last executing test programs: 49.451987829s ago: executing program 0 (id=806): syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) (async) r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x39a8, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1c, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000000080)=0xfd8) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, &(0x7f0000001540)=0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x2d, 0x107, 0x0, 0x25dfdbff, {0x7, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x4, 0x2}, @nested={0x4, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) close(0x3) 49.450916593s ago: executing program 0 (id=807): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000000000/0x4000)=nil) unshare(0x2c020400) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0x10}], 0x1, &(0x7f0000001040), 0x0, 0x880}], 0x1, 0x80001) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x2a8042, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f00000001c0)=0x8) recvmmsg(r1, &(0x7f0000003400)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1}, 0x15}], 0x1, 0x40000141, 0x0) 49.382043397s ago: executing program 0 (id=808): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) (async, rerun: 64) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) (async, rerun: 64) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/kernel/reboot/type\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000002480)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYRES8=0x0], &(0x7f0000000140)='GPL\x00', 0x80000001, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x40000000}, 0x10, 0x0, 0xffffffffffffffff, 0x5d}, 0x94) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) brk(0x689d80000000) 49.381391632s ago: executing program 0 (id=809): mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000080)=0x0) io_destroy(r0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x8020000) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, 0x0, 0x274) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$sock(0xffffffffffffffff, 0x0, 0x4000000) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x4c0101, 0x0) getsockname$llc(r3, &(0x7f0000000440)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000480)=0x10) writev(r4, &(0x7f000000eb40)=[{&(0x7f000000eb80)='T01\n', 0x4}], 0x1) write$cgroup_pressure(r4, &(0x7f000000ebc0)={'full', 0x20, 0x1, 0x20, 0x7}, 0x2f) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='mnt\x00', &(0x7f0000000040)={0x40b40, 0x13, 0x1}, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/fs/cifs/DebugData\x00', 0x0, 0x0) read(r5, &(0x7f0000000240)=""/100, 0x64) openat(r5, &(0x7f00000002c0)='mnt/ttyUSB0\x00', 0x44002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000540)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='mnt/ttyUSB0\x00', &(0x7f0000000ac0)='./mnt\x00', &(0x7f0000000b00)='nfs4\x00', 0x88412, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b40), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000b80)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) write(r6, &(0x7f0000000bc0)="8b", 0x11) gettid() 49.249855522s ago: executing program 0 (id=812): sysinfo(&(0x7f0000000000)=""/196) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x200c01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x10, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x10000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000300)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0xd3}}}, &(0x7f0000000380)='syzkaller\x00'}, 0x90) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000010440)=[@text64={0x40, &(0x7f0000010480)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000010500)={[0x5836, 0x1000000000000008, 0xab9f, 0x4000000000000e52, 0x1, 0x5479, 0x1043, 0x200000000006, 0x4, 0x1, 0xfffffffffffffffe, 0x100000000, 0xcc78, 0x200001, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000010500)={[0x5836, 0x1000000000000008, 0xab9f, 0x4000000000000e52, 0x1, 0x5479, 0x1043, 0x200000000006, 0x4, 0x1, 0xfffffffffffffffe, 0x100000000, 0xcc78, 0x200001, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000100)) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 48.93200674s ago: executing program 0 (id=815): r0 = socket(0x2, 0x3, 0x67) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1, 0xa, 0x10, 0x10, 0x10, 0x2710, 0xea60}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) (async) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x1234, 0x0, @loopback}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x52c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/afs/sysname\x00', 0x0, 0x23) pread64(r2, &(0x7f00000000c0)=""/26, 0xfdef, 0xff) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r2) (async, rerun: 32) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @private2, 0xa0}, 0x1c) (rerun: 32) 48.891027991s ago: executing program 32 (id=815): r0 = socket(0x2, 0x3, 0x67) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1, 0xa, 0x10, 0x10, 0x10, 0x2710, 0xea60}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) (async) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x1234, 0x0, @loopback}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x52c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/afs/sysname\x00', 0x0, 0x23) pread64(r2, &(0x7f00000000c0)=""/26, 0xfdef, 0xff) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r2) (async, rerun: 32) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @private2, 0xa0}, 0x1c) (rerun: 32) 19.280712031s ago: executing program 4 (id=1117): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='100', 0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0xd, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0={0x18, 0x0, 0x0, 0x700}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) 19.272482533s ago: executing program 4 (id=1118): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (rerun: 64) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x29, 0x81, &(0x7f0000000280)=""/129}, &(0x7f0000000340)="8536b60bfad6", 0x0, 0x9, 0x10000, 0x81, 0x0}) (async, rerun: 32) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) (rerun: 32) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000000c0)={0x2001, 0x1, 0x3, 0x9, 0x4}) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x2, 0xc}}}, 0xc) (async) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r1, 0x40026f34, &(0x7f0000000100)=0x2001) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=@newsa={0x14c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@dev={0xac, 0x14, 0x14, 0x1e}, @in6=@private1={0xfc, 0x1, '\x00', 0x21}, 0x4e24, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x9, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0x5}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 18.572342412s ago: executing program 4 (id=1125): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) prctl$PR_SET_SECUREBITS(0x1c, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)='1') r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x25) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x12002, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)="c1e8d3e4dffd2aece18a02b031000000", 0x10}, 0x1, 0x0, 0x0, 0x40040c4}, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) mkdir(&(0x7f0000000100)='./file1\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) lsetxattr$security_capability(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300), 0x0, 0x0, 0x1) setxattr$security_capability(&(0x7f0000000340)='./file0/file1\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x80) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/rpc\x00') r3 = openat(r2, &(0x7f0000000400)='auth.unix.ip/channel\x00', 0x2, 0x0) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000440)={{&(0x7f000025c000/0x1000)=nil, 0x1000}, 0x1}) read$FUSE(r3, &(0x7f0000001680)={0x2020}, 0x2020) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000004c0)='dctcp', 0x5) getsockopt$inet_tcp_buf(r4, 0x6, 0x1a, 0x0, &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000000100), 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)=""/4100, 0x1004}], 0x1, 0x0) 18.471982891s ago: executing program 4 (id=1128): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf610000000090ff0701000004000000850000005e000000b70000000000000095"], &(0x7f0000000580)='GPL\x00', 0x7, 0x0, 0x0, 0x2a079ff5b90a2b9f, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.471122291s ago: executing program 4 (id=1129): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x3030c0, 0x0) r1 = dup(r0) mmap(&(0x7f000004d000/0x1000)=nil, 0x1000, 0x300000b, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/packet\x00') lseek(r2, 0x20000000000002, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @jmp={0x5, 0x1, 0x0, 0xb, 0x2, 0x100, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000300)='./file0\x00') mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x8000, &(0x7f0000000400)=ANY=[@ANYBLOB='tr\x00\x00\x00\x00\x00\x00\x00\x00']) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x0, 0xe, 0x0, &(0x7f0000000280)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) listen(r1, 0x7) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)=0x0) r5 = syz_open_procfs(r4, &(0x7f00000002c0)='net/tcp\x00') r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000440)={0x1f, 0xffff, 0x3}, 0x6) sendmsg(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)='X\x00\x00\x00\x00\x00', 0x6}], 0x1}, 0x0) sendfile(r5, r5, 0x0, 0x3fffff) 18.412070137s ago: executing program 4 (id=1130): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000340)={0x1, 0xfffffff9}, &(0x7f0000000380)=0x8) (async) r1 = socket(0x10, 0x803, 0x0) r2 = syz_io_uring_setup(0xefd, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x55}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000140)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r1, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x80000080, 0x1}) (async) io_uring_enter(r2, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) (async) r6 = syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f0000000240)={0x0, 0x1}) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x8020000) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f0000000280)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r6, 0xc02064cc, &(0x7f00000002c0)={r7, r10, 0x8000000, 0xa, 0x2}) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r1) (async) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r11, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) 15.431980624s ago: executing program 3 (id=1163): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) read(r1, &(0x7f0000000140)=""/148, 0x94) write(r0, &(0x7f00000002c0)='md0', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/block/md0/md/resync_start\x00', 0x1, 0x0) write(r2, &(0x7f0000000780)='none\n', 0x5) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000200)=@v1={0x0, @adiantum, 0x0, @auto="f8682b64b02d3153"}) 14.620134669s ago: executing program 3 (id=1172): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r4, 0x6, 0x6, 0x0, &(0x7f0000000040)) (async) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x70bd2c, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044851}, 0x40000) 14.530293846s ago: executing program 3 (id=1174): r0 = userfaultfd(0x80801) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl(r1, 0x3b93, &(0x7f0000000480)='(') ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) lsm_list_modules(&(0x7f0000002600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000000)=0x7b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='./dev/sda1\x00', &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) set_tid_address(0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3e, &(0x7f0000000340)=0x8, 0x4) write(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='mountinfo\x00') read$FUSE(r3, &(0x7f0000002640)={0x2020}, 0x2020) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000680001000300000000000002000002000000000004000200"], 0x1c}}, 0x400c0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000004680)=@v2={0x2, @aes128, 0x2, '\x00', @c}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) bind$pptp(r6, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x40806685, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), 0xffffffffffffffff) 14.462035952s ago: executing program 3 (id=1175): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rpc\x00') r2 = openat(r1, &(0x7f0000000040)='./nfsd\x00', 0x2, 0x80) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/167, 0xa7}, {&(0x7f0000000080)=""/4, 0x4}], 0x2) sendmsg$nl_xfrm(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)=ANY=[@ANYBLOB="b80000001900010000000000fcdbdf25e000000200000000000000000000000000000000000000000000ffff0a01010200000000000000000a00200087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000020000000000000044e00000000000000000000000000000fbfffffaffffffff000000000000000000000000000000000000000000000000000000000000000002000000008000000001000000000000"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x25dfdbff, {{@in=@multicast1=0xe0000002, @in=@multicast1, 0x0, 0x6, 0x0, 0x0, 0xa, 0x10, 0x96f23147092a967e, 0x3c}, {0x8000, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bc0, 0x0, 0x0, 0x3, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 14.461000064s ago: executing program 3 (id=1176): getpid() r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f00000000c0)={0x80, 0x40000105, 0x0, 0x0}) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000100)={0x82, 0x0, 0x0, 0x0}) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) (async) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x1, 0x0) (async) listen(r0, 0x3) accept4$bt_l2cap(r0, &(0x7f0000000200), 0x0, 0x800) (async) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000040)={0x4, 0x7, 0x8}) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) 14.127987637s ago: executing program 2 (id=1180): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x0, 0x8001, 0x1000}], 0x1) semop(0x0, &(0x7f0000000100)=[{0x1, 0xbbdd, 0x1000}], 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13.942607418s ago: executing program 2 (id=1181): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x3c0, 0x260, 0x0, 0xfeffffff, 0x260, 0x260, 0x328, 0x328, 0xffffffff, 0x328, 0x328, 0x5, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x9}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x2b, @rand_addr=0x64010100, @multicast1, @port=0x4e21, @gre_key=0x1}}}}, {{@ip={@remote, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x3a, @private, @rand_addr, @gre_key, @icmp_id=0x68}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 13.941048319s ago: executing program 2 (id=1182): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000440)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d7061746830") ioctl(r0, 0xc138fd09, &(0x7f0000000280)="0400000000000000000000009001000038010000010000000000000000100000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e20302031203120373a302031") mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='lz4', 0x3) 13.801091365s ago: executing program 3 (id=1183): r0 = syz_io_uring_setup(0x29d7, &(0x7f00000001c0)={0x0, 0x8550, 0xc00, 0x1, 0xf}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000300)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, &(0x7f0000000380)={0x10, 0x8, 0x5}, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) io_uring_enter(r0, 0x1, 0x1, 0x61, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000e80), 0xb, 0x40240) ioctl$DRM_IOCTL_PANTHOR_BO_MMAP_OFFSET(r4, 0xc0106446, &(0x7f0000000ec0)) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff03000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000840005"], 0x13c}, 0x1, 0x0, 0x0, 0x891}, 0x20040880) setns(0xc9, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c40)={'bridge0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r7, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x240088d0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) sendmsg$nl_route(r8, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={0x0}, 0x9}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r10, 0x400454cd, 0x10f) r11 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x401, 0x40001) ioctl$HIDIOCGDEVINFO(r11, 0x801c4803, &(0x7f0000000140)=""/93) r12 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x440, 0x258, 0x4c, 0x232, 0x258, 0x0, 0x370, 0x2e8, 0x2e8, 0x370, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x0, 0x230, 0x258, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev={0xac, 0x14, 0x14, 0x8}, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@ipv4, [], @ipv4=@broadcast}, {@ipv4=@multicast2, [], @ipv4=@dev}, {@ipv6=@loopback, [], @ipv6=@private2}], 0x1}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1={0xfc, 0x1, '\x00', 0x2}, [0xffffffff], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xf8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) pwritev2(r12, &(0x7f0000000b00)=[{&(0x7f0000000900)="bf2cfdd3b90bb10dd2f8a74c1d7cf90d0ffcb26b28ba4506c590090290ea7166c1ef3999abad45a31652fa925c5dc404743a8ac6001f81dafdd79e4084ee850ca4a10f7ea741897dd8571d2ec1f5bc7135edb61c138b14f3ad9800d34111ae5c28359144de9f544e1aa4dc7150a05d118b568be8d3b9d3c3d4391e2cd2f02e9aae83008e53f502c29fed04f53cb10dbb9e48dafdf655a09fcfeb2558e0ed5e1d4e8481de495a9afdd4363704a8893211080c399ab2179186111be374308f297215", 0xc1}], 0x1, 0xbf0b, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x34}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x94}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xe}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, 'H\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xdc}}, 0x0) mount$bind(&(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)='./file0\x00', &(0x7f0000000f80), 0x2020041, 0x0) 12.752097404s ago: executing program 2 (id=1184): syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0xfffc, 0x8}}}}}, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r1, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x280, 0x258, 0x258, 0x280, 0x258, 0x3, 0x0, {[{{@ipv6={@empty, @local, [0x0, 0x0, 0xff], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x4, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0xff]}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x0, {@ipv4=@rand_addr=0x64010102, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x12, "7014", 0x1}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xe, 0x8400}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) getsockopt$inet_int(r2, 0x0, 0x13, 0x0, &(0x7f0000000140)) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x3, r1, 0x0, &(0x7f0000000600)="57428c9151b99c787230040456ac9e2f", 0xfccc, 0x8}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r1, 0x0, &(0x7f0000000000)="ca", 0x1, 0xc97c}) 12.747851416s ago: executing program 2 (id=1185): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time\x00') setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) (async) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) r0 = socket(0x2, 0x80000, 0x10000000) shutdown(r0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='iocharset', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f00000000c0)={'\x00', 0x2d4e2dfa, 0x1, 0x8}) (async) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f00000000c0)={'\x00', 0x2d4e2dfa, 0x1, 0x8}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) (async) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) (async) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, 0x0) (async) ptrace$setregs(0xd, r3, 0x0, 0x0) ptrace$getregset(0x4205, r3, 0x2, 0x0) ptrace$getregset(0x4204, r3, 0x2, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 12.500404716s ago: executing program 2 (id=1186): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000004, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r2, 0x560d, &(0x7f00000003c0)={0x5, 0x899, 0x1006}) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x4}, 0xc) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000100)={0x80000001}, 0x4) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c9"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x2d) r4 = dup(0xffffffffffffffff) ioctl$TIOCL_SETVESABLANK(r4, 0x560e, &(0x7f0000000140)) (async) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r5, 0x5606, 0x9) ioctl$TIOCL_BLANKSCREEN(r5, 0x541c, &(0x7f0000000000)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0) (async) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_tables_targets\x00') preadv(r7, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/149, 0x95}], 0x1, 0x9, 0x4317d336) (async) r8 = mmap$IORING_OFF_CQ_RING(0x7fffffffc000, 0x2dc1, 0x300000f, 0x12, r6, 0x8000000) munmap$IORING_OFF_SQ_RING(r8, 0x1) (async) munmap$IORING_OFF_CQ_RING(r8, 0x2f51) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000}) 7.540816268s ago: executing program 1 (id=1202): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r3, 0x4068aea3, &(0x7f0000000040)) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000090, 0x0, 0x20020}]}) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x1c0, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DESC={0x174, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x50, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc0}]}]}, @NFTA_SET_DESC_CONCAT={0x68, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x58}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa0000000}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6ca}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe71e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_DESC_CONCAT={0xb8, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x93e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x204}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x97}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x596}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc6c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x208}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a4c0000000c0a01010000000000000000010000000900010073797a31000000000900020073797a31f700000000200003801c0000800c00018008000100112233440c0002800800010055667788140000001100010000000000000000000100000a"], 0x74}}, 0x0) socket$netlink(0x10, 0x3, 0xc) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_CAP_HYPERV_SYNIC(r3, 0x4068aea3, &(0x7f0000000040)) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000090, 0x0, 0x20020}]}) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x1c0, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DESC={0x174, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x50, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc0}]}]}, @NFTA_SET_DESC_CONCAT={0x68, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x58}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa0000000}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6ca}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe71e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_DESC_CONCAT={0xb8, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x93e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x204}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x97}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x596}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc6c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x208}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a4c0000000c0a01010000000000000000010000000900010073797a31000000000900020073797a31f700000000200003801c0000800c00018008000100112233440c0002800800010055667788140000001100010000000000000000000100000a"], 0x74}}, 0x0) (async) 7.33157762s ago: executing program 1 (id=1203): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x0, 0x8001, 0x1000}], 0x1) semop(0x0, &(0x7f0000000100)=[{0x1, 0xbbdd, 0x1000}], 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 4) 6.421954653s ago: executing program 1 (id=1204): write(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x803, 0x0) (async) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$KVM_SET_SREGS2(0xffffffffffffffff, 0x4140aecd, &(0x7f0000000240)={{0xffff1ffe, 0x80a0000, 0x4, 0x0, 0x50, 0x5, 0x1, 0x7f, 0xff, 0x0, 0x4, 0x4}, {0x2ffc, 0x5000, 0xc, 0x9, 0x3, 0x1, 0x6, 0x9, 0x3, 0x4, 0x1, 0x7}, {0x10000, 0xffd0d002, 0x4, 0x5, 0x3, 0xa, 0x5, 0x3, 0x6, 0x9, 0xec, 0xf}, {0x1ffc, 0x4, 0xe, 0x9, 0x0, 0x5, 0x5, 0x2, 0x6, 0x9, 0x1, 0x4}, {0x1000, 0xffff1000, 0xd, 0x7d, 0x7f, 0x2, 0x8, 0x6, 0x9, 0x3, 0x8, 0x6}, {0xeeef0000, 0x8080000, 0xc594012e88a89d04, 0x1, 0x1, 0x7, 0x9, 0x7, 0x4, 0x3, 0x3, 0x8}, {0xa000, 0xdddd1000, 0xa, 0x4, 0xf, 0x2, 0x18, 0x1, 0x3, 0x88, 0x5, 0x1}, {0xeeef0000, 0x1000, 0xf, 0xd, 0x6, 0x5, 0x6, 0x5, 0x2, 0x40, 0x7, 0xfe}, {0x2ffc, 0xb7}, {0x58000, 0x3}, 0x80000000, 0x0, 0xdddd0000, 0x9, 0x7, 0x8800, 0xa2d68584e80d2cad, 0x0, [0x7, 0x8000000000000001, 0xfffffffffffffffa, 0x4]}) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x4, r2, 0x1, 0x7}, 0x14) 6.421325722s ago: executing program 1 (id=1205): mknod$loop(&(0x7f0000000040)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002380)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002400)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000004400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000044c0)={0x20, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004500)='./file0\x00', 0x101001, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000004540)=ANY=[]) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x81}}, './file0\x00'}) 3.407157734s ago: executing program 33 (id=1130): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000340)={0x1, 0xfffffff9}, &(0x7f0000000380)=0x8) (async) r1 = socket(0x10, 0x803, 0x0) r2 = syz_io_uring_setup(0xefd, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x2, 0x55}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000140)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r1, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x80000080, 0x1}) (async) io_uring_enter(r2, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) (async) r6 = syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f0000000240)={0x0, 0x1}) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x8020000) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f0000000280)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r6, 0xc02064cc, &(0x7f00000002c0)={r7, r10, 0x8000000, 0xa, 0x2}) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r1) (async) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r11, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) 3.270396812s ago: executing program 1 (id=1207): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) mq_getsetattr(r0, &(0x7f0000000040)={0x7fffffffffffffff, 0x0, 0xa, 0x80000000}, &(0x7f0000000080)) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x80, 0x8000, 0xffffb6d0, 0x3, {{0x1c, 0x4, 0x0, 0x20, 0x70, 0x68, 0x0, 0x8, 0x29, 0x0, @empty, @rand_addr=0x64010102, {[@lsrr={0x83, 0xf, 0xc3, [@loopback, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0xf, 0x1b, [@dev={0xac, 0x14, 0x14, 0xa}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @timestamp_addr={0x44, 0x1c, 0xb6, 0x1, 0x4, [{@broadcast, 0x7e0b}, {@remote, 0x8c81}, {@broadcast, 0x3}]}, @noop, @rr={0x7, 0x1f, 0x7, [@local, @broadcast, @multicast2, @broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x2f}, @broadcast]}, @noop]}}}}}) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000200)={0x1, 0x5, {}, {0xee00}, 0x0, 0x1}) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)=@acquire={0x25c, 0x17, 0x800, 0x70bd25, 0x25dfdbfc, {{@in6=@local, 0x4d5, 0xa}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {@in6=@dev={0xfe, 0x80, '\x00', 0x13}, @in=@loopback, 0x4e24, 0x0, 0x4e20, 0x43, 0x2, 0x80, 0x0, 0x2c, r2, r3}, {{@in=@empty, @in6=@local, 0x4e21, 0xff, 0x5, 0x3, 0xa, 0xa0, 0x20, 0x32, 0x0, r4}, {0x0, 0x41, 0x7, 0x8, 0x7fffffff, 0xfffffffffffffffc, 0x1, 0x2}, {0x7, 0x8, 0xffff, 0x3ab46086}, 0x7, 0x6e6bb7, 0x1, 0x0, 0x1, 0x3}, 0x6, 0x800, 0x67, 0x70bd2a}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}, @tmpl={0xc4, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d3, 0x2b}, 0x2, @in=@broadcast, 0x0, 0x3, 0x1, 0x8e, 0xffffffff, 0x5e, 0x87b6}, {{@in6=@loopback, 0x4d4, 0x2b}, 0xa, @in=@multicast2, 0x3502, 0x0, 0xbb2fe01dbcd36e8a, 0xa, 0x3, 0x5, 0x80000001}, {{@in=@private=0xa010102, 0x4d3, 0x32}, 0x2, @in=@multicast1, 0x3500, 0x5, 0x3, 0x5, 0xd, 0x80000000, 0x100}]}, @lifetime_val={0x24, 0x9, {0x1, 0x0, 0xffff, 0x7f19301b}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x3}, @sa_dir={0x5, 0x21, 0x3}, @iptfs_reorder_window={0x6, 0x25, 0xe}, @user_kmaddress={0x2c, 0x13, {@in=@loopback, @in=@broadcast, 0x0, 0xa}}]}, 0x25c}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000006c0)={'tunl0\x00', &(0x7f0000000600)={'syztnl1\x00', r2, 0x1, 0x80, 0xffff7fff, 0x8, {{0x1e, 0x4, 0x1, 0x22, 0x78, 0x65, 0x0, 0x6c, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x4c, 0x4a, 0x1, 0xc, [{@loopback, 0x9c9b}, {@remote, 0x3181}, {@remote, 0x8}, {@private=0xa010101, 0x44}, {@multicast2, 0x5}, {@loopback, 0x5}, {@multicast2, 0x7}, {@multicast1, 0xe8}, {@multicast1, 0xffffffff}]}, @noop, @ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0xd6, [@private=0xa010101]}, @lsrr={0x83, 0xb, 0x97, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) (async) sendmsg$key(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x2, 0x11, 0xfd, 0x7, 0x7, 0x0, 0x70bd25, 0x25dfdbfd, [@sadb_address={0x5, 0x6, 0x32, 0x80, 0x0, @in6={0xa, 0x4e20, 0x7, @private2, 0x5}}]}, 0x38}}, 0x4000804) (async) r5 = socket(0x1d, 0x6, 0x0) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000007c0), 0x488c0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000800)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000000840)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r6, 0xc01864cd, &(0x7f0000000900)={&(0x7f0000000880)=[r7, r8], &(0x7f00000008c0)=[0x8], 0x2, 0x1}) (async) r9 = syz_usb_connect$uac2(0x1, 0xe7, &(0x7f0000000940)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x644, 0x8047, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd5, 0x3, 0x1, 0x9, 0x30, 0x4, {0x8, 0xb, 0x2, 0x2, 0x1, 0x0, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x200, 0xff, 0x49, 0x4}, [@source_unit={0x8, 0x24, 0xa, 0x7, 0x3, 0x46, 0x6, 0x2}, @selector_unit={0x8, 0x24, 0xb, 0x40, 0x3, "cf6a92"}, @effect_unit={0x11, 0x24, 0x7, 0x4, 0x4, 0x3, [0x0, 0x1, 0x1, 0x1, 0x0]}, @selector_unit={0x8, 0x24, 0xb, 0x0, 0x3, "f0b711"}, @multiply_unit={0x7, 0x24, 0xc, 0x7, 0x4, 0xf, 0x7}, @input_terminal={0x10, 0x24, 0x2, 0x5, 0x400, 0x1, 0x50, 0xff, 0x2, 0x9, 0x9, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x464, 0x1, 0x8, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x9, 0x3, 0x7, {0x8, 0x25, 0x1, 0x83, 0x0, 0x2, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0xd5, 0x7, 0x6, 0xf8}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x4, 0x1, 0x1, 0xa1, "8e"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x4, 0x2, 0xd, 0x9, "a608050d751ab1fa"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x4c, 0x3, 0x5, {0x8, 0x25, 0x1, 0x4, 0x1, 0x2, 0xa}}}}}}}}]}}, &(0x7f0000000d40)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x310, 0x7, 0x6, 0xe0, 0x10, 0xf9}, 0x59, &(0x7f0000000a80)={0x5, 0xf, 0x59, 0x3, [@generic={0x2c, 0x10, 0x3, "df2edf81c71617e4c2ddd81d120bd607f62ff2cf55167cc58aea14cb418b05cfaf43f791d47c1def57"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "1f3e58701b9e708cb50de28f7a3ec527"}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "51955c782873288f2baaa2b2b6b1f197"}]}, 0x3, [{0xcc, &(0x7f0000000b00)=@string={0xcc, 0x3, "5718e7ccd4c10bf4706fc05f39ec8c0c2fa80b045cec186e409a38ea557bfa2aff979eb76d18ab037bb33c020d49ec00565010420d68946d28fa6e48de320642edeb740be6b61e0cf1703e498d3f585653f117e2f0180687a8f5e8e710cb95ced89a438bf36e0b1d797ea02acacc87cf5d4f10666bf09976d1e0ccdbadf29d9be7263a474e2b5b9de9130c1b6625bb62d2a9ed46f17b10a184a050a5b2094d11be4f3138ce1ced5f556d88d4edeabb173c630fcf38d8c8497b6a17bd40ab617c2033c2aeeb3ecd244379"}}, {0xc9, &(0x7f0000000c00)=@string={0xc9, 0x3, "055311ad2054d0ff7624037c242fad805d09d6088ae904504ec53c08a3bfbc90f62ad0dd343e31b5c35dcfaa7cc7c02bbea87526d3c43dd97a946b0370e7832e8f32aecd08ae57c421902759bf70e2fcba85dce76294d87972340d9562533aa963c9d58cc713eb576081a8f18389eb04eb7f18bc182ce1255e060394c4755e279dc60d827acbde32547a44436d50bcbd00eb9dfeb66df6c6632529f479cfb0c7697b317f355533f79a05ca95600c78dabfa3e607eeecf49302e2655f7d566d45fc4c95b94056de"}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x455}}]}) syz_usb_control_io$uac2(r9, &(0x7f0000000e80)={0x14, &(0x7f0000000d80)={0x20, 0x24, 0xb1, {0xb1, 0x22, "1b0219c84976b0e91f24b594e1fe079573be969b79d3646c7248c394bd9caf382b4be0fc13648ce78d64c8a47bd674a96dba66d148f1af3a47ece7c1fe8ceb73fce29c565c6757abe958b7f1dd7721c2169c24d658af5ffb55489a853aa7c88fd39732b4d767f629dbb99f047e7fceb17289fd3e76a55fdc2a75b37827aeff1f5cab8cc5a51b3fd2b077e9ffe91b77f1ce786f8b5e2eaeebd2c24be263fd4218e5642d5fa8a8e8c3ce93dc10f89aed"}}, &(0x7f0000000e40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x413}}}, &(0x7f0000001100)={0x44, &(0x7f0000000ec0)={0x40, 0x25, 0x43, "590e34a3c061dfcf4baaf26912d036a26ddefa15b806986d5565db15f3f64afc5488002bdcd3a85c887487ea3709c5260dfdf4554c4b63033987ae370520be9f12c193"}, &(0x7f0000000f40)={0x0, 0xa, 0x1, 0x8f}, &(0x7f0000000f80)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000fc0)={0x20, 0x81, 0x3, "29d162"}, &(0x7f0000001000)={0x20, 0x82, 0x1, "8a"}, &(0x7f0000001040)={0x20, 0x83, 0x1, "be"}, &(0x7f0000001080)={0x20, 0x84, 0x1, '\\'}, &(0x7f00000010c0)={0x20, 0x85, 0x3, "224dab"}}) (async) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r0, 0xc0106441, &(0x7f0000001180)={0x0, 0x0, 0x1000}) ioctl$DRM_IOCTL_PANTHOR_VM_DESTROY(r0, 0xc0086442, &(0x7f00000011c0)={r10}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x20, r11, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0xc}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r6, 0x80489439, &(0x7f0000001340)) (async) r13 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r13, 0x84, 0xc, &(0x7f00000013c0)=0x6, 0x4) (async) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001480)={0x14, &(0x7f0000001400)={0x20, 0x21, 0x29, {0x29, 0x24, "7a4b6d3a212b017098e2359bf2300cc3738ea2ac219e73fcda762d6360ee23f4f2e0e5a227147c"}}, &(0x7f0000001440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1059}}}, &(0x7f0000001780)={0x44, &(0x7f00000014c0)={0x20, 0xf, 0xed, "78bf4a7d6b990b66fbbfcd426d2d349dd5f2e098b34eb29f8a90531b3027b77481a346314c59b8f2b16862a34924009bd1421cc3639844e0c0d98f3b1011ca24dbed9cdaef199d294ff1d0a69afcefc88ec2273a1b5bc2556e989a7658e30a7ca547de3b4da6c6e11af4fa2778ba3222c4ce1bc726a2fd1ec8d1322ebc73c157c9ee5175cc2d5eb0148392e83ad2f5a3c5b6e546b0c3a0495475e89fa08c9bbacff1bffdc3889eae9ef418621c198aba00618d8027623c3c5fd9698c6b06f638cee7c39a19a71ea94997182c8a3ed1a73b50149608e8135ce1e4078836926947d6cbb6638bcbf79d4f69592a12"}, &(0x7f00000015c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001600)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000001640)={0x20, 0x81, 0x2, 'AF'}, &(0x7f0000001680)={0x20, 0x82, 0x1, 'A'}, &(0x7f00000016c0)={0x20, 0x83, 0x3, "37f3fd"}, &(0x7f0000001700)={0x20, 0x84, 0x4, "d4fbd0ea"}, &(0x7f0000001740)={0x20, 0x85, 0x3, '48]'}}) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000001800)={r12}) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r13, 0x8982, &(0x7f0000001840)={0x8, 'dummy0\x00', {'lo\x00'}, 0xb3}) openat(r0, &(0x7f0000001880)='./file0\x00', 0x20000, 0x0) (async) ioctl$sock_SIOCGPGRP(r13, 0x8904, &(0x7f00000018c0)) 1.311948701s ago: executing program 5 (id=1208): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="545613dfc4ef565e21399b40bbbee4ad9ae277c04c7faf3982a4e5d8b7fd7e8502b8ffa4248bae0070237d647239889c5f63781998da8e41a534637228172a3796ecdaa98efa6c93420f85531e697c96e27afa40f1bbb5795662", @ANYRESHEX], 0x5c}, 0x1, 0x0, 0x0, 0x4002001}, 0x4000000) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_WITH_BITMAP(r3, 0x4068aea3, &(0x7f0000000180)={0xe1, 0x0, 0x52000}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="545613dfc4ef565e21399b40bbbee4ad9ae277c04c7faf3982a4e5d8b7fd7e8502b8ffa4248bae0070237d647239889c5f63781998da8e41a534637228172a3796ecdaa98efa6c93420f85531e697c96e27afa40f1bbb5795662", @ANYRESHEX], 0x5c}, 0x1, 0x0, 0x0, 0x4002001}, 0x4000000) (async) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) (async) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) (async) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) dup(r2) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_CAP_DIRTY_LOG_RING_WITH_BITMAP(r3, 0x4068aea3, &(0x7f0000000180)={0xe1, 0x0, 0x52000}) (async) 1.111859391s ago: executing program 5 (id=1209): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x181280, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x9b00, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCVHANGUP(r1, 0x5437, 0x200000000000000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000280)={0x8, "e3d509f2c24aa8f2"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.012048551s ago: executing program 5 (id=1210): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x0, 0x8001, 0x1000}], 0x1) semop(0x0, &(0x7f0000000100)=[{0x1, 0xbbdd, 0x1000}], 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x500) 921.935033ms ago: executing program 5 (id=1211): r0 = semget$private(0x0, 0x4, 0x400) semtimedop(r0, &(0x7f0000000000)=[{0x4, 0xdba, 0x1800}], 0x1, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000280), 0x6f5e, 0x2) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f00000002c0)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0xfdcd, 0x0, @wg=@data}}}}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='0', 0x1) semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0x4, 0x1000}], 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x7800, 0x0, 0x9a0b, 0x7, {{0x18, 0x4, 0x1, 0x1c, 0x60, 0x65, 0x0, 0x40, 0x29, 0x0, @broadcast, @private=0xa010100, {[@cipso={0x86, 0x35, 0xfffffffffffffffc, [{0x7, 0xb, "2ac3b64fb4a0838927"}, {0x1, 0x9, "cc73f5f074f6f1"}, {0x7, 0x3, "fb"}, {0x1, 0x10, "ea4a0e8000d26df7eb44f85aa6fe"}, {0x7, 0x8, "4ec46da38f70"}]}, @generic={0x0, 0x8, "6c8bf5ac851b"}, @rr={0x7, 0xf, 0xcb, [@multicast1, @remote, @remote]}]}}}}}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@ipv6_getnexthop={0x30, 0x6a, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8, 0x5, r4}, @NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}]}, 0x30}}, 0x804) 903.478258ms ago: executing program 5 (id=1212): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x29, 0x5b, 0x5, 0x9, 0x0, @loopback, @mcast2, 0x7800, 0x20, 0x8000, 0x7}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$getflags(r3, 0x401) bind$xdp(r1, &(0x7f0000000180)={0x2c, 0xe, r2, 0x3a, r3}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) (async) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x29, 0x5b, 0x5, 0x9, 0x0, @loopback, @mcast2, 0x7800, 0x20, 0x8000, 0x7}}) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8042, 0x0) (async) fcntl$setlease(r3, 0x400, 0x1) (async) fcntl$getflags(r3, 0x401) (async) bind$xdp(r1, &(0x7f0000000180)={0x2c, 0xe, r2, 0x3a, r3}, 0x10) (async) 191.822361ms ago: executing program 1 (id=1213): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x0, 0x8001, 0x1000}], 0x1) semop(0x0, &(0x7f0000000100)=[{0x1, 0xbbdd, 0x1000}], 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 5) 0s ago: executing program 5 (id=1214): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1400000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000002c0)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000300), 0xd) r1 = socket$inet6(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xe, 0x0, 0xf6e, 0x9, 0x5}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000180)={0x8, 0x800d, 0x5, 0xa361, r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) r3 = syz_open_dev$dvb_demux(&(0x7f00000003c0), 0x2, 0x45200) ioctl$DVB_DEMUX_DMX_QUERYBUF(r3, 0xc0186f3d, &(0x7f0000000400)={0x4, 0xd7c, 0x0, 0x9, 0x4, 0x9}) ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, 0x0) symlinkat(&(0x7f0000000440)='./sys\x00', 0xffffffffffffff9c, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000480)=[{{&(0x7f00000004c0)={0xa, 0x4e23, 0x6, @mcast2, 0x10}, 0x1c, &(0x7f0000000500)}}], 0x1, 0x1c010) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000540)={0x10000000, 0x1c6a8b68, 0x6}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000600)}) mount(0x0, &(0x7f0000000640)='./sys\x00', &(0x7f0000000680)='sysfs\x00', 0x9048ef, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x539843, 0x0) write(r5, &(0x7f0000000700)='usbip', 0x5) openat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='./config\x00', &(0x7f0000000800)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000940)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/u\x00') kernel console output (not intermixed with test programs): [ T9166] ? unwind_next_frame+0xbd/0x2090 [ 118.555608][ T9166] ? lock_acquire+0x1d1/0x380 [ 118.555635][ T9166] ? __lock_acquire+0x5c0/0x1f40 [ 118.555671][ T9166] ? lock_acquire+0x1d1/0x380 [ 118.555691][ T9166] ? stack_depot_save_flags+0x28e/0x9f0 [ 118.555709][ T9166] ? find_held_lock+0x2b/0x80 [ 118.555735][ T9166] ? stack_depot_save_flags+0x49a/0x9f0 [ 118.555753][ T9166] ? stack_depot_save_flags+0x49a/0x9f0 [ 118.555773][ T9166] ? do_raw_spin_unlock+0x145/0x1e0 [ 118.555798][ T9166] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 118.555821][ T9166] ? stack_depot_save_flags+0x49a/0x9f0 [ 118.555885][ T9166] ? proc_coredump_connector+0x2d3/0x4f0 [ 118.555909][ T9166] ? __pfx_proc_coredump_connector+0x10/0x10 [ 118.555938][ T9166] ? rcu_is_watching+0x13/0xc0 [ 118.555988][ T9166] get_signal+0x1f2a/0x21e0 [ 118.556019][ T9166] ? __pfx_get_signal+0x10/0x10 [ 118.556040][ T9166] ? send_signal_locked+0x15e/0xa00 [ 118.556064][ T9166] arch_do_signal_or_restart+0x91/0x7e0 [ 118.556089][ T9166] ? find_held_lock+0x2b/0x80 [ 118.556116][ T9166] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 118.556150][ T9166] ? force_sig_info_to_task+0x4d2/0x660 [ 118.556177][ T9166] exit_to_user_mode_loop+0x139/0x700 [ 118.556200][ T9166] ? rcu_is_watching+0x13/0xc0 [ 118.556228][ T9166] do_syscall_64+0x661/0x790 [ 118.556256][ T9166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.556274][ T9166] RIP: 0033:0x7fd50099e2d9 [ 118.556289][ T9166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.556305][ T9166] RSP: 002b:00007fd5018af0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 118.556323][ T9166] RAX: 00000000000000ca RBX: 00007fd500c25fa8 RCX: 00007fd50099e2d9 [ 118.556334][ T9166] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd500c25fac [ 118.556345][ T9166] RBP: 00007fd500c25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 118.556356][ T9166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.556366][ T9166] R13: 00007fd500c26038 R14: 00007ffc97eb46c0 R15: 00007ffc97eb47a8 [ 118.556392][ T9166] [ 118.575787][ T9166] memory: usage 307200kB, limit 307200kB, failcnt 13658 [ 118.575804][ T9166] memory+swap: usage 431748kB, limit 9007199254740988kB, failcnt 0 [ 118.575816][ T9166] kmem: usage 8156kB, limit 9007199254740988kB, failcnt 0 [ 118.575826][ T9166] Memory cgroup stats for /syz1: [ 118.575945][ T9166] cache 305983488 [ 118.575976][ T9166] rss 221184 [ 118.575983][ T9166] rss_huge 0 [ 118.575990][ T9166] shmem 305983488 [ 118.575996][ T9166] mapped_file 11755520 [ 118.576003][ T9166] dirty 0 [ 118.576009][ T9166] writeback 0 [ 118.576016][ T9166] workingset_refault_anon 45 [ 118.576023][ T9166] workingset_refault_file 4972 [ 118.576030][ T9166] swap 127537152 [ 118.576037][ T9166] swapcached 127750144 [ 118.576044][ T9166] pgpgin 168230 [ 118.576050][ T9166] pgpgout 93980 [ 118.576057][ T9166] pgfault 60129 [ 118.576063][ T9166] pgmajfault 28 [ 118.576070][ T9166] inactive_anon 252452864 [ 118.576077][ T9166] active_anon 53637120 [ 118.576084][ T9166] inactive_file 0 [ 118.576090][ T9166] active_file 0 [ 118.576097][ T9166] unevictable 0 [ 118.576104][ T9166] hierarchical_memory_limit 314572800 [ 118.576112][ T9166] hierarchical_memsw_limit 9223372036854771712 [ 118.576120][ T9166] total_cache 305983488 [ 118.576127][ T9166] total_rss 221184 [ 118.576134][ T9166] total_rss_huge 0 [ 118.576140][ T9166] total_shmem 305983488 [ 118.576147][ T9166] total_mapped_file 11755520 [ 118.576154][ T9166] total_dirty 0 [ 118.576160][ T9166] total_writeback 0 [ 118.576168][ T9166] total_workingset_refault_anon 45 [ 118.576175][ T9166] total_workingset_refault_file 4972 [ 118.576182][ T9166] total_swap 127537152 [ 118.576189][ T9166] total_swapcached 127750144 [ 118.576197][ T9166] total_pgpgin 168230 [ 118.576204][ T9166] total_pgpgout 93980 [ 118.576211][ T9166] total_pgfault 60129 [ 118.576217][ T9166] total_pgmajfault 28 [ 118.576224][ T9166] total_inactive_anon 252452864 [ 118.576231][ T9166] total_active_anon 53637120 [ 118.576238][ T9166] total_inactive_file 0 [ 118.576245][ T9166] total_active_file 0 [ 118.576252][ T9166] total_unevictable 0 [ 118.576259][ T9166] anon_cost 14570 [ 118.576265][ T9166] file_cost 0 [ 118.576272][ T9166] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.923,pid=9129,uid=0 [ 118.577050][ T9166] Memory cgroup out of memory: Killed process 9129 (syz.1.923) total-vm:98948kB, anon-rss:1304kB, file-rss:57412kB, shmem-rss:4608kB, UID:0 pgtables:216kB oom_score_adj:1000 [ 118.666530][ T9119] syz.1.923 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 118.666553][ T9119] CPU: 0 UID: 0 PID: 9119 Comm: syz.1.923 Tainted: G L syzkaller #0 PREEMPT(full) [ 118.666574][ T9119] Tainted: [L]=SOFTLOCKUP [ 118.666578][ T9119] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 118.666585][ T9119] Call Trace: [ 118.666590][ T9119] [ 118.666595][ T9119] dump_stack_lvl+0x100/0x190 [ 118.666616][ T9119] dump_header+0xfb/0x606 [ 118.666630][ T9119] oom_kill_process.cold+0xd/0x380 [ 118.666644][ T9119] out_of_memory+0x340/0x14f0 [ 118.666665][ T9119] ? __pfx_out_of_memory+0x10/0x10 [ 118.666686][ T9119] mem_cgroup_out_of_memory+0xc6/0x130 [ 118.666702][ T9119] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 118.666716][ T9119] ? find_held_lock+0x2b/0x80 [ 118.666736][ T9119] ? do_raw_spin_unlock+0x145/0x1e0 [ 118.666752][ T9119] ? _raw_spin_unlock+0x28/0x50 [ 118.666767][ T9119] try_charge_memcg+0x783/0xf60 [ 118.666782][ T9119] ? __pfx_try_charge_memcg+0x10/0x10 [ 118.666793][ T9119] ? find_held_lock+0x2b/0x80 [ 118.666809][ T9119] ? rcu_read_unlock+0x17/0x60 [ 118.666821][ T9119] ? rcu_read_unlock+0x17/0x60 [ 118.666832][ T9119] ? find_held_lock+0x2b/0x80 [ 118.666849][ T9119] ? rcu_read_unlock+0x17/0x60 [ 118.666864][ T9119] charge_memcg+0x1ae/0x210 [ 118.666876][ T9119] __mem_cgroup_charge+0x2b/0x1c0 [ 118.666890][ T9119] shmem_alloc_and_add_folio+0x451/0xd40 [ 118.666906][ T9119] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 118.666919][ T9119] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 118.666934][ T9119] shmem_get_folio_gfp+0x75b/0x1980 [ 118.666949][ T9119] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 118.666961][ T9119] ? vm_normal_page+0x1d1/0x380 [ 118.666977][ T9119] ? __pfx_vm_normal_page+0x10/0x10 [ 118.666994][ T9119] shmem_write_begin+0x1a4/0x420 [ 118.667007][ T9119] ? __pfx_shmem_write_begin+0x10/0x10 [ 118.667020][ T9119] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 118.667036][ T9119] generic_perform_write+0x292/0xa40 [ 118.667051][ T9119] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 118.667071][ T9119] ? __pfx_generic_perform_write+0x10/0x10 [ 118.667089][ T9119] ? file_update_time_flags+0x38c/0x520 [ 118.667103][ T9119] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 118.667116][ T9119] shmem_file_write_iter+0x10e/0x140 [ 118.667131][ T9119] __kernel_write_iter+0x2ac/0x930 [ 118.667147][ T9119] ? __pfx___kernel_write_iter+0x10/0x10 [ 118.667161][ T9119] ? __up_read+0x333/0x980 [ 118.667177][ T9119] ? dump_user_range+0x65e/0xad0 [ 118.667192][ T9119] ? copy_mc_enhanced_fast_string+0x6/0xf [ 118.667208][ T9119] dump_user_range+0x3f9/0xad0 [ 118.667225][ T9119] ? __pfx_dump_user_range+0x10/0x10 [ 118.667245][ T9119] ? __pfx_writenote+0x10/0x10 [ 118.667260][ T9119] ? elf_core_dump+0x1f25/0x3d20 [ 118.667278][ T9119] elf_core_dump+0x2d68/0x3d20 [ 118.667301][ T9119] ? __pfx_elf_core_dump+0x10/0x10 [ 118.667316][ T9119] ? kasan_save_stack+0x3f/0x50 [ 118.667330][ T9119] ? kasan_save_stack+0x30/0x50 [ 118.667344][ T9119] ? kasan_save_track+0x14/0x30 [ 118.667363][ T9119] ? __kasan_kmalloc+0xaa/0xb0 [ 118.667384][ T9119] ? vfs_coredump+0x21f6/0x54a0 [ 118.667407][ T9119] ? get_signal+0x1f2a/0x21e0 [ 118.667427][ T9119] ? arch_do_signal_or_restart+0x91/0x7e0 [ 118.667462][ T9119] ? 0xffffffffff600000 [ 118.667499][ T9119] ? lock_acquire+0x1d1/0x380 [ 118.667512][ T9119] ? get_signal+0x1f2a/0x21e0 [ 118.667529][ T9119] ? vfs_coredump+0x281a/0x54a0 [ 118.667543][ T9119] vfs_coredump+0x281a/0x54a0 [ 118.667567][ T9119] ? __pfx_vfs_coredump+0x10/0x10 [ 118.667582][ T9119] ? __lock_acquire+0x5c0/0x1f40 [ 118.667598][ T9119] ? __lock_acquire+0x5c0/0x1f40 [ 118.667613][ T9119] ? lock_acquire+0x1d1/0x380 [ 118.667625][ T9119] ? unwind_next_frame+0xbd/0x2090 [ 118.667644][ T9119] ? lock_acquire+0x1d1/0x380 [ 118.667660][ T9119] ? bpf_ksym_find+0x128/0x1c0 [ 118.667671][ T9119] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 118.667688][ T9119] ? arch_stack_walk+0xa6/0xf0 [ 118.667707][ T9119] ? __sigqueue_free+0xbe/0x2a0 [ 118.667741][ T9119] ? stack_trace_save+0x8e/0xc0 [ 118.667752][ T9119] ? __pfx_stack_trace_save+0x10/0x10 [ 118.667764][ T9119] ? stack_depot_save_flags+0x27/0x9f0 [ 118.667776][ T9119] ? __lock_acquire+0x5c0/0x1f40 [ 118.667814][ T9119] ? proc_coredump_connector+0x2d3/0x4f0 [ 118.667829][ T9119] ? __pfx_proc_coredump_connector+0x10/0x10 [ 118.667847][ T9119] ? rcu_is_watching+0x13/0xc0 [ 118.667866][ T9119] get_signal+0x1f2a/0x21e0 [ 118.667885][ T9119] ? __pfx_get_signal+0x10/0x10 [ 118.667897][ T9119] ? __pfx_force_sig_fault+0x10/0x10 [ 118.667913][ T9119] arch_do_signal_or_restart+0x91/0x7e0 [ 118.667931][ T9119] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 118.667980][ T9119] irqentry_exit+0x402/0xa10 [ 118.668004][ T9119] asm_exc_page_fault+0x26/0x30 [ 118.668015][ T9119] RIP: 0033:0x0 [ 118.668024][ T9119] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 118.668029][ T9119] RSP: 002b:0000200000000048 EFLAGS: 00010217 [ 118.668039][ T9119] RAX: 0000000000000000 RBX: 00007fd500c26180 RCX: 00007fd50099e2d9 [ 118.668046][ T9119] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000200 [ 118.668053][ T9119] RBP: 00007fd500a35888 R08: 0000000000000000 R09: 0000000000000000 [ 118.668060][ T9119] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 118.668068][ T9119] R13: 00007fd500c26218 R14: 00007fd500c26180 R15: 00007ffc97eb47a8 [ 118.668083][ T9119] [ 118.681284][ T9119] memory: usage 307200kB, limit 307200kB, failcnt 14148 [ 118.681296][ T9119] memory+swap: usage 431744kB, limit 9007199254740988kB, failcnt 0 [ 118.681304][ T9119] kmem: usage 8148kB, limit 9007199254740988kB, failcnt 0 [ 118.681311][ T9119] Memory cgroup stats for /syz1: [ 118.681384][ T9119] cache 305991680 [ 118.681389][ T9119] rss 221184 [ 118.681393][ T9119] rss_huge 0 [ 118.681397][ T9119] shmem 305991680 [ 118.681401][ T9119] mapped_file 5529600 [ 118.681405][ T9119] dirty 0 [ 118.681409][ T9119] writeback 0 [ 118.681413][ T9119] workingset_refault_anon 45 [ 118.681418][ T9119] workingset_refault_file 4972 [ 118.681422][ T9119] swap 127533056 [ 118.681426][ T9119] swapcached 127766528 [ 118.681431][ T9119] pgpgin 168235 [ 118.681435][ T9119] pgpgout 93983 [ 118.681439][ T9119] pgfault 60129 [ 118.681443][ T9119] pgmajfault 28 [ 118.681447][ T9119] inactive_anon 239222784 [ 118.681451][ T9119] active_anon 66613248 [ 118.681455][ T9119] inactive_file 0 [ 118.681460][ T9119] active_file 0 [ 118.681464][ T9119] unevictable 0 [ 118.681468][ T9119] hierarchical_memory_limit 314572800 [ 118.681473][ T9119] hierarchical_memsw_limit 9223372036854771712 [ 118.681478][ T9119] total_cache 305991680 [ 118.681482][ T9119] total_rss 221184 [ 118.681486][ T9119] total_rss_huge 0 [ 118.681490][ T9119] total_shmem 305991680 [ 118.681494][ T9119] total_mapped_file 5529600 [ 118.681499][ T9119] total_dirty 0 [ 118.681503][ T9119] total_writeback 0 [ 118.681507][ T9119] total_workingset_refault_anon 45 [ 118.681512][ T9119] total_workingset_refault_file 4972 [ 118.681516][ T9119] total_swap 127533056 [ 118.681520][ T9119] total_swapcached 127766528 [ 118.681525][ T9119] total_pgpgin 168235 [ 118.681529][ T9119] total_pgpgout 93983 [ 118.681533][ T9119] total_pgfault 60129 [ 118.681537][ T9119] total_pgmajfault 28 [ 118.681542][ T9119] total_inactive_anon 239222784 [ 118.681546][ T9119] total_active_anon 66613248 [ 118.681551][ T9119] total_inactive_file 0 [ 118.681555][ T9119] total_active_file 0 [ 118.681559][ T9119] total_unevictable 0 [ 118.681567][ T9119] anon_cost 14570 [ 118.681571][ T9119] file_cost 0 [ 118.681575][ T9119] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.923,pid=9116,uid=0 [ 118.681641][ T9119] Memory cgroup out of memory: Killed process 9116 (syz.1.923) total-vm:98948kB, anon-rss:1304kB, file-rss:57412kB, shmem-rss:2496kB, UID:0 pgtables:212kB oom_score_adj:1000 [ 119.659969][ T9113] syz.1.923 (9113) used greatest stack depth: 18688 bytes left [ 120.042604][ T9166] syz.1.927 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 120.042638][ T9166] CPU: 2 UID: 0 PID: 9166 Comm: syz.1.927 Tainted: G L syzkaller #0 PREEMPT(full) [ 120.042661][ T9166] Tainted: [L]=SOFTLOCKUP [ 120.042668][ T9166] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 120.042679][ T9166] Call Trace: [ 120.042685][ T9166] [ 120.042698][ T9166] dump_stack_lvl+0x100/0x190 [ 120.042724][ T9166] dump_header+0xfb/0x606 [ 120.042738][ T9166] oom_kill_process.cold+0xd/0x380 [ 120.042752][ T9166] out_of_memory+0x340/0x14f0 [ 120.042772][ T9166] ? __pfx_out_of_memory+0x10/0x10 [ 120.042804][ T9166] mem_cgroup_out_of_memory+0xc6/0x130 [ 120.042827][ T9166] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 120.042848][ T9166] ? find_held_lock+0x2b/0x80 [ 120.042880][ T9166] ? do_raw_spin_unlock+0x145/0x1e0 [ 120.042904][ T9166] ? _raw_spin_unlock+0x28/0x50 [ 120.042928][ T9166] try_charge_memcg+0x783/0xf60 [ 120.042951][ T9166] ? __pfx_try_charge_memcg+0x10/0x10 [ 120.042968][ T9166] ? find_held_lock+0x2b/0x80 [ 120.042991][ T9166] ? rcu_read_unlock+0x17/0x60 [ 120.043008][ T9166] ? rcu_read_unlock+0x17/0x60 [ 120.043026][ T9166] ? find_held_lock+0x2b/0x80 [ 120.043051][ T9166] ? rcu_read_unlock+0x17/0x60 [ 120.043074][ T9166] charge_memcg+0x1ae/0x210 [ 120.043094][ T9166] __mem_cgroup_charge+0x2b/0x1c0 [ 120.043116][ T9166] shmem_alloc_and_add_folio+0x451/0xd40 [ 120.043141][ T9166] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 120.043162][ T9166] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 120.043181][ T9166] ? __lock_acquire+0x5c0/0x1f40 [ 120.043204][ T9166] shmem_get_folio_gfp+0x75b/0x1980 [ 120.043227][ T9166] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 120.043243][ T9166] ? inode_set_ctime_current+0x9c/0x850 [ 120.043261][ T9166] ? find_held_lock+0x2b/0x80 [ 120.043287][ T9166] ? timestamp_truncate+0x22e/0x2f0 [ 120.043316][ T9166] shmem_write_begin+0x1a4/0x420 [ 120.043336][ T9166] ? __pfx_shmem_write_begin+0x10/0x10 [ 120.043354][ T9166] ? inode_set_ctime_current+0x283/0x850 [ 120.043371][ T9166] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 120.043391][ T9166] ? inode_maybe_inc_iversion+0x169/0x220 [ 120.043418][ T9166] generic_perform_write+0x292/0xa40 [ 120.043441][ T9166] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 120.043468][ T9166] ? __pfx_generic_perform_write+0x10/0x10 [ 120.043493][ T9166] ? mnt_put_write_access_file+0x4e/0x100 [ 120.043518][ T9166] ? file_update_time_flags+0x38c/0x520 [ 120.043540][ T9166] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 120.043576][ T9166] shmem_file_write_iter+0x10e/0x140 [ 120.043599][ T9166] __kernel_write_iter+0x2ac/0x930 [ 120.043622][ T9166] ? __pfx___kernel_write_iter+0x10/0x10 [ 120.043644][ T9166] ? __up_read+0x333/0x980 [ 120.043669][ T9166] ? dump_user_range+0x65e/0xad0 [ 120.043691][ T9166] ? copy_mc_enhanced_fast_string+0x6/0xf [ 120.043731][ T9166] dump_user_range+0x3f9/0xad0 [ 120.043758][ T9166] ? __pfx_dump_user_range+0x10/0x10 [ 120.043788][ T9166] ? __pfx_writenote+0x10/0x10 [ 120.043810][ T9166] ? elf_core_dump+0x1f25/0x3d20 [ 120.043837][ T9166] elf_core_dump+0x2d68/0x3d20 [ 120.043875][ T9166] ? __pfx_elf_core_dump+0x10/0x10 [ 120.043895][ T9166] ? kasan_save_stack+0x3f/0x50 [ 120.043918][ T9166] ? kasan_save_track+0x14/0x30 [ 120.043939][ T9166] ? __kasan_kmalloc+0xaa/0xb0 [ 120.043980][ T9166] ? __kvmalloc_node_noprof+0x35b/0x9b0 [ 120.044002][ T9166] ? get_signal+0x1f2a/0x21e0 [ 120.044019][ T9166] ? arch_do_signal_or_restart+0x91/0x7e0 [ 120.044043][ T9166] ? exit_to_user_mode_loop+0x139/0x700 [ 120.044070][ T9166] ? 0xffffffffff600000 [ 120.044114][ T9166] ? lock_acquire+0x1d1/0x380 [ 120.044133][ T9166] ? get_signal+0x1f2a/0x21e0 [ 120.044160][ T9166] ? vfs_coredump+0x281a/0x54a0 [ 120.044180][ T9166] vfs_coredump+0x281a/0x54a0 [ 120.044210][ T9166] ? __pfx_vfs_coredump+0x10/0x10 [ 120.044231][ T9166] ? __lock_acquire+0x5c0/0x1f40 [ 120.044256][ T9166] ? __lock_acquire+0x5c0/0x1f40 [ 120.044278][ T9166] ? lock_acquire+0x1d1/0x380 [ 120.044296][ T9166] ? unwind_next_frame+0xbd/0x2090 [ 120.044324][ T9166] ? lock_acquire+0x1d1/0x380 [ 120.044351][ T9166] ? __lock_acquire+0x5c0/0x1f40 [ 120.044381][ T9166] ? lock_acquire+0x1d1/0x380 [ 120.044400][ T9166] ? stack_depot_save_flags+0x28e/0x9f0 [ 120.044418][ T9166] ? find_held_lock+0x2b/0x80 [ 120.044442][ T9166] ? stack_depot_save_flags+0x49a/0x9f0 [ 120.044459][ T9166] ? stack_depot_save_flags+0x49a/0x9f0 [ 120.044478][ T9166] ? do_raw_spin_unlock+0x145/0x1e0 [ 120.044501][ T9166] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 120.044524][ T9166] ? stack_depot_save_flags+0x49a/0x9f0 [ 120.044586][ T9166] ? proc_coredump_connector+0x2d3/0x4f0 [ 120.044608][ T9166] ? __pfx_proc_coredump_connector+0x10/0x10 [ 120.044626][ T9166] ? rcu_is_watching+0x13/0xc0 [ 120.044644][ T9166] get_signal+0x1f2a/0x21e0 [ 120.044663][ T9166] ? __pfx_get_signal+0x10/0x10 [ 120.044676][ T9166] ? send_signal_locked+0x15e/0xa00 [ 120.044691][ T9166] arch_do_signal_or_restart+0x91/0x7e0 [ 120.044718][ T9166] ? find_held_lock+0x2b/0x80 [ 120.044743][ T9166] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 120.044775][ T9166] ? force_sig_info_to_task+0x4d2/0x660 [ 120.044800][ T9166] exit_to_user_mode_loop+0x139/0x700 [ 120.044821][ T9166] ? rcu_is_watching+0x13/0xc0 [ 120.044839][ T9166] do_syscall_64+0x661/0x790 [ 120.044856][ T9166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.044874][ T9166] RIP: 0033:0x7fd50099e2d9 [ 120.044889][ T9166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.044905][ T9166] RSP: 002b:00007fd5018af0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 120.044922][ T9166] RAX: 00000000000000ca RBX: 00007fd500c25fa8 RCX: 00007fd50099e2d9 [ 120.044933][ T9166] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd500c25fac [ 120.044943][ T9166] RBP: 00007fd500c25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 120.044954][ T9166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.044964][ T9166] R13: 00007fd500c26038 R14: 00007ffc97eb46c0 R15: 00007ffc97eb47a8 [ 120.044988][ T9166] [ 120.045044][ T9166] memory: usage 307200kB, limit 307200kB, failcnt 29697 [ 120.045053][ T9166] memory+swap: usage 431692kB, limit 9007199254740988kB, failcnt 0 [ 120.045061][ T9166] kmem: usage 7484kB, limit 9007199254740988kB, failcnt 0 [ 120.045067][ T9166] Memory cgroup stats for /syz1: [ 120.045183][ T9166] cache 306782208 [ 120.045191][ T9166] rss 110592 [ 120.045197][ T9166] rss_huge 0 [ 120.045204][ T9166] shmem 305291264 [ 120.045210][ T9166] mapped_file 811008 [ 120.045217][ T9166] dirty 0 [ 120.045223][ T9166] writeback 0 [ 120.045229][ T9166] workingset_refault_anon 45 [ 120.045236][ T9166] workingset_refault_file 5337 [ 120.045243][ T9166] swap 127479808 [ 120.045250][ T9166] swapcached 209432576 [ 120.045256][ T9166] pgpgin 212531 [ 120.045263][ T9166] pgpgout 138113 [ 120.045269][ T9166] pgfault 62873 [ 120.045275][ T9166] pgmajfault 29 [ 120.045281][ T9166] inactive_anon 283914240 [ 120.045288][ T9166] active_anon 21372928 [ 120.045295][ T9166] inactive_file 1241088 [ 120.045301][ T9166] active_file 0 [ 120.045308][ T9166] unevictable 0 [ 120.045314][ T9166] hierarchical_memory_limit 314572800 [ 120.045322][ T9166] hierarchical_memsw_limit 9223372036854771712 [ 120.045330][ T9166] total_cache 306782208 [ 120.045337][ T9166] total_rss 110592 [ 120.045344][ T9166] total_rss_huge 0 [ 120.045350][ T9166] total_shmem 305291264 [ 120.045357][ T9166] total_mapped_file 811008 [ 120.045364][ T9166] total_dirty 0 [ 120.045369][ T9166] total_writeback 0 [ 120.045376][ T9166] total_workingset_refault_anon 45 [ 120.052324][ T9166] total_workingset_refault_file 5337 [ 120.052332][ T9166] total_swap 127479808 [ 120.052337][ T9166] total_swapcached 209432576 [ 120.052341][ T9166] total_pgpgin 212531 [ 120.052345][ T9166] total_pgpgout 138113 [ 120.052349][ T9166] total_pgfault 62873 [ 120.052353][ T9166] total_pgmajfault 29 [ 120.052358][ T9166] total_inactive_anon 283914240 [ 120.052362][ T9166] total_active_anon 21372928 [ 120.052366][ T9166] total_inactive_file 1241088 [ 120.052370][ T9166] total_active_file 0 [ 120.052375][ T9166] total_unevictable 0 [ 120.052379][ T9166] anon_cost 15369 [ 120.052383][ T9166] file_cost 769 [ 120.052387][ T9166] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.923,pid=9134,uid=0 [ 120.052488][ T9166] Memory cgroup out of memory: Killed process 9134 (syz.1.923) total-vm:98948kB, anon-rss:1316kB, file-rss:57412kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 120.167714][ T9132] syz.1.923 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 120.167736][ T9132] CPU: 1 UID: 0 PID: 9132 Comm: syz.1.923 Tainted: G L syzkaller #0 PREEMPT(full) [ 120.167752][ T9132] Tainted: [L]=SOFTLOCKUP [ 120.167756][ T9132] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 120.167763][ T9132] Call Trace: [ 120.167767][ T9132] [ 120.167772][ T9132] dump_stack_lvl+0x100/0x190 [ 120.167792][ T9132] dump_header+0xfb/0x606 [ 120.167805][ T9132] oom_kill_process.cold+0xd/0x380 [ 120.167820][ T9132] out_of_memory+0x340/0x14f0 [ 120.167839][ T9132] ? __pfx_out_of_memory+0x10/0x10 [ 120.167860][ T9132] mem_cgroup_out_of_memory+0xc6/0x130 [ 120.167875][ T9132] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 120.167889][ T9132] ? find_held_lock+0x2b/0x80 [ 120.167909][ T9132] ? do_raw_spin_unlock+0x145/0x1e0 [ 120.167925][ T9132] ? _raw_spin_unlock+0x28/0x50 [ 120.167940][ T9132] try_charge_memcg+0x783/0xf60 [ 120.167998][ T9132] ? __pfx_try_charge_memcg+0x10/0x10 [ 120.168014][ T9132] ? find_held_lock+0x2b/0x80 [ 120.168034][ T9132] ? rcu_read_unlock+0x17/0x60 [ 120.168045][ T9132] ? rcu_read_unlock+0x17/0x60 [ 120.168057][ T9132] ? find_held_lock+0x2b/0x80 [ 120.168074][ T9132] ? rcu_read_unlock+0x17/0x60 [ 120.168089][ T9132] charge_memcg+0x1ae/0x210 [ 120.168101][ T9132] __mem_cgroup_charge+0x2b/0x1c0 [ 120.168115][ T9132] shmem_alloc_and_add_folio+0x451/0xd40 [ 120.168131][ T9132] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 120.168143][ T9132] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 120.168159][ T9132] shmem_get_folio_gfp+0x75b/0x1980 [ 120.168174][ T9132] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 120.168186][ T9132] ? vm_normal_page+0x1d1/0x380 [ 120.168201][ T9132] ? __pfx_vm_normal_page+0x10/0x10 [ 120.168218][ T9132] shmem_write_begin+0x1a4/0x420 [ 120.168232][ T9132] ? __pfx_shmem_write_begin+0x10/0x10 [ 120.168245][ T9132] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 120.168261][ T9132] generic_perform_write+0x292/0xa40 [ 120.168277][ T9132] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 120.168294][ T9132] ? __pfx_generic_perform_write+0x10/0x10 [ 120.168312][ T9132] ? file_update_time_flags+0x38c/0x520 [ 120.168326][ T9132] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 120.168339][ T9132] shmem_file_write_iter+0x10e/0x140 [ 120.168354][ T9132] __kernel_write_iter+0x2ac/0x930 [ 120.168369][ T9132] ? __pfx___kernel_write_iter+0x10/0x10 [ 120.168384][ T9132] ? __up_read+0x333/0x980 [ 120.168400][ T9132] ? dump_user_range+0x65e/0xad0 [ 120.168418][ T9132] dump_user_range+0x3f9/0xad0 [ 120.168436][ T9132] ? __pfx_dump_user_range+0x10/0x10 [ 120.168456][ T9132] ? __pfx_writenote+0x10/0x10 [ 120.168471][ T9132] ? elf_core_dump+0x1f25/0x3d20 [ 120.168489][ T9132] elf_core_dump+0x2d68/0x3d20 [ 120.168512][ T9132] ? __pfx_elf_core_dump+0x10/0x10 [ 120.168527][ T9132] ? kasan_save_stack+0x3f/0x50 [ 120.168545][ T9132] ? kasan_save_stack+0x30/0x50 [ 120.168559][ T9132] ? kasan_save_track+0x14/0x30 [ 120.168573][ T9132] ? __kasan_kmalloc+0xaa/0xb0 [ 120.168588][ T9132] ? vfs_coredump+0x21f6/0x54a0 [ 120.168601][ T9132] ? get_signal+0x1f2a/0x21e0 [ 120.168613][ T9132] ? arch_do_signal_or_restart+0x91/0x7e0 [ 120.168632][ T9132] ? 0xffffffffff600000 [ 120.168659][ T9132] ? lock_acquire+0x1d1/0x380 [ 120.168672][ T9132] ? get_signal+0x1f2a/0x21e0 [ 120.168689][ T9132] ? vfs_coredump+0x281a/0x54a0 [ 120.168703][ T9132] vfs_coredump+0x281a/0x54a0 [ 120.168722][ T9132] ? __pfx_vfs_coredump+0x10/0x10 [ 120.168737][ T9132] ? __lock_acquire+0x5c0/0x1f40 [ 120.168753][ T9132] ? __lock_acquire+0x5c0/0x1f40 [ 120.168768][ T9132] ? lock_acquire+0x1d1/0x380 [ 120.168780][ T9132] ? unwind_next_frame+0xbd/0x2090 [ 120.168799][ T9132] ? lock_acquire+0x1d1/0x380 [ 120.168815][ T9132] ? bpf_ksym_find+0x128/0x1c0 [ 120.168827][ T9132] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 120.168844][ T9132] ? arch_stack_walk+0xa6/0xf0 [ 120.168864][ T9132] ? __sigqueue_free+0xbe/0x2a0 [ 120.168879][ T9132] ? stack_trace_save+0x8e/0xc0 [ 120.168891][ T9132] ? __pfx_stack_trace_save+0x10/0x10 [ 120.168903][ T9132] ? stack_depot_save_flags+0x27/0x9f0 [ 120.168915][ T9132] ? __lock_acquire+0x5c0/0x1f40 [ 120.168952][ T9132] ? proc_coredump_connector+0x2d3/0x4f0 [ 120.168967][ T9132] ? __pfx_proc_coredump_connector+0x10/0x10 [ 120.168989][ T9132] ? rcu_is_watching+0x13/0xc0 [ 120.169008][ T9132] get_signal+0x1f2a/0x21e0 [ 120.169029][ T9132] ? __pfx_get_signal+0x10/0x10 [ 120.169042][ T9132] ? __pfx_force_sig_fault+0x10/0x10 [ 120.169060][ T9132] arch_do_signal_or_restart+0x91/0x7e0 [ 120.169078][ T9132] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 120.169104][ T9132] irqentry_exit+0x402/0xa10 [ 120.169122][ T9132] asm_exc_page_fault+0x26/0x30 [ 120.169133][ T9132] RIP: 0033:0x0 [ 120.169141][ T9132] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 120.169147][ T9132] RSP: 002b:0000200000000048 EFLAGS: 00010217 [ 120.169156][ T9132] RAX: 0000000000000000 RBX: 00007fd500c26180 RCX: 00007fd50099e2d9 [ 120.169163][ T9132] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000200 [ 120.169170][ T9132] RBP: 00007fd500a35888 R08: 0000000000000000 R09: 0000000000000000 [ 120.169177][ T9132] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 120.169184][ T9132] R13: 00007fd500c26218 R14: 00007fd500c26180 R15: 00007ffc97eb47a8 [ 120.169199][ T9132] [ 120.170816][ T9132] memory: usage 307200kB, limit 307200kB, failcnt 29983 [ 120.170825][ T9132] memory+swap: usage 431692kB, limit 9007199254740988kB, failcnt 0 [ 120.170832][ T9132] kmem: usage 7496kB, limit 9007199254740988kB, failcnt 0 [ 120.170839][ T9132] Memory cgroup stats for /syz1: [ 120.170914][ T9132] cache 306769920 [ 120.170920][ T9132] rss 110592 [ 120.170924][ T9132] rss_huge 0 [ 120.170928][ T9132] shmem 306761728 [ 120.170932][ T9132] mapped_file 811008 [ 120.170936][ T9132] dirty 0 [ 120.170940][ T9132] writeback 0 [ 120.170944][ T9132] workingset_refault_anon 45 [ 120.170948][ T9132] workingset_refault_file 5339 [ 120.170953][ T9132] swap 127479808 [ 120.170957][ T9132] swapcached 209432576 [ 120.170961][ T9132] pgpgin 212892 [ 120.170965][ T9132] pgpgout 138477 [ 120.170969][ T9132] pgfault 62904 [ 120.170974][ T9132] pgmajfault 30 [ 120.170978][ T9132] inactive_anon 285515776 [ 120.170982][ T9132] active_anon 21372928 [ 120.170986][ T9132] inactive_file 8192 [ 120.170990][ T9132] active_file 0 [ 120.170994][ T9132] unevictable 0 [ 120.170998][ T9132] hierarchical_memory_limit 314572800 [ 120.171003][ T9132] hierarchical_memsw_limit 9223372036854771712 [ 120.171008][ T9132] total_cache 306769920 [ 120.171013][ T9132] total_rss 110592 [ 120.171016][ T9132] total_rss_huge 0 [ 120.171020][ T9132] total_shmem 306761728 [ 120.171025][ T9132] total_mapped_file 811008 [ 120.171029][ T9132] total_dirty 0 [ 120.171033][ T9132] total_writeback 0 [ 120.171037][ T9132] total_workingset_refault_anon 45 [ 120.171042][ T9132] total_workingset_refault_file 5339 [ 120.171046][ T9132] total_swap 127479808 [ 120.171051][ T9132] total_swapcached 209432576 [ 120.171055][ T9132] total_pgpgin 212892 [ 120.171059][ T9132] total_pgpgout 138477 [ 120.171063][ T9132] total_pgfault 62904 [ 120.171068][ T9132] total_pgmajfault 30 [ 120.171072][ T9132] total_inactive_anon 285515776 [ 120.171076][ T9132] total_active_anon 21372928 [ 120.171081][ T9132] total_inactive_file 8192 [ 120.171085][ T9132] total_active_file 0 [ 120.171089][ T9132] total_unevictable 0 [ 120.171094][ T9132] anon_cost 3096 [ 120.171098][ T9132] file_cost 9648 [ 120.171102][ T9132] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.923,pid=9127,uid=0 [ 120.171154][ T9132] Memory cgroup out of memory: Killed process 9127 (syz.1.923) total-vm:98948kB, anon-rss:1304kB, file-rss:57412kB, shmem-rss:0kB, UID:0 pgtables:208kB oom_score_adj:1000 [ 120.283677][ T5725] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 120.283710][ T5725] CPU: 2 UID: 0 PID: 5725 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 120.283729][ T5725] Tainted: [L]=SOFTLOCKUP [ 120.283736][ T5725] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 120.283747][ T5725] Call Trace: [ 120.283754][ T5725] [ 120.283761][ T5725] dump_stack_lvl+0x100/0x190 [ 120.283790][ T5725] dump_header+0xfb/0x606 [ 120.283807][ T5725] oom_kill_process.cold+0xd/0x380 [ 120.283827][ T5725] out_of_memory+0x340/0x14f0 [ 120.283858][ T5725] ? __pfx_out_of_memory+0x10/0x10 [ 120.283889][ T5725] mem_cgroup_out_of_memory+0xc6/0x130 [ 120.283911][ T5725] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 120.283928][ T5725] ? find_held_lock+0x2b/0x80 [ 120.283980][ T5725] ? do_raw_spin_unlock+0x145/0x1e0 [ 120.284004][ T5725] ? _raw_spin_unlock+0x28/0x50 [ 120.284024][ T5725] try_charge_memcg+0x783/0xf60 [ 120.284047][ T5725] ? __pfx_try_charge_memcg+0x10/0x10 [ 120.284064][ T5725] ? find_held_lock+0x2b/0x80 [ 120.284087][ T5725] ? rcu_read_unlock+0x17/0x60 [ 120.284104][ T5725] ? rcu_read_unlock+0x17/0x60 [ 120.284122][ T5725] ? find_held_lock+0x2b/0x80 [ 120.284142][ T5725] ? rcu_read_unlock+0x17/0x60 [ 120.284165][ T5725] charge_memcg+0x1ae/0x210 [ 120.284184][ T5725] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 120.284212][ T5725] swap_cache_alloc_folio+0x548/0xc50 [ 120.284235][ T5725] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 120.284254][ T5725] ? swap_cache_get_folio+0x28d/0x360 [ 120.284274][ T5725] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 120.284295][ T5725] ? __blk_mq_alloc_driver_tag+0x27a/0x7a0 [ 120.284321][ T5725] ? dd_has_work+0xb0/0x270 [ 120.284334][ T5725] ? __pfx_dd_has_work+0x10/0x10 [ 120.284350][ T5725] swap_cache_read_folio+0x47/0x140 [ 120.284375][ T5725] swap_cluster_readahead+0x477/0x5d0 [ 120.284401][ T5725] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 120.284428][ T5725] ? swap_table_get+0x28/0x2c0 [ 120.284455][ T5725] swapin_readahead+0xf0/0x260 [ 120.284476][ T5725] ? __pfx_swapin_readahead+0x10/0x10 [ 120.284496][ T5725] ? __pfx_get_swap_device+0x10/0x10 [ 120.284522][ T5725] do_swap_page+0xf72/0x5580 [ 120.284550][ T5725] ? __pfx_do_swap_page+0x10/0x10 [ 120.284564][ T5725] ? lock_acquire+0x1d1/0x380 [ 120.284583][ T5725] ? __pte_offset_map+0x2f/0x310 [ 120.284613][ T5725] ? rcu_is_watching+0x13/0xc0 [ 120.284634][ T5725] ? __pte_offset_map+0x179/0x310 [ 120.284659][ T5725] __handle_mm_fault+0x15bd/0x2f60 [ 120.284683][ T5725] ? __pfx___handle_mm_fault+0x10/0x10 [ 120.284699][ T5725] ? __pfx_mt_find+0x10/0x10 [ 120.284730][ T5725] ? find_vma+0xbf/0x140 [ 120.284752][ T5725] ? __pfx_find_vma+0x10/0x10 [ 120.284776][ T5725] handle_mm_fault+0x363/0xa20 [ 120.284800][ T5725] do_user_addr_fault+0x745/0x12f0 [ 120.284823][ T5725] exc_page_fault+0x6f/0xd0 [ 120.284839][ T5725] asm_exc_page_fault+0x26/0x30 [ 120.284855][ T5725] RIP: 0010:rep_stos_alternative+0x40/0x80 [ 120.284874][ T5725] Code: c9 75 f6 c3 cc cc cc cc 48 89 07 48 83 c7 08 83 e9 08 74 ef 83 f9 08 73 ef eb de 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 [ 120.284891][ T5725] RSP: 0018:ffffc900030e7af8 EFLAGS: 00050246 [ 120.284906][ T5725] RAX: 0000000000000000 RBX: 0000000000000040 RCX: 0000000000000040 [ 120.284917][ T5725] RDX: ffff888032d48000 RSI: ffffffff8262a161 RDI: 00007ffc97eb4200 [ 120.284925][ T5725] RBP: ffff888032d48000 R08: 0000000000063ab9 R09: 00000000000001dc [ 120.284934][ T5725] R10: 0000000000000200 R11: 0000000000000000 R12: 00007ffffffff000 [ 120.284945][ T5725] R13: 00007ffc97eb4000 R14: 00007ffc97eb4000 R15: ffff888032d49ac0 [ 120.284964][ T5725] ? __might_fault+0x111/0x140 [ 120.284986][ T5725] copy_fpstate_to_sigframe+0x178/0xae0 [ 120.285006][ T5725] ? __sigqueue_free+0xbe/0x2a0 [ 120.285027][ T5725] ? kmem_cache_free+0x127/0x6c0 [ 120.285041][ T5725] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 120.285062][ T5725] ? __sigqueue_free+0xc3/0x2a0 [ 120.285085][ T5725] ? collect_signal+0x271/0x550 [ 120.285107][ T5725] ? x86_task_fpu+0x5f/0x90 [ 120.285129][ T5725] get_sigframe+0x3fb/0x940 [ 120.285158][ T5725] ? __pfx_get_sigframe+0x10/0x10 [ 120.285182][ T5725] ? rcu_is_watching+0x13/0xc0 [ 120.285212][ T5725] ? siginfo_layout+0x156/0x290 [ 120.285230][ T5725] x64_setup_rt_frame+0x12f/0xce0 [ 120.285260][ T5725] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 120.285294][ T5725] arch_do_signal_or_restart+0x5ee/0x7e0 [ 120.285320][ T5725] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 120.285348][ T5725] ? fault_signal_pending+0x28/0x1d0 [ 120.285378][ T5725] irqentry_exit+0x402/0xa10 [ 120.285421][ T5725] asm_exc_page_fault+0x26/0x30 [ 120.285437][ T5725] RIP: 0033:0x7fd50086c191 [ 120.285448][ T5725] Code: 85 65 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 23 96 ee 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 1c 95 ee 00 48 01 d1 [ 120.285464][ T5725] RSP: 002b:00007ffc97eb4b10 EFLAGS: 00010206 [ 120.285477][ T5725] RAX: 0000001b32524000 RBX: 0000000000000316 RCX: 000000000001ccf0 [ 120.285488][ T5725] RDX: 0000000009e5ff28 RSI: 00007ffc97eb4ba0 RDI: 00007fd5018b0010 [ 120.285499][ T5725] RBP: 00007ffc97eb4b4c R08: 002532a379477d0c R09: 0000000000000001 [ 120.285510][ T5725] R10: 00000000000059c8 R11: 0000000000000246 R12: 0000000000001388 [ 120.285520][ T5725] R13: 00000000000927c0 R14: 000000000001cb1c R15: 00007ffc97eb4ba0 [ 120.285544][ T5725] [ 120.293909][ T5725] memory: usage 307200kB, limit 307200kB, failcnt 30715 [ 120.293925][ T5725] memory+swap: usage 431692kB, limit 9007199254740988kB, failcnt 0 [ 120.293936][ T5725] kmem: usage 7496kB, limit 9007199254740988kB, failcnt 0 [ 120.293947][ T5725] Memory cgroup stats for /syz1: [ 120.297975][ T5725] cache 306769920 [ 120.297981][ T5725] rss 110592 [ 120.297986][ T5725] rss_huge 0 [ 120.297993][ T5725] shmem 306761728 [ 120.297999][ T5725] mapped_file 811008 [ 120.298006][ T5725] dirty 0 [ 120.298012][ T5725] writeback 0 [ 120.298018][ T5725] workingset_refault_anon 45 [ 120.298025][ T5725] workingset_refault_file 5339 [ 120.298032][ T5725] swap 127479808 [ 120.298038][ T5725] swapcached 209432576 [ 120.298044][ T5725] pgpgin 212892 [ 120.298051][ T5725] pgpgout 138477 [ 120.298057][ T5725] pgfault 62904 [ 120.298063][ T5725] pgmajfault 30 [ 120.298070][ T5725] inactive_anon 285515776 [ 120.298076][ T5725] active_anon 21372928 [ 120.298083][ T5725] inactive_file 8192 [ 120.298090][ T5725] active_file 0 [ 120.298096][ T5725] unevictable 0 [ 120.298101][ T5725] hierarchical_memory_limit 314572800 [ 120.298106][ T5725] hierarchical_memsw_limit 9223372036854771712 [ 120.298111][ T5725] total_cache 306769920 [ 120.298118][ T5725] total_rss 110592 [ 120.298124][ T5725] total_rss_huge 0 [ 120.298130][ T5725] total_shmem 306761728 [ 120.298137][ T5725] total_mapped_file 811008 [ 120.298143][ T5725] total_dirty 0 [ 120.298150][ T5725] total_writeback 0 [ 120.298156][ T5725] total_workingset_refault_anon 45 [ 120.298163][ T5725] total_workingset_refault_file 5339 [ 120.298171][ T5725] total_swap 127479808 [ 120.298177][ T5725] total_swapcached 209432576 [ 120.298183][ T5725] total_pgpgin 212892 [ 120.298190][ T5725] total_pgpgout 138477 [ 120.298199][ T5725] total_pgfault 62904 [ 120.298204][ T5725] total_pgmajfault 30 [ 120.298210][ T5725] total_inactive_anon 285515776 [ 120.298217][ T5725] total_active_anon 21372928 [ 120.298224][ T5725] total_inactive_file 8192 [ 120.298231][ T5725] total_active_file 0 [ 120.298237][ T5725] total_unevictable 0 [ 120.298243][ T5725] anon_cost 3096 [ 120.298249][ T5725] file_cost 12817 [ 120.298256][ T5725] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.923,pid=9125,uid=0 [ 120.299672][ T5725] Memory cgroup out of memory: Killed process 9125 (syz.1.923) total-vm:98948kB, anon-rss:1304kB, file-rss:57412kB, shmem-rss:0kB, UID:0 pgtables:208kB oom_score_adj:1000 [ 120.330327][ T5725] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 120.330375][ T5725] CPU: 2 UID: 0 PID: 5725 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 120.330399][ T5725] Tainted: [L]=SOFTLOCKUP [ 120.330405][ T5725] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 120.330415][ T5725] Call Trace: [ 120.330422][ T5725] [ 120.330429][ T5725] dump_stack_lvl+0x100/0x190 [ 120.330459][ T5725] dump_header+0xfb/0x606 [ 120.330477][ T5725] oom_kill_process.cold+0xd/0x380 [ 120.330497][ T5725] out_of_memory+0x340/0x14f0 [ 120.330528][ T5725] ? __pfx_out_of_memory+0x10/0x10 [ 120.330560][ T5725] mem_cgroup_out_of_memory+0xc6/0x130 [ 120.330578][ T5725] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 120.330599][ T5725] ? find_held_lock+0x2b/0x80 [ 120.330629][ T5725] ? do_raw_spin_unlock+0x145/0x1e0 [ 120.330652][ T5725] ? _raw_spin_unlock+0x28/0x50 [ 120.330672][ T5725] try_charge_memcg+0x783/0xf60 [ 120.330694][ T5725] ? __pfx_try_charge_memcg+0x10/0x10 [ 120.330710][ T5725] ? find_held_lock+0x2b/0x80 [ 120.330734][ T5725] ? rcu_read_unlock+0x17/0x60 [ 120.330751][ T5725] ? rcu_read_unlock+0x17/0x60 [ 120.330767][ T5725] ? find_held_lock+0x2b/0x80 [ 120.330789][ T5725] ? rcu_read_unlock+0x17/0x60 [ 120.330812][ T5725] charge_memcg+0x1ae/0x210 [ 120.330830][ T5725] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 120.330854][ T5725] swap_cache_alloc_folio+0x548/0xc50 [ 120.330875][ T5725] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 120.330895][ T5725] ? swap_cache_get_folio+0x28d/0x360 [ 120.330916][ T5725] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 120.330937][ T5725] ? __blk_mq_alloc_driver_tag+0x27a/0x7a0 [ 120.330962][ T5725] ? dd_has_work+0xb0/0x270 [ 120.330972][ T5725] ? __pfx_dd_has_work+0x10/0x10 [ 120.330990][ T5725] swap_cache_read_folio+0x47/0x140 [ 120.331015][ T5725] swap_cluster_readahead+0x477/0x5d0 [ 120.331041][ T5725] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 120.331064][ T5725] ? swap_table_get+0x28/0x2c0 [ 120.331095][ T5725] swapin_readahead+0xf0/0x260 [ 120.331116][ T5725] ? __pfx_swapin_readahead+0x10/0x10 [ 120.331136][ T5725] ? __pfx_get_swap_device+0x10/0x10 [ 120.331161][ T5725] do_swap_page+0xf72/0x5580 [ 120.331189][ T5725] ? __pfx_do_swap_page+0x10/0x10 [ 120.331209][ T5725] ? lock_acquire+0x1d1/0x380 [ 120.331243][ T5725] ? __pte_offset_map+0x2f/0x310 [ 120.331281][ T5725] ? rcu_is_watching+0x13/0xc0 [ 120.331308][ T5725] ? __pte_offset_map+0x179/0x310 [ 120.331333][ T5725] __handle_mm_fault+0x15bd/0x2f60 [ 120.331352][ T5725] ? __pfx___handle_mm_fault+0x10/0x10 [ 120.331367][ T5725] ? __pfx_mt_find+0x10/0x10 [ 120.331407][ T5725] ? find_vma+0xbf/0x140 [ 120.331428][ T5725] ? __pfx_find_vma+0x10/0x10 [ 120.331448][ T5725] handle_mm_fault+0x363/0xa20 [ 120.331484][ T5725] do_user_addr_fault+0x745/0x12f0 [ 120.331516][ T5725] exc_page_fault+0x6f/0xd0 [ 120.331538][ T5725] asm_exc_page_fault+0x26/0x30 [ 120.331552][ T5725] RIP: 0010:rep_stos_alternative+0x40/0x80 [ 120.331570][ T5725] Code: c9 75 f6 c3 cc cc cc cc 48 89 07 48 83 c7 08 83 e9 08 74 ef 83 f9 08 73 ef eb de 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 [ 120.331586][ T5725] RSP: 0018:ffffc900030e7af8 EFLAGS: 00050246 [ 120.331600][ T5725] RAX: 0000000000000000 RBX: 0000000000000040 RCX: 0000000000000040 [ 120.331611][ T5725] RDX: ffff888032d48000 RSI: ffffffff8262a161 RDI: 00007ffc97eb4200 [ 120.331621][ T5725] RBP: ffff888032d48000 R08: 0000000000063ab9 R09: 00000000000001dc [ 120.331628][ T5725] R10: 0000000000000200 R11: 0000000000000000 R12: 00007ffffffff000 [ 120.331638][ T5725] R13: 00007ffc97eb4000 R14: 00007ffc97eb4000 R15: ffff888032d49ac0 [ 120.331657][ T5725] ? __might_fault+0x111/0x140 [ 120.331679][ T5725] copy_fpstate_to_sigframe+0x178/0xae0 [ 120.331699][ T5725] ? __sigqueue_free+0xbe/0x2a0 [ 120.331716][ T5725] ? kmem_cache_free+0x127/0x6c0 [ 120.331728][ T5725] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 120.331742][ T5725] ? __sigqueue_free+0xc3/0x2a0 [ 120.331757][ T5725] ? collect_signal+0x271/0x550 [ 120.331772][ T5725] ? x86_task_fpu+0x5f/0x90 [ 120.331796][ T5725] get_sigframe+0x3fb/0x940 [ 120.331826][ T5725] ? __pfx_get_sigframe+0x10/0x10 [ 120.331849][ T5725] ? rcu_is_watching+0x13/0xc0 [ 120.331870][ T5725] ? siginfo_layout+0x156/0x290 [ 120.331893][ T5725] x64_setup_rt_frame+0x12f/0xce0 [ 120.331923][ T5725] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 120.331973][ T5725] arch_do_signal_or_restart+0x5ee/0x7e0 [ 120.332000][ T5725] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 120.332031][ T5725] ? fault_signal_pending+0x28/0x1d0 [ 120.332061][ T5725] irqentry_exit+0x402/0xa10 [ 120.332085][ T5725] asm_exc_page_fault+0x26/0x30 [ 120.332099][ T5725] RIP: 0033:0x7fd50086c191 [ 120.332114][ T5725] Code: 85 65 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 23 96 ee 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 1c 95 ee 00 48 01 d1 [ 120.332130][ T5725] RSP: 002b:00007ffc97eb4b10 EFLAGS: 00010206 [ 120.332144][ T5725] RAX: 0000001b32524000 RBX: 0000000000000316 RCX: 000000000001ccf0 [ 120.332155][ T5725] RDX: 0000000009e5ff28 RSI: 00007ffc97eb4ba0 RDI: 00007fd5018b0010 [ 120.332166][ T5725] RBP: 00007ffc97eb4b4c R08: 002532a379477d0c R09: 0000000000000001 [ 120.332177][ T5725] R10: 00000000000059c8 R11: 0000000000000246 R12: 0000000000001388 [ 120.332184][ T5725] R13: 00000000000927c0 R14: 000000000001cb1c R15: 00007ffc97eb4ba0 [ 120.332211][ T5725] [ 120.335555][ T5725] memory: usage 307200kB, limit 307200kB, failcnt 30857 [ 120.335569][ T5725] memory+swap: usage 431692kB, limit 9007199254740988kB, failcnt 0 [ 120.335579][ T5725] kmem: usage 7488kB, limit 9007199254740988kB, failcnt 0 [ 120.335589][ T5725] Memory cgroup stats for /syz1: [ 120.335698][ T5725] cache 306778112 [ 120.335704][ T5725] rss 98304 [ 120.335710][ T5725] rss_huge 0 [ 120.335716][ T5725] shmem 306765824 [ 120.335722][ T5725] mapped_file 811008 [ 120.335728][ T5725] dirty 0 [ 120.335734][ T5725] writeback 0 [ 120.335740][ T5725] workingset_refault_anon 45 [ 120.335747][ T5725] workingset_refault_file 5340 [ 120.335754][ T5725] swap 127479808 [ 120.335760][ T5725] swapcached 209432576 [ 120.335766][ T5725] pgpgin 212894 [ 120.335772][ T5725] pgpgout 138477 [ 120.335779][ T5725] pgfault 62905 [ 120.335785][ T5725] pgmajfault 31 [ 120.335791][ T5725] inactive_anon 285519872 [ 120.335797][ T5725] active_anon 21372928 [ 120.335802][ T5725] inactive_file 8192 [ 120.335806][ T5725] active_file 0 [ 120.335811][ T5725] unevictable 0 [ 120.335817][ T5725] hierarchical_memory_limit 314572800 [ 120.335862][ T5725] hierarchical_memsw_limit 9223372036854771712 [ 120.335870][ T5725] total_cache 306778112 [ 120.335877][ T5725] total_rss 98304 [ 120.335884][ T5725] total_rss_huge 0 [ 120.335890][ T5725] total_shmem 306765824 [ 120.335897][ T5725] total_mapped_file 811008 [ 120.335901][ T5725] total_dirty 0 [ 120.335905][ T5725] total_writeback 0 [ 120.335912][ T5725] total_workingset_refault_anon 45 [ 120.335918][ T5725] total_workingset_refault_file 5340 [ 120.335925][ T5725] total_swap 127479808 [ 120.335931][ T5725] total_swapcached 209432576 [ 120.335938][ T5725] total_pgpgin 212894 [ 120.335964][ T5725] total_pgpgout 138477 [ 120.335973][ T5725] total_pgfault 62905 [ 120.335980][ T5725] total_pgmajfault 31 [ 120.335986][ T5725] total_inactive_anon 285519872 [ 120.335993][ T5725] total_active_anon 21372928 [ 120.336000][ T5725] total_inactive_file 8192 [ 120.336007][ T5725] total_active_file 0 [ 120.336014][ T5725] total_unevictable 0 [ 120.336019][ T5725] anon_cost 3096 [ 120.336023][ T5725] file_cost 13284 [ 120.336029][ T5725] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.923,pid=9117,uid=0 [ 120.336106][ T5725] Memory cgroup out of memory: Killed process 9117 (syz.1.923) total-vm:98948kB, anon-rss:1304kB, file-rss:57412kB, shmem-rss:0kB, UID:0 pgtables:208kB oom_score_adj:1000 [ 120.713763][ T42] usb 6-1: USB disconnect, device number 16 [ 120.756863][ T42] Unregistered device nBox DVB-T Dongle [ 120.757631][ T42] as10x_usb: device has been disconnected [ 121.257114][ T9175] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 121.262474][ T9175] netlink: 28 bytes leftover after parsing attributes in process `syz.1.933'. [ 122.055204][ T43] audit: type=1400 audit(1791966570.245:771): avc: denied { write } for pid=9179 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.092223][ T43] audit: type=1400 audit(1791966570.285:772): avc: denied { nlmsg_read } for pid=9188 comm="syz.1.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 122.103472][ T9187] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 122.141261][ T43] audit: type=1400 audit(1791966570.335:773): avc: denied { write } for pid=9195 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.162359][ T43] audit: type=1400 audit(1791966570.355:774): avc: denied { setattr } for pid=9183 comm="syz.3.936" name="/" dev="9p" ino=71827675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.180287][ T9197] 9pnet_virtio: no channels available for device syz [ 122.264677][ T9119] syz.1.923 (9119) used greatest stack depth: 18632 bytes left [ 122.279729][ T43] audit: type=1400 audit(1791966570.475:775): avc: denied { write } for pid=9205 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.353923][ T9220] binder: 9216:9220 ioctl c0306201 200000000640 returned -22 [ 122.354087][ T9220] binder: 9216:9220 ioctl c0189374 ffffffff81000000 returned -22 [ 122.359464][ T43] audit: type=1400 audit(1791966570.555:776): avc: denied { write } for pid=9218 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.385831][ T9209] sl0: header compression turned on [ 122.389510][ T9223] ip_tables: iptables: counters copy to user failed while replacing table [ 122.400398][ T9223] tmpfs: Bad value for 'mpol' [ 122.441098][ T9228] netlink: 24 bytes leftover after parsing attributes in process `syz.1.945'. [ 122.459174][ T43] audit: type=1400 audit(1791966570.655:777): avc: denied { write } for pid=9226 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.471223][ T9228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.945'. [ 122.524874][ T43] audit: type=1400 audit(1791966570.715:778): avc: denied { write } for pid=9234 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.533563][ T9228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.945'. [ 122.560963][ T9228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.945'. [ 122.561039][ T9228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.945'. [ 122.561107][ T9228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.945'. [ 122.561175][ T9228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.945'. [ 122.561244][ T9228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.945'. [ 122.561313][ T9228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.945'. [ 122.638804][ T9245] netlink: 'syz.1.949': attribute type 5 has an invalid length. [ 122.723218][ T43] audit: type=1400 audit(1791966570.915:779): avc: denied { ioctl } for pid=9249 comm="syz.1.951" path="socket:[34241]" dev="sockfs" ino=34241 ioctlcmd=0x5882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 122.723587][ T43] audit: type=1400 audit(1791966570.915:780): avc: denied { connect } for pid=9249 comm="syz.1.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 123.594501][ T9303] SELinux: security_context_str_to_sid () failed with errno=-22 [ 123.673112][ T9311] overlayfs: failed to resolve './file1': -2 [ 123.693364][ T9311] input: syz1 as /devices/virtual/input/input17 [ 124.007684][ T9352] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 124.008241][ T9352] ALSA: mixer_oss: invalid index 137438 [ 124.537301][ T9409] comedi: No check for data length of config insn id 768 is implemented [ 124.537313][ T9409] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 124.537320][ T9409] comedi: Assuming n=15 is correct [ 124.542651][ T9409] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 125.097226][ T9434] ip_tables: iptables: counters copy to user failed while replacing table [ 125.097500][ T9434] ip_tables: iptables: counters copy to user failed while replacing table [ 125.097825][ T9434] ip_tables: iptables: counters copy to user failed while replacing table [ 125.098096][ T9434] ip_tables: iptables: counters copy to user failed while replacing table [ 125.098343][ T9434] ip_tables: iptables: counters copy to user failed while replacing table [ 125.098605][ T9434] ip_tables: iptables: counters copy to user failed while replacing table [ 125.098850][ T9434] ip_tables: iptables: counters copy to user failed while replacing table [ 125.099319][ T9434] ip_tables: iptables: counters copy to user failed while replacing table [ 125.651692][ T9457] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 125.987759][ T9488] netlink: 'syz.4.1010': attribute type 7 has an invalid length. [ 126.473552][ T9497] __nla_validate_parse: 60 callbacks suppressed [ 126.473570][ T9497] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1012'. [ 126.664561][ T9517] debugfs: Invalid uid '0x00000000ffffffff' [ 126.880926][ T9535] netlink: 'syz.1.1024': attribute type 63 has an invalid length. [ 126.880940][ T9535] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1024'. [ 126.995243][ T9540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1025'. [ 127.072744][ T43] kauditd_printk_skb: 25 callbacks suppressed [ 127.072763][ T43] audit: type=1400 audit(1791966575.265:806): avc: denied { write } for pid=9547 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.122607][ T43] audit: type=1400 audit(1791966575.315:807): avc: denied { write } for pid=9552 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.247146][ T9567] net_ratelimit: 57 callbacks suppressed [ 127.247158][ T9567] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 127.258409][ T43] audit: type=1800 audit(1791966575.455:808): pid=9567 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1033" name="syzkaller1" dev="sda1" ino=2039 res=0 errno=0 [ 127.286667][ T9571] netlink: 'syz.1.1034': attribute type 21 has an invalid length. [ 127.286689][ T9571] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1034'. [ 127.286743][ T9571] netlink: 'syz.1.1034': attribute type 4 has an invalid length. [ 127.286754][ T9571] netlink: 'syz.1.1034': attribute type 5 has an invalid length. [ 127.286765][ T9571] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1034'. [ 127.289162][ T9571] overlayfs: missing 'lowerdir' [ 127.317697][ T9576] netlink: Conntrack attr has 8 unknown bytes [ 127.317714][ T9576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.353849][ T9580] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 127.551682][ T9596] FAULT_INJECTION: forcing a failure. [ 127.551682][ T9596] name failslab, interval 1, probability 0, space 0, times 0 [ 127.551704][ T9596] CPU: 1 UID: 0 PID: 9596 Comm: syz.2.1043 Tainted: G L syzkaller #0 PREEMPT(full) [ 127.551720][ T9596] Tainted: [L]=SOFTLOCKUP [ 127.551724][ T9596] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 127.551731][ T9596] Call Trace: [ 127.551735][ T9596] [ 127.551741][ T9596] dump_stack_lvl+0x100/0x190 [ 127.551806][ T9596] should_fail_ex.cold+0x5/0xa [ 127.551823][ T9596] should_failslab+0xc2/0x120 [ 127.551858][ T9596] __kvmalloc_node_noprof+0x113/0x9b0 [ 127.551872][ T9596] ? __kmalloc_cache_noprof+0x281/0x6d0 [ 127.551885][ T9596] ? percpu_ref_init+0xec/0x3f0 [ 127.551897][ T9596] ? io_alloc_cache_init+0x38/0x170 [ 127.551929][ T9596] io_alloc_cache_init+0x38/0x170 [ 127.551945][ T9596] io_uring_setup.cold+0x46e/0x1c7e [ 127.551958][ T9596] ? lock_acquire+0x1d1/0x380 [ 127.551976][ T9596] ? avc_has_perm_noaudit+0x56/0x470 [ 127.551989][ T9596] ? __pfx_io_uring_setup+0x10/0x10 [ 127.552004][ T9596] ? find_held_lock+0x2b/0x80 [ 127.552020][ T9596] ? avc_has_perm_noaudit+0x11e/0x470 [ 127.552032][ T9596] ? avc_has_perm_noaudit+0x11e/0x470 [ 127.552052][ T9596] ? __pfx___x64_sys_futex+0x10/0x10 [ 127.552068][ T9596] ? ksys_write+0x1ac/0x250 [ 127.552081][ T9596] ? __pfx_ksys_write+0x10/0x10 [ 127.552097][ T9596] __x64_sys_io_uring_setup+0xc2/0x170 [ 127.552115][ T9596] do_syscall_64+0x123/0x790 [ 127.552152][ T9596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.552164][ T9596] RIP: 0033:0x7f374c79e2d9 [ 127.552173][ T9596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.552184][ T9596] RSP: 002b:00007f374d5ecfb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 127.552195][ T9596] RAX: ffffffffffffffda RBX: 0000200000000200 RCX: 00007f374c79e2d9 [ 127.552202][ T9596] RDX: 00002000000002c0 RSI: 0000200000000200 RDI: 00000000000030da [ 127.552209][ T9596] RBP: 00007f374c835888 R08: 0000000000000000 R09: 0000000000000000 [ 127.552216][ T9596] R10: 0000200000000300 R11: 0000000000000206 R12: 00002000000002c0 [ 127.552222][ T9596] R13: 0000200000000300 R14: 0000200000000280 R15: 00007ffdc7947e28 [ 127.552236][ T9596] [ 127.587675][ T43] audit: type=1400 audit(1791966575.785:809): avc: denied { connect } for pid=9598 comm="syz.2.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 127.588458][ T43] audit: type=1400 audit(1791966575.785:810): avc: denied { create } for pid=9591 comm="syz.1.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 127.588918][ T43] audit: type=1400 audit(1791966575.785:811): avc: denied { write } for pid=9591 comm="syz.1.1041" path="socket:[35665]" dev="sockfs" ino=35665 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 127.591907][ T43] audit: type=1400 audit(1791966575.785:812): avc: denied { getopt } for pid=9598 comm="syz.2.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 127.592161][ T9592] sd 0:0:0:0: PR command failed: 1026 [ 127.592199][ T9592] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 127.592237][ T9592] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 127.694645][ T9602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1045'. [ 127.780050][ T9606] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1046'. [ 127.798790][ T9606] gretap0: entered promiscuous mode [ 127.802161][ T9605] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1046'. [ 127.802319][ T9605] 0ªî{X¹¦: renamed from gretap0 [ 127.868064][ T9605] 0ªî{X¹¦: left promiscuous mode [ 127.868087][ T9605] 0ªî{X¹¦: entered allmulticast mode [ 127.869184][ T9605] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 127.876026][ T9608] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1047'. [ 127.924212][ T9612] ip_tables: iptables: counters copy to user failed while replacing table [ 128.146444][ T851] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 128.203325][ T43] audit: type=1400 audit(1791966576.395:813): avc: denied { write } for pid=9624 comm="syz.4.1055" path="socket:[36966]" dev="sockfs" ino=36966 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 128.247090][ T43] audit: type=1400 audit(1791966576.445:814): avc: denied { ioctl } for pid=9624 comm="syz.4.1055" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 128.320184][ T851] usb 7-1: unable to get BOS descriptor or descriptor too short [ 128.320229][ T851] usb 7-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 128.321531][ T851] usb 7-1: config 142 has an invalid interface number: 251 but max is 0 [ 128.321554][ T851] usb 7-1: config 142 has no interface number 0 [ 128.321585][ T851] usb 7-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 128.321607][ T851] usb 7-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 128.321628][ T851] usb 7-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 128.321647][ T851] usb 7-1: config 142 interface 251 has no altsetting 0 [ 128.325555][ T851] usb 7-1: string descriptor 0 read error: -22 [ 128.325716][ T851] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.331074][ T9610] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 128.331235][ T9610] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 128.358781][ T851] cypress_m8 7-1:142.251: HID->COM RS232 Adapter converter detected [ 128.362314][ T851] usb 7-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 128.411035][ T9634] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1057'. [ 128.427890][ T5734] Bluetooth: hci2: unexpected event for opcode 0x0413 [ 128.430697][ T9636] openvswitch: netlink: Message has 8 unknown bytes. [ 128.595848][ T9643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.596202][ T9643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.610288][ T9644] fuse: Unknown parameter '2[/†Ëz©Èd{„QÕ‘“¥û6[ :3á ï…SP~¦&å^ÈÒAN’mŠ–Ø;w´¡†šäœB“¿’¬Y]HÿYý`$†M°ikÓ˜•ÁaBÑ…EAÖ#÷'‚ÔŽ²' [ 128.634714][ T43] audit: type=1400 audit(1791966576.825:815): avc: denied { connect } for pid=9642 comm="syz.4.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 128.912326][ T9647] cyphidcom ttyUSB0: cypress_serial_control - failed to retrieve serial line settings - -71 [ 128.912344][ T9647] cyphidcom ttyUSB0: cypress_m8 suspending failing port 0 - interval might be too short [ 128.912432][ T1034] usb 7-1: USB disconnect, device number 13 [ 128.912553][ C3] usb 7-1: cypress_read_int_callback - unexpected nonzero read status received: -71 [ 128.925682][ T1034] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 128.925946][ T1034] cypress_m8 7-1:142.251: device disconnected [ 129.015497][ T9677] netlink: 'syz.4.1073': attribute type 4 has an invalid length. [ 129.045553][ T851] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 129.195542][ T851] usb 6-1: Using ep0 maxpacket: 16 [ 129.196382][ T851] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 129.197434][ T851] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 129.197455][ T851] usb 6-1: config 0 has no interface number 0 [ 129.199606][ T851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.199626][ T851] usb 6-1: Product: syz [ 129.199639][ T851] usb 6-1: Manufacturer: syz [ 129.199652][ T851] usb 6-1: SerialNumber: syz [ 129.202843][ T851] usb 6-1: config 0 descriptor?? [ 129.204905][ T851] hub 6-1:0.132: bad descriptor, ignoring hub [ 129.204925][ T851] hub 6-1:0.132: probe with driver hub failed with error -5 [ 129.209379][ T851] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.132/input/input18 [ 129.438382][ T42] usb 6-1: USB disconnect, device number 17 [ 130.036487][ T9696] vlan2: entered allmulticast mode [ 130.036500][ T9696] bond0: entered allmulticast mode [ 130.036507][ T9696] bond_slave_0: entered allmulticast mode [ 130.036516][ T9696] bond_slave_1: entered allmulticast mode [ 130.086409][ T9707] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 130.243978][ T9722] ªªªªª): renamed from hsr0 (while UP) [ 130.294912][ T9726] overlayfs: missing 'workdir' [ 130.635599][ T42] usb 8-1: new low-speed USB device number 17 using dummy_hcd [ 130.758618][ T9734] trusted_key: encrypted_key: master key parameter '{FãÎ.äkR†ù3kP³/éyÒÏìž%Æ™Û<=.’+jêvžÑ‹ì_s4B¼#ä³MXJxL~7šÃ?½ÜhY»¤Ùu©âý ÁžÃ̆?v¢îó.ñd™xƒ¨Ÿ,ÜøL0–—ƒ®®ÆSƹV¥ˆ–Áœ6' is invalid [ 130.775781][ T42] usb 8-1: device descriptor read/64, error -71 [ 130.859243][ T9734] bonding: unable to delete non-existent b [ 131.016518][ T42] usb 8-1: new low-speed USB device number 18 using dummy_hcd [ 131.077529][ T9756] syzkaller1: entered promiscuous mode [ 131.077548][ T9756] syzkaller1: entered allmulticast mode [ 131.145548][ T42] usb 8-1: device descriptor read/64, error -71 [ 131.223941][ T9766] batman_adv: batadv0: Interface deactivated: syz_tun [ 131.238716][ T9766] batman_adv: batadv0: Removing interface: syz_tun [ 131.255746][ T42] usb usb8-port1: attempt power cycle [ 131.408110][ T9769] binder: 9768:9769 ioctl c0306201 2000000014c0 returned -14 [ 131.595519][ T42] usb 8-1: new low-speed USB device number 19 using dummy_hcd [ 131.616096][ T42] usb 8-1: device descriptor read/8, error -71 [ 131.856649][ T42] usb 8-1: new low-speed USB device number 20 using dummy_hcd [ 131.876060][ T42] usb 8-1: device descriptor read/8, error -71 [ 131.985809][ T42] usb usb8-port1: unable to enumerate USB device [ 132.273907][ T9771] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 132.273988][ T9771] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 132.287047][ T9771] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 132.290315][ T9771] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 132.290345][ T9771] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 132.292524][ T9771] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 132.292557][ T9771] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 132.299558][ T9771] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 132.315117][ T9779] fuse: Bad value for 'fd' [ 132.315328][ T9778] fuse: Bad value for 'fd' [ 132.318342][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 132.318352][ T43] audit: type=1400 audit(1791966580.515:823): avc: denied { write } for pid=9776 comm="syz.1.1104" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 132.318536][ T43] audit: type=1400 audit(1791966580.515:824): avc: denied { ioctl } for pid=9776 comm="syz.1.1104" path="/dev/ppp" dev="devtmpfs" ino=729 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 132.325531][ T9771] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 132.325563][ T9771] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 132.509324][ T43] audit: type=1800 audit(1791966580.705:825): pid=9804 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1113" name="syzkaller1" dev="sda1" ino=2039 res=0 errno=0 [ 132.577145][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.577186][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.600980][ T9815] FAULT_INJECTION: forcing a failure. [ 132.600980][ T9815] name failslab, interval 1, probability 0, space 0, times 0 [ 132.601013][ T9815] CPU: 3 UID: 0 PID: 9815 Comm: syz.2.1115 Tainted: G L syzkaller #0 PREEMPT(full) [ 132.601041][ T9815] Tainted: [L]=SOFTLOCKUP [ 132.601048][ T9815] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 132.601060][ T9815] Call Trace: [ 132.601068][ T9815] [ 132.601076][ T9815] dump_stack_lvl+0x100/0x190 [ 132.601118][ T9815] should_fail_ex.cold+0x5/0xa [ 132.601151][ T9815] should_failslab+0xc2/0x120 [ 132.601187][ T9815] __kmalloc_noprof+0xfc/0x840 [ 132.601212][ T9815] ? kvm_dev_ioctl+0x131f/0x1b50 [ 132.601247][ T9815] kvm_dev_ioctl+0x131f/0x1b50 [ 132.601299][ T9815] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 132.601327][ T9815] ? selinux_file_ioctl+0x13b/0x290 [ 132.601355][ T9815] ? selinux_file_ioctl+0xb6/0x290 [ 132.601399][ T9815] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 132.601425][ T9815] __x64_sys_ioctl+0x18e/0x210 [ 132.601452][ T9815] do_syscall_64+0x123/0x790 [ 132.601488][ T9815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.601509][ T9815] RIP: 0033:0x7f374c79e2d9 [ 132.601531][ T9815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.601569][ T9815] RSP: 002b:00007f374d5ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 132.601589][ T9815] RAX: ffffffffffffffda RBX: 00007f374ca25fa0 RCX: 00007f374c79e2d9 [ 132.601602][ T9815] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 132.601614][ T9815] RBP: 00007f374c835888 R08: 0000000000000000 R09: 0000000000000000 [ 132.601624][ T9815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.601636][ T9815] R13: 00007f374ca26038 R14: 00007f374ca25fa0 R15: 00007ffdc7947e28 [ 132.601663][ T9815] [ 132.690681][ T9818] xt_CT: No such helper "snmp" [ 132.723049][ T9820] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 132.783948][ T43] audit: type=1400 audit(1791966580.975:826): avc: denied { write } for pid=9828 comm="syz.2.1120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 132.785101][ T43] audit: type=1400 audit(1791966580.975:827): avc: denied { ioctl } for pid=9828 comm="syz.2.1120" path="socket:[36386]" dev="sockfs" ino=36386 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 132.785519][ T43] audit: type=1400 audit(1791966580.975:828): avc: denied { getopt } for pid=9828 comm="syz.2.1120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 132.787970][ T43] audit: type=1400 audit(1791966580.985:829): avc: denied { ioctl } for pid=9828 comm="syz.2.1120" path="socket:[36392]" dev="sockfs" ino=36392 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 132.823020][ T5739] Bluetooth: hci3: SCO packet too small [ 133.165571][ T42] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 133.336294][ T42] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 133.337229][ T42] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.337252][ T42] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 133.337265][ T42] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 133.337276][ T42] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 133.337288][ T42] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 133.337306][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.341522][ T9845] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 133.343928][ T42] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 133.344841][ T42] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 133.344886][ T42] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 133.358129][ T43] audit: type=1400 audit(1791966581.555:830): avc: denied { read } for pid=9846 comm="syz.4.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 133.391243][ T42] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 133.399106][ T43] audit: type=1326 audit(1791966581.595:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9849 comm="syz.1.1126" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd50099e2d9 code=0x0 [ 133.400529][ T42] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 133.400569][ T42] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 133.402019][ T42] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 133.415942][ T9847] overlayfs: failed to resolve './file2': -2 [ 133.500723][ T43] audit: type=1400 audit(1791966581.695:832): avc: denied { append } for pid=9849 comm="syz.1.1126" name="loop5" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 133.502919][ T9860] loop5: detected capacity change from 0 to 7 [ 133.507227][ T9860] Dev loop5: unable to read RDB block 7 [ 133.507248][ T9860] loop5: unable to read partition table [ 133.507332][ T9860] loop5: partition table beyond EOD, truncated [ 133.507348][ T9860] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 133.615482][ T5739] Bluetooth: hci1: command 0x0c1a tx timeout [ 133.660744][ T5809] usb 7-1: USB disconnect, device number 14 [ 133.668462][ T5809] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 133.671806][ T5809] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 133.672174][ T5809] keyspan 7-1:1.0: device disconnected [ 134.269757][ T9870] __nla_validate_parse: 74 callbacks suppressed [ 134.269775][ T9870] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1132'. [ 134.269799][ T9870] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1132'. [ 134.335633][ T5739] Bluetooth: hci3: command 0x0c1a tx timeout [ 134.335669][ T5739] Bluetooth: hci2: command 0x0406 tx timeout [ 134.365341][ T9877] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1135'. [ 134.392338][ T9888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1137'. [ 134.405729][ T5734] Bluetooth: hci0: command 0x0406 tx timeout [ 134.424315][ T9892] bridge0: port 3(syz_tun) entered blocking state [ 134.424450][ T9892] bridge0: port 3(syz_tun) entered disabled state [ 134.424625][ T9892] syz_tun: entered allmulticast mode [ 134.434235][ T9892] syz_tun: entered promiscuous mode [ 134.434621][ T9892] bridge0: port 3(syz_tun) entered blocking state [ 134.434691][ T9892] bridge0: port 3(syz_tun) entered forwarding state [ 134.747993][ T9909] geneve2: entered promiscuous mode [ 134.821929][ T9911] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1144'. [ 135.070175][ T9915] comedi comedi0: No hardware detected at I/O base 0x300 [ 135.118811][ T9918] Config c/1 of g1 needs at least one function. [ 135.118871][ T9918] udc usbip-vudc.0: failed to start g1: -22 [ 135.118882][ T9918] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 135.120619][ T9918] UDC core: g1: couldn't find an available UDC or it's busy [ 135.241714][ T9925] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.290784][ T9930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1151'. [ 135.548550][ T9951] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 135.583499][ T9951] loop6: detected capacity change from 0 to 1 [ 135.592136][ T9951] Dev loop6: unable to read RDB block 1 [ 135.592172][ T9951] loop6: unable to read partition table [ 135.592319][ T9951] loop6: partition table beyond EOD, truncated [ 135.592335][ T9951] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 135.612610][ T5137] Dev loop6: unable to read RDB block 1 [ 135.612641][ T5137] loop6: unable to read partition table [ 135.612803][ T5137] loop6: partition table beyond EOD, truncated [ 135.661386][ T9954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1160'. [ 135.695587][ T5734] Bluetooth: hci1: command 0x0c1a tx timeout [ 135.785768][ T35] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 135.935606][ T35] usb 7-1: Using ep0 maxpacket: 8 [ 135.936378][ T35] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 135.938174][ T35] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 135.938213][ T35] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 135.938236][ T35] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 135.938256][ T35] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 135.938277][ T35] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 135.938297][ T35] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.938330][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.143053][ T35] usb 7-1: GET_CAPABILITIES returned 0 [ 136.143077][ T35] usbtmc 7-1:16.0: can't read capabilities [ 136.153738][ T30] usb 7-1: USB disconnect, device number 15 [ 136.406047][ T5734] Bluetooth: hci2: command 0x0406 tx timeout [ 136.406074][ T5734] Bluetooth: hci3: command 0x0c1a tx timeout [ 136.485546][ T5739] Bluetooth: hci0: command 0x0406 tx timeout [ 136.553126][ T9969] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 136.730160][ T9974] IPv6: addrconf: prefix option has invalid lifetime [ 136.781492][ T9975] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 136.907913][ T9983] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 137.113199][ T9995] mmap: syz.2.1170 (9995) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 137.352913][T10009] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1173'. [ 137.396321][ T43] kauditd_printk_skb: 15 callbacks suppressed [ 137.396339][ T43] audit: type=1400 audit(1791966585.595:848): avc: denied { setopt } for pid=10012 comm="syz.3.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 137.469674][T10017] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1175'. [ 137.614768][T10023] XFS (sr0): Invalid superblock magic number [ 137.711201][T10032] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 137.765684][ T5734] Bluetooth: hci1: command 0x0c1a tx timeout [ 137.845541][ T35] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 137.987656][T10037] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 138.016084][ T35] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 138.017494][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.017517][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.017533][ T35] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 138.017562][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.024240][ T35] usb 6-1: config 0 descriptor?? [ 138.206956][T10042] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1183'. [ 138.255559][ T7004] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 138.279694][ T43] audit: type=1400 audit(1791966586.475:849): avc: denied { write } for pid=10045 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.321051][ T43] audit: type=1400 audit(1791966586.515:850): avc: denied { write } for pid=10048 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.406352][ T7004] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 138.408737][ T7004] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 138.408761][ T7004] usb 7-1: Product: syz [ 138.408772][ T7004] usb 7-1: SerialNumber: syz [ 138.410761][ T7004] usb 7-1: config 0 descriptor?? [ 138.437270][ T43] audit: type=1400 audit(1791966586.635:851): avc: denied { write } for pid=10051 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.448624][ T35] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 138.486967][ T5734] Bluetooth: hci3: command 0x0c1a tx timeout [ 138.489145][ T43] audit: type=1400 audit(1791966586.685:852): avc: denied { write } for pid=10055 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.643242][ T7004] usb 7-1: USB disconnect, device number 16 [ 138.745293][T10058] syzkaller0: entered promiscuous mode [ 138.745362][T10058] syzkaller0: entered allmulticast mode [ 138.748704][T10058] tipc: Started in network mode [ 138.748725][T10058] tipc: Node identity d2d9a3e922af, cluster identity 4711 [ 138.749686][T10058] tipc: Enabled bearer , priority 0 [ 138.989881][ T43] audit: type=1400 audit(1791966587.185:853): avc: denied { write } for pid=10059 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.042020][ T43] audit: type=1400 audit(1791966587.235:854): avc: denied { write } for pid=10062 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.102776][ T43] audit: type=1400 audit(1791966587.295:855): avc: denied { write } for pid=10064 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.142957][ T43] audit: type=1400 audit(1791966587.335:856): avc: denied { write } for pid=10067 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.171289][T10070] xt_l2tp: wrong L2TP version: 4 [ 139.203769][T10074] bridge_slave_0: left allmulticast mode [ 139.203831][T10074] bridge_slave_0: left promiscuous mode [ 139.205005][T10074] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.210175][ T43] audit: type=1400 audit(1791966587.405:857): avc: denied { write } for pid=10071 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.212783][T10074] bridge_slave_1: left allmulticast mode [ 139.212796][T10074] bridge_slave_1: left promiscuous mode [ 139.212924][T10074] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.229839][T10074] bond0: (slave bond_slave_0): Releasing backup interface [ 139.234184][T10074] bond0: (slave bond_slave_1): Releasing backup interface [ 139.243686][T10074] team0: Port device team_slave_0 removed [ 139.247134][T10074] team0: Port device team_slave_1 removed [ 139.247534][T10074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.247546][T10074] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.249169][T10074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.249180][T10074] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.250917][T10074] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 139.732700][T10024] tipc: Resetting bearer [ 139.742543][T10024] tipc: Disabling bearer [ 140.530383][ T35] usb 6-1: USB disconnect, device number 18 [ 142.336209][T10109] FAULT_INJECTION: forcing a failure. [ 142.336209][T10109] name failslab, interval 1, probability 0, space 0, times 0 [ 142.336241][T10109] CPU: 1 UID: 0 PID: 10109 Comm: syz.1.1193 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.336265][T10109] Tainted: [L]=SOFTLOCKUP [ 142.336272][T10109] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 142.336282][T10109] Call Trace: [ 142.336288][T10109] [ 142.336295][T10109] dump_stack_lvl+0x100/0x190 [ 142.336338][T10109] should_fail_ex.cold+0x5/0xa [ 142.336362][T10109] should_failslab+0xc2/0x120 [ 142.336392][T10109] __kmalloc_cache_noprof+0x91/0x6d0 [ 142.336411][T10109] ? rcu_is_watching+0x13/0xc0 [ 142.336435][T10109] ? vhost_task_create+0xee/0x370 [ 142.336454][T10109] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 142.336478][T10109] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 142.336504][T10109] vhost_task_create+0xee/0x370 [ 142.336522][T10109] ? __pfx_vhost_task_create+0x10/0x10 [ 142.336545][T10109] ? __pfx_vhost_task_fn+0x10/0x10 [ 142.336564][T10109] ? register_lock_class+0x3f/0x7b0 [ 142.336583][T10109] ? rcu_is_watching+0x13/0xc0 [ 142.336606][T10109] ? trace_contention_end+0x126/0x160 [ 142.336633][T10109] kvm_mmu_post_init_vm+0x1b3/0x360 [ 142.336655][T10109] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 142.336678][T10109] ? __pfx___mutex_lock+0x10/0x10 [ 142.336706][T10109] ? kasan_quarantine_put+0x104/0x240 [ 142.336730][T10109] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 142.336751][T10109] ? lock_acquire+0x1d1/0x380 [ 142.336770][T10109] ? do_raw_write_lock+0x11e/0x260 [ 142.336792][T10109] ? find_held_lock+0x2b/0x80 [ 142.336816][T10109] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 142.336839][T10109] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 142.336867][T10109] kvm_vcpu_ioctl+0x730/0x1700 [ 142.336892][T10109] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 142.336916][T10109] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 142.336939][T10109] ? do_vfs_ioctl+0x226/0x13e0 [ 142.336960][T10109] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 142.336978][T10109] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 142.337012][T10109] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 142.337040][T10109] ? __fget_files+0x34/0x3d0 [ 142.337074][T10109] ? selinux_file_ioctl+0x13b/0x290 [ 142.337096][T10109] ? selinux_file_ioctl+0xb6/0x290 [ 142.337120][T10109] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 142.337144][T10109] __x64_sys_ioctl+0x18e/0x210 [ 142.337167][T10109] do_syscall_64+0x123/0x790 [ 142.337193][T10109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.337210][T10109] RIP: 0033:0x7fd50099e2d9 [ 142.337225][T10109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.337241][T10109] RSP: 002b:00007fd50186d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.337259][T10109] RAX: ffffffffffffffda RBX: 00007fd500c26180 RCX: 00007fd50099e2d9 [ 142.337270][T10109] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 142.337281][T10109] RBP: 00007fd50186d090 R08: 0000000000000000 R09: 0000000000000000 [ 142.337291][T10109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.337300][T10109] R13: 00007fd500c26218 R14: 00007fd500c26180 R15: 00007ffc97eb47a8 [ 142.337324][T10109] [ 143.605511][ T5739] Bluetooth: hci2: command 0x0406 tx timeout [ 144.399717][T10134] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1202'. [ 144.402146][T10136] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1202'. [ 144.690832][T10142] FAULT_INJECTION: forcing a failure. [ 144.690832][T10142] name failslab, interval 1, probability 0, space 0, times 0 [ 144.690864][T10142] CPU: 2 UID: 0 PID: 10142 Comm: syz.1.1203 Tainted: G L syzkaller #0 PREEMPT(full) [ 144.690887][T10142] Tainted: [L]=SOFTLOCKUP [ 144.690894][T10142] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 144.690905][T10142] Call Trace: [ 144.690911][T10142] [ 144.690919][T10142] dump_stack_lvl+0x100/0x190 [ 144.690951][T10142] should_fail_ex.cold+0x5/0xa [ 144.690984][T10142] should_failslab+0xc2/0x120 [ 144.691008][T10142] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 144.691033][T10142] ? copy_process+0x6a2/0x8380 [ 144.691059][T10142] copy_process+0x6a2/0x8380 [ 144.691094][T10142] ? __pfx_copy_process+0x10/0x10 [ 144.691113][T10142] ? kasan_save_track+0x14/0x30 [ 144.691136][T10142] ? __kasan_kmalloc+0xaa/0xb0 [ 144.691160][T10142] ? lockdep_init_map_type+0x5c/0x250 [ 144.691184][T10142] ? lockdep_init_map_type+0x5c/0x250 [ 144.691207][T10142] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 144.691233][T10142] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 144.691258][T10142] vhost_task_create+0x1db/0x370 [ 144.691277][T10142] ? __pfx_vhost_task_create+0x10/0x10 [ 144.691303][T10142] ? __pfx_vhost_task_fn+0x10/0x10 [ 144.691323][T10142] ? register_lock_class+0x3f/0x7b0 [ 144.691342][T10142] ? rcu_is_watching+0x13/0xc0 [ 144.691376][T10142] ? trace_contention_end+0x126/0x160 [ 144.691403][T10142] kvm_mmu_post_init_vm+0x1b3/0x360 [ 144.691427][T10142] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 144.691451][T10142] ? __pfx___mutex_lock+0x10/0x10 [ 144.691473][T10142] ? kasan_quarantine_put+0x104/0x240 [ 144.691499][T10142] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 144.691520][T10142] ? lock_acquire+0x1d1/0x380 [ 144.691541][T10142] ? do_raw_write_lock+0x11e/0x260 [ 144.691565][T10142] ? find_held_lock+0x2b/0x80 [ 144.691589][T10142] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 144.691612][T10142] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 144.691643][T10142] kvm_vcpu_ioctl+0x730/0x1700 [ 144.691670][T10142] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 144.691694][T10142] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 144.691719][T10142] ? do_vfs_ioctl+0x226/0x13e0 [ 144.691742][T10142] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 144.691762][T10142] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 144.691791][T10142] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 144.691819][T10142] ? __fget_files+0x34/0x3d0 [ 144.691885][T10142] ? selinux_file_ioctl+0x13b/0x290 [ 144.691909][T10142] ? selinux_file_ioctl+0xb6/0x290 [ 144.691933][T10142] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 144.691964][T10142] __x64_sys_ioctl+0x18e/0x210 [ 144.691989][T10142] do_syscall_64+0x123/0x790 [ 144.692016][T10142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.692035][T10142] RIP: 0033:0x7fd50099e2d9 [ 144.692049][T10142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.692065][T10142] RSP: 002b:00007fd50186d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 144.692085][T10142] RAX: ffffffffffffffda RBX: 00007fd500c26180 RCX: 00007fd50099e2d9 [ 144.692098][T10142] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 144.692109][T10142] RBP: 00007fd50186d090 R08: 0000000000000000 R09: 0000000000000000 [ 144.692121][T10142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.692132][T10142] R13: 00007fd500c26218 R14: 00007fd500c26180 R15: 00007ffc97eb47a8 [ 144.692157][T10142] [ 145.501209][T10144] 8021q: VLANs not supported on ip6_vti0 [ 145.594927][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 145.594950][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 145.594963][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xf698 instead [ 145.594974][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xf444 instead [ 145.594984][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 145.594993][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 145.595002][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 145.595019][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 145.595045][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 145.595073][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 145.595088][T10147] jffs2: Further such events for this erase block will not be printed [ 145.595361][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 145.595519][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 145.595538][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xf698 instead [ 145.595557][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xf444 instead [ 145.595573][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 145.595588][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 145.595601][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 145.595617][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 145.595640][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 145.595656][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 145.595665][T10147] jffs2: Further such events for this erase block will not be printed [ 145.595871][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 145.595883][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 145.595893][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xf698 instead [ 145.595905][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xf444 instead [ 145.595931][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 145.595940][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 145.595950][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xf698 instead [ 145.595961][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xf444 instead [ 145.595984][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 145.595994][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 145.596004][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xf698 instead [ 145.596017][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xf444 instead [ 145.596040][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 145.596049][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 145.596058][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xf698 instead [ 145.596068][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xf444 instead [ 145.596091][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 145.596100][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 145.596109][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xf698 instead [ 145.596119][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xf444 instead [ 145.596142][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 145.596151][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 145.596160][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xf698 instead [ 145.596169][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xf444 instead [ 145.596192][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 145.596201][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 145.596210][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xf698 instead [ 145.596220][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xf444 instead [ 145.596242][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 145.596251][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 145.596260][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xf698 instead [ 145.596270][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xf444 instead [ 145.596292][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 145.596301][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 145.596310][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xf698 instead [ 145.596321][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xf444 instead [ 145.596344][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 145.596352][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 145.596362][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xf698 instead [ 145.596372][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xf444 instead [ 145.596395][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 145.596403][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 145.596412][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xf698 instead [ 145.596422][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xf444 instead [ 145.597129][ T43] kauditd_printk_skb: 1 callbacks suppressed [ 145.597139][ T43] audit: type=1400 audit(1791966593.785:859): avc: denied { mounton } for pid=10146 comm="syz.1.1205" path="/330/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 145.597213][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 145.597224][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 145.597234][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xf698 instead [ 145.597244][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xf444 instead [ 145.597270][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 145.597279][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 145.597289][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xf698 instead [ 145.597299][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xf444 instead [ 145.597321][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 145.597330][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 145.597339][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xf698 instead [ 145.597349][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xf444 instead [ 145.597371][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 145.597380][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 145.597389][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xf698 instead [ 145.597400][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xf444 instead [ 145.597423][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 145.597432][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 145.597441][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xf698 instead [ 145.597451][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xf444 instead [ 145.597474][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 145.597483][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 145.597492][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xf698 instead [ 145.597502][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xf444 instead [ 145.597530][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 145.597540][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 145.597550][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xf698 instead [ 145.597561][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xf444 instead [ 145.597585][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 145.597595][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 145.597604][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xf698 instead [ 145.597615][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xf444 instead [ 145.597640][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 145.597650][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 145.597659][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xf698 instead [ 145.597670][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xf444 instead [ 145.597693][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 145.597706][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 145.597715][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xf698 instead [ 145.597729][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xf444 instead [ 145.597765][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 145.597778][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 145.597796][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xf698 instead [ 145.597812][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xf444 instead [ 145.597854][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 145.597867][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 145.597876][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xf698 instead [ 145.597886][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xf444 instead [ 145.597909][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 145.597918][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 145.597927][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xf698 instead [ 145.597937][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xf444 instead [ 145.597959][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 145.597968][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 145.597977][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xf698 instead [ 145.597987][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xf444 instead [ 145.598010][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 145.598020][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 145.598030][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xf698 instead [ 145.598039][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xf444 instead [ 145.598065][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 145.598074][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 145.598083][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xf698 instead [ 145.598093][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xf444 instead [ 145.598116][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 145.598124][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 145.598133][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xf698 instead [ 145.598143][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xf444 instead [ 145.598166][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 145.598174][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 145.598183][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xf698 instead [ 145.598193][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xf444 instead [ 145.598216][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 145.598225][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 145.598235][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xf698 instead [ 145.598245][T10147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xf444 instead [ 145.598263][T10147] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 145.598268][T10147] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 148.605068][ T5739] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 148.608422][ T5739] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 148.611087][ T5739] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 148.612913][ T5739] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 148.613721][ T5739] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 148.915049][T10152] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.915186][T10152] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.915339][T10152] bridge_slave_0: entered allmulticast mode [ 148.916857][T10152] bridge_slave_0: entered promiscuous mode [ 148.919562][T10152] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.919639][T10152] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.919733][T10152] bridge_slave_1: entered allmulticast mode [ 148.921494][T10152] bridge_slave_1: entered promiscuous mode [ 148.946273][T10152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.947672][T10152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.955556][ T35] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 148.963305][T10152] team0: Port device team_slave_0 added [ 148.964778][T10152] team0: Port device team_slave_1 added [ 148.978989][T10152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.979000][T10152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 148.979012][T10152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.980050][T10152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.980059][T10152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 148.980076][T10152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.010453][T10152] hsr_slave_0: entered promiscuous mode [ 149.011259][T10152] hsr_slave_1: entered promiscuous mode [ 149.108563][ T35] usb 6-1: device descriptor read/64, error -71 [ 149.187977][T10152] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 149.191745][T10152] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 149.192547][T10152] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 149.195243][T10152] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 149.196046][T10152] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 149.201283][T10152] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 149.202553][T10152] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 149.208139][T10152] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 149.231440][T10152] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.231527][T10152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.231738][T10152] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.231847][T10152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.269579][T10152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.274504][ T8327] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.274783][ T8327] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.284094][T10152] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.288270][ T8327] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.288314][ T8327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.291049][ T8327] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.291091][ T8327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.355579][ T35] usb 6-1: new low-speed USB device number 20 using dummy_hcd [ 149.440855][T10152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.495538][ T35] usb 6-1: device descriptor read/64, error -71 [ 149.529938][T10152] veth0_vlan: entered promiscuous mode [ 149.533448][T10152] veth1_vlan: entered promiscuous mode [ 149.548191][T10152] veth0_macvtap: entered promiscuous mode [ 149.553314][T10152] veth1_macvtap: entered promiscuous mode [ 149.563180][T10152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.569060][T10152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.606589][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.616118][ T35] usb usb6-port1: attempt power cycle [ 149.647673][ T8322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.647694][ T8322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.657593][ T8705] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.657827][ T8705] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.657857][ T8705] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.680431][ T6382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.680445][ T6382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.694225][ T43] audit: type=1400 audit(1791966597.885:860): avc: denied { mounton } for pid=10152 comm="syz-executor" path="/syzkaller.3LY5K2/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 149.804967][T10190] ip6tnl0: entered allmulticast mode [ 149.807999][ T43] audit: type=1400 audit(1791966598.005:861): avc: denied { ioctl } for pid=10188 comm="syz.5.1206" path="/dev/binderfs/features/freeze_notification" dev="binder" ino=1048670 ioctlcmd=0x743b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 149.975507][ T35] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 149.996871][ T35] usb 6-1: device descriptor read/8, error -71 [ 150.245707][ T35] usb 6-1: new low-speed USB device number 22 using dummy_hcd [ 150.276130][ T35] usb 6-1: device descriptor read/8, error -71 [ 150.395653][ T35] usb usb6-port1: unable to enumerate USB device [ 150.655756][ T5734] Bluetooth: hci4: command tx timeout [ 151.848805][T10215] FAULT_INJECTION: forcing a failure. [ 151.848805][T10215] name failslab, interval 1, probability 0, space 0, times 0 [ 151.848827][T10215] CPU: 0 UID: 0 PID: 10215 Comm: syz.1.1213 Tainted: G L syzkaller #0 PREEMPT(full) [ 151.848843][T10215] Tainted: [L]=SOFTLOCKUP [ 151.848847][T10215] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 151.848854][T10215] Call Trace: [ 151.848858][T10215] [ 151.848862][T10215] dump_stack_lvl+0x100/0x190 [ 151.848882][T10215] should_fail_ex.cold+0x5/0xa [ 151.848899][T10215] should_failslab+0xc2/0x120 [ 151.848916][T10215] __kmalloc_cache_node_noprof+0x94/0x720 [ 151.848933][T10215] ? __get_vm_area_node+0x124/0x350 [ 151.848955][T10215] __get_vm_area_node+0x124/0x350 [ 151.848973][T10215] __vmalloc_node_range_noprof+0x268/0x1420 [ 151.848995][T10215] ? vhost_task_create+0x1db/0x370 [ 151.849011][T10215] ? lock_acquire+0x1d1/0x380 [ 151.849036][T10215] ? vhost_task_create+0x1db/0x370 [ 151.849054][T10215] ? __memcg_slab_post_alloc_hook+0x71e/0x10c0 [ 151.849073][T10215] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 151.849098][T10215] ? rcu_is_watching+0x13/0xc0 [ 151.849120][T10215] ? trace_kmem_cache_alloc+0xdd/0x100 [ 151.849145][T10215] ? vhost_task_create+0x1db/0x370 [ 151.849159][T10215] __vmalloc_node_noprof+0xad/0xf0 [ 151.849182][T10215] ? vhost_task_create+0x1db/0x370 [ 151.849200][T10215] copy_process+0x803/0x8380 [ 151.849232][T10215] ? __pfx_copy_process+0x10/0x10 [ 151.849250][T10215] ? kasan_save_track+0x14/0x30 [ 151.849271][T10215] ? __kasan_kmalloc+0xaa/0xb0 [ 151.849292][T10215] ? lockdep_init_map_type+0x5c/0x250 [ 151.849313][T10215] ? lockdep_init_map_type+0x5c/0x250 [ 151.849334][T10215] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 151.849359][T10215] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 151.849381][T10215] vhost_task_create+0x1db/0x370 [ 151.849397][T10215] ? __pfx_vhost_task_create+0x10/0x10 [ 151.849419][T10215] ? __pfx_vhost_task_fn+0x10/0x10 [ 151.849435][T10215] ? register_lock_class+0x3f/0x7b0 [ 151.849452][T10215] ? rcu_is_watching+0x13/0xc0 [ 151.849474][T10215] ? trace_contention_end+0x126/0x160 [ 151.849498][T10215] kvm_mmu_post_init_vm+0x1b3/0x360 [ 151.849527][T10215] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 151.849548][T10215] ? __pfx___mutex_lock+0x10/0x10 [ 151.849571][T10215] ? kasan_quarantine_put+0x104/0x240 [ 151.849595][T10215] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 151.849614][T10215] ? lock_ ** replaying previous printk message ** [ 151.849614][T10215] ? lock_acquire+0x1d1/0x380 [ 151.849633][T10215] ? do_raw_write_lock+0x11e/0x260 [ 151.849655][T10215] ? find_held_lock+0x2b/0x80 [ 151.849681][T10215] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 151.849705][T10215] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 151.849735][T10215] kvm_vcpu_ioctl+0x730/0x1700 [ 151.849761][T10215] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 151.849788][T10215] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 151.849814][T10215] ? do_vfs_ioctl+0x226/0x13e0 [ 151.849837][T10215] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 151.849856][T10215] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 151.849884][T10215] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 151.849913][T10215] ? __fget_files+0x34/0x3d0 [ 151.849949][T10215] ? selinux_file_ioctl+0x13b/0x290 [ 151.849973][T10215] ? selinux_file_ioctl+0xb6/0x290 [ 151.850001][T10215] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 151.850027][T10215] __x64_sys_ioctl+0x18e/0x210 [ 151.850051][T10215] do_syscall_64+0x123/0x790 [ 151.850078][T10215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.850097][T10215] RIP: 0033:0x7fd50099e2d9 [ 151.850113][T10215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.850130][T10215] RSP: 002b:00007fd50186d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 151.850150][T10215] RAX: ffffffffffffffda RBX: 00007fd500c26180 RCX: 00007fd50099e2d9 [ 151.850162][T10215] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 151.850174][T10215] RBP: 00007fd50186d090 R08: 0000000000000000 R09: 0000000000000000 [ 151.850186][T10215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.850198][T10215] R13: 00007fd500c26218 R14: 00007fd500c26180 R15: 00007ffc97eb47a8 [ 151.850225][T10215] [ 151.850235][T10215] warn_alloc: 5 callbacks suppressed [ 151.850245][T10215] syz.1.1213: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 151.850321][T10215] CPU: 0 UID: 0 PID: 10215 Comm: syz.1.1213 Tainted: G L syzkaller #0 PREEMPT(full) [ 151.850345][T10215] Tainted: [L]=SOFTLOCKUP [ 151.850352][T10215] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 151.850363][T10215] Call Trace: [ 151.850370][T10215] [ 151.850377][T10215] dump_stack_lvl+0x100/0x190 [ 151.850406][T10215] warn_alloc.cold+0x9e/0xb2 [ 151.850427][T10215] ? __pfx_warn_alloc+0x10/0x10 [ 151.850446][T10215] ? __kasan_kmalloc+0x8a/0xb0 [ 151.850479][T10215] ? __get_vm_area_node+0x22b/0x350 [ 151.850516][T10215] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 151.850539][T10215] ? lock_acquire+0x1d1/0x380 [ 151.850563][T10215] ? vhost_task_create+0x1db/0x370 [ 151.850579][T10215] ? __memcg_slab_post_alloc_hook+0x71e/0x10c0 [ 151.850598][T10215] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 151.850624][T10215] ? rcu_is_watching+0x13/0xc0 [ 151.850646][T10215] ? trace_kmem_cache_alloc+0xdd/0x100 [ 151.850671][T10215] ? vhost_task_create+0x1db/0x370 [ 151.850685][T10215] __vmalloc_node_noprof+0xad/0xf0 [ 151.850710][T10215] ? vhost_task_create+0x1db/0x370 [ 151.850730][T10215] copy_process+0x803/0x8380 [ 151.850766][T10215] ? __pfx_copy_process+0x10/0x10 [ 151.850785][T10215] ? kasan_save_track+0x14/0x30 [ 151.850809][T10215] ? __kasan_kmalloc+0xaa/0xb0 [ 151.850833][T10215] ? lockdep_init_map_type+0x5c/0x250 [ 151.850856][T10215] ? lockdep_init_map_type+0x5c/0x250 [ 151.850878][T10215] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 151.850908][T10215] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 151.850933][T10215] vhost_task_create+0x1db/0x370 [ 151.850952][T10215] ? __pfx_vhost_task_create+0x10/0x10 [ 151.850978][T10215] ? __pfx_vhost_task_fn+0x10/0x10 [ 151.850997][T10215] ? register_lock_class+0x3f/0x7b0 [ 151.851016][T10215] ? rcu_is_watching+0x13/0xc0 [ 151.851040][T10215] ? trace_contention_end+0x126/0x160 [ 151.851067][T10215] kvm_mmu_post_init_vm+0x1b3/0x360 [ 151.851091][T10215] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 151.851115][T10215] ? __pfx___mutex_lock+0x10/0x10 [ 151.851139][T10215] ? kasan_quarantine_put+0x104/0x240 [ 151.851165][T10215] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 151.851187][T10215] ? lock_acquire+0x1d1/0x380 [ 151.851208][T10215] ? do_raw_write_lock+0x11e/0x260 [ 151.851232][T10215] ? find_held_lock+0x2b/0x80 [ 151.851255][T10215] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 151.851278][T10215] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 151.851305][T10215] kvm_vcpu_ioctl+0x730/0x1700 [ 151.851344][T10215] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 151.851370][T10215] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 151.851396][T10215] ? do_vfs_ioctl+0x226/0x13e0 [ 151.851418][T10215] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 151.851438][T10215] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 151.851466][T10215] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 151.851495][T10215] ? __fget_files+0x34/0x3d0 [ 151.851533][T10215] ? selinux_file_ioctl+0x13b/0x290 [ 151.851557][T10215] ? selinux_file_ioctl+0xb6/0x290 [ 151.851583][T10215] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 151.851609][T10215] __x64_sys_ioctl+0x18e/0x210 [ 151.851631][T10215] do_syscall_64+0x123/0x790 [ 151.851658][T10215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.851676][T10215] RIP: 0033:0x7fd50099e2d9 [ 151.851690][T10215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.851705][T10215] RSP: 002b:00007fd50186d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 151.851724][T10215] RAX: ffffffffffffffda RBX: 00007fd500c26180 RCX: 00007fd50099e2d9 [ 151.851734][T10215] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 151.851743][T10215] RBP: 00007fd50186d090 R08: 0000000000000000 R09: 0000000000000000 [ 151.851752][T10215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.851761][T10215] R13: 00007fd500c26218 R14: 00007fd500c26180 R15: 00007ffc97eb47a8 [ 151.851782][T10215] [ 151.851788][T10215] Mem-Info: [ 151.851796][T10215] active_anon:2846 inactive_anon:24014 isolated_anon:0 [ 151.851796][T10215] active_file:19274 inactive_file:13472 isolated_file:0 [ 151.851796][T10215] unevictable:1008 dirty:338 writeback:0 [ 151.851796][T10215] slab_reclaimable:8200 slab_unreclaimable:73396 [ 151.851796][T10215] mapped:31240 shmem:20729 pagetables:1468 [ 151.851796][T10215] sec_pagetables:297 bounce:0 [ 151.851796][T10215] kernel_misc_reclaimable:0 [ 151.851796][T10215] free:443745 free_pcp:7535 free_cma:0 [ 151.851904][T10215] Node 0 active_anon:11380kB inactive_anon:96044kB active_file:76484kB inactive_file:52964kB unevictable:2032kB isolated(anon):0kB isolated(file):0kB mapped:108576kB dirty:1340kB writeback:0kB shmem:80916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16192kB pagetables:5660kB sec_pagetables:1188kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 151.851942][T10215] Node 1 active_anon:4kB inactive_anon:12kB active_file:612kB inactive_file:924kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:16384kB dirty:12kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:212kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 151.851978][T10215] Node 0 DMA free:14548kB boost:0kB min:344kB low:428kB high:512kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:112kB local_pcp:4kB free_cma:0kB [ 151.852020][T10215] lowmem_reserve[]: 0 1204 1204 1204 1204 [ 151.852045][T10215] Node 0 DMA32 free:153048kB boost:0kB min:27108kB low:33884kB high:40660kB reserved_highatomic:0kB free_highatomic:0kB active_anon:11380kB inactive_anon:96036kB active_file:76484kB inactive_file:52964kB unevictable:2032kB writepending:1340kB zspages:860kB present:2080628kB managed:1233664kB mlocked:32kB bounce:0kB free_pcp:22468kB local_pcp:1260kB free_cma:0kB [ 151.852087][T10215] lowmem_reserve[]: 0 0 0 0 0 [ 151.852111][T10215] Node 1 Normal free:1607384kB boost:0kB min:40124kB low:50152kB high:60180kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4kB inactive_anon:12kB active_file:612kB inactive_file:924kB unevictable:2000kB writepending:12kB zspages:220kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:7560kB local_pcp:0kB free_cma:0kB [ 151.852152][T10215] lowmem_reserve[]: 0 0 0 0 0 [ 151.852175][T10215] Node 0 DMA: 23*4kB (UM) 17*8kB (UM) 11*16kB (UME) 12*32kB (UME) 9*64kB (UME) 9*128kB (UME) 7*256kB (UME) 6*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 14548kB [ 151.852305][T10215] Node 0 DMA32: 864*4kB (UME) 371*8kB (UME) 246*16kB (UME) 170*32kB (M) 181*64kB (UME) 112*128kB (UME) 69*256kB (M) 47*512kB (M) 24*1024kB (UM) 8*2048kB (UM) 7*4096kB (UM) = 153080kB [ 151.852415][T10215] Node 1 Normal: 418*4kB (UME) 286*8kB (UME) 294*16kB (UME) 264*32kB (UME) 210*64kB (UME) 167*128kB (UME) 126*256kB (UME) 65*512kB (UME) 43*1024kB (UME) 26*2048kB (UME) 340*4096kB (UM) = 1607384kB [ 151.852533][T10215] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 151.852545][T10215] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 151.852556][T10215] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 151.852568][T10215] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 151.852581][T10215] 53477 total pagecache pages [ 151.852588][T10215] 6 pages in swap cache [ 151.852593][T10215] Free swap = 123960kB [ 151.852600][T10215] Total swap = 124996kB [ 151.852606][T10215] 1048443 pages RAM [ 151.852611][T10215] 0 pages HighMem/MovableOnly [ 151.852618][T10215] 290717 pages reserved [ 151.852623][T10215] 0 pages cma reserved [ 151.938023][ T43] audit: type=1400 audit(1791966600.135:862): avc: denied { write } for pid=10216 comm="syz.5.1214" name="functions" dev="configfs" ino=11678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 151.944797][ T43] audit: type=1400 audit(1791966600.135:863): avc: denied { write } for pid=10216 comm="syz.5.1214" name="uncompressed" dev="configfs" ino=41047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 151.948737][ T43] audit: type=1400 audit(1791966600.145:864): avc: denied { write } for pid=10216 comm="syz.5.1214" name="header" dev="configfs" ino=41046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 151.951289][ T43] audit: type=1400 audit(1791966600.145:865): avc: denied { write } for pid=10216 comm="syz.5.1214" name="h" dev="configfs" ino=41057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 151.951640][ T43] audit: type=1400 audit(1791966600.145:866): avc: denied { create } for pid=10216 comm="syz.5.1214" name="u" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 151.951788][ T43] audit: type=1400 audit(1791966600.145:867): avc: denied { write } for pid=10216 comm="syz.5.1214" name="h" dev="configfs" ino=41057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 151.951829][T10217] [ 152.302797][T10217] ====================================================== [ 152.304972][T10217] WARNING: possible circular locking dependency detected [ 152.307131][T10217] syzkaller #0 Tainted: G L [ 152.309249][T10217] ------------------------------------------------------ [ 152.311821][T10217] syz.5.1214/10217 is trying to acquire lock: [ 152.314263][T10217] ffffffff913ff8c8 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_streaming_header_allow_link+0x7c/0x650 [ 152.318868][T10217] [ 152.318868][T10217] but task is already holding lock: [ 152.321882][T10217] ffff88803d168600 (&sb->s_type->i_mutex_key#28){++++}-{4:4}, at: configfs_symlink+0x452/0x1340 [ 152.325479][T10217] [ 152.325479][T10217] which lock already depends on the new lock. [ 152.325479][T10217] [ 152.328703][T10217] [ 152.328703][T10217] the existing dependency chain (in reverse order) is: [ 152.331488][T10217] [ 152.331488][T10217] -> #3 (&sb->s_type->i_mutex_key#28){++++}-{4:4}: [ 152.334211][T10217] lock_acquire+0x1d1/0x380 [ 152.335794][T10217] down_write+0x8b/0x1f0 [ 152.337319][T10217] configfs_depend_item_unlocked+0xf3/0x6a0 [ 152.339321][T10217] usbg_make_tpg+0x251/0x610 [ 152.340928][T10217] target_fabric_make_tpg+0xab/0x8c0 [ 152.342995][T10217] configfs_mkdir+0x525/0xd40 [ 152.345294][T10217] vfs_mkdir+0x364/0x850 [ 152.347290][T10217] filename_mkdirat+0x48b/0x5e0 [ 152.349430][T10217] __x64_sys_mkdirat+0x89/0xc0 [ 152.351516][T10217] do_syscall_64+0x123/0x790 [ 152.353518][T10217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.355662][T10217] [ 152.355662][T10217] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 152.358499][T10217] lock_acquire+0x1d1/0x380 [ 152.360267][T10217] __mutex_lock+0x1a4/0x1bd0 [ 152.361941][T10217] tcm_alloc_inst+0x5f/0x1e0 [ 152.363570][T10217] try_get_usb_function_instance+0x136/0x1f0 [ 152.365749][T10217] usb_get_function_instance+0x16/0x70 [ 152.367666][T10217] function_make+0x18c/0x3f0 [ 152.369278][T10217] configfs_mkdir+0x525/0xd40 [ 152.370990][T10217] vfs_mkdir+0x364/0x850 [ 152.372688][T10217] filename_mkdirat+0x48b/0x5e0 [ 152.374565][T10217] __x64_sys_mkdirat+0x89/0xc0 [ 152.376306][T10217] do_syscall_64+0x123/0x790 [ 152.378017][T10217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.380117][T10217] [ 152.380117][T10217] -> #1 (func_lock){+.+.}-{4:4}: [ 152.382330][T10217] lock_acquire+0x1d1/0x380 [ 152.383923][T10217] __mutex_lock+0x1a4/0x1bd0 [ 152.386049][T10217] try_get_usb_function_instance+0x26/0x1f0 [ 152.388367][T10217] usb_get_function_instance+0x16/0x70 [ 152.390354][T10217] function_make+0x18c/0x3f0 [ 152.392368][T10217] configfs_mkdir+0x525/0xd40 [ 152.394514][T10217] vfs_mkdir+0x364/0x850 [ 152.396371][T10217] filename_mkdirat+0x48b/0x5e0 [ 152.398070][T10217] __x64_sys_mkdirat+0x89/0xc0 [ 152.399756][T10217] do_syscall_64+0x123/0x790 [ 152.401406][T10217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.403395][T10217] [ 152.403395][T10217] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 152.405941][T10217] check_prev_add+0xeb/0xe60 [ 152.407545][T10217] __lock_acquire+0x1528/0x1f40 [ 152.409252][T10217] lock_acquire+0x1d1/0x380 [ 152.410829][T10217] __mutex_lock+0x1a4/0x1bd0 [ 152.412486][T10217] uvcg_streaming_header_allow_link+0x7c/0x650 [ 152.414557][T10217] configfs_symlink+0x695/0x1340 [ 152.416303][T10217] vfs_symlink+0x178/0x4d0 [ 152.417858][T10217] filename_symlinkat+0x2a6/0x560 [ 152.419575][T10217] __x64_sys_symlinkat+0x9c/0xe0 [ 152.421290][T10217] do_syscall_64+0x123/0x790 [ 152.423422][T10217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.425941][T10217] [ 152.425941][T10217] other info that might help us debug this: [ 152.425941][T10217] [ 152.429386][T10217] Chain exists of: [ 152.429386][T10217] gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#28 [ 152.429386][T10217] [ 152.435235][T10217] Possible unsafe locking scenario: [ 152.435235][T10217] [ 152.437817][T10217] CPU0 CPU1 [ 152.440041][T10217] ---- ---- [ 152.442257][T10217] lock(&sb->s_type->i_mutex_key#28); [ 152.444546][T10217] lock(tpg_instances_lock); [ 152.447036][T10217] lock(&sb->s_type->i_mutex_key#28); [ 152.449472][T10217] lock(gadget_subsys.su_mutex); [ 152.450978][T10217] [ 152.450978][T10217] *** DEADLOCK *** [ 152.450978][T10217] [ 152.453672][T10217] locks held by syz.5.1214/10217: 2, last CPU#1: [ 152.456101][T10217] #0: ffff8880251aa460 (sb_writers#15){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 152.459637][T10217] #1: ffff88803d168600 (&sb->s_type->i_mutex_key#28){++++}-{4:4}, at: configfs_symlink+0x452/0x1340 [ 152.463486][T10217] [ 152.463486][T10217] stack backtrace: [ 152.465934][T10217] CPU: 1 UID: 0 PID: 10217 Comm: syz.5.1214 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.469772][T10217] Tainted: [L]=SOFTLOCKUP [ 152.471245][T10217] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 152.474714][T10217] Call Trace: [ 152.476096][T10217] [ 152.477342][T10217] dump_stack_lvl+0x100/0x190 [ 152.479006][T10217] print_circular_bug.cold+0x178/0x1be [ 152.481074][T10217] check_noncircular+0x146/0x160 [ 152.482653][T10217] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 152.484534][T10217] check_prev_add+0xeb/0xe60 [ 152.485986][T10217] __lock_acquire+0x1528/0x1f40 [ 152.487509][T10217] ? kasan_save_track+0x14/0x30 [ 152.489050][T10217] ? kasan_save_free_info+0x3b/0x70 [ 152.490661][T10217] lock_acquire+0x1d1/0x380 [ 152.492203][T10217] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 152.494170][T10217] ? __pfx___might_resched+0x10/0x10 [ 152.495846][T10217] ? audit_inode_permission+0x1ea/0x2a0 [ 152.497588][T10217] __mutex_lock+0x1a4/0x1bd0 [ 152.499147][T10217] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 152.501917][T10217] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 152.504507][T10217] ? __lock_acquire+0x5c0/0x1f40 [ 152.506566][T10217] ? __pfx___mutex_lock+0x10/0x10 [ 152.508209][T10217] ? selinux_inode_permission+0x14a/0x1130 [ 152.510554][T10217] ? __pfx___might_resched+0x10/0x10 [ 152.512773][T10217] ? make_vfsgid+0xf1/0x140 [ 152.514689][T10217] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 152.517185][T10217] ? security_inode_permission+0xbf/0x250 [ 152.519185][T10217] uvcg_streaming_header_allow_link+0x7c/0x650 [ 152.521621][T10217] ? inode_permission+0x374/0x620 [ 152.523669][T10217] ? mntput_no_expire+0xe8/0x220 [ 152.525426][T10217] configfs_symlink+0x695/0x1340 [ 152.527344][T10217] ? __pfx_configfs_symlink+0x10/0x10 [ 152.529357][T10217] vfs_symlink+0x178/0x4d0 [ 152.530750][T10217] filename_symlinkat+0x2a6/0x560 [ 152.532531][T10217] ? __pfx_filename_symlinkat+0x10/0x10 [ 152.534797][T10217] ? strncpy_from_user+0x19d/0x2d0 [ 152.536615][T10217] ? do_getname+0x191/0x390 [ 152.538245][T10217] __x64_sys_symlinkat+0x9c/0xe0 [ 152.540168][T10217] do_syscall_64+0x123/0x790 [ 152.542046][T10217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.544119][T10217] RIP: 0033:0x7f61edd9e2d9 [ 152.545788][T10217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.551694][T10217] RSP: 002b:00007f61eec01028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 152.554323][T10217] RAX: ffffffffffffffda RBX: 00007f61ee025fa0 RCX: 00007f61edd9e2d9 [ 152.556759][T10217] RDX: 0000200000000980 RSI: ffffffffffffff9c RDI: 0000200000000940 [ 152.559218][T10217] RBP: 00007f61ede35888 R08: 0000000000000000 R09: 0000000000000000 [ 152.561658][T10217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.564081][T10217] R13: 00007f61ee026038 R14: 00007f61ee025fa0 R15: 00007ffe0eb20ed8 [ 152.566544][T10217] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 152.960104][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.960135][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.009812][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.009843][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.119482][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.119516][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.192485][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.192512][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.346123][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.347126][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.347623][ T12] bond0 (unregistering): Released all slaves [ 153.348679][ T12] bond1 (unregistering): Released all slaves [ 153.350670][ T12] bond2 (unregistering): Released all slaves [ 153.396139][ T12] tipc: Left network mode [ 153.405854][ T43] audit: type=1400 audit(1791966601.595:868): avc: denied { write } for pid=10220 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.438241][ T43] audit: type=1400 audit(1791966601.635:869): avc: denied { write } for pid=10223 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.455556][ T5439] 8021q: adding VLAN 0 to HW filter on device eth6 [ 153.497290][ T43] audit: type=1400 audit(1791966601.695:870): avc: denied { write } for pid=10226 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.524300][ T43] audit: type=1400 audit(1791966601.715:871): avc: denied { write } for pid=10229 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.544217][ T12] hsr_slave_0: left promiscuous mode [ 153.544584][ T12] hsr_slave_1: left promiscuous mode [ 153.544989][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.545004][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.547930][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.548996][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.553155][ T12] veth1_macvtap: left promiscuous mode [ 153.553199][ T12] veth0_macvtap: left promiscuous mode [ 153.553226][ T12] veth1_vlan: left promiscuous mode [ 153.606182][ T12] team0 (unregistering): Port device team_slave_1 removed [ 153.608053][ T12] team0 (unregistering): Port device team_slave_0 removed [ 153.631745][ T5439] 8021q: adding VLAN 0 to HW filter on device eth7 [ 153.728462][ T5439] 8021q: adding VLAN 0 to HW filter on device eth8 [ 153.858588][ T5439] 8021q: adding VLAN 0 to HW filter on device eth9 [ 153.871383][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.910452][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.968640][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.029524][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.087143][ T12] bridge_slave_1: left allmulticast mode [ 154.087162][ T12] bridge_slave_1: left promiscuous mode [ 154.087260][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.090911][ T12] bridge_slave_0: left allmulticast mode [ 154.090931][ T12] bridge_slave_0: left promiscuous mode [ 154.091035][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.131650][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.132738][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.133291][ T12] bond0 (unregistering): Released all slaves [ 154.220620][ T5439] 8021q: adding VLAN 0 to HW filter on device eth10 [ 154.292539][ T12] hsr_slave_0: left promiscuous mode [ 154.293053][ T12] hsr_slave_1: left promiscuous mode [ 154.293262][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.293272][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.293603][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.293611][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.295087][ T12] veth1_macvtap: left promiscuous mode [ 154.295101][ T12] veth0_macvtap: left promiscuous mode [ 154.295128][ T12] veth1_vlan: left promiscuous mode [ 154.295149][ T12] veth0_vlan: left promiscuous mode [ 154.358017][ T12] team0 (unregistering): Port device team_slave_1 removed [ 154.359785][ T12] team0 (unregistering): Port device team_slave_0 removed [ 154.379280][ T5439] 8021q: adding VLAN 0 to HW filter on device eth11 [ 154.495309][ T5439] 8021q: adding VLAN 0 to HW filter on device eth12 [ 154.613707][ T5439] 8021q: adding VLAN 0 to HW filter on device eth13