656][ T8031] ? ksys_write+0x1ac/0x250 [ 166.778674][ T8031] __do_fast_syscall_32+0x13a/0x8b0 [ 166.778689][ T8031] ? lockdep_hardirqs_on+0x7d/0x110 [ 166.778702][ T8031] do_fast_syscall_32+0x32/0x70 [ 166.778715][ T8031] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 166.778729][ T8031] RIP: 0023:0xf700efec [ 166.778742][ T8031] Code: Unable to access opcode bytes at 0xf700efc2. [ 166.778746][ T8031] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 166.778758][ T8031] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000040 [ 166.778765][ T8031] RDX: 0000000080000080 RSI: 000000000000008c RDI: 0000000080000140 [ 166.778771][ T8031] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 166.778777][ T8031] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 166.778784][ T8031] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 166.778797][ T8031] [ 166.867078][ T8035] netlink: 'syz.2.536': attribute type 1 has an invalid length. [ 166.883486][ T8035] bond2: entered promiscuous mode [ 166.883998][ T8035] 8021q: adding VLAN 0 to HW filter on device bond2 [ 166.898652][ T8035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.536'. [ 167.174872][ T8035] bond2 (unregistering): Released all slaves [ 168.858515][ T8072] bridge0: port 4(syz_tun) entered blocking state [ 168.858772][ T8072] bridge0: port 4(syz_tun) entered disabled state [ 168.858911][ T8072] syz_tun: entered allmulticast mode [ 168.861935][ T8072] syz_tun: entered promiscuous mode [ 168.945281][ T8081] loop7: detected capacity change from 0 to 7 [ 169.025802][ T8081] Dev loop7: unable to read RDB block 7 [ 169.025903][ T8081] loop7: unable to read partition table [ 169.026072][ T8081] loop7: partition table beyond EOD, truncated [ 169.026102][ T8081] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 169.176716][ T6155] Dev loop7: unable to read RDB block 7 [ 169.176943][ T6155] loop7: unable to read partition table [ 169.177697][ T6155] loop7: partition table beyond EOD, truncated [ 169.259565][ T8088] syzkaller1: tun_chr_ioctl cmd 35108 [ 169.473719][ T5525] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 169.617299][ T8092] netlink: 'syz.4.551': attribute type 9 has an invalid length. [ 169.617322][ T8092] netlink: 'syz.4.551': attribute type 6 has an invalid length. [ 169.624324][ T5525] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 169.625161][ T5525] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 169.625175][ T5525] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 169.625193][ T5525] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.628385][ T5525] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 169.632222][ T5525] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 169.945448][ T8116] netlink: 'syz.2.558': attribute type 1 has an invalid length. [ 169.954840][ T8116] bond2: entered promiscuous mode [ 169.955037][ T8116] 8021q: adding VLAN 0 to HW filter on device bond2 [ 169.959240][ T5886] usb 5-1: USB disconnect, device number 15 [ 169.968677][ T8116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.558'. [ 169.971530][ T5886] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 169.972016][ T5886] spcp8x5 5-1:1.0: device disconnected [ 169.982374][ T8116] bond2 (unregistering): Released all slaves [ 170.318840][ T8127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.560'. [ 170.426522][ T8128] loop5: detected capacity change from 0 to 6 [ 170.429395][ T8128] Dev loop5: unable to read RDB block 6 [ 170.429426][ T8128] loop5: unable to read partition table [ 170.429580][ T8128] loop5: partition table beyond EOD, truncated [ 170.429594][ T8128] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 170.720598][ T8137] CIFS mount error: No usable UNC path provided in device string! [ 170.720598][ T8137] [ 170.720760][ T8137] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 170.799095][ T8143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.563'. [ 171.028748][ T8145] Cannot find set identified by id 2 to match [ 171.268584][ T5845] libceph: connect (1)[c::]:6789 error -101 [ 171.268897][ T5845] libceph: mon0 (1)[c::]:6789 connect error [ 171.278115][ T8148] ceph: No mds server is up or the cluster is laggy [ 171.280185][ T5845] libceph: connect (1)[c::]:6789 error -101 [ 171.280332][ T5845] libceph: mon0 (1)[c::]:6789 connect error [ 171.647339][ T8167] syzkaller1: tun_chr_ioctl cmd 35108 [ 172.261578][ T8176] netlink: 'syz.2.571': attribute type 2 has an invalid length. [ 172.261601][ T8176] netlink: 156 bytes leftover after parsing attributes in process `syz.2.571'. [ 172.261613][ T8176] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 172.409239][ T8179] netlink: 'syz.0.572': attribute type 2 has an invalid length. [ 172.409261][ T8179] netlink: 156 bytes leftover after parsing attributes in process `syz.0.572'. [ 172.409276][ T8179] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 173.100528][ T8198] overlay: ./file1 is not a directory [ 173.151915][ T43] audit: type=1800 audit(1790522051.406:276): pid=8198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.577" name="bus" dev="9p" ino=72352087 res=0 errno=0 [ 173.187828][ T8199] block device autoloading is deprecated and will be removed. [ 173.838858][ T5743] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 173.842158][ T5743] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 173.842935][ T5743] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 173.851243][ T5743] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 173.858870][ T5743] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 174.071468][ T8235] FAULT_INJECTION: forcing a failure. [ 174.071468][ T8235] name failslab, interval 1, probability 0, space 0, times 0 [ 174.071504][ T8235] CPU: 3 UID: 0 PID: 8235 Comm: syz.3.587 Tainted: G L syzkaller #0 PREEMPT(full) [ 174.071528][ T8235] Tainted: [L]=SOFTLOCKUP [ 174.071534][ T8235] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 174.071544][ T8235] Call Trace: [ 174.071550][ T8235] [ 174.071558][ T8235] dump_stack_lvl+0x100/0x190 [ 174.071595][ T8235] should_fail_ex.cold+0x5/0xa [ 174.071619][ T8235] should_failslab+0xc2/0x120 [ 174.071644][ T8235] __kvmalloc_node_noprof+0x113/0x9b0 [ 174.071668][ T8235] ? netdev_rx_queue_reconfig+0x1ce/0x630 [ 174.071698][ T8235] netdev_rx_queue_reconfig+0x1ce/0x630 [ 174.071727][ T8235] netdev_rx_queue_restart+0x8f/0xc0 [ 174.071750][ T8235] ? __pfx_netdev_rx_queue_restart+0x10/0x10 [ 174.071780][ T8235] nsim_qreset_write+0x2e3/0x410 [ 174.071805][ T8235] ? __pfx_nsim_qreset_write+0x10/0x10 [ 174.071828][ T8235] ? __debugfs_file_get+0x1fc/0x860 [ 174.071849][ T8235] ? lock_acquire+0x1d1/0x380 [ 174.071873][ T8235] ? ksys_write+0x12a/0x250 [ 174.071898][ T8235] full_proxy_write+0x135/0x1a0 [ 174.071921][ T8235] vfs_write+0x2aa/0x1050 [ 174.071940][ T8235] ? __pfx_full_proxy_write+0x10/0x10 [ 174.071960][ T8235] ? lock_acquire+0x1d1/0x380 [ 174.071982][ T8235] ? __fget_files+0x34/0x3d0 [ 174.072003][ T8235] ? __pfx_vfs_write+0x10/0x10 [ 174.072020][ T8235] ? find_held_lock+0x2b/0x80 [ 174.072040][ T8235] ? __fget_files+0x215/0x3d0 [ 174.072065][ T8235] ? __fget_files+0x21f/0x3d0 [ 174.072091][ T8235] ksys_write+0x12a/0x250 [ 174.072111][ T8235] ? __pfx_ksys_write+0x10/0x10 [ 174.072129][ T8235] ? ksys_write+0x1ac/0x250 [ 174.072147][ T8235] ? __pfx_ksys_write+0x10/0x10 [ 174.072171][ T8235] __do_fast_syscall_32+0x13a/0x8b0 [ 174.072193][ T8235] ? lockdep_hardirqs_on+0x7d/0x110 [ 174.072214][ T8235] do_fast_syscall_32+0x32/0x70 [ 174.072234][ T8235] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 174.072257][ T8235] RIP: 0023:0xf7ff6fec [ 174.072278][ T8235] Code: Unable to access opcode bytes at 0xf7ff6fc2. [ 174.072286][ T8235] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 174.072305][ T8235] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000240 [ 174.072315][ T8235] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 174.072324][ T8235] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 174.072336][ T8235] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 174.072345][ T8235] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 174.072369][ T8235] [ 174.173997][ T5832] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 174.324778][ T5832] usb 7-1: Using ep0 maxpacket: 8 [ 174.325879][ T5832] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 174.327033][ T8244] kernel profiling enabled (shift: 7) [ 174.328537][ T5832] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 174.328560][ T5832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.330706][ T5832] usb 7-1: config 0 descriptor?? [ 174.538303][ T5832] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 174.543272][ T8224] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.544519][ T8224] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.544582][ T8224] bridge_slave_0: entered allmulticast mode [ 174.545852][ T8224] bridge_slave_0: entered promiscuous mode [ 174.549413][ T8224] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.549690][ T8224] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.549751][ T8224] bridge_slave_1: entered allmulticast mode [ 174.550491][ T8224] bridge_slave_1: entered promiscuous mode [ 174.572090][ T8224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.573421][ T8224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.587655][ T8224] team0: Port device team_slave_0 added [ 174.589134][ T8224] team0: Port device team_slave_1 added [ 174.609514][ T8224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.609524][ T8224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.609537][ T8224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.610527][ T8224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.610537][ T8224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.610556][ T8224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.635327][ T8224] hsr_slave_0: entered promiscuous mode [ 174.635787][ T8224] hsr_slave_1: entered promiscuous mode [ 174.636116][ T8224] debugfs: 'hsr0' already exists in 'hsr' [ 174.636127][ T8224] Cannot create hsr debugfs directory [ 174.774904][ T8224] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 174.776845][ T8224] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 174.777296][ T8224] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 174.781199][ T8224] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 174.781715][ T8224] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 174.795706][ T8224] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 174.796201][ T8224] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 174.797963][ T8224] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 174.871299][ T8224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.879580][ T8224] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.912765][ T8266] binder: 8227:8266 ioctl c0306201 800002c0 returned -14 [ 174.919054][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.920139][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.928913][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.929021][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.447947][ T8224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.667778][ T8224] veth0_vlan: entered promiscuous mode [ 175.672181][ T8224] veth1_vlan: entered promiscuous mode [ 175.724750][ T8224] veth0_macvtap: entered promiscuous mode [ 175.727116][ T8224] veth1_macvtap: entered promiscuous mode [ 175.740610][ T8224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.746866][ T8224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.877982][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.879312][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.879363][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.879449][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.915004][ T5743] Bluetooth: hci2: command tx timeout [ 175.950556][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.950836][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.983101][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.983279][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.126422][ T8299] FAULT_INJECTION: forcing a failure. [ 176.126422][ T8299] name failslab, interval 1, probability 0, space 0, times 0 [ 176.126445][ T8299] CPU: 0 UID: 0 PID: 8299 Comm: syz.5.585 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.126461][ T8299] Tainted: [L]=SOFTLOCKUP [ 176.126465][ T8299] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 176.126472][ T8299] Call Trace: [ 176.126476][ T8299] [ 176.126481][ T8299] dump_stack_lvl+0x100/0x190 [ 176.126501][ T8299] should_fail_ex.cold+0x5/0xa [ 176.126517][ T8299] should_failslab+0xc2/0x120 [ 176.126535][ T8299] kmem_cache_alloc_noprof+0x92/0x6a0 [ 176.126548][ T8299] ? d_instantiate+0x8a/0xb0 [ 176.126564][ T8299] ? alloc_empty_file+0x5b/0x1c0 [ 176.126586][ T8299] alloc_empty_file+0x5b/0x1c0 [ 176.126603][ T8299] alloc_file_pseudo+0x183/0x290 [ 176.126637][ T8299] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 176.126656][ T8299] ? alloc_fd+0x471/0x7a0 [ 176.126673][ T8299] ? do_raw_spin_unlock+0x145/0x1e0 [ 176.126687][ T8299] __anon_inode_getfile+0xe8/0x280 [ 176.126709][ T8299] anon_inode_getfile_fmode+0x37/0xa0 [ 176.126729][ T8299] __do_sys_fanotify_init+0xa0d/0xe30 [ 176.126747][ T8299] __do_fast_syscall_32+0x13a/0x8b0 [ 176.126761][ T8299] ? lockdep_hardirqs_on+0x7d/0x110 [ 176.126775][ T8299] do_fast_syscall_32+0x32/0x70 [ 176.126789][ T8299] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 176.126804][ T8299] RIP: 0023:0xf708efec [ 176.126818][ T8299] Code: Unable to access opcode bytes at 0xf708efc2. [ 176.126824][ T8299] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000152 [ 176.126836][ T8299] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000080000 [ 176.126843][ T8299] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 176.126850][ T8299] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 176.126857][ T8299] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 176.126863][ T8299] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 176.126878][ T8299] [ 176.626810][ T8303] netlink: 'syz.5.594': attribute type 10 has an invalid length. [ 176.626967][ T8303] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.627289][ T8303] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.748352][ T8303] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.748435][ T8303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.748622][ T8303] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.748713][ T8303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.768668][ T8303] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 176.813632][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 177.047661][ T1346] usb 7-1: USB disconnect, device number 11 [ 177.178620][ T1165] Bluetooth: hci4: Frame reassembly failed (-84) [ 177.190235][ T231] Bluetooth: hci4: Frame reassembly failed (-84) [ 177.190275][ T231] Bluetooth: hci4: Frame reassembly failed (-84) [ 177.190558][ T167] Bluetooth: hci4: Frame reassembly failed (-84) [ 177.234330][ T8312] netlink: 36 bytes leftover after parsing attributes in process `syz.5.597'. [ 177.507417][ C1] e1000e 0000:00:02.0 eth1: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5730 ms [ 177.983826][ T5755] Bluetooth: hci2: command tx timeout [ 178.076384][ T8318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.600'. [ 178.231904][ T6211] e1000e 0000:00:02.0 eth1: Reset adapter unexpectedly [ 179.183886][ T5743] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 179.183923][ T5755] Bluetooth: hci4: command 0x1003 tx timeout [ 179.371697][ T8329] netlink: 'syz.2.605': attribute type 4 has an invalid length. [ 179.371711][ T8329] netlink: 152 bytes leftover after parsing attributes in process `syz.2.605'. [ 179.735220][ T8336] netlink: 16 bytes leftover after parsing attributes in process `syz.5.599'. [ 180.064014][ T5743] Bluetooth: hci2: command tx timeout [ 182.143670][ T5743] Bluetooth: hci2: command tx timeout [ 192.469240][ T5755] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 192.471092][ T5755] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 192.475604][ T5755] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 192.479879][ T5755] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 192.481087][ T5755] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 193.906807][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.470725][ T5743] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 194.471450][ T5743] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 194.472048][ T5743] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 194.473296][ T5743] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 194.480205][ T5743] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 194.543861][ T5755] Bluetooth: hci4: command tx timeout [ 194.594228][ T5743] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 194.599574][ T5743] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 194.600463][ T5743] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 194.602050][ T5743] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 194.602646][ T5743] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 195.192222][ T6211] e1000e 0000:00:02.0 eth1: Hardware Error [ 195.615401][ T8329] .`: renamed from bond0 [ 196.318235][ T8333] syz_tun (unregistering): left allmulticast mode [ 196.318261][ T8333] syz_tun (unregistering): left promiscuous mode [ 196.318323][ T8333] bridge0: port 4(syz_tun) entered disabled state [ 196.543145][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.544576][ T5743] Bluetooth: hci5: command tx timeout [ 196.624484][ T5743] Bluetooth: hci6: command tx timeout [ 196.624801][ T5755] Bluetooth: hci4: command tx timeout [ 196.848700][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.924624][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.037168][ T8366] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.037382][ T8366] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.037486][ T8366] bridge_slave_0: entered allmulticast mode [ 197.039174][ T8366] bridge_slave_0: entered promiscuous mode [ 197.080097][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.088975][ T8366] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.089061][ T8366] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.089190][ T8366] bridge_slave_1: entered allmulticast mode [ 197.090564][ T8366] bridge_slave_1: entered promiscuous mode [ 197.183679][ T8366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.214123][ T8366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.272323][ T8371] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.272787][ T8371] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.273411][ T8371] bridge_slave_0: entered allmulticast mode [ 197.283039][ T8371] bridge_slave_0: entered promiscuous mode [ 197.344649][ T8366] team0: Port device team_slave_0 added [ 197.346964][ T8366] team0: Port device team_slave_1 added [ 197.347123][ T8371] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.347197][ T8371] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.347303][ T8371] bridge_slave_1: entered allmulticast mode [ 197.349079][ T8371] bridge_slave_1: entered promiscuous mode [ 197.381978][ T8371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.384373][ T8371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.395518][ T8359] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.395581][ T8359] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.395672][ T8359] bridge_slave_0: entered allmulticast mode [ 197.396574][ T8359] bridge_slave_0: entered promiscuous mode [ 197.458645][ T8359] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.458693][ T8359] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.458761][ T8359] bridge_slave_1: entered allmulticast mode [ 197.459489][ T8359] bridge_slave_1: entered promiscuous mode [ 197.467085][ T8366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.467096][ T8366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.467108][ T8366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.468122][ T8366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.468130][ T8366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.468143][ T8366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.472800][ T8371] team0: Port device team_slave_0 added [ 197.481529][ T8371] team0: Port device team_slave_1 added [ 197.505624][ T12] bridge_slave_1: left allmulticast mode [ 197.505647][ T12] bridge_slave_1: left promiscuous mode [ 197.509669][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.511743][ T12] bridge_slave_0: left allmulticast mode [ 197.511763][ T12] bridge_slave_0: left promiscuous mode [ 197.511909][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.616597][ T12] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 197.621927][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.628618][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.635165][ T12] bond0 (unregistering): Released all slaves [ 197.657761][ T8359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.659359][ T8359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.677135][ T8454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.677151][ T8454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.678858][ T8454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.678869][ T8454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.701368][ T8371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.701380][ T8371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.701393][ T8371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.702653][ T8371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.702662][ T8371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.702675][ T8371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.714320][ T8359] team0: Port device team_slave_0 added [ 197.741277][ T8359] team0: Port device team_slave_1 added [ 197.774222][ T8366] hsr_slave_0: entered promiscuous mode [ 197.774708][ T8366] hsr_slave_1: entered promiscuous mode [ 197.775044][ T8366] debugfs: 'hsr0' already exists in 'hsr' [ 197.775055][ T8366] Cannot create hsr debugfs directory [ 197.784513][ T8359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.784526][ T8359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.784546][ T8359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.829850][ T8371] hsr_slave_0: entered promiscuous mode [ 197.830732][ T8371] hsr_slave_1: entered promiscuous mode [ 197.831251][ T8371] debugfs: 'hsr0' already exists in 'hsr' [ 197.831267][ T8371] Cannot create hsr debugfs directory [ 197.854712][ T8359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.854730][ T8359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.854751][ T8359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.217658][ T8359] hsr_slave_0: entered promiscuous mode [ 198.219300][ T8359] hsr_slave_1: entered promiscuous mode [ 198.219760][ T8359] debugfs: 'hsr0' already exists in 'hsr' [ 198.219772][ T8359] Cannot create hsr debugfs directory [ 198.313766][ T8371] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 198.445583][ T8371] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 198.446316][ T8371] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 198.489418][ T8371] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 198.531870][ T8371] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 198.555561][ T8371] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 198.556317][ T8371] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 198.570563][ T8371] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 198.571638][ T5448] 8021q: adding VLAN 0 to HW filter on device eth2 [ 198.624304][ T5755] Bluetooth: hci5: command tx timeout [ 198.640319][ T12] hsr_slave_0: left promiscuous mode [ 198.641119][ T12] hsr_slave_1: left promiscuous mode [ 198.641922][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.641942][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.642788][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.642804][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.660397][ T12] veth1_macvtap: left promiscuous mode [ 198.660452][ T12] veth0_macvtap: left promiscuous mode [ 198.660531][ T12] veth1_vlan: left promiscuous mode [ 198.660585][ T12] veth0_vlan: left promiscuous mode [ 198.711491][ T5755] Bluetooth: hci4: command tx timeout [ 198.714095][ T5755] Bluetooth: hci6: command tx timeout [ 199.006236][ T12] team0 (unregistering): Port device team_slave_1 removed [ 199.012165][ T12] team0 (unregistering): Port device team_slave_0 removed [ 199.074839][ T8473] CIFS mount error: No usable UNC path provided in device string! [ 199.074839][ T8473] [ 199.074861][ T8473] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 199.216009][ T8470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.622'. [ 199.353433][ T8366] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 199.378121][ T8366] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 199.387577][ T8366] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 199.389977][ T8366] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 199.390841][ T8366] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 199.401999][ T8366] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 199.436788][ T8366] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 199.438663][ T8366] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 199.537914][ T5448] 8021q: adding VLAN 0 to HW filter on device eth3 [ 199.615683][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.659278][ T8359] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 199.667964][ T8359] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 199.679912][ T8371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.680253][ T8359] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 199.686451][ T8359] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 199.689412][ T8359] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 199.697881][ T8359] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 199.724131][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.730624][ T8359] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 199.748614][ T8359] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 199.820863][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.835760][ T8371] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.849462][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.849552][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.866715][ T8366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.869519][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.869566][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.910361][ T12] bridge0: port 3(netdevsim0) entered disabled state [ 199.931373][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 199.931393][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 199.931639][ T12] bridge0: port 3(netdevsim0) entered disabled state [ 199.948111][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.962026][ T5448] 8021q: adding VLAN 0 to HW filter on device eth4 [ 199.969036][ T8366] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.017396][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.017475][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.020099][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.020181][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.085308][ T8359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.165990][ T8359] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.178137][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.178182][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.220602][ T1078] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.220669][ T1078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.531276][ T5448] 8021q: adding VLAN 0 to HW filter on device eth5 [ 200.590318][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 200.590354][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 200.591741][ T12] bridge0: port 3(netdevsim0) entered disabled state [ 200.638561][ T8359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.656635][ T8366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.706003][ T5755] Bluetooth: hci5: command tx timeout [ 200.783891][ T5755] Bluetooth: hci6: command tx timeout [ 200.783918][ T5755] Bluetooth: hci4: command tx timeout [ 200.787669][ T8371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.804379][ T12] bridge_slave_1: left allmulticast mode [ 200.804403][ T12] bridge_slave_1: left promiscuous mode [ 200.804581][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.812146][ T12] bridge_slave_0: left allmulticast mode [ 200.812169][ T12] bridge_slave_0: left promiscuous mode [ 200.812348][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.850638][ T12] bridge_slave_1: left allmulticast mode [ 200.850656][ T12] bridge_slave_1: left promiscuous mode [ 200.850758][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.852180][ T12] bridge_slave_0: left allmulticast mode [ 200.852191][ T12] bridge_slave_0: left promiscuous mode [ 200.852312][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.036445][ T12] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 201.065876][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.072809][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.083277][ T12] bond0 (unregistering): Released all slaves [ 201.187639][ T12] .` (unregistering): (slave bridge0): Releasing backup interface [ 201.221943][ T12] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.231546][ T12] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.232599][ T12] .` (unregistering): Released all slaves [ 201.239333][ T12] bond1 (unregistering): Released all slaves [ 201.416414][ T12] tipc: Disabling bearer [ 201.416668][ T12] tipc: Left network mode [ 201.522912][ T8359] veth0_vlan: entered promiscuous mode [ 201.532350][ T8359] veth1_vlan: entered promiscuous mode [ 201.548943][ T8359] veth0_macvtap: entered promiscuous mode [ 201.561004][ T5448] 8021q: adding VLAN 0 to HW filter on device eth6 [ 201.633408][ T8359] veth1_macvtap: entered promiscuous mode [ 201.711513][ T8366] veth0_vlan: entered promiscuous mode [ 201.727043][ T8359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.729446][ T8366] veth1_vlan: entered promiscuous mode [ 201.786266][ T8359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.811355][ T8366] veth0_macvtap: entered promiscuous mode [ 201.838746][ T8366] veth1_macvtap: entered promiscuous mode [ 201.938993][ T8366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.949447][ T8366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.951479][ T231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.951491][ T231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.015098][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.015111][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.017509][ T8371] veth0_vlan: entered promiscuous mode [ 202.094742][ T8371] veth1_vlan: entered promiscuous mode [ 202.137679][ T12] hsr_slave_0: left promiscuous mode [ 202.138394][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.138411][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.143432][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.143444][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.158302][ T12] hsr_slave_0: left promiscuous mode [ 202.158686][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.161949][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.171230][ T12] veth1_macvtap: left promiscuous mode [ 202.171286][ T12] veth0_macvtap: left promiscuous mode [ 202.171389][ T12] veth1_vlan: left promiscuous mode [ 202.172232][ T12] veth0_vlan: left promiscuous mode [ 202.548245][ T12] team0 (unregistering): Port device team_slave_1 removed [ 202.557127][ T12] team0 (unregistering): Port device team_slave_0 removed [ 202.633728][ T5818] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.633758][ T5818] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.633776][ T5818] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.633794][ T5818] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.633811][ T5818] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.633829][ T5818] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.633848][ T5818] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.646597][ T5798] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.647252][ T5448] 8021q: adding VLAN 0 to HW filter on device eth7 [ 202.721470][ T8371] veth0_macvtap: entered promiscuous mode [ 202.727851][ T8371] veth1_macvtap: entered promiscuous mode [ 202.731246][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.731257][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.783866][ T5743] Bluetooth: hci5: command tx timeout [ 202.806294][ T8371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.807554][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.807566][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.811421][ T8371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.881093][ T8457] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.881328][ T5743] Bluetooth: hci6: command tx timeout [ 202.903951][ T5818] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.903980][ T5818] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.903998][ T5818] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.150998][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.151012][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.223295][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.223314][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.314684][ T5448] 8021q: adding VLAN 0 to HW filter on device eth8 [ 203.664673][ T5886] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 203.814166][ T5886] usb 12-1: Using ep0 maxpacket: 32 [ 203.816728][ T5886] usb 12-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 203.821909][ T5886] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.821925][ T5886] usb 12-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 203.823502][ T5886] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.823514][ T5886] usb 12-1: Product: syz [ 203.823522][ T5886] usb 12-1: Manufacturer: syz [ 203.823529][ T5886] usb 12-1: SerialNumber: syz [ 203.842045][ T5886] usb 12-1: config 0 descriptor?? [ 203.952021][ T5448] 8021q: adding VLAN 0 to HW filter on device eth9 [ 203.965322][ T12] IPVS: stop unused estimator thread 0... [ 204.077272][ T8609] kvm: apic: phys broadcast and lowest prio [ 204.413061][ T5747] usb 12-1: USB disconnect, device number 2 [ 204.610317][ T5448] 8021q: adding VLAN 0 to HW filter on device eth10 [ 205.182725][ T5448] 8021q: adding VLAN 0 to HW filter on device eth12 [ 205.437775][ T8677] syzkaller0: entered promiscuous mode [ 205.437798][ T8677] syzkaller0: entered allmulticast mode [ 206.162119][ T8686] netlink: 'syz.7.639': attribute type 2 has an invalid length. [ 206.162142][ T8686] netlink: 'syz.7.639': attribute type 11 has an invalid length. [ 206.162156][ T8686] netlink: 132 bytes leftover after parsing attributes in process `syz.7.639'. [ 206.533883][ T5448] 8021q: adding VLAN 0 to HW filter on device eth11 [ 206.863453][ T8693] Bluetooth: ISO socket layer initialized [ 207.008169][ T8708] ceph: No source [ 207.400415][ T8722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.646'. [ 208.029874][ T5448] 8021q: adding VLAN 0 to HW filter on device eth13 [ 215.026742][ T8884] vlan2: entered promiscuous mode [ 215.026756][ T8884] hsr0: entered promiscuous mode [ 215.026936][ T8884] vlan2: entered allmulticast mode [ 215.026945][ T8884] hsr0: entered allmulticast mode [ 215.026952][ T8884] hsr_slave_0: entered allmulticast mode [ 215.029786][ T8884] netlink: 4 bytes leftover after parsing attributes in process `syz.4.673'. [ 215.033306][ T8884] hsr_slave_0: left promiscuous mode [ 215.408321][ T5743] Bluetooth: hci1: unexpected cc 0x0c47 length: 2 > 1 [ 215.499102][ T8905] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(36) [ 215.499126][ T8905] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 215.501069][ T8905] vhci_hcd vhci_hcd.0: Device attached [ 215.734297][ T5845] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 217.000493][ T8909] vhci_hcd: connection reset by peer [ 217.002572][ T5798] vhci_hcd vhci_hcd.6: stop threads [ 217.002596][ T5798] vhci_hcd vhci_hcd.6: release socket [ 217.009269][ T5798] vhci_hcd vhci_hcd.6: disconnect device [ 217.060428][ T8957] 9pnet_virtio: no channels available for device syz [ 217.063530][ T8957] FAULT_INJECTION: forcing a failure. [ 217.063530][ T8957] name failslab, interval 1, probability 0, space 0, times 0 [ 217.063560][ T8957] CPU: 3 UID: 0 PID: 8957 Comm: syz.6.689 Tainted: G L syzkaller #0 PREEMPT(full) [ 217.063601][ T8957] Tainted: [L]=SOFTLOCKUP [ 217.063609][ T8957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 217.063620][ T8957] Call Trace: [ 217.063627][ T8957] [ 217.063634][ T8957] dump_stack_lvl+0x100/0x190 [ 217.063663][ T8957] should_fail_ex.cold+0x5/0xa [ 217.063687][ T8957] should_failslab+0xc2/0x120 [ 217.063713][ T8957] kmem_cache_alloc_noprof+0x92/0x6a0 [ 217.063736][ T8957] ? do_getname+0x35/0x390 [ 217.063767][ T8957] do_getname+0x35/0x390 [ 217.063795][ T8957] do_sys_openat2+0xc7/0x1e0 [ 217.063828][ T8957] ? __pfx_do_sys_openat2+0x10/0x10 [ 217.063856][ T8957] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 217.063880][ T8957] ? __fget_files+0x21f/0x3d0 [ 217.063904][ T8957] __ia32_compat_sys_open+0xfe/0x1c0 [ 217.063933][ T8957] ? __pfx___ia32_compat_sys_open+0x10/0x10 [ 217.063960][ T8957] ? fput+0x7c/0x100 [ 217.063984][ T8957] ? ksys_write+0x1ac/0x250 [ 217.064004][ T8957] ? __pfx_ksys_write+0x10/0x10 [ 217.064029][ T8957] __do_fast_syscall_32+0x13a/0x8b0 [ 217.064050][ T8957] ? lockdep_hardirqs_on+0x7d/0x110 [ 217.064072][ T8957] do_fast_syscall_32+0x32/0x70 [ 217.064094][ T8957] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 217.064117][ T8957] RIP: 0023:0xf7f65fec [ 217.064137][ T8957] Code: Unable to access opcode bytes at 0xf7f65fc2. [ 217.064144][ T8957] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000005 [ 217.064162][ T8957] RAX: ffffffffffffffda RBX: 0000000080000440 RCX: 0000000000008603 [ 217.064174][ T8957] RDX: 0000000000000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 217.064208][ T8957] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 217.064219][ T8957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.064230][ T8957] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 217.064254][ T8957] [ 217.527675][ T1485] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 217.584397][ T5755] Bluetooth: hci6: command 0x0405 tx timeout [ 217.675107][ T1485] usb 11-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 217.676166][ T1485] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.676235][ T1485] usb 11-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 217.676256][ T1485] usb 11-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 217.686500][ T1485] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.686522][ T1485] usb 11-1: Product: syz [ 217.686533][ T1485] usb 11-1: Manufacturer: syz [ 217.686545][ T1485] usb 11-1: SerialNumber: syz [ 218.007436][ T8982] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 218.108421][ T8959] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 219.680737][ T1485] speedtch 11-1:1.0: speedtch_bind: device reset failed (-19)! [ 219.680991][ T1485] speedtch 11-1:1.0: usbatm_usb_probe: bind failed: -19! [ 219.699509][ T1485] usb 11-1: USB disconnect, device number 2 [ 220.149143][ T6903] IPVS: starting estimator thread 0... [ 220.234253][ T9036] IPVS: using max 43 ests per chain, 103200 per kthread [ 220.853731][ T5845] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 221.185683][ T5743] Bluetooth: hci4: Opcode 0x206a failed: -110 [ 221.274042][ T5743] Bluetooth: hci4: command 0x206a tx timeout [ 222.523629][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 223.694413][ T9121] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4128772.0.63), cmd(3) [ 223.896519][ T9129] FAULT_INJECTION: forcing a failure. [ 223.896519][ T9129] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 223.896541][ T9129] CPU: 2 UID: 0 PID: 9129 Comm: syz.6.731 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.896556][ T9129] Tainted: [L]=SOFTLOCKUP [ 223.896560][ T9129] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 223.896566][ T9129] Call Trace: [ 223.896570][ T9129] [ 223.896574][ T9129] dump_stack_lvl+0x100/0x190 [ 223.896594][ T9129] should_fail_ex.cold+0x5/0xa [ 223.896607][ T9129] ? prepare_alloc_pages+0x16d/0x5b0 [ 223.896623][ T9129] should_fail_alloc_page+0xeb/0x140 [ 223.896640][ T9129] prepare_alloc_pages+0x1f0/0x5b0 [ 223.896657][ T9129] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 223.896673][ T9129] ? set_pte_range+0x489/0xa20 [ 223.896689][ T9129] ? find_held_lock+0x2b/0x80 [ 223.896702][ T9129] ? rcu_read_unlock+0x2d/0xb0 [ 223.896722][ T9129] ? rcu_read_unlock+0x2d/0xb0 [ 223.896734][ T9129] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 223.896751][ T9129] ? finish_fault+0xaea/0x13e0 [ 223.896771][ T9129] ? folio_unlock+0xf5/0x190 [ 223.896788][ T9129] ? __pfx_do_fault+0x10/0x10 [ 223.896801][ T9129] ? rcu_read_unlock+0x2d/0xb0 [ 223.896811][ T9129] ? rcu_read_unlock+0x2d/0xb0 [ 223.896821][ T9129] ? __pte_offset_map+0x179/0x310 [ 223.896833][ T9129] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 223.896850][ T9129] ? policy_nodemask+0xed/0x4f0 [ 223.896867][ T9129] alloc_pages_mpol+0x201/0x550 [ 223.896883][ T9129] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 223.896899][ T9129] ? __pfx___css_rstat_updated+0x10/0x10 [ 223.896919][ T9129] folio_alloc_mpol_noprof+0x36/0x260 [ 223.896931][ T9129] shmem_alloc_folio+0x135/0x160 [ 223.896947][ T9129] shmem_alloc_and_add_folio+0x371/0xd40 [ 223.896967][ T9129] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 223.896986][ T9129] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 223.897002][ T9129] ? __pfx___bpf_trace_sched_exit_tp+0x10/0x10 [ 223.897020][ T9129] shmem_get_folio_gfp+0x75b/0x1980 [ 223.897041][ T9129] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 223.897063][ T9129] shmem_write_begin+0x1a4/0x420 [ 223.897075][ T9129] ? __pfx_shmem_write_begin+0x10/0x10 [ 223.897087][ T9129] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 223.897102][ T9129] generic_perform_write+0x292/0xa40 [ 223.897121][ T9129] ? __pfx_generic_perform_write+0x10/0x10 [ 223.897137][ T9129] ? file_update_time_flags+0x38c/0x520 [ 223.897156][ T9129] shmem_file_write_iter+0x10e/0x140 [ 223.897169][ T9129] vfs_write+0x6af/0x1050 [ 223.897182][ T9129] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 223.897195][ T9129] ? __fget_files+0x34/0x3d0 [ 223.897208][ T9129] ? __pfx_vfs_write+0x10/0x10 [ 223.897219][ T9129] ? find_held_lock+0x2b/0x80 [ 223.897240][ T9129] ksys_write+0x12a/0x250 [ 223.897251][ T9129] ? __pfx_ksys_write+0x10/0x10 [ 223.897262][ T9129] ? ksys_write+0x1ac/0x250 [ 223.897274][ T9129] ? __pfx_ksys_write+0x10/0x10 [ 223.897289][ T9129] __do_fast_syscall_32+0x13a/0x8b0 [ 223.897302][ T9129] ? lockdep_hardirqs_on+0x7d/0x110 [ 223.897315][ T9129] do_fast_syscall_32+0x32/0x70 [ 223.897328][ T9129] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 223.897342][ T9129] RIP: 0023:0xf7f65fec [ 223.897354][ T9129] Code: Unable to access opcode bytes at 0xf7f65fc2. [ 223.897358][ T9129] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 223.897369][ T9129] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 223.897376][ T9129] RDX: 000000000208e24b RSI: 0000000000000000 RDI: 0000000000000000 [ 223.897383][ T9129] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 223.897389][ T9129] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 223.897395][ T9129] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 223.897409][ T9129] [ 225.227867][ T5743] Bluetooth: hci6: ACL packet for unknown connection handle 0 [ 225.240361][ T9183] mmap: syz.8.740 (9183) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 225.284970][ T9179] bridge0: port 3(netdevsim0) entered blocking state [ 225.307054][ T9179] bridge0: port 3(netdevsim0) entered disabled state [ 225.311568][ T9179] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 225.338971][ T9179] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 225.379013][ T9179] bridge0: port 3(netdevsim0) entered blocking state [ 225.379311][ T9179] bridge0: port 3(netdevsim0) entered forwarding state [ 225.701080][ T9195] netlink: 'syz.4.741': attribute type 2 has an invalid length. [ 225.701103][ T9195] netlink: 156 bytes leftover after parsing attributes in process `syz.4.741'. [ 225.701117][ T9195] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 226.202209][ T9214] C: renamed from veth1_to_team (while UP) [ 226.216828][ T9214] netlink: 'syz.6.742': attribute type 2 has an invalid length. [ 226.216849][ T9214] netlink: 156 bytes leftover after parsing attributes in process `syz.6.742'. [ 226.216863][ T9214] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 226.871941][ T9238] netlink: 'syz.6.745': attribute type 19 has an invalid length. [ 227.006862][ T9240] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 227.006888][ T9240] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 227.736172][ T9250] bridge0: port 4(veth1_to_bridge) entered blocking state [ 227.736308][ T9250] bridge0: port 4(veth1_to_bridge) entered disabled state [ 227.736387][ T9250] veth1_to_bridge: entered allmulticast mode [ 227.737212][ T9250] veth1_to_bridge: entered promiscuous mode [ 229.081558][ T9262] C: renamed from veth1_to_team (while UP) [ 229.088274][ T9262] netlink: 'syz.8.753': attribute type 2 has an invalid length. [ 229.088287][ T9262] netlink: 156 bytes leftover after parsing attributes in process `syz.8.753'. [ 229.088296][ T9262] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 229.423470][ T9276] netlink: 'syz.6.757': attribute type 1 has an invalid length. [ 229.488940][ T9276] bond1: (slave bridge1): making interface the new active one [ 229.489535][ T9276] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 229.780926][ T9285] bridge0: port 3(netdevsim0) entered blocking state [ 229.794325][ T9285] bridge0: port 3(netdevsim0) entered disabled state [ 229.798726][ T9285] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 229.800542][ T9285] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 229.801090][ T9285] bridge0: port 3(netdevsim0) entered blocking state [ 229.801170][ T9285] bridge0: port 3(netdevsim0) entered forwarding state [ 230.118913][ T43] audit: type=1107 audit(1790522104.367:277): pid=9286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 230.791280][ T9298] netlink: 'syz.8.763': attribute type 9 has an invalid length. [ 230.933091][ T5755] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 230.935023][ T5755] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 230.937038][ T5755] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 230.937739][ T5755] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 230.940087][ T5755] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 231.157991][ T9310] FAULT_INJECTION: forcing a failure. [ 231.157991][ T9310] name failslab, interval 1, probability 0, space 0, times 0 [ 231.158013][ T9310] CPU: 0 UID: 0 PID: 9310 Comm: syz.8.765 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.158029][ T9310] Tainted: [L]=SOFTLOCKUP [ 231.158033][ T9310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 231.158040][ T9310] Call Trace: [ 231.158044][ T9310] [ 231.158049][ T9310] dump_stack_lvl+0x100/0x190 [ 231.158068][ T9310] should_fail_ex.cold+0x5/0xa [ 231.158084][ T9310] should_failslab+0xc2/0x120 [ 231.158100][ T9310] kmem_cache_alloc_noprof+0x92/0x6a0 [ 231.158113][ T9310] ? __pfx_map_id_range_down+0x10/0x10 [ 231.158129][ T9310] ? security_inode_alloc+0x3b/0x2c0 [ 231.158148][ T9310] security_inode_alloc+0x3b/0x2c0 [ 231.158164][ T9310] inode_init_always_gfp+0xc6f/0xfb0 [ 231.158180][ T9310] alloc_inode+0x8e/0x250 [ 231.158197][ T9310] new_inode+0x22/0x1c0 [ 231.158208][ T9310] proc_pid_make_inode+0x22/0x160 [ 231.158224][ T9310] proc_pident_instantiate+0x85/0x310 [ 231.158240][ T9310] proc_pident_lookup+0x1e3/0x270 [ 231.158255][ T9310] ? __pfx_down_read+0x10/0x10 [ 231.158271][ T9310] __lookup_slow+0x155/0x320 [ 231.158288][ T9310] lookup_slow+0x50/0x70 [ 231.158304][ T9310] link_path_walk+0x1377/0x1cc0 [ 231.158322][ T9310] path_openat+0x1ac/0x2440 [ 231.158339][ T9310] ? __pfx_path_openat+0x10/0x10 [ 231.158358][ T9310] do_file_open+0x20e/0x430 [ 231.158372][ T9310] ? __pfx_do_file_open+0x10/0x10 [ 231.158391][ T9310] ? __pfx_kfree_link+0x10/0x10 [ 231.158406][ T9310] ? _raw_spin_unlock+0x28/0x50 [ 231.158422][ T9310] ? alloc_fd+0x471/0x7a0 [ 231.158439][ T9310] do_sys_openat2+0x10f/0x1e0 [ 231.158455][ T9310] ? __pfx_do_sys_openat2+0x10/0x10 [ 231.158473][ T9310] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 231.158488][ T9310] __ia32_compat_sys_openat+0x12d/0x210 [ 231.158505][ T9310] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 231.158527][ T9310] do_int80_emulation+0x166/0x650 [ 231.158542][ T9310] asm_int80_emulation+0x1a/0x20 [ 231.158553][ T9310] RIP: 0023:0xf71475ab [ 231.158562][ T9310] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 231.158572][ T9310] RSP: 002b:00000000f540642c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 231.158584][ T9310] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f72119a5 [ 231.158591][ T9310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 231.158597][ T9310] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 231.158603][ T9310] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 231.158610][ T9310] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 231.158623][ T9310] [ 231.355314][ T9317] netlink: 'syz.6.768': attribute type 10 has an invalid length. [ 231.355435][ T9317] bridge0: port 3(netdevsim0) entered disabled state [ 231.355528][ T9317] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.355803][ T9317] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.373702][ T9317] bridge0: port 3(netdevsim0) entered blocking state [ 231.373800][ T9317] bridge0: port 3(netdevsim0) entered forwarding state [ 231.374054][ T9317] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.374155][ T9317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.374365][ T9317] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.374468][ T9317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.381413][ T9317] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 231.593624][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 231.603642][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 231.903620][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 231.992585][ T9302] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.992670][ T9302] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.992724][ T9302] bridge_slave_0: entered allmulticast mode [ 231.999542][ T9302] bridge_slave_0: entered promiscuous mode [ 232.009707][ T9302] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.009757][ T9302] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.009811][ T9302] bridge_slave_1: entered allmulticast mode [ 232.022404][ T9302] bridge_slave_1: entered promiscuous mode [ 232.068033][ T9302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.070319][ T9302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.108426][ T9302] team0: Port device team_slave_0 added [ 232.112271][ T9302] team0: Port device team_slave_1 added [ 232.132823][ T9302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.132835][ T9302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.132848][ T9302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.137470][ T9302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.137484][ T9302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.137502][ T9302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.248510][ T9302] hsr_slave_0: entered promiscuous mode [ 232.249283][ T9302] hsr_slave_1: entered promiscuous mode [ 232.328567][ T9346] xt_hashlimit: size too large, truncated to 1048576 [ 232.335615][ T9346] xt_hashlimit: max too large, truncated to 1048576 [ 232.612561][ T9302] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 232.623983][ T9302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 232.624753][ T9302] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 232.632573][ T9302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 232.634071][ T9302] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 232.648064][ T9302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 232.648725][ T9302] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 232.662171][ T9302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 232.750104][ T9302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.772803][ T9302] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.781439][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.781484][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.788667][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.788711][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.796201][ T9365] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 232.796221][ T9365] UDF-fs: Scanning with blocksize 512 failed [ 232.799524][ T9365] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 232.799542][ T9365] UDF-fs: Scanning with blocksize 1024 failed [ 232.801644][ T9365] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 232.801660][ T9365] UDF-fs: Scanning with blocksize 2048 failed [ 232.801938][ T9365] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 232.801950][ T9365] UDF-fs: Scanning with blocksize 4096 failed [ 233.023686][ T5743] Bluetooth: hci0: command tx timeout [ 233.038495][ T9372] netlink: 'syz.6.777': attribute type 10 has an invalid length. [ 233.038683][ T9372] bridge0: port 3(netdevsim0) entered disabled state [ 233.038768][ T9372] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.038882][ T9372] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.223615][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 233.503630][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 233.626125][ T9302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.067344][ T9302] veth0_vlan: entered promiscuous mode [ 234.074958][ T9302] veth1_vlan: entered promiscuous mode [ 234.215143][ T9302] veth0_macvtap: entered promiscuous mode [ 234.219010][ T9302] veth1_macvtap: entered promiscuous mode [ 234.237316][ T9302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.247979][ T9302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.295549][ T5818] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.329057][ T9408] netlink: 20 bytes leftover after parsing attributes in process `syz.6.784'. [ 234.344179][ T5818] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.344519][ T5818] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.344551][ T5818] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.487990][ T1078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.488012][ T1078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.524218][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.524238][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.631424][ T9415] netlink: 'syz.6.787': attribute type 10 has an invalid length. [ 234.992754][ T43] audit: type=1326 audit(1790522109.247:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9424 comm="syz.6.789" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f65fec code=0x0 [ 235.104649][ T5743] Bluetooth: hci0: command tx timeout [ 235.878085][ T5798] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.114373][ T5798] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.478605][ T9426] nvme_tcp: queue 0: failed to receive icresp, error -4 [ 236.530596][ T9451] netlink: 24 bytes leftover after parsing attributes in process `syz.4.791'. [ 236.530798][ T9451] netlink: 16 bytes leftover after parsing attributes in process `syz.4.791'. [ 236.799927][ T5798] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.957653][ T9458] FAULT_INJECTION: forcing a failure. [ 236.957653][ T9458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.957686][ T9458] CPU: 3 UID: 0 PID: 9458 Comm: syz.9.795 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.957712][ T9458] Tainted: [L]=SOFTLOCKUP [ 236.957719][ T9458] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 236.957729][ T9458] Call Trace: [ 236.957736][ T9458] [ 236.957743][ T9458] dump_stack_lvl+0x100/0x190 [ 236.957772][ T9458] should_fail_ex.cold+0x5/0xa [ 236.957793][ T9458] _copy_to_user+0x32/0xd0 [ 236.957819][ T9458] bpf_log_attr_finalize+0x169/0x1a0 [ 236.957840][ T9458] ? __pfx_bpf_log_attr_finalize+0x10/0x10 [ 236.957874][ T9458] ? btf_new_fd+0x4d40/0x5d40 [ 236.957902][ T9458] ? btf_new_fd+0x4dbe/0x5d40 [ 236.957928][ T9458] ? kfree+0x22b/0x6d0 [ 236.957949][ T9458] btf_new_fd+0x489b/0x5d40 [ 236.957974][ T9458] ? __lock_acquire+0x5c0/0x1f40 [ 236.958011][ T9458] ? __pfx_btf_new_fd+0x10/0x10 [ 236.958036][ T9458] ? lock_acquire+0x1d1/0x380 [ 236.958060][ T9458] ? rcu_is_watching+0x13/0xc0 [ 236.958080][ T9458] ? apparmor_capable+0x1d7/0x4d0 [ 236.958109][ T9458] ? security_capable+0x80/0x260 [ 236.958134][ T9458] ? ns_capable+0xd2/0xf0 [ 236.958159][ T9458] __sys_bpf+0x13ef/0x4a30 [ 236.958185][ T9458] ? __pfx___sys_bpf+0x10/0x10 [ 236.958209][ T9458] ? find_held_lock+0x2b/0x80 [ 236.958229][ T9458] ? futex_wake+0x4ea/0x5e0 [ 236.958266][ T9458] ? up_write+0x2dc/0x5b0 [ 236.958301][ T9458] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 236.958326][ T9458] ? xfd_validate_state+0x129/0x190 [ 236.958360][ T9458] ? __ia32_sys_bpf+0xcc/0x170 [ 236.958380][ T9458] __ia32_sys_bpf+0xcc/0x170 [ 236.958401][ T9458] ? __do_fast_syscall_32+0xb3/0x8b0 [ 236.958424][ T9458] __do_fast_syscall_32+0x13a/0x8b0 [ 236.958448][ T9458] do_fast_syscall_32+0x32/0x70 [ 236.958470][ T9458] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 236.958493][ T9458] RIP: 0023:0xf7f87fec [ 236.958512][ T9458] Code: Unable to access opcode bytes at 0xf7f87fc2. [ 236.958522][ T9458] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 236.958539][ T9458] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 0000000080000140 [ 236.958552][ T9458] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000000 [ 236.958564][ T9458] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 236.958574][ T9458] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 236.958587][ T9458] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 236.958611][ T9458] [ 236.979087][ T9449] netlink: 36 bytes leftover after parsing attributes in process `syz.4.791'. [ 237.008169][ T9452] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8) [ 237.008191][ T9452] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 237.008633][ T9452] vhci_hcd vhci_hcd.0: Device attached [ 237.145266][ T5798] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.183725][ T5743] Bluetooth: hci0: command tx timeout [ 237.349322][ T9470] netlink: 'syz.6.797': attribute type 10 has an invalid length. [ 237.624188][ T30] usb 54-1: SetAddress Request (2) to port 0 [ 237.624362][ T30] usb 54-1: new SuperSpeed USB device number 2 using vhci_hcd [ 237.662224][ T5798] bridge_slave_1: left allmulticast mode [ 237.662241][ T5798] bridge_slave_1: left promiscuous mode [ 237.662353][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.673042][ T9453] vhci_hcd: connection reset by peer [ 237.685803][ T12] vhci_hcd vhci_hcd.8: stop threads [ 237.685821][ T12] vhci_hcd vhci_hcd.8: release socket [ 237.686133][ T12] vhci_hcd vhci_hcd.8: disconnect device [ 237.696225][ T5798] bridge_slave_0: left allmulticast mode [ 237.696240][ T5798] bridge_slave_0: left promiscuous mode [ 237.696357][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.874274][ T5798] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.899721][ T5798] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.900827][ T5798] bond0 (unregistering): Released all slaves [ 237.969473][ T9486] bond2 (unregistering): Released all slaves [ 238.133519][ T5448] 8021q: adding VLAN 0 to HW filter on device eth14 [ 238.350857][ T9507] FAULT_INJECTION: forcing a failure. [ 238.350857][ T9507] name failslab, interval 1, probability 0, space 0, times 0 [ 238.350888][ T9507] CPU: 2 UID: 0 PID: 9507 Comm: syz.9.801 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.350915][ T9507] Tainted: [L]=SOFTLOCKUP [ 238.350922][ T9507] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 238.350934][ T9507] Call Trace: [ 238.350941][ T9507] [ 238.350949][ T9507] dump_stack_lvl+0x100/0x190 [ 238.350977][ T9507] should_fail_ex.cold+0x5/0xa [ 238.351002][ T9507] should_failslab+0xc2/0x120 [ 238.351030][ T9507] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 238.351057][ T9507] ? key_alloc+0xc6d/0x1310 [ 238.351082][ T9507] kmemdup_noprof+0x29/0x60 [ 238.351101][ T9507] key_alloc+0xc6d/0x1310 [ 238.351125][ T9507] ? sprintf+0xcc/0x100 [ 238.351146][ T9507] ? __pfx_sprintf+0x10/0x10 [ 238.351167][ T9507] ? __pfx_key_alloc+0x10/0x10 [ 238.351186][ T9507] ? request_key_auth_new+0x172/0xb50 [ 238.351213][ T9507] request_key_auth_new+0x6e0/0xb50 [ 238.351236][ T9507] ? __pfx_request_key_auth_new+0x10/0x10 [ 238.351264][ T9507] request_key_and_link+0x1089/0x1330 [ 238.351287][ T9507] ? __pfx_request_key_and_link+0x10/0x10 [ 238.351303][ T9507] ? __pfx___might_resched+0x10/0x10 [ 238.351333][ T9507] ? __pfx_key_default_cmp+0x10/0x10 [ 238.351356][ T9507] ? __pfx_keyring_search_iterator+0x10/0x10 [ 238.351380][ T9507] ? _copy_from_user+0x59/0xd0 [ 238.351410][ T9507] __do_sys_request_key+0x2a2/0x3c0 [ 238.351436][ T9507] ? __pfx___do_sys_request_key+0x10/0x10 [ 238.351468][ T9507] __do_fast_syscall_32+0x13a/0x8b0 [ 238.351494][ T9507] do_fast_syscall_32+0x32/0x70 [ 238.351517][ T9507] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 238.351541][ T9507] RIP: 0023:0xf7f87fec [ 238.351561][ T9507] Code: Unable to access opcode bytes at 0xf7f87fc2. [ 238.351569][ T9507] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 000000000000011f [ 238.351607][ T9507] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000080001ffb [ 238.351620][ T9507] RDX: 0000000080000240 RSI: 00000000ffffffff RDI: 0000000000000000 [ 238.351632][ T9507] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 238.351641][ T9507] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 238.351652][ T9507] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 238.351676][ T9507] [ 238.458263][ T5798] hsr_slave_0: left promiscuous mode [ 238.469945][ T5798] hsr_slave_1: left promiscuous mode [ 238.470397][ T5798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.470408][ T5798] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.474050][ T5798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.474060][ T5798] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.511819][ T5798] veth1_macvtap: left promiscuous mode [ 238.511853][ T5798] veth0_macvtap: left promiscuous mode [ 238.511912][ T5798] veth1_vlan: left promiscuous mode [ 238.511953][ T5798] veth0_vlan: left promiscuous mode [ 238.827404][ T9527] netlink: 'syz.4.807': attribute type 10 has an invalid length. [ 239.265598][ T5743] Bluetooth: hci0: command tx timeout [ 241.143522][ T9581] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(3276804.0.88), cmd(4) [ 241.235865][ T5798] team0 (unregistering): Port device team_slave_1 removed [ 241.239956][ T9579] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 241.242479][ T5798] team0 (unregistering): Port device team_slave_0 removed [ 241.266639][ T9579] netlink: 'syz.9.809': attribute type 8 has an invalid length. [ 241.330262][ T5448] 8021q: adding VLAN 0 to HW filter on device eth15 [ 241.499399][ T5743] Bluetooth: hci1: unexpected event for opcode 0x0411 [ 241.604216][ T5448] 8021q: adding VLAN 0 to HW filter on device eth16 [ 241.777918][ T9609] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 241.910975][ T9617] FAULT_INJECTION: forcing a failure. [ 241.910975][ T9617] name failslab, interval 1, probability 0, space 0, times 0 [ 241.910998][ T9617] CPU: 0 UID: 0 PID: 9617 Comm: syz.6.818 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.911014][ T9617] Tainted: [L]=SOFTLOCKUP [ 241.911019][ T9617] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 241.911026][ T9617] Call Trace: [ 241.911030][ T9617] [ 241.911035][ T9617] dump_stack_lvl+0x100/0x190 [ 241.911056][ T9617] should_fail_ex.cold+0x5/0xa [ 241.911073][ T9617] should_failslab+0xc2/0x120 [ 241.911090][ T9617] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 241.911108][ T9617] ? key_alloc+0xc6d/0x1310 [ 241.911124][ T9617] kmemdup_noprof+0x29/0x60 [ 241.911139][ T9617] key_alloc+0xc6d/0x1310 [ 241.911152][ T9617] ? sprintf+0xcc/0x100 [ 241.911165][ T9617] ? __pfx_sprintf+0x10/0x10 [ 241.911177][ T9617] ? __pfx_key_alloc+0x10/0x10 [ 241.911189][ T9617] ? request_key_auth_new+0x172/0xb50 [ 241.911206][ T9617] request_key_auth_new+0x6e0/0xb50 [ 241.911221][ T9617] ? __pfx_request_key_auth_new+0x10/0x10 [ 241.911238][ T9617] request_key_and_link+0x1089/0x1330 [ 241.911252][ T9617] ? __pfx_request_key_and_link+0x10/0x10 [ 241.911263][ T9617] ? __pfx___might_resched+0x10/0x10 [ 241.911289][ T9617] ? __pfx_key_default_cmp+0x10/0x10 [ 241.911305][ T9617] ? __pfx_keyring_search_iterator+0x10/0x10 [ 241.911323][ T9617] ? _copy_from_user+0x59/0xd0 [ 241.911342][ T9617] __do_sys_request_key+0x2a2/0x3c0 [ 241.911360][ T9617] ? __pfx___do_sys_request_key+0x10/0x10 [ 241.911382][ T9617] __do_fast_syscall_32+0x13a/0x8b0 [ 241.911399][ T9617] do_fast_syscall_32+0x32/0x70 [ 241.911415][ T9617] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 241.911430][ T9617] RIP: 0023:0xf7f65fec [ 241.911442][ T9617] Code: Unable to access opcode bytes at 0xf7f65fc2. [ 241.911447][ T9617] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 000000000000011f [ 241.911459][ T9617] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000080001ffb [ 241.911467][ T9617] RDX: 0000000080000240 RSI: 00000000ffffffff RDI: 0000000000000000 [ 241.911473][ T9617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 241.911480][ T9617] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 241.911486][ T9617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 241.911501][ T9617] [ 242.213958][ T5525] usb 11-1: new full-speed USB device number 3 using dummy_hcd [ 242.231173][ T9629] bridge0: port 3(netdevsim0) entered blocking state [ 242.231265][ T9629] bridge0: port 3(netdevsim0) entered disabled state [ 242.231351][ T9629] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 242.243675][ T9629] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 242.244562][ T9629] bridge0: port 3(netdevsim0) entered blocking state [ 242.244605][ T9629] bridge0: port 3(netdevsim0) entered forwarding state [ 242.246288][ T5448] 8021q: adding VLAN 0 to HW filter on device eth17 [ 242.247414][ T9629] netlink: 'syz.9.821': attribute type 10 has an invalid length. [ 242.247673][ T9629] bridge0: port 3(netdevsim0) entered disabled state [ 242.247787][ T9629] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.248034][ T9629] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.252974][ T9629] bridge0: port 3(netdevsim0) entered blocking state [ 242.253023][ T9629] bridge0: port 3(netdevsim0) entered forwarding state [ 242.253140][ T9629] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.253187][ T9629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.253286][ T9629] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.253338][ T9629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.305893][ T9629] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 242.350770][ T5755] Bluetooth: hci6: unexpected event for opcode 0x0401 [ 242.364703][ T5525] usb 11-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice=fc.00 [ 242.365692][ T5525] usb 11-1: config 0 interface 0 has no altsetting 0 [ 242.366708][ T5525] usb 11-1: New USB device strings: Mfr=69, Product=0, SerialNumber=0 [ 242.366728][ T5525] usb 11-1: Manufacturer: syz [ 242.369457][ T5525] usb 11-1: config 0 descriptor?? [ 242.645998][ T9652] netlink: 24 bytes leftover after parsing attributes in process `syz.4.824'. [ 242.704656][ T5755] Bluetooth: hci1: unexpected event for opcode 0x0401 [ 242.728895][ T9657] FAULT_INJECTION: forcing a failure. [ 242.728895][ T9657] name failslab, interval 1, probability 0, space 0, times 0 [ 242.728919][ T9657] CPU: 1 UID: 0 PID: 9657 Comm: syz.9.827 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.728935][ T9657] Tainted: [L]=SOFTLOCKUP [ 242.728939][ T9657] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 242.728945][ T9657] Call Trace: [ 242.728949][ T9657] [ 242.728954][ T9657] dump_stack_lvl+0x100/0x190 [ 242.728974][ T9657] should_fail_ex.cold+0x5/0xa [ 242.728990][ T9657] should_failslab+0xc2/0x120 [ 242.729008][ T9657] __kmalloc_flags_noprof+0x122/0x8e0 [ 242.729022][ T9657] ? alloc_slab_obj_exts+0x6a/0x170 [ 242.729036][ T9657] alloc_slab_obj_exts+0x6a/0x170 [ 242.729048][ T9657] __memcg_slab_post_alloc_hook+0x3fc/0x10c0 [ 242.729063][ T9657] ? kasan_save_track+0x14/0x30 [ 242.729078][ T9657] kmem_cache_alloc_noprof+0x4fa/0x6a0 [ 242.729093][ T9657] ? copy_utsname+0x1a8/0x690 [ 242.729109][ T9657] copy_utsname+0x1a8/0x690 [ 242.729124][ T9657] create_new_namespaces+0x16a/0xac0 [ 242.729140][ T9657] ? bpf_lsm_capable+0x9/0x10 [ 242.729149][ T9657] ? security_capable+0x80/0x260 [ 242.729166][ T9657] unshare_nsproxy_namespaces+0xf2/0x220 [ 242.729183][ T9657] ksys_unshare+0x4a2/0xa70 [ 242.729195][ T9657] ? __pfx_ksys_unshare+0x10/0x10 [ 242.729211][ T9657] __ia32_sys_unshare+0x30/0x40 [ 242.729222][ T9657] __do_fast_syscall_32+0x13a/0x8b0 [ 242.729235][ T9657] ? lockdep_hardirqs_on+0x7d/0x110 [ 242.729248][ T9657] do_fast_syscall_32+0x32/0x70 [ 242.729263][ T9657] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 242.729277][ T9657] RIP: 0023:0xf7f87fec [ 242.729291][ T9657] Code: Unable to access opcode bytes at 0xf7f87fc2. [ 242.729296][ T9657] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 242.729307][ T9657] RAX: ffffffffffffffda RBX: 0000000066000200 RCX: 0000000000000000 [ 242.729313][ T9657] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 242.729320][ T9657] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 242.729326][ T9657] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 242.729332][ T9657] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 242.729345][ T9657] [ 242.744860][ T30] usb 54-1: device descriptor read/8, error -110 [ 242.925387][ T5525] usbhid 11-1:0.0: can't add hid device: -71 [ 242.925450][ T5525] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 242.929975][ T5525] usb 11-1: USB disconnect, device number 3 [ 242.961156][ T1163] IPVS: starting estimator thread 0... [ 243.015950][ T9672] FAULT_INJECTION: forcing a failure. [ 243.015950][ T9672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.016026][ T9672] CPU: 2 UID: 0 PID: 9672 Comm: syz.9.830 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.016053][ T9672] Tainted: [L]=SOFTLOCKUP [ 243.016080][ T9672] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 243.016093][ T9672] Call Trace: [ 243.016100][ T9672] [ 243.016108][ T9672] dump_stack_lvl+0x100/0x190 [ 243.016139][ T9672] should_fail_ex.cold+0x5/0xa [ 243.016166][ T9672] _copy_from_user+0x2e/0xd0 [ 243.016193][ T9672] memdup_user+0x6b/0xe0 [ 243.016215][ T9672] strndup_user+0x78/0xe0 [ 243.016237][ T9672] __ia32_sys_mount+0x136/0x310 [ 243.016265][ T9672] ? __pfx___ia32_sys_mount+0x10/0x10 [ 243.016292][ T9672] ? ksys_write+0x1ac/0x250 [ 243.016314][ T9672] ? __pfx_ksys_write+0x10/0x10 [ 243.016341][ T9672] __do_fast_syscall_32+0x13a/0x8b0 [ 243.016365][ T9672] ? lockdep_hardirqs_on+0x7d/0x110 [ 243.016402][ T9672] do_fast_syscall_32+0x32/0x70 [ 243.016426][ T9672] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 243.016451][ T9672] RIP: 0023:0xf7f87fec [ 243.016472][ T9672] Code: Unable to access opcode bytes at 0xf7f87fc2. [ 243.016482][ T9672] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 243.016501][ T9672] RAX: ffffffffffffffda RBX: 0000000080000080 RCX: 0000000080000540 [ 243.016514][ T9672] RDX: 0000000080000380 RSI: 0000000000a08412 RDI: 0000000000000000 [ 243.016527][ T9672] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 243.016538][ T9672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.016549][ T9672] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 243.016574][ T9672] [ 243.043841][ T9669] IPVS: using max 43 ests per chain, 103200 per kthread [ 243.178451][ T30] usb usb54-port1: attempt power cycle [ 243.497497][ T9697] jffs2: notice: (9697) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 243.503848][ T9697] netlink: 'syz.4.837': attribute type 12 has an invalid length. [ 243.626126][ T9686] netlink: 'syz.8.834': attribute type 2 has an invalid length. [ 243.626139][ T9686] netlink: 156 bytes leftover after parsing attributes in process `syz.8.834'. [ 243.626148][ T9686] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 244.004978][ T30] usb usb54-port1: unable to enumerate USB device [ 244.028957][ T9723] netlink: 140 bytes leftover after parsing attributes in process `syz.6.844'. [ 244.096591][ T9723] comedi comedi0: board detection failed [ 244.143263][ T9728] macsec1: entered promiscuous mode [ 244.540818][ T9749] netlink: 8 bytes leftover after parsing attributes in process `syz.6.850'. [ 244.731263][ T9749] netlink: 'syz.6.850': attribute type 2 has an invalid length. [ 244.731285][ T9749] netlink: 'syz.6.850': attribute type 2 has an invalid length. [ 244.810930][ T9764] netlink: 'syz.8.853': attribute type 2 has an invalid length. [ 244.810946][ T9764] netlink: 228 bytes leftover after parsing attributes in process `syz.8.853'. [ 244.815539][ T9765] netlink: 'syz.8.853': attribute type 2 has an invalid length. [ 244.815557][ T9765] netlink: 228 bytes leftover after parsing attributes in process `syz.8.853'. [ 246.391217][ T5755] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 246.391272][ T5755] Bluetooth: hci6: Injecting HCI hardware error event [ 246.394814][ T5755] Bluetooth: hci6: hardware error 0x00 [ 246.783707][ T5743] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 246.783748][ T5743] Bluetooth: hci1: Injecting HCI hardware error event [ 246.786594][ T5743] Bluetooth: hci1: hardware error 0x00 [ 247.027728][ T5095] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 247.027817][ T5095] Bluetooth: hci0: Injecting HCI hardware error event [ 247.032181][ T5757] Bluetooth: hci0: hardware error 0x00 [ 247.702928][ T9824] netlink: 'syz.4.868': attribute type 10 has an invalid length. [ 248.547523][ T5755] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 248.747781][ T5845] libceph: connect (1)[c::]:6789 error -101 [ 248.747866][ T5845] libceph: mon0 (1)[c::]:6789 connect error [ 248.905497][ T9839] ceph: No mds server is up or the cluster is laggy [ 248.944345][ T5743] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 249.179347][ T9870] netlink: 'syz.4.881': attribute type 1 has an invalid length. [ 249.186578][ T5757] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 249.205202][ T9870] 8021q: adding VLAN 0 to HW filter on device bond1 [ 249.781569][ T9900] overlayfs: failed to clone upperpath [ 249.833837][ T9902] netlink: 40 bytes leftover after parsing attributes in process `syz.4.889'. [ 250.393423][ T9918] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 250.398113][ T9918] netlink: 4 bytes leftover after parsing attributes in process `syz.9.894'. [ 250.398129][ T9918] netlink: 4 bytes leftover after parsing attributes in process `syz.9.894'. [ 250.478486][ T9922] nbd: nbd9 already in use [ 250.626759][ T9928] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 251.177066][ T9944] netlink: 'syz.4.899': attribute type 2 has an invalid length. [ 251.177297][ T9944] netlink: 156 bytes leftover after parsing attributes in process `syz.4.899'. [ 251.177364][ T9944] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 251.205148][ T5845] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 251.357839][ T5845] usb 14-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 251.368329][ T5845] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.368355][ T5845] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.368372][ T5845] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 251.368401][ T5845] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.372339][ T5845] usb 14-1: config 0 descriptor?? [ 252.381870][ T43] audit: type=1326 audit(1790522126.637:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9967 comm="syz.8.908" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f42fec code=0x0 [ 252.696943][ T5845] usbhid 14-1:0.0: can't add hid device: -71 [ 252.697020][ T5845] usbhid 14-1:0.0: probe with driver usbhid failed with error -71 [ 252.709125][ T5845] usb 14-1: USB disconnect, device number 2 [ 252.900364][ T9875] Set syz1 is full, maxelem 65536 reached [ 252.913680][ T9976] ipvlan2: entered promiscuous mode [ 252.918129][ T9976] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 252.918222][ T9976] team0: Device ipvlan2 failed to register rx_handler [ 253.644172][T10004] netlink: 'syz.4.912': attribute type 2 has an invalid length. [ 253.644192][T10004] netlink: 156 bytes leftover after parsing attributes in process `syz.4.912'. [ 253.644204][T10004] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 254.393894][T10035] process 'syz.4.922' launched './file2' with NULL argv: empty string added [ 254.444548][ T42] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 254.495263][T10039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.922'. [ 254.540351][T10039] veth3: entered promiscuous mode [ 254.604393][ T42] usb 13-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 254.604942][ T42] usb 13-1: config 0 has no interfaces? [ 254.607907][ T42] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.607921][ T42] usb 13-1: Product: syz [ 254.607928][ T42] usb 13-1: Manufacturer: syz [ 254.607935][ T42] usb 13-1: SerialNumber: syz [ 254.615370][ T42] usb 13-1: config 0 descriptor?? [ 254.851006][T10021] netlink: zone id is out of range [ 254.856638][ T42] usb 13-1: USB disconnect, device number 2 [ 255.019000][T10053] netlink: 'syz.4.926': attribute type 2 has an invalid length. [ 255.019015][T10053] netlink: 156 bytes leftover after parsing attributes in process `syz.4.926'. [ 255.019025][T10053] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 255.346640][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.289040][T10100] FAULT_INJECTION: forcing a failure. [ 260.289040][T10100] name failslab, interval 1, probability 0, space 0, times 0 [ 260.289072][T10100] CPU: 2 UID: 0 PID: 10100 Comm: syz.9.938 Tainted: G L syzkaller #0 PREEMPT(full) [ 260.289098][T10100] Tainted: [L]=SOFTLOCKUP [ 260.289105][T10100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 260.289116][T10100] Call Trace: [ 260.289123][T10100] [ 260.289130][T10100] dump_stack_lvl+0x100/0x190 [ 260.289162][T10100] should_fail_ex.cold+0x5/0xa [ 260.289186][T10100] should_failslab+0xc2/0x120 [ 260.289211][T10100] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 260.289235][T10100] ? start_dirop+0x79/0xb0 [ 260.289255][T10100] ? alloc_inode+0x68/0x250 [ 260.289282][T10100] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 260.289308][T10100] alloc_inode+0x68/0x250 [ 260.289338][T10100] new_inode+0x22/0x1c0 [ 260.289360][T10100] debugfs_create_symlink+0xb4/0x1f0 [ 260.289389][T10100] ref_tracker_dir_symlink+0x257/0x3b0 [ 260.289412][T10100] ? __pfx_ref_tracker_dir_symlink+0x10/0x10 [ 260.289457][T10100] ? rcu_is_watching+0x13/0xc0 [ 260.289477][T10100] ? ida_alloc_range+0x70d/0x830 [ 260.289501][T10100] ? kfree+0x1e5/0x6d0 [ 260.289518][T10100] ? xas_nomem+0x189/0x2c0 [ 260.289545][T10100] ? __pfx_net_ns_net_init+0x10/0x10 [ 260.289577][T10100] net_ns_net_init+0xd2/0x120 [ 260.289608][T10100] ops_init+0x1e2/0x5f0 [ 260.289645][T10100] setup_net+0x118/0x3a0 [ 260.289666][T10100] ? __pfx_setup_net+0x10/0x10 [ 260.289693][T10100] copy_net_ns+0x345/0x7a0 [ 260.289719][T10100] create_new_namespaces+0x3ea/0xac0 [ 260.289754][T10100] unshare_nsproxy_namespaces+0xf2/0x220 [ 260.289786][T10100] ksys_unshare+0x4a2/0xa70 [ 260.289807][T10100] ? __pfx_ksys_unshare+0x10/0x10 [ 260.289837][T10100] __ia32_sys_unshare+0x30/0x40 [ 260.289857][T10100] __do_fast_syscall_32+0x13a/0x8b0 [ 260.289877][T10100] ? lockdep_hardirqs_on+0x7d/0x110 [ 260.289897][T10100] do_fast_syscall_32+0x32/0x70 [ 260.289920][T10100] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 260.289944][T10100] RIP: 0023:0xf7f87fec [ 260.289965][T10100] Code: Unable to access opcode bytes at 0xf7f87fc2. [ 260.289973][T10100] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 260.289992][T10100] RAX: ffffffffffffffda RBX: 0000000060040000 RCX: 0000000000000000 [ 260.290004][T10100] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 260.290015][T10100] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 260.290026][T10100] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 260.290037][T10100] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 260.290064][T10100] [ 260.290074][T10100] debugfs: out of free dentries, can not create symlink 'netns-97-4026532853-notrefcnt' [ 261.331241][ T5832] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 261.715084][T10133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.947'. [ 261.873646][ T5832] usb 11-1: Using ep0 maxpacket: 32 [ 261.874643][ T5832] usb 11-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 261.879110][ T5832] usb 11-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 261.879143][ T5832] usb 11-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 261.879158][ T5832] usb 11-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 261.879173][ T5832] usb 11-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 261.905063][ T5832] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.905078][ T5832] usb 11-1: Product: syz [ 261.905086][ T5832] usb 11-1: Manufacturer: syz [ 261.905093][ T5832] usb 11-1: SerialNumber: syz [ 261.991426][T10140] fuse: fd is not a fuse device [ 262.140872][ C3] imon 11-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 262.141751][ T5832] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:155.0/input/input11 [ 262.210599][T10145] netlink: 8 bytes leftover after parsing attributes in process `syz.9.950'. [ 262.210613][T10145] netlink: 4 bytes leftover after parsing attributes in process `syz.9.950'. [ 262.210627][T10145] netlink: 'syz.9.950': attribute type 11 has an invalid length. [ 262.353936][ T5832] imon 11-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 262.353955][ T5832] (id 0x00) [ 262.404027][ T5832] rc_core: IR keymap rc-imon-pad not found [ 262.404038][ T5832] Registered IR keymap rc-empty [ 262.404080][ T5832] imon 11-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 262.404094][ T5832] imon 11-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 262.411362][T10149] syzkaller0: entered promiscuous mode [ 262.411381][T10149] syzkaller0: entered allmulticast mode [ 262.556370][ T5832] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:155.0/rc/rc0 [ 262.557987][ T5832] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:155.0/rc/rc0/input12 [ 262.575996][ T5832] imon 11-1:155.0: iMON device (15c2:ffdc, intf0) on usb<11:4> initialized [ 262.737337][T10114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.737737][T10114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.748179][T10114] imon:display_open: display port is already open [ 263.499850][T10166] IPv6: NLM_F_CREATE should be specified when creating new route [ 263.499943][T10166] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 263.499949][T10166] IPv6: NLM_F_CREATE should be set when creating new route [ 263.499994][T10166] IPv6: NLM_F_CREATE should be set when creating new route [ 263.500006][T10166] IPv6: NLM_F_CREATE should be set when creating new route [ 263.516114][T10166] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.956'. [ 263.597748][T10168] netlink: 12 bytes leftover after parsing attributes in process `syz.8.957'. [ 266.694436][T10193] netlink: 180 bytes leftover after parsing attributes in process `syz.9.963'. [ 266.854103][ T5832] usb 11-1: USB disconnect, device number 4 [ 266.954859][ T5757] Bluetooth: hci4: unexpected event for opcode 0x2035 [ 267.051044][T10209] openvswitch: netlink: Flow key attr not present in new flow. [ 267.229845][T10219] netlink: 180 bytes leftover after parsing attributes in process `syz.4.972'. [ 268.029367][T10241] syzkaller0: entered promiscuous mode [ 268.029388][T10241] syzkaller0: entered allmulticast mode [ 268.155025][T10243] openvswitch: netlink: Flow key attr not present in new flow. [ 268.401599][T10238] netlink: 4 bytes leftover after parsing attributes in process `syz.9.977'. [ 268.404257][T10238] netdevsim netdevsim9 netdevsim0: left allmulticast mode [ 268.409367][T10238] netdevsim netdevsim9 netdevsim0: left promiscuous mode [ 268.439614][T10238] bridge0: port 3(netdevsim0) entered disabled state [ 268.491114][T10238] bridge_slave_1: left allmulticast mode [ 268.491161][T10238] bridge_slave_1: left promiscuous mode [ 268.491878][T10238] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.539196][T10238] bridge_slave_0: left allmulticast mode [ 268.539297][T10238] bridge_slave_0: left promiscuous mode [ 268.540313][T10238] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.677544][T10238] bond0: (slave bridge0): Releasing backup interface [ 268.726820][T10267] netlink: 4 bytes leftover after parsing attributes in process `syz.6.988'. [ 269.053764][ T5832] usb 11-1: new full-speed USB device number 5 using dummy_hcd [ 269.210266][T10273] FAULT_INJECTION: forcing a failure. [ 269.210266][T10273] name failslab, interval 1, probability 0, space 0, times 0 [ 269.210358][T10273] CPU: 3 UID: 0 PID: 10273 Comm: syz.6.989 Tainted: G L syzkaller #0 PREEMPT(full) [ 269.210384][T10273] Tainted: [L]=SOFTLOCKUP [ 269.210391][T10273] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 269.210403][T10273] Call Trace: [ 269.210409][T10273] [ 269.210417][T10273] dump_stack_lvl+0x100/0x190 [ 269.210447][T10273] should_fail_ex.cold+0x5/0xa [ 269.210486][T10273] should_failslab+0xc2/0x120 [ 269.210513][T10273] kmem_cache_alloc_noprof+0x92/0x6a0 [ 269.210537][T10273] ? ovs_flow_alloc+0x1e/0x210 [ 269.210569][T10273] ovs_flow_alloc+0x1e/0x210 [ 269.210597][T10273] ovs_flow_cmd_new+0x231/0xe10 [ 269.210620][T10273] ? kasan_save_stack+0x30/0x50 [ 269.210642][T10273] ? kasan_save_track+0x14/0x30 [ 269.210666][T10273] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 269.210683][T10273] ? genl_family_rcv_msg_doit+0xc7/0x300 [ 269.210712][T10273] ? netlink_rcv_skb+0x159/0x420 [ 269.210736][T10273] ? genl_rcv+0x28/0x40 [ 269.210760][T10273] ? netlink_unicast+0x585/0x850 [ 269.210785][T10273] ? __sys_sendmsg+0x160/0x210 [ 269.210812][T10273] ? __do_fast_syscall_32+0x13a/0x8b0 [ 269.210834][T10273] ? do_fast_syscall_32+0x32/0x70 [ 269.210855][T10273] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 269.210920][T10273] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 269.210950][T10273] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 269.210985][T10273] genl_family_rcv_msg_doit+0x214/0x300 [ 269.211021][T10273] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 269.211049][T10273] ? genl_get_cmd+0x3e7/0x760 [ 269.211082][T10273] ? bpf_lsm_capable+0x9/0x10 [ 269.211099][T10273] ? security_capable+0x80/0x260 [ 269.211126][T10273] ? ns_capable+0xd2/0xf0 [ 269.211156][T10273] genl_rcv_msg+0x560/0x800 [ 269.211187][T10273] ? __pfx_genl_rcv_msg+0x10/0x10 [ 269.211214][T10273] ? __lock_acquire+0x5c0/0x1f40 [ 269.211240][T10273] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 269.211269][T10273] netlink_rcv_skb+0x159/0x420 [ 269.211294][T10273] ? __pfx_genl_rcv_msg+0x10/0x10 [ 269.211324][T10273] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 269.211348][T10273] ? rcu_is_watching+0x13/0xc0 [ 269.211376][T10273] ? __rcu_read_unlock+0x26a/0x5e0 [ 269.211403][T10273] ? rcu_is_watching+0x13/0xc0 [ 269.211428][T10273] genl_rcv+0x28/0x40 [ 269.211454][T10273] netlink_unicast+0x585/0x850 [ 269.211483][T10273] ? __pfx_netlink_unicast+0x10/0x10 [ 269.211516][T10273] netlink_sendmsg+0x8b0/0xda0 [ 269.211546][T10273] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.211575][T10273] ? apparmor_socket_sendmsg+0x165/0x280 [ 269.211607][T10273] ____sys_sendmsg+0xa4d/0xbe0 [ 269.211628][T10273] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.211656][T10273] ? __pfx_____sys_sendmsg+0x10/0x10 [ 269.211690][T10273] ___sys_sendmsg+0x190/0x1e0 [ 269.211715][T10273] ? __pfx____sys_sendmsg+0x10/0x10 [ 269.211750][T10273] ? find_held_lock+0x2b/0x80 [ 269.211788][T10273] __sys_sendmsg+0x160/0x210 [ 269.211817][T10273] ? __pfx___sys_sendmsg+0x10/0x10 [ 269.211852][T10273] ? __pfx_ksys_write+0x10/0x10 [ 269.211879][T10273] __do_fast_syscall_32+0x13a/0x8b0 [ 269.211901][T10273] ? lockdep_hardirqs_on+0x7d/0x110 [ 269.211924][T10273] do_fast_syscall_32+0x32/0x70 [ 269.211967][T10273] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 269.212000][T10273] RIP: 0023:0xf7f65fec [ 269.212020][T10273] Code: Unable to access opcode bytes at 0xf7f65fc2. [ 269.212029][T10273] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 269.212048][T10273] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000080000000 [ 269.212060][T10273] RDX: 000000000000c000 RSI: 0000000000000000 RDI: 0000000000000000 [ 269.212071][T10273] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 269.212083][T10273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.212093][T10273] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 269.212118][T10273] [ 269.293856][ T5832] usb 11-1: New USB device found, idVendor=0074, idProduct=0000, bcdDevice= 0.00 [ 269.293889][ T5832] usb 11-1: no configurations [ 269.293900][ T5832] usb 11-1: can't read configurations, error -22 [ 269.676563][T10289] netlink: 16 bytes leftover after parsing attributes in process `syz.8.996'. [ 269.991977][T10300] fuse: Bad value for 'fd' [ 272.526009][T10310] syz.6.1002 (10310): drop_caches: 1 [ 272.607116][T10329] binder: Unknown parameter 'obj_user' [ 272.703482][T10333] FAULT_INJECTION: forcing a failure. [ 272.703482][T10333] name failslab, interval 1, probability 0, space 0, times 0 [ 272.703519][T10333] CPU: 0 UID: 0 PID: 10333 Comm: syz.8.1007 Tainted: G L syzkaller #0 PREEMPT(full) [ 272.703543][T10333] Tainted: [L]=SOFTLOCKUP [ 272.703549][T10333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 272.703559][T10333] Call Trace: [ 272.703567][T10333] [ 272.703588][T10333] dump_stack_lvl+0x100/0x190 [ 272.703616][T10333] should_fail_ex.cold+0x5/0xa [ 272.703640][T10333] should_failslab+0xc2/0x120 [ 272.703665][T10333] kmem_cache_alloc_noprof+0x92/0x6a0 [ 272.703684][T10333] ? touch_atime+0xa5/0x770 [ 272.703702][T10333] ? vm_area_alloc+0x1f/0x160 [ 272.703731][T10333] vm_area_alloc+0x1f/0x160 [ 272.703756][T10333] __mmap_region+0x1096/0x32e0 [ 272.703780][T10333] ? __pfx___mmap_region+0x10/0x10 [ 272.703811][T10333] ? __pfx___might_resched+0x10/0x10 [ 272.703837][T10333] ? find_held_lock+0x2b/0x80 [ 272.703855][T10333] ? process_measurement+0x4c8/0x2350 [ 272.703879][T10333] ? process_measurement+0x4c8/0x2350 [ 272.703903][T10333] ? down_write+0x146/0x1f0 [ 272.703969][T10333] ? lock_acquire+0x1d1/0x380 [ 272.703992][T10333] ? unwind_next_frame+0xbd/0x2090 [ 272.704053][T10333] mmap_region+0x3db/0x6d0 [ 272.704076][T10333] ? __pfx_mmap_region+0x10/0x10 [ 272.704095][T10333] ? shmem_mapping+0xd/0x50 [ 272.704114][T10333] ? __pfx_memfd_check_seals_mmap+0x10/0x10 [ 272.704141][T10333] ? bpf_lsm_mmap_addr+0x9/0x30 [ 272.704165][T10333] ? security_mmap_addr+0x71/0x1e0 [ 272.704183][T10333] ? __get_unmapped_area+0x255/0x3e0 [ 272.704209][T10333] do_mmap+0x12c7/0x1c30 [ 272.704236][T10333] ? lock_acquire+0x1d1/0x380 [ 272.704260][T10333] ? __pfx_do_mmap+0x10/0x10 [ 272.704283][T10333] ? __pfx___might_resched+0x10/0x10 [ 272.704304][T10333] ? bpf_lsm_current_getlsmprop_subj+0x9/0x10 [ 272.704336][T10333] ? security_current_getlsmprop_subj+0x6e/0x130 [ 272.704365][T10333] ? __pfx_down_write_killable+0x10/0x10 [ 272.704391][T10333] vm_mmap_pgoff+0x28d/0x470 [ 272.704417][T10333] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 272.704437][T10333] ? __fget_files+0x215/0x3d0 [ 272.704461][T10333] ? __fget_files+0x21f/0x3d0 [ 272.704491][T10333] ksys_mmap_pgoff+0x3cb/0x610 [ 272.704515][T10333] ? fput+0x7c/0x100 [ 272.704537][T10333] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 272.704556][T10333] ? ksys_write+0x1ac/0x250 [ 272.704576][T10333] ? __pfx_ksys_write+0x10/0x10 [ 272.704600][T10333] __do_fast_syscall_32+0x13a/0x8b0 [ 272.704620][T10333] ? lockdep_hardirqs_on+0x7d/0x110 [ 272.704642][T10333] do_fast_syscall_32+0x32/0x70 [ 272.704662][T10333] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 272.704684][T10333] RIP: 0023:0xf7f42fec [ 272.704704][T10333] Code: Unable to access opcode bytes at 0xf7f42fc2. [ 272.704713][T10333] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 272.704730][T10333] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000400000 [ 272.704743][T10333] RDX: 0000000000000001 RSI: 0000000000010012 RDI: 0000000000000004 [ 272.704755][T10333] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 272.704765][T10333] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 272.704777][T10333] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 272.704800][T10333] [ 273.027492][T10355] program syz.6.1018 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 273.100124][T10357] 8021q: adding VLAN 0 to HW filter on device bond1 [ 273.155555][T10363] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 273.155571][T10363] CPU: 2 UID: 0 PID: 10363 Comm: syz.6.1019 Tainted: G L syzkaller #0 PREEMPT(full) [ 273.155588][T10363] Tainted: [L]=SOFTLOCKUP [ 273.155592][T10363] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 273.155599][T10363] Call Trace: [ 273.155603][T10363] [ 273.155608][T10363] dump_stack_lvl+0x100/0x190 [ 273.155627][T10363] sysfs_warn_dup.cold+0x1c/0x28 [ 273.155645][T10363] sysfs_create_dir_ns+0x24b/0x2b0 [ 273.155660][T10363] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 273.155672][T10363] ? find_held_lock+0x2b/0x80 [ 273.155685][T10363] ? kobject_add_internal+0x25f/0x930 [ 273.155700][T10363] ? kobject_add_internal+0x25f/0x930 [ 273.155717][T10363] ? class_dir_child_ns_type+0xd/0x60 [ 273.155730][T10363] kobject_add_internal+0x2c8/0x930 [ 273.155747][T10363] kobject_add+0x16a/0x1e0 [ 273.155762][T10363] ? __pfx_kobject_add+0x10/0x10 [ 273.155778][T10363] ? get_device_parent+0x1b3/0x4c0 [ 273.155795][T10363] ? kobject_put+0xb9/0x640 [ 273.155813][T10363] device_add+0x294/0x1970 [ 273.155825][T10363] ? lockdep_init_map_type+0x5c/0x250 [ 273.155841][T10363] ? __pfx_device_add+0x10/0x10 [ 273.155851][T10363] ? lockdep_init_map_type+0x5c/0x250 [ 273.155867][T10363] ? __init_waitqueue_head+0xca/0x150 [ 273.155887][T10363] tty_register_device_attr+0x388/0x7f0 [ 273.155904][T10363] ? lockdep_init_map_type+0x5c/0x250 [ 273.155949][T10363] ? __pfx_tty_register_device_attr+0x10/0x10 [ 273.155972][T10363] ? tty_port_init+0x156/0x1c0 [ 273.155991][T10363] gsm_activate_mux+0x155/0x2a0 [ 273.156009][T10363] gsmld_ioctl+0xbbc/0x15c0 [ 273.156025][T10363] ? __pfx_gsmld_ioctl+0x10/0x10 [ 273.156047][T10363] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 273.156067][T10363] ? __pfx_gsmld_ioctl+0x10/0x10 [ 273.156078][T10363] tty_compat_ioctl+0x396/0x420 [ 273.156095][T10363] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 273.156111][T10363] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 273.156125][T10363] __do_fast_syscall_32+0x13a/0x8b0 [ 273.156140][T10363] do_fast_syscall_32+0x32/0x70 [ 273.156153][T10363] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 273.156167][T10363] RIP: 0023:0xf7f65fec [ 273.156181][T10363] Code: Unable to access opcode bytes at 0xf7f65fc2. [ 273.156186][T10363] RSP: 002b:00000000f540550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 273.156197][T10363] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000404c4701 [ 273.156204][T10363] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 273.156210][T10363] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 273.156216][T10363] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 273.156222][T10363] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 273.156235][T10363] [ 273.156247][T10363] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 273.949390][ T62] hid_parser_main: 6 callbacks suppressed [ 273.949404][ T62] hid-generic 0001:0001:0004.0004: unknown main item tag 0x0 [ 273.949418][ T62] hid-generic 0001:0001:0004.0004: unknown main item tag 0x0 [ 273.949430][ T62] hid-generic 0001:0001:0004.0004: unknown main item tag 0x0 [ 273.949441][ T62] hid-generic 0001:0001:0004.0004: unknown main item tag 0x0 [ 273.949453][ T62] hid-generic 0001:0001:0004.0004: unknown main item tag 0x0 [ 273.949464][ T62] hid-generic 0001:0001:0004.0004: unknown main item tag 0x0 [ 273.949476][ T62] hid-generic 0001:0001:0004.0004: unknown main item tag 0x0 [ 273.949487][ T62] hid-generic 0001:0001:0004.0004: unknown main item tag 0x0 [ 273.949499][ T62] hid-generic 0001:0001:0004.0004: unknown main item tag 0x0 [ 273.949510][ T62] hid-generic 0001:0001:0004.0004: unknown main item tag 0x0 [ 273.967486][ T62] hid-generic 0001:0001:0004.0004: hidraw1: HID v0.03 Device [syz0] on syz0 [ 274.543711][ T35] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 274.694413][ T35] usb 11-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 274.697606][ T35] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.697648][ T35] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 274.697668][ T35] usb 11-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 274.697697][ T35] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.846838][T10412] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 274.846942][T10412] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 274.847017][T10412] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 274.847088][T10412] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 274.847161][T10412] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 274.847236][T10412] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 274.847309][T10412] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 274.847388][T10412] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 274.847463][T10412] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 274.887407][T10412] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 274.887475][T10412] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 274.887517][T10412] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 274.887556][T10412] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 274.887605][T10412] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 274.887646][T10412] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 274.887684][T10412] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 274.887721][T10412] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 274.887758][T10412] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 274.887795][T10412] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 274.887833][T10412] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 274.887869][T10412] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 274.887907][T10412] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 274.888344][T10412] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 274.888402][T10412] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 274.888441][T10412] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 274.888478][T10412] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 274.888519][T10412] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 274.888561][T10412] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 274.888599][T10412] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 274.898618][T10412] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 274.898723][T10412] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 274.898796][T10412] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 274.926752][T10412] trusted_key: encrypted_key: key user:syz not found [ 276.369000][T10449] netlink: 'syz.4.1045': attribute type 10 has an invalid length. [ 277.057160][ T35] cxacru 11-1:1.0: send of cm 0x91 failed (-104) [ 277.057886][ T35] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -104 [ 277.057929][ T35] ATM dev 0: usbatm_atm_init: atm_start failed: -104! [ 277.696825][ T35] cxacru 11-1:1.0: probe with driver cxacru failed with error -104 [ 278.331006][ T5886] usb 11-1: USB disconnect, device number 7 [ 278.407197][T10473] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 278.605971][T10480] [ 278.607146][T10480] ====================================================== [ 278.610071][T10480] WARNING: possible circular locking dependency detected [ 278.612958][T10480] syzkaller #0 Tainted: G L [ 278.615640][T10480] ------------------------------------------------------ [ 278.618629][T10480] syz.6.1053/10480 is trying to acquire lock: [ 278.621193][T10480] ffff88802937e138 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4f8/0xd90 [ 278.625306][T10480] [ 278.625306][T10480] but task is already holding lock: [ 278.628418][T10480] ffff888025435c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 278.632378][T10480] [ 278.632378][T10480] which lock already depends on the new lock. [ 278.632378][T10480] [ 278.636763][T10480] [ 278.636763][T10480] the existing dependency chain (in reverse order) is: [ 278.640447][T10480] [ 278.640447][T10480] -> #3 (&of->mutex){+.+.}-{4:4}: [ 278.643522][T10480] lock_acquire+0x1d1/0x380 [ 278.645727][T10480] __mutex_lock+0x1a4/0x1bd0 [ 278.647857][T10480] kernfs_seq_start+0x4f/0x2a0 [ 278.650029][T10480] seq_read_iter+0x2c1/0x1270 [ 278.652118][T10480] kernfs_fop_read_iter+0x46c/0x610 [ 278.654569][T10480] vfs_read+0x82e/0xb40 [ 278.656642][T10480] ksys_read+0x12a/0x250 [ 278.658798][T10480] __do_fast_syscall_32+0x13a/0x8b0 [ 278.661276][T10480] do_fast_syscall_32+0x32/0x70 [ 278.663584][T10480] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 278.666628][T10480] [ 278.666628][T10480] -> #2 (&p->lock){+.+.}-{4:4}: [ 278.669650][T10480] lock_acquire+0x1d1/0x380 [ 278.671881][T10480] __mutex_lock+0x1a4/0x1bd0 [ 278.674353][T10480] seq_read_iter+0xe1/0x1270 [ 278.676755][T10480] kernfs_fop_read_iter+0x46c/0x610 [ 278.679471][T10480] copy_splice_read+0x4ba/0xbb0 [ 278.681928][T10480] do_splice_read+0x285/0x370 [ 278.684257][T10480] splice_file_to_pipe+0x82/0x120 [ 278.686617][T10480] do_sendfile+0x366/0xe20 [ 278.688645][T10480] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 278.691261][T10480] __do_fast_syscall_32+0x13a/0x8b0 [ 278.693698][T10480] do_fast_syscall_32+0x32/0x70 [ 278.696032][T10480] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 278.698934][T10480] [ 278.698934][T10480] -> #1 (&pipe->mutex){+.+.}-{4:4}: [ 278.702086][T10480] lock_acquire+0x1d1/0x380 [ 278.704283][T10480] __mutex_lock+0x1a4/0x1bd0 [ 278.706485][T10480] anon_pipe_prefill_and_lock+0x16c/0x580 [ 278.709209][T10480] anon_pipe_write+0x164/0x1b50 [ 278.711369][T10480] __kernel_write_iter+0x6bb/0x930 [ 278.713709][T10480] __kernel_write+0xf6/0x140 [ 278.715931][T10480] autofs_notify_daemon+0x50d/0xd90 [ 278.718385][T10480] autofs_wait+0x10fd/0x1b50 [ 278.720596][T10480] autofs_mount_wait+0x132/0x3b0 [ 278.722934][T10480] autofs_d_automount+0x490/0x950 [ 278.725335][T10480] __traverse_mounts+0x1b9/0x8a0 [ 278.727673][T10480] step_into_slowpath+0xb7e/0xf90 [ 278.730048][T10480] path_lookupat+0x58b/0xc40 [ 278.732236][T10480] filename_lookup+0x202/0x590 [ 278.734521][T10480] do_readlinkat+0xd3/0x370 [ 278.736694][T10480] __ia32_sys_readlink+0x76/0xc0 [ 278.739045][T10480] __do_fast_syscall_32+0x13a/0x8b0 [ 278.741497][T10480] do_fast_syscall_32+0x32/0x70 [ 278.743765][T10480] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 278.746646][T10480] [ 278.746646][T10480] -> #0 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 278.749788][T10480] check_prev_add+0xeb/0xe60 [ 278.752000][T10480] __lock_acquire+0x1528/0x1f40 [ 278.754305][T10480] lock_acquire+0x1d1/0x380 [ 278.756461][T10480] __mutex_lock+0x1a4/0x1bd0 [ 278.758627][T10480] autofs_notify_daemon+0x4f8/0xd90 [ 278.761037][T10480] autofs_wait+0x10fd/0x1b50 [ 278.763209][T10480] autofs_mount_wait+0x132/0x3b0 [ 278.765638][T10480] autofs_d_automount+0x490/0x950 [ 278.768003][T10480] __traverse_mounts+0x1b9/0x8a0 [ 278.770234][T10480] step_into_slowpath+0xb7e/0xf90 [ 278.772531][T10480] path_lookupat+0x58b/0xc40 [ 278.774718][T10480] filename_lookup+0x202/0x590 [ 278.777012][T10480] kern_path+0x37/0x50 [ 278.778976][T10480] lookup_bdev+0xd8/0x2a0 [ 278.780761][T10480] resume_store+0x1d6/0x460 [ 278.782912][T10480] kobj_attr_store+0x58/0x80 [ 278.785118][T10480] sysfs_kf_write+0xf2/0x150 [ 278.787314][T10480] kernfs_fop_write_iter+0x3e0/0x5f0 [ 278.789814][T10480] vfs_write+0x6af/0x1050 [ 278.791918][T10480] ksys_write+0x12a/0x250 [ 278.793992][T10480] __do_fast_syscall_32+0x13a/0x8b0 [ 278.796424][T10480] do_fast_syscall_32+0x32/0x70 [ 278.799000][T10480] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 278.802152][T10480] [ 278.802152][T10480] other info that might help us debug this: [ 278.802152][T10480] [ 278.806451][T10480] Chain exists of: [ 278.806451][T10480] &sbi->pipe_mutex --> &p->lock --> &of->mutex [ 278.806451][T10480] [ 278.811109][T10480] Possible unsafe locking scenario: [ 278.811109][T10480] [ 278.814088][T10480] CPU0 CPU1 [ 278.816277][T10480] ---- ---- [ 278.818500][T10480] lock(&of->mutex); [ 278.820309][T10480] lock(&p->lock); [ 278.822966][T10480] lock(&of->mutex); [ 278.825660][T10480] lock(&sbi->pipe_mutex); [ 278.827577][T10480] [ 278.827577][T10480] *** DEADLOCK *** [ 278.827577][T10480] [ 278.830690][T10480] locks held by syz.6.1053/10480: 4, last CPU#3: [ 278.833349][T10480] #0: ffff888014544630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 278.837340][T10480] #1: ffff8880243a2460 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 278.841004][T10480] #2: ffff888025435c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 278.845004][T10480] #3: ffff88801d7c7878 (kn->active#85){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 278.849176][T10480] [ 278.849176][T10480] stack backtrace: [ 278.851678][T10480] CPU: 3 UID: 0 PID: 10480 Comm: syz.6.1053 Tainted: G L syzkaller #0 PREEMPT(full) [ 278.856275][T10480] Tainted: [L]=SOFTLOCKUP [ 278.858144][T10480] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 278.862300][T10480] Call Trace: [ 278.863727][T10480] [ 278.865039][T10480] dump_stack_lvl+0x100/0x190 [ 278.867065][T10480] print_circular_bug.cold+0x178/0x1be [ 278.869441][T10480] check_noncircular+0x146/0x160 [ 278.871556][T10480] check_prev_add+0xeb/0xe60 [ 278.873650][T10480] __lock_acquire+0x1528/0x1f40 [ 278.875834][T10480] lock_acquire+0x1d1/0x380 [ 278.877764][T10480] ? autofs_notify_daemon+0x4f8/0xd90 [ 278.880003][T10480] ? __pfx___might_resched+0x10/0x10 [ 278.882226][T10480] __mutex_lock+0x1a4/0x1bd0 [ 278.884258][T10480] ? autofs_notify_daemon+0x4f8/0xd90 [ 278.886537][T10480] ? autofs_notify_daemon+0x4f8/0xd90 [ 278.888842][T10480] ? find_held_lock+0x2b/0x80 [ 278.890836][T10480] ? autofs_notify_daemon+0x4a0/0xd90 [ 278.893074][T10480] ? autofs_notify_daemon+0x4a0/0xd90 [ 278.895369][T10480] ? __pfx___mutex_lock+0x10/0x10 [ 278.897535][T10480] ? __mutex_unlock_slowpath+0x35d/0x930 [ 278.899920][T10480] ? from_kgid_munged+0xab/0x130 [ 278.902033][T10480] ? __pfx_from_kgid_munged+0x10/0x10 [ 278.904287][T10480] ? path_lookupat+0x58b/0xc40 [ 278.906337][T10480] ? autofs_notify_daemon+0x4f8/0xd90 [ 278.908597][T10480] autofs_notify_daemon+0x4f8/0xd90 [ 278.910799][T10480] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 278.913181][T10480] ? lockdep_init_map_type+0x5c/0x250 [ 278.915485][T10480] ? lockdep_init_map_type+0x5c/0x250 [ 278.917797][T10480] autofs_wait+0x10fd/0x1b50 [ 278.919771][T10480] ? __pfx_autofs_wait+0x10/0x10 [ 278.921882][T10480] ? find_held_lock+0x2b/0x80 [ 278.923843][T10480] ? path_has_submounts+0xcf/0x120 [ 278.926068][T10480] ? do_raw_spin_unlock+0x145/0x1e0 [ 278.928322][T10480] ? find_held_lock+0x2b/0x80 [ 278.930300][T10480] autofs_mount_wait+0x132/0x3b0 [ 278.932406][T10480] autofs_d_automount+0x490/0x950 [ 278.934553][T10480] __traverse_mounts+0x1b9/0x8a0 [ 278.936662][T10480] step_into_slowpath+0xb7e/0xf90 [ 278.938881][T10480] ? rcu_is_watching+0x13/0xc0 [ 278.940997][T10480] ? __pfx_step_into_slowpath+0x10/0x10 [ 278.943342][T10480] ? lookup_slow+0x5b/0x70 [ 278.945288][T10480] ? lookup_slow+0x5b/0x70 [ 278.947204][T10480] path_lookupat+0x58b/0xc40 [ 278.949163][T10480] filename_lookup+0x202/0x590 [ 278.951142][T10480] ? __pfx_filename_lookup+0x10/0x10 [ 278.953423][T10480] ? do_getname_kernel+0x5d/0x250 [ 278.955688][T10480] ? __asan_memcpy+0x3c/0x60 [ 278.957888][T10480] kern_path+0x37/0x50 [ 278.959667][T10480] lookup_bdev+0xd8/0x2a0 [ 278.961507][T10480] ? __pfx_lookup_bdev+0x10/0x10 [ 278.963544][T10480] ? __asan_memcpy+0x3c/0x60 [ 278.965496][T10480] resume_store+0x1d6/0x460 [ 278.967369][T10480] ? __pfx_resume_store+0x10/0x10 [ 278.969472][T10480] ? lock_acquire+0x1d1/0x380 [ 278.971455][T10480] ? sysfs_file_kobj+0x21/0x290 [ 278.973530][T10480] ? find_held_lock+0x2b/0x80 [ 278.975525][T10480] ? sysfs_file_kobj+0xe4/0x290 [ 278.977580][T10480] ? sysfs_file_kobj+0xe4/0x290 [ 278.979612][T10480] ? __pfx_resume_store+0x10/0x10 [ 278.981727][T10480] kobj_attr_store+0x58/0x80 [ 278.983655][T10480] ? __pfx_kobj_attr_store+0x10/0x10 [ 278.985855][T10480] sysfs_kf_write+0xf2/0x150 [ 278.987779][T10480] kernfs_fop_write_iter+0x3e0/0x5f0 [ 278.989990][T10480] ? __pfx_sysfs_kf_write+0x10/0x10 [ 278.992201][T10480] vfs_write+0x6af/0x1050 [ 278.994056][T10480] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 278.996505][T10480] ? __pfx_vfs_write+0x10/0x10 [ 278.998517][T10480] ? find_held_lock+0x2b/0x80 [ 279.000565][T10480] ksys_write+0x12a/0x250 [ 279.002485][T10480] ? __pfx_ksys_write+0x10/0x10 [ 279.004648][T10480] __do_fast_syscall_32+0x13a/0x8b0 [ 279.006834][T10480] do_fast_syscall_32+0x32/0x70 [ 279.009020][T10480] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 279.011692][T10480] RIP: 0023:0xf7f65fec [ 279.013383][T10480] Code: Unable to access opcode bytes at 0xf7f65fc2. [ 279.016188][T10480] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 279.019684][T10480] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000040 [ 279.022955][T10480] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 279.026306][T10480] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 279.029640][T10480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.032977][T10480] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 279.036326][T10480] [ 279.098235][T10480] PM: Image not found (code -6)