last executing test programs: 28.142389173s ago: executing program 1 (id=415): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) syz_emit_ethernet(0x1684, &(0x7f0000000480)={@random="bb622ac1eb87", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, '\x00', 0x164e, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x1, 0xa, 0x4d38714, 0xc, [{0x3, 0x1d, "7abd44496fa944496fa99d4d4db315d53e60fb207f00e8c5d57f12a35539f156775cf2d8f6ea9ee9093b8bb270628bde736d9b7efad2454cfb80ffc98b8563fb473763d16d4a728ef891351ea12e6afd78b087ad202fad648b4c202abdf7afd2b970e7702586d6c458ee3cb24b7c8c5982a0bc5d7ea0d8e689c93224bdc3353c912ad55730f06b7592effa5a52558d95c040514e17b06d307287a8efc188a875b1393dbcb303065b6cbcadafb450bf7012dcc1f146a92b2038a4191079d075b790d2a4e3466e1d0129c83bbfff251d37d688347d967bbc1e7d90ce38e827817808f2476c5e91dc54"}, {0x4, 0xb, "3d1a8fb095d9c68af01898d1a30afa6a0e8541f4cf433d18fd63d92138f80029cdea26de5d05433c7426fe0aed3af561fdc12eef0bae63ef26dda26f2886a01b7083ee10ff57da90d57353ff1c5980377afab2a7482d76c745"}, {0x1f, 0x17f, "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"}, {0x3d, 0x11f, "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"}]}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x3ff, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x80}]}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e22, @local}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x81, 0x10}, 0x90) 28.14206339s ago: executing program 1 (id=416): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, 0x0, 0x40804) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000089fe8f44000000000000000007000000", @ANYRES32=r4, @ANYBLOB="400096040a000200aaaaaaaaaa0c0000"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(r2, 0x0, 0x40804) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000089fe8f44000000000000000007000000", @ANYRES32=r4, @ANYBLOB="400096040a000200aaaaaaaaaa0c0000"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) 28.141625974s ago: executing program 1 (id=417): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x2, 0xd, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe2(0x0, 0x0) syz_clone3(0x0, 0x0) io_setup(0x482, 0x0) io_submit(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x100000000001, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9dff23f367bef393}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400c000}, 0x4) preadv(r4, &(0x7f0000000100)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x20000000000003b0, 0x0, 0xd) write$binfmt_script(r4, &(0x7f0000020140)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [], 0xa, "f3b971321ca24639847bef18ab6f0c2be44c61e941ebcd2c3b8ece4e3c4ef9b8e90301f5c851a834de961196794f06e56baa6b1a8cc4b7e94e87497799598486504e40bdb0381c18cd2786f101ffa87543218832c9bd93b9558770bd1726a38fcc7a156899d27ae6426b55403074e3a9929e9243f18757e510b846318d8cd17244d7fec808b147d5094fe3665a02f8550967e4190d201be9367e96427b7a1c10190f9f8d4a337cf013bb703c20e064ffe2d864be2f48e812de8ffada7ee9fcbf1c421801bca58fe6502489538e1894532aeb792eea0ceb506a9f248a61c94ffa8fffa11d1763f5015a8ee8ec5d1662e93d497c6b557b71e205828e78e4a8782c88dca3e94185ce7a2121f2c216ae656dfb766371a49ea2b355cd04f1a01631ec32dbb7120bca92f8e4dad44896661863ef97ea96bdb10de7b10ee5a5ea24162a88bfa8c63b7415f6b6135eaeb80f6284ddc43a718a8a1a518eaf5c4104dbdd9b"}, 0x10169) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x20000800) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) syz_open_dev$sg(0x0, 0x0, 0x40000) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x201, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x2000000006, 0x3, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 27.104977157s ago: executing program 1 (id=419): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) get_mempolicy(0x0, 0x0, 0x800, &(0x7f000031e000/0x4000)=nil, 0x3) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f00000000c0)=0x1) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) openat$hpet(0xffffff9c, &(0x7f0000000300), 0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="64ff1ec4624307f1561b5ad480b718edf0ee74c7e370c8c0c568358cd8c65301c35e5f6a317435e1195ee61792096cdb57196fef44bc5be37efc8fea5656"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r5 = socket$key(0xf, 0x3, 0x2) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x1, 0x5001) sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020306001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a0000000000000100000000000000000000000000000000000000000000000004000400000080000000000000000000000000000000000000000000000000000200010000000000000000fd0000000005000500000000000a00000000000000fe8800000000000000000000000000010000000000000000030007000000000002000000ffffffff0000000000000000020013"], 0xd8}}, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040), 0x0) socket$kcm(0x10, 0x400000002, 0x0) 25.244756778s ago: executing program 1 (id=428): r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) close(0x3) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x1e, r4, {0x1}}, './bus\x00'}) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0xc3f37cc}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "32f058ec27d46898", "d40f86fd02541c95afec379bdb3cc0d5646e20975202603a18fe7474dc4c3d7b", '\"\vEX', "010000000100"}, 0x38) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x8) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x59c, 0x13c, 0x324, 0x13c, 0x324, 0x324, 0x4d4, 0x4d4, 0x4d4, 0x4d4, 0x4d4, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3b}, @private1, [0xff, 0x0, 0xffffffff, 0xffffff00], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x6, 0x0, 0x0, 0x4}, 0x0, 0xf4, 0x13c, 0x0, {0x7a00000010000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0x0, [0x0, 0xfffe, 0x0, 0x0, 0x4e21], [], 0xfd}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'bond_slave_1\x00', {0x1}}}}, {{@ipv6={@loopback, @dev={0xfe, 0x80, '\x00', 0xfc}, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {0xff}, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{}, {0x0, 0xff, 0x2}, {}, 0x300}}}, {{@uncond, 0x0, 0xa4, 0x110, 0x48000000}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x1ff, 0x8, 0x4, 0x1, 0x0, "52146ee9ae44b62f269737ed481b837e8196a5702a25a4409e992b2c65fd4ce47d5510261c8694c511bcdcbca881691621e9e9f5a9ccf9eb8fc186f0fdb6fdc2"}}}, {{@uncond, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x1c}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @HL={0x24, 'HL\x00', 0x0, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5f8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) r7 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000005c0)={0xd, @sdr={0x3136564e, 0x5}}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000100)={0xe, 0x34524742, 0x780, 0x3ff, 0x0, @discrete={0x9, 0x4}}) 24.331737625s ago: executing program 1 (id=432): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r1, 0x0, 0x0, 0x9200000000000000) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$802154_raw(r0, &(0x7f0000000040)={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x14) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1a) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000013c0)={&(0x7f0000001440)={0x634, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x40, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3a47, 0x8, 0xad00, 0x9, 0x7, 0x2, 0x800]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x4, 0x0, 0x0, 0x2, 0x0, 0x4]}}]}]}, @NL80211_ATTR_TX_RATES={0xac, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x4, 0xa}, {0x3, 0x3}, {0x2, 0xa}, {0x2, 0x4}, {0x5, 0x8}, {0x1, 0x5}, {0x7, 0x5}, {0x6, 0x6}, {0x5, 0x6}, {0x4, 0x3}, {0x3}, {0x4, 0x4}, {0x3, 0x2}, {0x1, 0x9}, {0x6, 0xa}, {0x4, 0x1}, {0x1, 0x9}, {0x1, 0x9}, {0x7, 0x2}, {0x5, 0x3}, {0x3, 0x8}, {0x5, 0x3}, {0x6, 0x6}, {0x4, 0x1}, {0x6, 0x8}, {0x5, 0x7}, {0x4, 0x9}, {0x6, 0x6}, {0x4, 0x9}, {0x2, 0x7}, {0x1, 0x9}, {0x7, 0x4}, {0x0, 0x4}, {0x2, 0x5}, {0x5, 0x5}, {0x0, 0x8}, {0x1, 0x6}, {0x7, 0x3}, {0x1, 0x4}, {0x0, 0x6}, {0x3, 0xa}, {0x4, 0x9}]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x7, 0x1}, {0x7, 0x6}, {0x1}, {0x1, 0x1}, {0x2, 0x9}, {0x3, 0x3}, {0x0, 0x1}, {0x0, 0x2}, {0x2, 0x2}, {0x0, 0x7}, {0x3, 0x6}, {0x0, 0xa}, {0x1, 0x2}, {0x4, 0x8}, {0x2, 0x1}, {0x4, 0x3}, {0x3, 0x1}, {0x4, 0x5}, {0x6, 0x9}, {0x4, 0xa}, {0x7, 0x3}, {0x4, 0x9}, {0x1, 0x1}, {0x4, 0x5}, {0x6, 0x9}, {0x1, 0xa}, {0x2, 0x5}, {0x7, 0x4}, {0x6, 0x6}, {0x2, 0x4}, {0x0, 0x5}, {0x7}, {0x1, 0x8}, {0x2, 0x1}, {0x3, 0x2}, {0x2, 0x4}, {}, {0x6, 0x2}, {0x2, 0x2}, {0x0, 0x6}, {0x2, 0x2}, {0x6, 0x7}, {0x3, 0x4}, {0x6, 0x8}, {}, {0x6, 0x3}, {0x1, 0x3}, {0x1, 0x9}, {0x4, 0x8}, {0x3, 0x9}, {0x1, 0x4}, {0x3, 0x7}, {0x0, 0x3}]}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x2d, 0x1, 0x16, 0xb, 0x12, 0x62, 0x24, 0x16, 0x1e, 0x1b, 0x16, 0x2, 0x9, 0x1b, 0x60, 0x3, 0xbafc6e4f44b4194b, 0x12, 0x6, 0x30, 0x30, 0x1b, 0xc, 0x55, 0x48, 0x2, 0x3, 0x2, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x1b8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6, 0x6c, 0xb, 0x16, 0x65, 0x1c, 0x5, 0x5, 0x18, 0x730caf586f9c7113, 0x4, 0x60]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x3, 0x30, 0x48, 0x48, 0x4, 0x12, 0x0, 0x4, 0x18, 0x61, 0xc, 0x30, 0x0, 0xc, 0x1b, 0xc, 0x36, 0x3, 0x16, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x73, 0x9, 0x28, 0x1, 0x30, 0x62]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0xe5af, 0x8, 0x7fff, 0x1, 0x10, 0x2, 0x6]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x10, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0x36, 0x6c, 0x48, 0x18, 0x2]}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x12, 0xb, 0x16, 0x18, 0x60, 0x60, 0x7667c45b018abacb, 0x2, 0xc, 0x5, 0x1, 0x30, 0x4, 0x18, 0x36, 0x3, 0x2a, 0x24, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x5, 0x0, 0x1, 0xff, 0x1000, 0x2, 0x7fff]}}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x5, 0x2}, {0x4, 0x7}, {0x4}, {0x5, 0x8}, {0x6, 0x3}, {0x4, 0x8}, {0x0, 0x8}, {0x2, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x7, 0x9}, {0x1, 0xa}, {0x4, 0x3}, {0x4}, {0x1, 0x5}, {0x7}, {0x7, 0x6}, {0x1, 0x9}, {0x7, 0x2}, {0x4, 0x2}, {0x7}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x9}, {0x2, 0x4}, {0x1, 0x7}, {0x5, 0x4}, {0x3, 0x5}, {0x4, 0x1}, {0x6, 0x2}, {0x3, 0x5}, {0x5, 0x6}, {0x6, 0xa}, {0x4}, {0x4, 0x6}, {0x0, 0x3}, {0x5, 0xa}, {0x0, 0x6}, {0x6, 0x9}, {0x1, 0x9}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x4}, {0x6, 0x8}, {0x0, 0x8}, {0x3, 0x7}, {0x2, 0x2}, {0x1}, {0x5, 0x7}, {0x2, 0xa}, {0x4, 0x3}, {0x7, 0x8}, {0x5, 0x4}, {0x3, 0xa}, {0x3}, {0x2, 0x2}, {0x3, 0x7}, {0x6, 0x6}, {0x2, 0x10}, {0x5, 0x6}, {0x4, 0x3}, {0x7, 0x2}, {0x7}, {0x2, 0x1}, {0x4}, {0x2, 0xa}, {0x0, 0x19}, {0x6, 0x5}, {0x3, 0x5}, {0x6, 0x5}, {0x1, 0x9}, {0x4, 0x4}, {0x1, 0x9}]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0xffff, 0x7ff, 0x9, 0x6, 0x4, 0x0, 0xba]}}]}, @NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x2, 0x6c, 0x30, 0x36, 0x5, 0x60, 0x6, 0x9, 0x18, 0xb, 0x24, 0x6, 0x1, 0xb, 0x2, 0x1b, 0x53]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0x0, 0x2, 0x0, 0xffaa, 0x7, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x7ed6, 0x6, 0x6, 0x1ff, 0x9, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x5, 0x24, 0x18, 0x12, 0x30, 0x24, 0x0, 0x3, 0x2, 0x24, 0x12, 0x18, 0x9, 0x28, 0x9, 0x16, 0x1b, 0x5, 0x3, 0x60, 0x3, 0x30, 0x36, 0x60, 0x9, 0x30]}]}]}, @NL80211_ATTR_TX_RATES={0x374, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf800, 0x304, 0x1ff, 0x200, 0x890b, 0xff, 0xa, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0x2e, 0x5, 0x0, 0x7, 0x8, 0x8000]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x4, 0x3}, {0x1, 0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x6, 0x7}, {0x3, 0x9}, {0x2, 0x2}, {0x2, 0x6}, {0x3, 0x6}, {0x6, 0x7}, {0x3, 0x3}, {0x0, 0x2}, {0x1, 0x9}, {0x4, 0x6}, {0x0, 0x7}, {0x1, 0x5}, {0x0, 0x8}, {0x2, 0x3}, {0x7, 0x6}, {0x3, 0x8}, {0x5, 0x5}, {0x1, 0x5}, {0x7, 0x6}, {0x6, 0x4}, {0x6, 0x8}, {0x1, 0x2}, {0x0, 0x18}, {0x3, 0x9}, {0x3, 0x8}, {0x0, 0x8}, {0x1}, {0x7, 0x4}, {}, {0x4, 0x9}, {0x1, 0xa}, {0x5}, {0x5, 0x7}, {0x3, 0x1}, {0x2, 0x6}, {0x5, 0xa}, {0x4, 0x1}, {0x5}]}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1, 0x71, 0x73, 0x401, 0x1, 0x3ff, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x6, 0x6}, {0x2, 0x4}, {0x5, 0x5}, {0x1, 0x7}, {0x0, 0xa}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0xa}, {0x7, 0x5}, {0x6, 0x7}, {0x4, 0x2}, {0x4, 0x5}, {0x5, 0x6}, {0x4, 0x2}, {0x3, 0x2}, {0x0, 0x6}, {0x0, 0x7}, {0x7, 0x1}, {0x3, 0x1}, {0x0, 0x6}, {0x3, 0x3}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x6, 0x6}, {0x7, 0x3}, {0x4, 0x3}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x8}, {0x0, 0x7}, {0x7, 0x3}, {0x0, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x1, 0x9}, {0x1, 0x9}, {0x1, 0x1}, {0x2, 0x7}, {0x2, 0x7}, {}, {0x2, 0x9}]}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x5, 0x2}, {0x5, 0xa}, {}, {0x0, 0x8}, {0x1, 0xa}, {0x3, 0x3}, {0x5, 0x6}, {0x4, 0x3}, {0x2, 0xa}, {0x1, 0x5}, {0x0, 0x7}, {0x1, 0x9}, {0x1, 0xa}, {0x4, 0x6}, {0x0, 0x4}, {0x2, 0x6}, {0x7, 0x7}, {0x1, 0x8}, {0x1}, {0x4}, {0x6, 0x4}, {0x4, 0xa}, {0x1, 0x1}, {0x3, 0x5}, {0x0, 0x3}, {0x7, 0x4}, {0x7}, {0x4, 0x5}, {0x2}, {0x6, 0x6}, {0x5, 0xa}, {0x1, 0x5}, {0x1, 0x4}, {0x6, 0x2}, {0x0, 0x3}, {0x7, 0x8}, {0x4, 0x8}, {0x6, 0x1}, {}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x7}, {0x0, 0x6}, {0x0, 0x7}, {0x2, 0x3}, {0x3, 0x3}, {0x3, 0x4}, {0x0, 0x2}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x7}, {0x0, 0x9}, {0x5, 0x6}, {0x4, 0x2}, {0x0, 0x4}, {0x6, 0x5}, {0x2}, {0x5}, {0x7, 0x9}, {0x1, 0x6}, {0x4, 0x7}, {0x0, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2, 0x3, 0x1, 0x4, 0x9c8, 0x6b1, 0x14]}}]}, @NL80211_BAND_60GHZ={0xc4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfff, 0x8001, 0xc71, 0x2, 0x4, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x1, 0x4, 0x9, 0x7fff, 0x4, 0x5, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x2, 0xa}, {0x0, 0x3}, {0x2, 0x2}, {0x2, 0x3}, {0x2, 0x9}, {0x1, 0x8}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x6}, {0x0, 0x6}, {0x0, 0x9}, {0x4, 0x1}, {0x0, 0xa}, {0x1, 0x9}, {0x7, 0x5}, {0x0, 0x1}, {0x7, 0x3}, {0x0, 0x7}, {0x6, 0x2}, {0x7, 0x9}, {0x6, 0x9}, {0x6, 0x3}, {0x2, 0x1}, {0x5, 0x9}, {0x4, 0x4}, {0x6, 0x7}, {0x7, 0x8}, {0x1, 0x1}, {0x1, 0x4}, {0x2}, {0x2, 0x2}, {0x0, 0x5}, {0x0, 0x7}, {0x6, 0x8}, {0x6, 0x6}, {0x3, 0x7}, {0x7, 0x2}, {0x5, 0x5}, {0x0, 0x5}, {0x6, 0x6}, {0x5, 0x4}, {0x3, 0x9}, {0x2, 0x5}, {0x5, 0x4}, {0x6, 0x8}, {0x7}, {0x2}, {0x2}, {0x3, 0x3}, {0x0, 0x2}, {0x1, 0x8}, {0x1}, {0x5, 0x5}, {0x4, 0x4}, {0x2, 0x7}, {0x5, 0x9}, {0x3, 0x5}, {0x0, 0x3}, {0x1, 0x7}, {0x5, 0x1}, {0x2, 0x5}, {0x1, 0x6}, {0x4, 0x4}]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x0, 0x7}, {0x5, 0x8}, {0x4, 0x9}, {0x4}, {0x4, 0x4}, {0x0, 0x1}, {0x1, 0x7}, {0x0, 0x4}, {0x1, 0x1}, {0x2, 0x4}, {0x3, 0x7}, {0x3, 0x8}, {0x6, 0x2}, {0x6, 0x9}, {0x6, 0x9}, {0x2, 0x3}, {0x1}, {0x3, 0x2}, {0x6, 0x7}, {0x1}, {0x3, 0x3}, {0x5, 0x1}, {0x0, 0x8}, {0x7, 0x9}, {0x4, 0x4}, {0x3, 0x5}, {0x3, 0x8}, {0x5, 0xa}, {0x5, 0x5}, {0x2, 0xa}, {0x1, 0x9}, {0x6, 0x5}, {0x5, 0xa}, {0x3}, {0x5, 0x3}, {0x3, 0x1}, {0x1, 0x4}, {0x3, 0x6}, {0x3, 0x1}, {0x3, 0x8}, {}, {0x0, 0x3}, {0x7, 0x9}, {0x2, 0x8}, {0x6, 0x4}, {0x3, 0x3}, {0x7, 0x2}, {0x5, 0x3}, {0x5, 0x6}, {0x1, 0x2}, {0x1, 0x2}, {0x4, 0x5}, {0x7, 0x2}, {0x5, 0xa}, {}, {0x1, 0x7}, {0x1, 0xa}, {0x4, 0x6}, {0x1, 0xa}, {0x4, 0x3}, {0x2, 0x5}, {0x5}, {0x3, 0x3}, {0x1, 0x1}, {0x1, 0x9}, {0x7, 0x2}, {0x1, 0x2}, {0x7, 0x2}, {0x5, 0x9}, {0x1, 0x5}, {0x4, 0xa}, {0x7, 0x1}]}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x16, 0x18, 0x18, 0x5, 0x0, 0x48, 0x6c, 0x48, 0x1, 0x3, 0x4, 0xc, 0x6c, 0xc, 0xb, 0x48, 0x24, 0xb, 0x36, 0x60, 0xf]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x3, 0x6}, {0x1, 0x2}, {0x7, 0x3}, {0x1}, {0x5, 0x1}, {0x1, 0xa}, {0x5, 0x9}, {0x2, 0x6}, {0x1, 0x2}, {0x3, 0x4}, {0x3, 0x7}, {0x1, 0x9}, {0x7, 0x3}, {0x6, 0x7}, {0x5, 0x5}, {}, {0x3, 0x8}, {}, {0x6, 0x2}, {0x5, 0x7}, {0x3, 0x2}, {0x7, 0x4}, {0x5, 0x2}, {0x6, 0x8}, {0x7, 0x7}, {0x3, 0x7}, {0x1, 0x2}, {0x0, 0x3}, {0x0, 0x4}, {0x6, 0x5}, {0x0, 0x8}, {0x2, 0xa}, {0x1, 0x4}, {0x2, 0x9}, {0x6, 0x9}, {0x1, 0x4}, {0x1, 0x8}, {0x6, 0x8}, {0x6, 0x3}, {0x3, 0x9}, {0x0, 0x7}, {0x1, 0x5}, {0x0, 0x9}, {0x0, 0x3}, {0x4, 0xa}, {0x3, 0x2}, {0x6}, {0x6, 0x4}, {0x0, 0x6}, {0x5, 0x5}, {0x1, 0x8}, {0x6, 0x8}, {0x5, 0x2}, {0x2, 0x3}, {0x6, 0x4}]}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffa, 0x200, 0x0, 0x2, 0x4, 0xf81a, 0x4, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x6df2, 0xddc, 0x2, 0x5584, 0x8001, 0x71b9, 0x80]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6, 0x9, 0x475, 0xff, 0x7, 0x88, 0x2000]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_2GHZ={0xac, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, [{0x5, 0x2}, {0x1, 0x1}, {0x0, 0x9}, {0x2, 0x6}, {}, {0x0, 0x5}, {0x7}, {}, {0x4, 0x8}, {0x1, 0x4}, {0x5, 0xa}, {0x7, 0x3}, {0x4, 0x9}, {0x0, 0x1}, {0x1}, {0x1, 0x8}, {0x7, 0x4}, {0x2, 0x7}, {0x0, 0x5}, {0x3, 0x5}, {0x0, 0xa}, {0x6, 0x5}, {0x7, 0x9}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x1}, {0x5, 0x2}, {0x3, 0x2}, {0x7, 0x4}, {0x7, 0xa}, {0x0, 0x8}, {0x2, 0x7}, {0x3, 0x2}, {0x0, 0x9}, {0x2, 0x4}, {0x4, 0x5}, {0x2, 0x8}, {0x4, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x83, 0xaca0, 0x8, 0x800, 0x0, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x3, 0xa5a, 0xa, 0x61, 0x2, 0xf8, 0x4]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0xc, 0xb, 0xc, 0x4, 0x1, 0x24, 0x24, 0x36, 0x60, 0x9, 0x9, 0x1b, 0x1b, 0x6c, 0x12, 0x5]}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x3, 0x8}, {0x1, 0x2}, {0x4, 0xa}, {0x5, 0x2}, {0x3, 0x1}, {}, {0x1, 0x7}, {0x1, 0x4}, {0x4, 0x5}, {0x4, 0x4}, {0x7, 0x2}, {0x3, 0xa}, {0x4, 0xa}, {0x1, 0x2}, {0x5, 0x2}, {0x2}, {0x2}, {0x4, 0x9}, {0x7, 0x3}, {0x1, 0x3}, {0x7, 0x7}, {0x2, 0x6}, {0x6, 0x6}, {0x2, 0x8}, {0x4, 0xa}, {0x5}, {0x5, 0xa}, {0x4, 0x2}, {0x1}, {0x0, 0xa}, {0x3, 0x2}, {0x0, 0x6}, {0x4, 0x7}, {0x5, 0xa}, {0x4, 0x7}, {0x2, 0x2}, {0x3, 0xa}, {0x1, 0x3}, {0x6, 0x4}, {0x0, 0x2}, {0x6, 0x6}, {0x5, 0xa}, {0x7, 0x5}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x4}, {0x5, 0x7}, {0x2, 0x1}, {0x2}, {0x5}, {0x2, 0xa}, {0x6, 0x4}, {0x3}, {0x0, 0x3}, {0x3, 0x2}, {0x7, 0xa}, {0x4, 0x4}, {0x6, 0x8}, {0x6}, {0x7, 0x6}]}]}]}]}, 0x634}, 0x1, 0x0, 0x0, 0x10}, 0x80) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 9.292813476s ago: executing program 32 (id=432): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r1, 0x0, 0x0, 0x9200000000000000) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$802154_raw(r0, &(0x7f0000000040)={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x14) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1a) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000013c0)={&(0x7f0000001440)={0x634, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x40, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3a47, 0x8, 0xad00, 0x9, 0x7, 0x2, 0x800]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x4, 0x0, 0x0, 0x2, 0x0, 0x4]}}]}]}, @NL80211_ATTR_TX_RATES={0xac, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x4, 0xa}, {0x3, 0x3}, {0x2, 0xa}, {0x2, 0x4}, {0x5, 0x8}, {0x1, 0x5}, {0x7, 0x5}, {0x6, 0x6}, {0x5, 0x6}, {0x4, 0x3}, {0x3}, {0x4, 0x4}, {0x3, 0x2}, {0x1, 0x9}, {0x6, 0xa}, {0x4, 0x1}, {0x1, 0x9}, {0x1, 0x9}, {0x7, 0x2}, {0x5, 0x3}, {0x3, 0x8}, {0x5, 0x3}, {0x6, 0x6}, {0x4, 0x1}, {0x6, 0x8}, {0x5, 0x7}, {0x4, 0x9}, {0x6, 0x6}, {0x4, 0x9}, {0x2, 0x7}, {0x1, 0x9}, {0x7, 0x4}, {0x0, 0x4}, {0x2, 0x5}, {0x5, 0x5}, {0x0, 0x8}, {0x1, 0x6}, {0x7, 0x3}, {0x1, 0x4}, {0x0, 0x6}, {0x3, 0xa}, {0x4, 0x9}]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x7, 0x1}, {0x7, 0x6}, {0x1}, {0x1, 0x1}, {0x2, 0x9}, {0x3, 0x3}, {0x0, 0x1}, {0x0, 0x2}, {0x2, 0x2}, {0x0, 0x7}, {0x3, 0x6}, {0x0, 0xa}, {0x1, 0x2}, {0x4, 0x8}, {0x2, 0x1}, {0x4, 0x3}, {0x3, 0x1}, {0x4, 0x5}, {0x6, 0x9}, {0x4, 0xa}, {0x7, 0x3}, {0x4, 0x9}, {0x1, 0x1}, {0x4, 0x5}, {0x6, 0x9}, {0x1, 0xa}, {0x2, 0x5}, {0x7, 0x4}, {0x6, 0x6}, {0x2, 0x4}, {0x0, 0x5}, {0x7}, {0x1, 0x8}, {0x2, 0x1}, {0x3, 0x2}, {0x2, 0x4}, {}, {0x6, 0x2}, {0x2, 0x2}, {0x0, 0x6}, {0x2, 0x2}, {0x6, 0x7}, {0x3, 0x4}, {0x6, 0x8}, {}, {0x6, 0x3}, {0x1, 0x3}, {0x1, 0x9}, {0x4, 0x8}, {0x3, 0x9}, {0x1, 0x4}, {0x3, 0x7}, {0x0, 0x3}]}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x2d, 0x1, 0x16, 0xb, 0x12, 0x62, 0x24, 0x16, 0x1e, 0x1b, 0x16, 0x2, 0x9, 0x1b, 0x60, 0x3, 0xbafc6e4f44b4194b, 0x12, 0x6, 0x30, 0x30, 0x1b, 0xc, 0x55, 0x48, 0x2, 0x3, 0x2, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x1b8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6, 0x6c, 0xb, 0x16, 0x65, 0x1c, 0x5, 0x5, 0x18, 0x730caf586f9c7113, 0x4, 0x60]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x3, 0x30, 0x48, 0x48, 0x4, 0x12, 0x0, 0x4, 0x18, 0x61, 0xc, 0x30, 0x0, 0xc, 0x1b, 0xc, 0x36, 0x3, 0x16, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x73, 0x9, 0x28, 0x1, 0x30, 0x62]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0xe5af, 0x8, 0x7fff, 0x1, 0x10, 0x2, 0x6]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x10, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0x36, 0x6c, 0x48, 0x18, 0x2]}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x12, 0xb, 0x16, 0x18, 0x60, 0x60, 0x7667c45b018abacb, 0x2, 0xc, 0x5, 0x1, 0x30, 0x4, 0x18, 0x36, 0x3, 0x2a, 0x24, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x5, 0x0, 0x1, 0xff, 0x1000, 0x2, 0x7fff]}}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x5, 0x2}, {0x4, 0x7}, {0x4}, {0x5, 0x8}, {0x6, 0x3}, {0x4, 0x8}, {0x0, 0x8}, {0x2, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x7, 0x9}, {0x1, 0xa}, {0x4, 0x3}, {0x4}, {0x1, 0x5}, {0x7}, {0x7, 0x6}, {0x1, 0x9}, {0x7, 0x2}, {0x4, 0x2}, {0x7}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x9}, {0x2, 0x4}, {0x1, 0x7}, {0x5, 0x4}, {0x3, 0x5}, {0x4, 0x1}, {0x6, 0x2}, {0x3, 0x5}, {0x5, 0x6}, {0x6, 0xa}, {0x4}, {0x4, 0x6}, {0x0, 0x3}, {0x5, 0xa}, {0x0, 0x6}, {0x6, 0x9}, {0x1, 0x9}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x4}, {0x6, 0x8}, {0x0, 0x8}, {0x3, 0x7}, {0x2, 0x2}, {0x1}, {0x5, 0x7}, {0x2, 0xa}, {0x4, 0x3}, {0x7, 0x8}, {0x5, 0x4}, {0x3, 0xa}, {0x3}, {0x2, 0x2}, {0x3, 0x7}, {0x6, 0x6}, {0x2, 0x10}, {0x5, 0x6}, {0x4, 0x3}, {0x7, 0x2}, {0x7}, {0x2, 0x1}, {0x4}, {0x2, 0xa}, {0x0, 0x19}, {0x6, 0x5}, {0x3, 0x5}, {0x6, 0x5}, {0x1, 0x9}, {0x4, 0x4}, {0x1, 0x9}]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0xffff, 0x7ff, 0x9, 0x6, 0x4, 0x0, 0xba]}}]}, @NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x2, 0x6c, 0x30, 0x36, 0x5, 0x60, 0x6, 0x9, 0x18, 0xb, 0x24, 0x6, 0x1, 0xb, 0x2, 0x1b, 0x53]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0x0, 0x2, 0x0, 0xffaa, 0x7, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x7ed6, 0x6, 0x6, 0x1ff, 0x9, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x5, 0x24, 0x18, 0x12, 0x30, 0x24, 0x0, 0x3, 0x2, 0x24, 0x12, 0x18, 0x9, 0x28, 0x9, 0x16, 0x1b, 0x5, 0x3, 0x60, 0x3, 0x30, 0x36, 0x60, 0x9, 0x30]}]}]}, @NL80211_ATTR_TX_RATES={0x374, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf800, 0x304, 0x1ff, 0x200, 0x890b, 0xff, 0xa, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0x2e, 0x5, 0x0, 0x7, 0x8, 0x8000]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x4, 0x3}, {0x1, 0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x6, 0x7}, {0x3, 0x9}, {0x2, 0x2}, {0x2, 0x6}, {0x3, 0x6}, {0x6, 0x7}, {0x3, 0x3}, {0x0, 0x2}, {0x1, 0x9}, {0x4, 0x6}, {0x0, 0x7}, {0x1, 0x5}, {0x0, 0x8}, {0x2, 0x3}, {0x7, 0x6}, {0x3, 0x8}, {0x5, 0x5}, {0x1, 0x5}, {0x7, 0x6}, {0x6, 0x4}, {0x6, 0x8}, {0x1, 0x2}, {0x0, 0x18}, {0x3, 0x9}, {0x3, 0x8}, {0x0, 0x8}, {0x1}, {0x7, 0x4}, {}, {0x4, 0x9}, {0x1, 0xa}, {0x5}, {0x5, 0x7}, {0x3, 0x1}, {0x2, 0x6}, {0x5, 0xa}, {0x4, 0x1}, {0x5}]}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1, 0x71, 0x73, 0x401, 0x1, 0x3ff, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x6, 0x6}, {0x2, 0x4}, {0x5, 0x5}, {0x1, 0x7}, {0x0, 0xa}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0xa}, {0x7, 0x5}, {0x6, 0x7}, {0x4, 0x2}, {0x4, 0x5}, {0x5, 0x6}, {0x4, 0x2}, {0x3, 0x2}, {0x0, 0x6}, {0x0, 0x7}, {0x7, 0x1}, {0x3, 0x1}, {0x0, 0x6}, {0x3, 0x3}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x6, 0x6}, {0x7, 0x3}, {0x4, 0x3}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x8}, {0x0, 0x7}, {0x7, 0x3}, {0x0, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x1, 0x9}, {0x1, 0x9}, {0x1, 0x1}, {0x2, 0x7}, {0x2, 0x7}, {}, {0x2, 0x9}]}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x5, 0x2}, {0x5, 0xa}, {}, {0x0, 0x8}, {0x1, 0xa}, {0x3, 0x3}, {0x5, 0x6}, {0x4, 0x3}, {0x2, 0xa}, {0x1, 0x5}, {0x0, 0x7}, {0x1, 0x9}, {0x1, 0xa}, {0x4, 0x6}, {0x0, 0x4}, {0x2, 0x6}, {0x7, 0x7}, {0x1, 0x8}, {0x1}, {0x4}, {0x6, 0x4}, {0x4, 0xa}, {0x1, 0x1}, {0x3, 0x5}, {0x0, 0x3}, {0x7, 0x4}, {0x7}, {0x4, 0x5}, {0x2}, {0x6, 0x6}, {0x5, 0xa}, {0x1, 0x5}, {0x1, 0x4}, {0x6, 0x2}, {0x0, 0x3}, {0x7, 0x8}, {0x4, 0x8}, {0x6, 0x1}, {}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x7}, {0x0, 0x6}, {0x0, 0x7}, {0x2, 0x3}, {0x3, 0x3}, {0x3, 0x4}, {0x0, 0x2}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x7}, {0x0, 0x9}, {0x5, 0x6}, {0x4, 0x2}, {0x0, 0x4}, {0x6, 0x5}, {0x2}, {0x5}, {0x7, 0x9}, {0x1, 0x6}, {0x4, 0x7}, {0x0, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2, 0x3, 0x1, 0x4, 0x9c8, 0x6b1, 0x14]}}]}, @NL80211_BAND_60GHZ={0xc4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfff, 0x8001, 0xc71, 0x2, 0x4, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x1, 0x4, 0x9, 0x7fff, 0x4, 0x5, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x2, 0xa}, {0x0, 0x3}, {0x2, 0x2}, {0x2, 0x3}, {0x2, 0x9}, {0x1, 0x8}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x6}, {0x0, 0x6}, {0x0, 0x9}, {0x4, 0x1}, {0x0, 0xa}, {0x1, 0x9}, {0x7, 0x5}, {0x0, 0x1}, {0x7, 0x3}, {0x0, 0x7}, {0x6, 0x2}, {0x7, 0x9}, {0x6, 0x9}, {0x6, 0x3}, {0x2, 0x1}, {0x5, 0x9}, {0x4, 0x4}, {0x6, 0x7}, {0x7, 0x8}, {0x1, 0x1}, {0x1, 0x4}, {0x2}, {0x2, 0x2}, {0x0, 0x5}, {0x0, 0x7}, {0x6, 0x8}, {0x6, 0x6}, {0x3, 0x7}, {0x7, 0x2}, {0x5, 0x5}, {0x0, 0x5}, {0x6, 0x6}, {0x5, 0x4}, {0x3, 0x9}, {0x2, 0x5}, {0x5, 0x4}, {0x6, 0x8}, {0x7}, {0x2}, {0x2}, {0x3, 0x3}, {0x0, 0x2}, {0x1, 0x8}, {0x1}, {0x5, 0x5}, {0x4, 0x4}, {0x2, 0x7}, {0x5, 0x9}, {0x3, 0x5}, {0x0, 0x3}, {0x1, 0x7}, {0x5, 0x1}, {0x2, 0x5}, {0x1, 0x6}, {0x4, 0x4}]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x0, 0x7}, {0x5, 0x8}, {0x4, 0x9}, {0x4}, {0x4, 0x4}, {0x0, 0x1}, {0x1, 0x7}, {0x0, 0x4}, {0x1, 0x1}, {0x2, 0x4}, {0x3, 0x7}, {0x3, 0x8}, {0x6, 0x2}, {0x6, 0x9}, {0x6, 0x9}, {0x2, 0x3}, {0x1}, {0x3, 0x2}, {0x6, 0x7}, {0x1}, {0x3, 0x3}, {0x5, 0x1}, {0x0, 0x8}, {0x7, 0x9}, {0x4, 0x4}, {0x3, 0x5}, {0x3, 0x8}, {0x5, 0xa}, {0x5, 0x5}, {0x2, 0xa}, {0x1, 0x9}, {0x6, 0x5}, {0x5, 0xa}, {0x3}, {0x5, 0x3}, {0x3, 0x1}, {0x1, 0x4}, {0x3, 0x6}, {0x3, 0x1}, {0x3, 0x8}, {}, {0x0, 0x3}, {0x7, 0x9}, {0x2, 0x8}, {0x6, 0x4}, {0x3, 0x3}, {0x7, 0x2}, {0x5, 0x3}, {0x5, 0x6}, {0x1, 0x2}, {0x1, 0x2}, {0x4, 0x5}, {0x7, 0x2}, {0x5, 0xa}, {}, {0x1, 0x7}, {0x1, 0xa}, {0x4, 0x6}, {0x1, 0xa}, {0x4, 0x3}, {0x2, 0x5}, {0x5}, {0x3, 0x3}, {0x1, 0x1}, {0x1, 0x9}, {0x7, 0x2}, {0x1, 0x2}, {0x7, 0x2}, {0x5, 0x9}, {0x1, 0x5}, {0x4, 0xa}, {0x7, 0x1}]}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x16, 0x18, 0x18, 0x5, 0x0, 0x48, 0x6c, 0x48, 0x1, 0x3, 0x4, 0xc, 0x6c, 0xc, 0xb, 0x48, 0x24, 0xb, 0x36, 0x60, 0xf]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x3, 0x6}, {0x1, 0x2}, {0x7, 0x3}, {0x1}, {0x5, 0x1}, {0x1, 0xa}, {0x5, 0x9}, {0x2, 0x6}, {0x1, 0x2}, {0x3, 0x4}, {0x3, 0x7}, {0x1, 0x9}, {0x7, 0x3}, {0x6, 0x7}, {0x5, 0x5}, {}, {0x3, 0x8}, {}, {0x6, 0x2}, {0x5, 0x7}, {0x3, 0x2}, {0x7, 0x4}, {0x5, 0x2}, {0x6, 0x8}, {0x7, 0x7}, {0x3, 0x7}, {0x1, 0x2}, {0x0, 0x3}, {0x0, 0x4}, {0x6, 0x5}, {0x0, 0x8}, {0x2, 0xa}, {0x1, 0x4}, {0x2, 0x9}, {0x6, 0x9}, {0x1, 0x4}, {0x1, 0x8}, {0x6, 0x8}, {0x6, 0x3}, {0x3, 0x9}, {0x0, 0x7}, {0x1, 0x5}, {0x0, 0x9}, {0x0, 0x3}, {0x4, 0xa}, {0x3, 0x2}, {0x6}, {0x6, 0x4}, {0x0, 0x6}, {0x5, 0x5}, {0x1, 0x8}, {0x6, 0x8}, {0x5, 0x2}, {0x2, 0x3}, {0x6, 0x4}]}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffa, 0x200, 0x0, 0x2, 0x4, 0xf81a, 0x4, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x6df2, 0xddc, 0x2, 0x5584, 0x8001, 0x71b9, 0x80]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6, 0x9, 0x475, 0xff, 0x7, 0x88, 0x2000]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_2GHZ={0xac, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, [{0x5, 0x2}, {0x1, 0x1}, {0x0, 0x9}, {0x2, 0x6}, {}, {0x0, 0x5}, {0x7}, {}, {0x4, 0x8}, {0x1, 0x4}, {0x5, 0xa}, {0x7, 0x3}, {0x4, 0x9}, {0x0, 0x1}, {0x1}, {0x1, 0x8}, {0x7, 0x4}, {0x2, 0x7}, {0x0, 0x5}, {0x3, 0x5}, {0x0, 0xa}, {0x6, 0x5}, {0x7, 0x9}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x1}, {0x5, 0x2}, {0x3, 0x2}, {0x7, 0x4}, {0x7, 0xa}, {0x0, 0x8}, {0x2, 0x7}, {0x3, 0x2}, {0x0, 0x9}, {0x2, 0x4}, {0x4, 0x5}, {0x2, 0x8}, {0x4, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x83, 0xaca0, 0x8, 0x800, 0x0, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x3, 0xa5a, 0xa, 0x61, 0x2, 0xf8, 0x4]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0xc, 0xb, 0xc, 0x4, 0x1, 0x24, 0x24, 0x36, 0x60, 0x9, 0x9, 0x1b, 0x1b, 0x6c, 0x12, 0x5]}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x3, 0x8}, {0x1, 0x2}, {0x4, 0xa}, {0x5, 0x2}, {0x3, 0x1}, {}, {0x1, 0x7}, {0x1, 0x4}, {0x4, 0x5}, {0x4, 0x4}, {0x7, 0x2}, {0x3, 0xa}, {0x4, 0xa}, {0x1, 0x2}, {0x5, 0x2}, {0x2}, {0x2}, {0x4, 0x9}, {0x7, 0x3}, {0x1, 0x3}, {0x7, 0x7}, {0x2, 0x6}, {0x6, 0x6}, {0x2, 0x8}, {0x4, 0xa}, {0x5}, {0x5, 0xa}, {0x4, 0x2}, {0x1}, {0x0, 0xa}, {0x3, 0x2}, {0x0, 0x6}, {0x4, 0x7}, {0x5, 0xa}, {0x4, 0x7}, {0x2, 0x2}, {0x3, 0xa}, {0x1, 0x3}, {0x6, 0x4}, {0x0, 0x2}, {0x6, 0x6}, {0x5, 0xa}, {0x7, 0x5}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x4}, {0x5, 0x7}, {0x2, 0x1}, {0x2}, {0x5}, {0x2, 0xa}, {0x6, 0x4}, {0x3}, {0x0, 0x3}, {0x3, 0x2}, {0x7, 0xa}, {0x4, 0x4}, {0x6, 0x8}, {0x6}, {0x7, 0x6}]}]}]}]}, 0x634}, 0x1, 0x0, 0x0, 0x10}, 0x80) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 6.462565676s ago: executing program 3 (id=540): mprotect(&(0x7f00008b6000/0x3000)=nil, 0x3000, 0x1000007) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13}, 0x94) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000000)='@\x00') (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xe, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0x6, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 64) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) 6.355175093s ago: executing program 3 (id=541): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd28, 0x25dfdbdf, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x14, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x85}, 0x40) (fail_nth: 8) 6.353384852s ago: executing program 3 (id=550): fsopen(&(0x7f00000003c0)='jfs\x00', 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r0 = syz_socket_connect_nvme_tcp() getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f00000001c0)=""/30, &(0x7f0000000240)=0x1e) socket$inet(0x2, 0x4000000000000001, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) fchdir(r3) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) r7 = dup(r6) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) r9 = accept4$alg(r8, 0x0, 0x0, 0x800) sendmsg$alg(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20048800}, 0x4040901) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r10, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r9, &(0x7f0000000340), 0x41}]) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000001000010028bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="10080400000000001c002b80080003001100000008000100", @ANYRES32, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r7, @ANYBLOB="14003500626f6e00"], 0x50}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3}, './file1/file0\x00'}) syz_open_dev$video(&(0x7f0000000000), 0x9, 0x0) r12 = openat$vimc0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_G_INPUT(r12, 0x80045626, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x29, r11, {0x7}}, './file1\x00'}) 6.053671447s ago: executing program 3 (id=543): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x34, r2, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3e}]}, 0x34}, 0x1, 0x0, 0x0, 0x20005005}, 0x24000084) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a010400000000000000000a0000040900010073797a31000000000900020073797a3200000000300004802c0001800a0001006d6174636800c9211c0002800800024000000002080003000000240008000100736574"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 5.964538373s ago: executing program 3 (id=544): gettid() r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\f\b\x00\x00\x00\x00\x00\x00\a\x00\x00\x00'], 0xc}}], 0x1, 0x0) r1 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) recvmmsg(r1, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0x42b7}], 0x1, 0x22, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="43a8bb4cada8"}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000002"], 0x78) keyctl$join(0x1, 0xfffffffffffffffe) openat$ubi_ctrl(0xffffff9c, &(0x7f0000000140), 0x602140, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$dsp(0xffffffffffffffff, &(0x7f0000000100)='\x00', 0xfffffffffffffe9d) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000000)={0x3, 0x0, [{0x0, 0x84, 0x2, 0x9, 0x4, 0x0, 0xb}, {0xb, 0x5, 0x0, 0xd, 0x9, 0x0, 0x9}, {0x2, 0xffffffff, 0x4, 0x2d, 0x3, 0x40007, 0x1000}]}) r5 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009dff802010035040009058dff86"], 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r6, &(0x7f0000000080)='7', 0x1) syz_usb_disconnect(r5) r7 = socket(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r9, @ANYRESOCT=r4], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff, 0xf}, 0x10) 3.38345821s ago: executing program 4 (id=557): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0xa8a01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x74000000) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0xb) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f0000000180)=""/67) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x4, 0xa}, {0x0, 0xc}, {0xf, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x14}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8848}, 0x44080) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x89) r10 = accept4$unix(r3, 0x0, 0x0, 0x800) openat$binderfs(0xffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) recvfrom$unix(r10, &(0x7f0000000500)=""/280, 0x118, 0x60, 0x0, 0x0) write$dsp(r0, &(0x7f0000000200)="60461d02728c9058d894214326b0cdf593b5f3229b7a09623edca37e093d7c67c7125425c354007b24aa75e81646e13a3b36d5f44464e80d448c30b6e2aca61f8601cb3dd0401ae027e278af906aaaaf4c6296ef5b9a12806de16e842c0886ac2d7ad77e670287dc1b1713521c18667fba4ab4d217aa6e7ba82892e0ce2f00c25736fed4975db036a6b0981cfb", 0x8d) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) socket$vsock_stream(0x28, 0x1, 0x0) 3.174888294s ago: executing program 4 (id=559): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r0, &(0x7f0000000100)=[{0xe, 0xa1, 0x0, 0xfd, @tick=0xc5a, {0x10, 0x49}, {0xe}, @raw8={"1f000e001f00"}}], 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x25dfdbfd, {}, [{0x80, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7b, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x44}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, &(0x7f00000001c0)) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000340)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r5, 0x0, 0x25, 0x5, @val=@netfilter={0xa, 0x0, 0xd}}, 0x20) mount$9p_virtio(&(0x7f0000000340), &(0x7f00000001c0)='.\x00', &(0x7f0000000040), 0x4004, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=virtio,posixac']) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000840)={'dummy0\x00'}) fcntl$dupfd(r4, 0x406, r4) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x54, 0x0, 0x1, {0x8, 0x1}, {0x53, 0xfffe}, @period={0x5d, 0x8e, 0x5, 0x9, 0x101, {0x2, 0x9201, 0x5}, 0x0, 0x0}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x87c}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) 3.174428526s ago: executing program 0 (id=560): setrlimit(0xa, &(0x7f00000001c0)={0x0, 0x2400000}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000040028000480080002400000000008000140000000051400030076"], 0xe8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES16], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x40000) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) (async) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r1, 0x0) listen(r1, 0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmmsg(r2, &(0x7f0000001e80), 0x0, 0x0, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x20000010, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x3ff, 0x81}, 0x0) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r4 = io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x470e8, 0x200, 0x2, 0xf2}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, &(0x7f0000000400)=[0xe758, 0x18000000], 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="f572c10000a88c43c226f0a6380778c72739a0862233842bb23ef0601d8e15353b66ba4b62a78c8209dc8801eb90bddd", @ANYRESHEX=r4, @ANYBLOB="29a10c1cdec7372203e2eed6021dce2c879e50e10836e080a9ddea4f5a5a0e01991eae81eae1acdeba75076040e03dd16da1e700d1ef9f731d24ced168d9cdb3e64582fabe41e08cb97cced84d77ef7c2a08478e60a376a318d6f7e29cfd13119711a12538ae367ef0f974768c0f0ce92cb58dfb59a46f524acb08e44afbfd0bab9de0b9831f81374f1138be43f529328667565ff4cadafc5c609b40c76874d00144d315f960350eabe4a819220e6de3045d67888e25c96181558fe933b7beaafe7f4852a322cdb314ba7ad1f378032fb4395011eb14efc4ff73154ff4733bf62a0c2eab7a6957315e189c617730aa47", @ANYRESHEX=r4, @ANYRESHEX=r2, @ANYRESDEC=r3], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe2c, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) syz_open_procfs(0xffffffffffffffff, 0x0) (async) unshare(0x6a040000) mmap(&(0x7f00004c3000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) (async) r5 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) pwrite64(r5, 0x0, 0x0, 0x2) ioctl$BLKRRPART(r5, 0x125f, 0x1f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) openat$dsp1(0xffffff9c, &(0x7f0000000040), 0x840, 0x0) 2.940449001s ago: executing program 0 (id=561): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x8ac00, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000e75000/0x3000)=nil, 0x3000}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000040)=0x1f) 2.863350278s ago: executing program 0 (id=562): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000480)={0x40, r0, 0x1, 0x0, 0x25dfdc00, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x40}}, 0x20000000) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04011120"], 0x7) 2.859489325s ago: executing program 3 (id=563): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}}, 0xc081) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x6, 0x36, &(0x7f0000000140)=ANY=[@ANYRES64=r0, @ANYRES8=r1], 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$EVIOCRMFF(r1, 0x5501, &(0x7f0000000100)=0xb) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r3 = syz_open_dev$audion(&(0x7f0000000080), 0xffff, 0x42800) ioctl$KVM_GET_TSC_KHZ_vm(r3, 0xaea3) 2.634199254s ago: executing program 0 (id=564): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @local}, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x101002, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000740)=0xe) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x2c, r5, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044885}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000000000000000000008510000006", @ANYRES32, @ANYBLOB="00000000ffffffff4c0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xb, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x203}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) read(r0, &(0x7f0000000180)=""/236, 0xec) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000440)={0x2, 0xfb}, 0x2) 2.549749485s ago: executing program 2 (id=565): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x41, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000240)={{0xffff, 0x6}, {0x7fffffffffffffff, 0x40}, 0xa}) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @local}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 2.44476909s ago: executing program 2 (id=566): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000900)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000001c80)=[{{&(0x7f0000000700)=@generic, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/57, 0x39}, {&(0x7f0000001a40)=""/157, 0x9d}, {&(0x7f0000001b00)=""/151, 0x97}, {&(0x7f0000001bc0)=""/6, 0x6}, {&(0x7f0000001c00)=""/25, 0x19}], 0x6}, 0x924}], 0x1, 0x2, 0x0) mount$9p_virtio(&(0x7f0000000400), &(0x7f0000000480)='./file0\x00', 0x0, 0x8, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) close(0x3) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x40000) r4 = socket$alg(0x26, 0x5, 0x0) r5 = mq_open(&(0x7f0000000300)='Pa\xb2\xb2\xc7-\xd1\xcc\x89Q\xb4\xd8\xb7qy\x9c\xe6', 0x1, 0xc, &(0x7f0000000440)={0x7, 0x7, 0x0, 0x7}) mq_timedreceive(r5, &(0x7f0000000500)=""/132, 0x84, 0x401, &(0x7f00000005c0)={0x77359400}) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14fc29", 0xb) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r6, &(0x7f00000002c0), 0x4) close(r6) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000004001000ffff04000b00000001000000e333a9870930eedb907ee29e38633a0545e68adfd2754298145b2790a8b9e2e2f30780c62e8098241478a29f134be20b5494d785717788d8652ee101af0973d915299e5b1de85269f38f840a00c4dda858c51ad02b124eaf3e7b30f66f2f178743bedf21382871a73611949cc829a52f8100480c18bb8515987bd8b04ba9345aec0a7753195e8c5d06b026ca90746046f020652def65cbdd3b42d8c7331f9135fe200c78ccad0f7c142db4353f3acc", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 2.114357059s ago: executing program 4 (id=567): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) 1.874439514s ago: executing program 4 (id=568): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f00002fd000/0x3000)=nil, 0x3000, 0x2000007, 0x1010, r0, 0x3000) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r1, 0xb6f84000) 1.703895336s ago: executing program 4 (id=569): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) get_mempolicy(0x0, 0x0, 0x800, &(0x7f000031e000/0x4000)=nil, 0x3) ppoll(&(0x7f0000000040)=[{r3, 0xa004}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f00000000c0)=0x1) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) openat$hpet(0xffffff9c, &(0x7f0000000300), 0x200, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x1, 0x5001) 1.333539086s ago: executing program 2 (id=570): r0 = socket(0x2, 0x80802, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_ENABLE_HIGH_LNB_VOLTAGE(r1, 0x6f44, 0x7fffffffffffffff) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x2, 0x4, 0x40, 0x800, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x0, 0xe}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000200)=ANY=[@ANYRES64=r1, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) fanotify_init(0x200, 0x0) pselect6(0x40, &(0x7f0000000680)={0x8, 0x7, 0x0, 0xfffffffffffffff9, 0x916, 0xae3, 0x7, 0x8}, 0x0, 0x0, &(0x7f0000000740), 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000170600000000000000fcffffff9500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x1c, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2, r9, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000001c0)=r10, 0x4) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000000400)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) stat64(&(0x7f0000000100)='./cgroup/../file0\x00', &(0x7f0000000400)) r11 = syz_open_dev$evdev(&(0x7f0000007bc0), 0x0, 0x0) ioctl$EVIOCGLED(r11, 0x80044520, &(0x7f0000000000)=""/85) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 884.439114ms ago: executing program 2 (id=571): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_WME={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048004}, 0x0) 764.840345ms ago: executing program 2 (id=572): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x40000003}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ppoll(&(0x7f00000002c0)=[{r2, 0x708}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f0000000140)) socket$can_raw(0x1d, 0x3, 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x40000003}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) (async) ioctl$FICLONE(r0, 0x40049409, r1) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) ppoll(&(0x7f00000002c0)=[{r2, 0x708}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f0000000140)) (async) 688.715582ms ago: executing program 0 (id=573): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x40) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc2c45512, &(0x7f0000000640)={{0xd, 0x5, 0x81, 0x53, 'syz1\x00', 0x9}, 0x0, [0x380, 0xb, 0x0, 0xcc1, 0x80, 0x101, 0x80000001, 0xa6d8, 0x2, 0x1, 0x9, 0x8, 0x8, 0xfffefff7, 0x8, 0x10, 0x5, 0x4, 0x2ff, 0x80, 0x962, 0x0, 0x1, 0x4, 0x7fffffff, 0xc360, 0x80000001, 0x6, 0x60e3, 0x6, 0x0, 0x10000, 0x7, 0x1000009, 0x107430, 0x2, 0x5, 0x609, 0x1, 0x3, 0x8, 0x5, 0x9, 0x8, 0x9, 0x1, 0x8, 0x0, 0x1, 0x2, 0x0, 0x6, 0x9000, 0xe93, 0x4, 0x800, 0x7, 0x3, 0x50b, 0x0, 0x6, 0x7ff, 0x1000, 0xffffffff, 0x7, 0x5, 0x7a, 0x2, 0x9, 0x2, 0x6, 0x7, 0x1000ac, 0x7, 0x7, 0x4, 0x8000, 0x5, 0x4, 0x7, 0xd, 0x7, 0x5, 0x0, 0x0, 0x40, 0x2, 0x8000, 0xfff, 0x3, 0x3b9, 0x6, 0x3, 0x4660917f, 0x487d, 0x8000, 0x1, 0x5, 0x3, 0x0, 0x800005, 0x4, 0x11, 0x1, 0x7, 0x9, 0xc, 0x4, 0x1, 0x1, 0x3ce, 0xa, 0x8, 0x9, 0x0, 0x6, 0xffffdff7, 0xffffbf90, 0xfffffffd, 0x7, 0x2, 0x0, 0x7, 0xa, 0x809, 0xbfffffff, 0x73938332, 0x7763]}) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010080ffffff000000000100000008000100030000002400048005000300010000000500030000000000050003008000000005008000020000000800020003"], 0x48}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f00000000c0)=""/95) 450.35995ms ago: executing program 0 (id=574): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2fdfffffd}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) openat$iommufd(0xffffff9c, &(0x7f00000000c0), 0x2500, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r4, 0x0, 0x100000000000000}, 0x38) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syz_tun\x00'}) 450.065931ms ago: executing program 2 (id=575): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x2ff, 0x0, 0x7ee69d08}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x8003af2, 0x0, &(0x7f0000000140), &(0x7f0000000100), 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, r4, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r6, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r7, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40) io_uring_register$IORING_REGISTER_MEM_REGION(r3, 0x22, &(0x7f0000000240)={0x0}, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00'}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) setitimer(0x4, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) 0s ago: executing program 4 (id=576): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, 0x0, &(0x7f0000000280)) ioctl$EVIOCGREP(r0, 0x80084524, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800010000000000110400000000170000000000000000000300000000040000000100000000000000020000000000000e0300000000000000000000000000000000d952b6ad89c71898d69c36dfd8284522b90a135b1c0af8817e04238a83b6de72b38195ea3709e42de26413e5b6582ab040fe954939624d90d07d3a"], 0x0, 0x52}, 0x28) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f0000000340)=ANY=[@ANYRES32=r3]) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x20000884}, 0xc000) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') syz_open_procfs(0x0, &(0x7f0000002180)='net/udplite\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x3, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x100, 0x5, 0x8, 0x800000b, 0x7fff}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) kernel console output (not intermixed with test programs): : ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53cd5d0 [ 130.218698][ T6874] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 130.218707][ T6874] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 130.218716][ T6874] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 130.218724][ T6874] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 130.218745][ T6874] [ 130.274912][ T53] usb 40-1: device descriptor read/8, error -110 [ 130.322624][ T6877] ======================================================= [ 130.322624][ T6877] WARNING: The mand mount option has been deprecated and [ 130.322624][ T6877] and is ignored by this kernel. Remove the mand [ 130.322624][ T6877] option from the mount to silence this warning. [ 130.322624][ T6877] ======================================================= [ 130.434745][ T53] usb usb40-port1: unable to enumerate USB device [ 130.842117][ T6861] usbtmc 5-1:16.0: simple usb_control_msg returned 0 [ 130.846805][ T6861] netlink: 'syz.0.183': attribute type 4 has an invalid length. [ 130.861191][ T6861] netlink: 'syz.0.183': attribute type 4 has an invalid length. [ 130.874257][ T6906] Illegal XDP return value 4294967294 on prog (id 36) dev syz_tun, expect packet loss! [ 130.942212][ T6909] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 130.944531][ T6909] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 130.949615][ T6909] vhci_hcd vhci_hcd.0: Device attached [ 130.992852][ T5951] Bluetooth: hci1: link tx timeout [ 130.994850][ T5951] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.042873][ T5951] Bluetooth: hci1: link tx timeout [ 131.045358][ T5951] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.066015][ T5951] Bluetooth: hci1: link tx timeout [ 131.067975][ T5951] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.086429][ T6916] warning: `syz.3.199' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 131.235134][ T29] usb 38-1: device descriptor read/8, error -110 [ 131.277784][ T5951] Bluetooth: hci1: link tx timeout [ 131.279520][ T5951] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.514560][ T6910] vhci_hcd: connection closed [ 131.515713][ T191] vhci_hcd vhci_hcd.2: stop threads [ 131.524799][ T191] vhci_hcd vhci_hcd.2: release socket [ 131.526655][ T191] vhci_hcd vhci_hcd.2: disconnect device [ 131.634660][ T6031] usb 42-1: device descriptor read/8, error -110 [ 131.874801][ T5951] Bluetooth: hci1: link tx timeout [ 131.876621][ T5951] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.949376][ T29] usb usb38-port1: attempt power cycle [ 132.025026][ T5951] Bluetooth: hci1: link tx timeout [ 132.027089][ T5951] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 132.396605][ T6937] syz.1.203 uses obsolete (PF_INET,SOCK_PACKET) [ 132.478894][ T829] usb 5-1: USB disconnect, device number 2 [ 132.603489][ T6945] futex_wake_op: syz.1.207 tries to shift op by 144; fix this program [ 132.625072][ T6031] usb usb42-port1: attempt power cycle [ 132.845296][ T6273] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 133.004776][ T6273] usb 7-1: Using ep0 maxpacket: 16 [ 133.027742][ T6273] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.033560][ T6273] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 133.042546][ T29] usb usb38-port1: unable to enumerate USB device [ 133.043638][ T6273] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 133.051269][ T6273] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.066637][ T5951] Bluetooth: hci1: command 0x0406 tx timeout [ 133.185758][ T6273] usb 7-1: config 0 descriptor?? [ 133.222679][ T6968] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 133.225162][ T6968] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 133.232656][ T6968] vhci_hcd vhci_hcd.0: Device attached [ 133.245577][ T6031] usb usb42-port1: unable to enumerate USB device [ 133.250002][ T6273] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 133.259509][ T6968] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 133.289524][ T6971] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 133.292163][ T6971] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 133.295885][ T6971] vhci_hcd vhci_hcd.0: Device attached [ 133.514656][ T6005] usb 40-1: SetAddress Request (6) to port 0 [ 133.518005][ T6005] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 133.594676][ T10] usb 38-1: SetAddress Request (6) to port 0 [ 133.597173][ T10] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 133.824567][ T6969] vhci_hcd: connection reset by peer [ 133.826797][ T46] vhci_hcd vhci_hcd.1: stop threads [ 133.828680][ T46] vhci_hcd vhci_hcd.1: release socket [ 133.830651][ T46] vhci_hcd vhci_hcd.1: disconnect device [ 133.917833][ T6972] vhci_hcd: connection reset by peer [ 133.928817][ T46] vhci_hcd vhci_hcd.0: stop threads [ 133.930663][ T46] vhci_hcd vhci_hcd.0: release socket [ 133.944192][ T46] vhci_hcd vhci_hcd.0: disconnect device [ 134.185529][ T1325] usb 44-1: device descriptor read/8, error -110 [ 134.290565][ T6273] usb 7-1: USB disconnect, device number 3 [ 134.296125][ T1325] usb usb44-port1: unable to enumerate USB device [ 135.145877][ T6997] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 135.148299][ T6997] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 135.165289][ T6997] vhci_hcd vhci_hcd.0: Device attached [ 135.303991][ T6995] futex_wake_op: syz.0.222 tries to shift op by 144; fix this program [ 135.380739][ T7005] Bluetooth: MGMT ver 1.23 [ 135.568925][ T1325] usb 42-1: SetAddress Request (10) to port 0 [ 135.570884][ T1325] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd [ 136.208284][ T6998] vhci_hcd: connection reset by peer [ 136.224728][ T12] vhci_hcd vhci_hcd.2: stop threads [ 136.227184][ T12] vhci_hcd vhci_hcd.2: release socket [ 136.229536][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 136.261618][ T7013] syzkaller0: entered promiscuous mode [ 136.264672][ T7013] syzkaller0: entered allmulticast mode [ 136.271641][ T7013] netlink: 64 bytes leftover after parsing attributes in process `syz.3.226'. [ 136.345686][ T7016] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 136.348082][ T7016] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 136.350868][ T7016] vhci_hcd vhci_hcd.0: Device attached [ 136.436296][ T7019] random: crng reseeded on system resumption [ 136.486037][ T7021] FAULT_INJECTION: forcing a failure. [ 136.486037][ T7021] name failslab, interval 1, probability 0, space 0, times 0 [ 136.490516][ T7021] CPU: 0 UID: 0 PID: 7021 Comm: syz.1.227 Tainted: G L syzkaller #0 PREEMPT(full) [ 136.490544][ T7021] Tainted: [L]=SOFTLOCKUP [ 136.490551][ T7021] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 136.490560][ T7021] Call Trace: [ 136.490567][ T7021] [ 136.490574][ T7021] dump_stack_lvl+0x100/0x190 [ 136.490611][ T7021] should_fail_ex.cold+0x5/0xa [ 136.490634][ T7021] should_failslab+0xc2/0x120 [ 136.490656][ T7021] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 136.490683][ T7021] ? __pmd_alloc+0xbf/0x950 [ 136.490709][ T7021] __pmd_alloc+0xbf/0x950 [ 136.490732][ T7021] __handle_mm_fault+0xa9e/0x2b60 [ 136.490759][ T7021] ? mt_find+0x45e/0x8e0 [ 136.490784][ T7021] ? __pfx___handle_mm_fault+0x10/0x10 [ 136.490811][ T7021] ? __pfx_mt_find+0x10/0x10 [ 136.490845][ T7021] ? find_vma+0xbf/0x140 [ 136.490863][ T7021] ? __pfx_find_vma+0x10/0x10 [ 136.490882][ T7021] handle_mm_fault+0x36d/0xa20 [ 136.490911][ T7021] do_user_addr_fault+0x74c/0x12f0 [ 136.490938][ T7021] exc_page_fault+0x6f/0xd0 [ 136.490958][ T7021] asm_exc_page_fault+0x26/0x30 [ 136.490975][ T7021] RIP: 0010:__get_user_4+0x14/0x20 [ 136.491000][ T7021] Code: 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 136.491015][ T7021] RSP: 0018:ffffc900033b7d98 EFLAGS: 00050287 [ 136.491031][ T7021] RAX: 00000000800025c0 RBX: ffffc900033b7f48 RCX: ffffc900033b7d3c [ 136.491042][ T7021] RDX: 00007ffffffff000 RSI: ffffffff82563681 RDI: ffffffff8c1b1e20 [ 136.491053][ T7021] RBP: 00000000800025c0 R08: 0000000000000001 R09: 00000000000001d4 [ 136.491063][ T7021] R10: 0000000000000200 R11: 0000000000000000 R12: 00000000800025c0 [ 136.491073][ T7021] R13: ffffc900033b7df8 R14: 0000000000000000 R15: 0000000000000000 [ 136.491091][ T7021] ? __might_fault+0x111/0x140 [ 136.491119][ T7021] cap_validate_magic+0x2a/0x1d0 [ 136.491139][ T7021] __do_sys_capset+0xe1/0x460 [ 136.491183][ T7021] ? __pfx___do_sys_capset+0x10/0x10 [ 136.491201][ T7021] ? __fget_files+0x21f/0x3d0 [ 136.491225][ T7021] ? fput+0x79/0x100 [ 136.491247][ T7021] ? __pfx_ksys_write+0x10/0x10 [ 136.491269][ T7021] __do_fast_syscall_32+0xe3/0x8c0 [ 136.491292][ T7021] do_fast_syscall_32+0x32/0x70 [ 136.491311][ T7021] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 136.491331][ T7021] RIP: 0023:0xf7fb6f6c [ 136.491346][ T7021] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 136.491361][ T7021] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 00000000000000b9 [ 136.491376][ T7021] RAX: ffffffffffffffda RBX: 00000000800025c0 RCX: 0000000000000000 [ 136.491385][ T7021] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 136.491395][ T7021] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 136.491404][ T7021] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 136.491413][ T7021] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 136.491437][ T7021] [ 136.968273][ T7017] vhci_hcd: connection closed [ 136.968495][ T46] vhci_hcd vhci_hcd.0: stop threads [ 136.972008][ T46] vhci_hcd vhci_hcd.0: release socket [ 136.973732][ T46] vhci_hcd vhci_hcd.0: disconnect device [ 137.114625][ T39] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 137.264641][ T39] usb 6-1: Using ep0 maxpacket: 8 [ 137.267965][ T39] usb 6-1: unable to get BOS descriptor or descriptor too short [ 137.271381][ T39] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.275427][ T39] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 137.280158][ T39] usb 6-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 137.283119][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.286252][ T39] usb 6-1: Product: syz [ 137.287727][ T39] usb 6-1: Manufacturer: syz [ 137.289263][ T39] usb 6-1: SerialNumber: syz [ 137.522301][ T39] usb 6-1: 0:1 : does not exist [ 137.524511][ T39] usb 6-1: unit 5 not found! [ 137.526134][ T39] usb 6-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8214); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 137.531524][ T39] usb 6-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 137.588607][ T39] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 137.597677][ T39] usb 6-1: USB disconnect, device number 3 [ 137.617495][ T6353] udevd[6353]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 137.874651][ T7040] futex_wake_op: syz.0.233 tries to shift op by 144; fix this program [ 138.027223][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.432199][ T7044] FAULT_INJECTION: forcing a failure. [ 138.432199][ T7044] name failslab, interval 1, probability 0, space 0, times 0 [ 138.454029][ T7044] CPU: 1 UID: 0 PID: 7044 Comm: syz.2.235 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.454052][ T7044] Tainted: [L]=SOFTLOCKUP [ 138.454056][ T7044] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.454063][ T7044] Call Trace: [ 138.454067][ T7044] [ 138.454072][ T7044] dump_stack_lvl+0x100/0x190 [ 138.454099][ T7044] should_fail_ex.cold+0x5/0xa [ 138.454114][ T7044] should_failslab+0xc2/0x120 [ 138.454129][ T7044] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 138.454141][ T7044] ? __request_module+0x2d5/0x6c0 [ 138.454163][ T7044] kstrdup+0x51/0xe0 [ 138.454175][ T7044] __request_module+0x2d5/0x6c0 [ 138.454192][ T7044] ? __pfx___request_module+0x10/0x10 [ 138.454213][ T7044] ? find_held_lock+0x2b/0x80 [ 138.454225][ T7044] ? rtnl_link_ops_get+0x17b/0x2c0 [ 138.454249][ T7044] ? rtnl_link_ops_get+0x17b/0x2c0 [ 138.454272][ T7044] rtnl_newlink+0x1657/0x2380 [ 138.454290][ T7044] ? __pfx_rtnl_newlink+0x10/0x10 [ 138.454301][ T7044] ? rcu_is_watching+0x12/0xc0 [ 138.454320][ T7044] ? kasan_quarantine_put+0x104/0x240 [ 138.454338][ T7044] ? lockdep_hardirqs_on+0x78/0x100 [ 138.454355][ T7044] ? kfree_skbmem+0x19a/0x210 [ 138.454369][ T7044] ? kmem_cache_free+0x124/0x6a0 [ 138.454393][ T7044] ? find_held_lock+0x2b/0x80 [ 138.454425][ T7044] ? find_held_lock+0x2b/0x80 [ 138.454436][ T7044] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 138.454448][ T7044] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 138.454461][ T7044] ? __pfx_rtnl_newlink+0x10/0x10 [ 138.454473][ T7044] rtnetlink_rcv_msg+0x95e/0xe90 [ 138.454486][ T7044] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 138.454503][ T7044] ? ref_tracker_free+0x37e/0x6c0 [ 138.454525][ T7044] netlink_rcv_skb+0x159/0x420 [ 138.454541][ T7044] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 138.454559][ T7044] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 138.454577][ T7044] ? netlink_deliver_tap+0x1ae/0xcc0 [ 138.454593][ T7044] netlink_unicast+0x5aa/0x870 [ 138.454608][ T7044] ? __pfx_netlink_unicast+0x10/0x10 [ 138.454626][ T7044] netlink_sendmsg+0x8b0/0xda0 [ 138.454641][ T7044] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.454655][ T7044] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 138.454673][ T7044] ____sys_sendmsg+0x9e1/0xb70 [ 138.454687][ T7044] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.454701][ T7044] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.454722][ T7044] ___sys_sendmsg+0x190/0x1e0 [ 138.454738][ T7044] ? __pfx____sys_sendmsg+0x10/0x10 [ 138.454771][ T7044] __sys_sendmsg+0x170/0x220 [ 138.454784][ T7044] ? __pfx___sys_sendmsg+0x10/0x10 [ 138.454800][ T7044] ? __pfx_ksys_write+0x10/0x10 [ 138.454815][ T7044] __do_fast_syscall_32+0xe3/0x8c0 [ 138.454831][ T7044] do_fast_syscall_32+0x32/0x70 [ 138.454844][ T7044] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 138.454859][ T7044] RIP: 0023:0xf6fdef6c [ 138.454870][ T7044] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 138.454881][ T7044] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 138.454894][ T7044] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000140 [ 138.454901][ T7044] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 138.454907][ T7044] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 138.454914][ T7044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.454920][ T7044] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 138.454934][ T7044] [ 138.586339][ T6005] usb 40-1: device descriptor read/8, error -110 [ 138.716505][ T10] usb 38-1: device descriptor read/8, error -110 [ 138.738410][ T7055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.237'. [ 138.930803][ T7063] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 138.933254][ T7063] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 138.997728][ T6005] usb usb40-port1: attempt power cycle [ 139.000800][ T7063] vhci_hcd vhci_hcd.0: Device attached [ 139.106632][ T10] usb usb38-port1: attempt power cycle [ 139.142972][ T7073] FAULT_INJECTION: forcing a failure. [ 139.142972][ T7073] name failslab, interval 1, probability 0, space 0, times 0 [ 139.149347][ T7073] CPU: 1 UID: 0 PID: 7073 Comm: syz.3.242 Tainted: G L syzkaller #0 PREEMPT(full) [ 139.149370][ T7073] Tainted: [L]=SOFTLOCKUP [ 139.149374][ T7073] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 139.149380][ T7073] Call Trace: [ 139.149385][ T7073] [ 139.149390][ T7073] dump_stack_lvl+0x100/0x190 [ 139.149415][ T7073] should_fail_ex.cold+0x5/0xa [ 139.149431][ T7073] should_failslab+0xc2/0x120 [ 139.149445][ T7073] __kmalloc_cache_noprof+0x7a/0x6f0 [ 139.149460][ T7073] ? get_device_parent+0x29a/0x4c0 [ 139.149482][ T7073] get_device_parent+0x29a/0x4c0 [ 139.149496][ T7073] device_add+0xc36/0x1950 [ 139.149511][ T7073] ? __pfx_dev_set_name+0x10/0x10 [ 139.149528][ T7073] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 139.149542][ T7073] ? __pfx_device_add+0x10/0x10 [ 139.149557][ T7073] ? lockdep_init_map_type+0x5c/0x250 [ 139.149573][ T7073] ? __init_waitqueue_head+0xca/0x150 [ 139.149594][ T7073] wakeup_source_device_create+0x243/0x2e0 [ 139.149612][ T7073] wakeup_source_sysfs_add+0x1c/0x90 [ 139.149627][ T7073] wakeup_source_register+0x154/0x3e0 [ 139.149641][ T7073] ep_create_wakeup_source+0x1df/0x2e0 [ 139.149656][ T7073] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 139.149670][ T7073] ? do_epoll_ctl+0x1012/0x36a0 [ 139.149683][ T7073] ? do_epoll_ctl+0x1012/0x36a0 [ 139.149699][ T7073] do_epoll_ctl+0x1eee/0x36a0 [ 139.149719][ T7073] ? __pfx_do_epoll_ctl+0x10/0x10 [ 139.149731][ T7073] ? find_held_lock+0x2b/0x80 [ 139.149742][ T7073] ? __might_fault+0xc5/0x140 [ 139.149764][ T7073] ? __might_fault+0xc5/0x140 [ 139.149787][ T7073] ? __ia32_sys_epoll_ctl+0x15b/0x1e0 [ 139.149800][ T7073] __ia32_sys_epoll_ctl+0x15b/0x1e0 [ 139.149814][ T7073] ? __pfx___ia32_sys_epoll_ctl+0x10/0x10 [ 139.149832][ T7073] __do_fast_syscall_32+0xe3/0x8c0 [ 139.149849][ T7073] do_fast_syscall_32+0x32/0x70 [ 139.149863][ T7073] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 139.149878][ T7073] RIP: 0023:0xf7fb4f6c [ 139.149888][ T7073] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 139.149899][ T7073] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 00000000000000ff [ 139.149912][ T7073] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000001 [ 139.149919][ T7073] RDX: 0000000000000005 RSI: 0000000080000140 RDI: 0000000000000000 [ 139.149926][ T7073] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 139.149932][ T7073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.149939][ T7073] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 139.149954][ T7073] [ 139.555238][ T6005] usb usb40-port1: unable to enumerate USB device [ 139.725318][ T10] usb usb38-port1: unable to enumerate USB device [ 140.302283][ T7066] vhci_hcd: connection closed [ 140.316470][ T1196] vhci_hcd vhci_hcd.2: stop threads [ 140.321782][ T1196] vhci_hcd vhci_hcd.2: release socket [ 140.323667][ T1196] vhci_hcd vhci_hcd.2: disconnect device [ 140.684553][ T1325] usb 42-1: device descriptor read/8, error -110 [ 140.894074][ T7096] FAULT_INJECTION: forcing a failure. [ 140.894074][ T7096] name failslab, interval 1, probability 0, space 0, times 0 [ 140.899582][ T7096] CPU: 2 UID: 0 PID: 7096 Comm: syz.1.250 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.899605][ T7096] Tainted: [L]=SOFTLOCKUP [ 140.899609][ T7096] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 140.899616][ T7096] Call Trace: [ 140.899621][ T7096] [ 140.899626][ T7096] dump_stack_lvl+0x100/0x190 [ 140.899652][ T7096] should_fail_ex.cold+0x5/0xa [ 140.899715][ T7096] ? tomoyo_encode2+0xfb/0x3c0 [ 140.899734][ T7096] should_failslab+0xc2/0x120 [ 140.899749][ T7096] __kmalloc_noprof+0xe0/0x850 [ 140.899767][ T7096] ? d_absolute_path+0x136/0x1b0 [ 140.899786][ T7096] tomoyo_encode2+0xfb/0x3c0 [ 140.899811][ T7096] tomoyo_encode+0x29/0x50 [ 140.899827][ T7096] tomoyo_realpath_from_path+0x18c/0x690 [ 140.899849][ T7096] tomoyo_path_number_perm+0x23c/0x580 [ 140.899863][ T7096] ? tomoyo_path_number_perm+0x22e/0x580 [ 140.899884][ T7096] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 140.899928][ T7096] ? find_held_lock+0x2b/0x80 [ 140.899947][ T7096] ? hook_file_ioctl_common+0x146/0x410 [ 140.899971][ T7096] ? __fget_files+0x215/0x3d0 [ 140.899995][ T7096] ? __fget_files+0x21f/0x3d0 [ 140.900018][ T7096] security_file_ioctl_compat+0xd3/0x230 [ 140.900051][ T7096] __ia32_compat_sys_ioctl+0xc2/0x360 [ 140.900084][ T7096] __do_fast_syscall_32+0xe3/0x8c0 [ 140.900112][ T7096] do_fast_syscall_32+0x32/0x70 [ 140.900135][ T7096] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 140.900160][ T7096] RIP: 0023:0xf7fb6f6c [ 140.900177][ T7096] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 140.900195][ T7096] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 140.900216][ T7096] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005425 [ 140.900228][ T7096] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 140.900239][ T7096] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 140.900250][ T7096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.900261][ T7096] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 140.900288][ T7096] [ 140.900309][ T7096] ERROR: Out of memory at tomoyo_realpath_from_path. [ 141.027591][ T7103] FAULT_INJECTION: forcing a failure. [ 141.027591][ T7103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.032811][ T7103] CPU: 0 UID: 0 PID: 7103 Comm: syz.2.253 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.032840][ T7103] Tainted: [L]=SOFTLOCKUP [ 141.032845][ T7103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 141.032856][ T7103] Call Trace: [ 141.032863][ T7103] [ 141.032870][ T7103] dump_stack_lvl+0x100/0x190 [ 141.032906][ T7103] should_fail_ex.cold+0x5/0xa [ 141.032929][ T7103] _copy_from_user+0x2e/0xd0 [ 141.032954][ T7103] __sys_bpf+0x243/0x4b90 [ 141.032980][ T7103] ? __pfx___sys_bpf+0x10/0x10 [ 141.032998][ T7103] ? proc_fail_nth_write+0x9f/0x220 [ 141.033022][ T7103] ? find_held_lock+0x2b/0x80 [ 141.033045][ T7103] ? find_held_lock+0x2b/0x80 [ 141.033062][ T7103] ? ksys_write+0x190/0x250 [ 141.033085][ T7103] ? __mutex_unlock_slowpath+0x15c/0x790 [ 141.033121][ T7103] ? fput+0x79/0x100 [ 141.033142][ T7103] ? ksys_write+0x1ac/0x250 [ 141.033164][ T7103] __ia32_sys_bpf+0x79/0xf0 [ 141.033184][ T7103] ? lockdep_hardirqs_on+0x78/0x100 [ 141.033204][ T7103] __do_fast_syscall_32+0xe3/0x8c0 [ 141.033227][ T7103] do_fast_syscall_32+0x32/0x70 [ 141.033247][ T7103] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 141.033269][ T7103] RIP: 0023:0xf6fdef6c [ 141.033284][ T7103] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 141.033300][ T7103] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 141.033317][ T7103] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000180 [ 141.033328][ T7103] RDX: 000000000000004c RSI: 0000000000000000 RDI: 0000000000000000 [ 141.033337][ T7103] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 141.033347][ T7103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.033356][ T7103] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 141.033380][ T7103] [ 141.038701][ T7101] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 141.040420][ T7103] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 141.056606][ T7101] netlink: 'syz.3.251': attribute type 8 has an invalid length. [ 141.059100][ T7103] netlink: 'syz.2.253': attribute type 8 has an invalid length. [ 141.085578][ T1325] usb usb42-port1: attempt power cycle [ 141.161382][ T7110] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 141.165336][ T7110] netlink: 'syz.1.255': attribute type 8 has an invalid length. [ 144.084563][ T1325] usb usb42-port1: unable to enumerate USB device [ 144.847630][ T7145] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 144.850173][ T7145] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 144.853627][ T7145] vhci_hcd vhci_hcd.0: Device attached [ 144.922205][ T7150] fuse: Bad value for 'fd' [ 145.068548][ T7158] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 145.070719][ T7158] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 145.076907][ T7162] FAULT_INJECTION: forcing a failure. [ 145.076907][ T7162] name failslab, interval 1, probability 0, space 0, times 0 [ 145.090584][ T7162] CPU: 2 UID: 0 PID: 7162 Comm: syz.2.264 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.090616][ T7162] Tainted: [L]=SOFTLOCKUP [ 145.090621][ T7162] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 145.090630][ T7162] Call Trace: [ 145.090637][ T7162] [ 145.090643][ T7162] dump_stack_lvl+0x100/0x190 [ 145.090686][ T7162] should_fail_ex.cold+0x5/0xa [ 145.090706][ T7162] ? tomoyo_encode2+0xfb/0x3c0 [ 145.090731][ T7162] should_failslab+0xc2/0x120 [ 145.090753][ T7162] __kmalloc_noprof+0xe0/0x850 [ 145.090803][ T7162] ? d_absolute_path+0x136/0x1b0 [ 145.090830][ T7162] tomoyo_encode2+0xfb/0x3c0 [ 145.090858][ T7162] tomoyo_encode+0x29/0x50 [ 145.090882][ T7162] tomoyo_realpath_from_path+0x18c/0x690 [ 145.090909][ T7162] tomoyo_path_number_perm+0x23c/0x580 [ 145.090928][ T7162] ? tomoyo_path_number_perm+0x22e/0x580 [ 145.090950][ T7162] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 145.090997][ T7162] ? find_held_lock+0x2b/0x80 [ 145.091015][ T7162] ? hook_file_ioctl_common+0x146/0x410 [ 145.091037][ T7162] ? __fget_files+0x215/0x3d0 [ 145.091059][ T7162] ? __fget_files+0x21f/0x3d0 [ 145.091080][ T7162] security_file_ioctl_compat+0xd3/0x230 [ 145.091106][ T7162] __ia32_compat_sys_ioctl+0xc2/0x360 [ 145.091165][ T7162] __do_fast_syscall_32+0xe3/0x8c0 [ 145.091189][ T7162] do_fast_syscall_32+0x32/0x70 [ 145.091209][ T7162] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 145.091232][ T7162] RIP: 0023:0xf6fdef6c [ 145.091248][ T7162] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 145.091263][ T7162] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 145.091280][ T7162] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0106407 [ 145.091290][ T7162] RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 145.091298][ T7162] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 145.091306][ T7162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.091314][ T7162] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 145.091337][ T7162] [ 145.091406][ T7162] ERROR: Out of memory at tomoyo_realpath_from_path. [ 145.186296][ T7158] vhci_hcd vhci_hcd.0: Device attached [ 145.235763][ T1325] usb 44-1: SetAddress Request (6) to port 0 [ 145.238543][ T1325] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 145.504593][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 145.666096][ T24] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 145.670074][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 145.672824][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.676843][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 145.685194][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 145.688787][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.692406][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 145.697223][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 145.700447][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.703976][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 145.711911][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 145.715246][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.720825][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 145.724036][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 145.727388][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.734490][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 145.755920][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 145.759979][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.763691][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 145.776256][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 145.780094][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.785547][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 145.788752][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 145.791873][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.795878][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 145.800111][ T24] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 145.814513][ T24] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 145.818408][ T24] usb 7-1: Product: syz [ 145.819994][ T24] usb 7-1: Manufacturer: syz [ 145.821473][ T24] usb 7-1: SerialNumber: syz [ 145.834877][ T24] usb 7-1: config 0 descriptor?? [ 145.857336][ T24] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 145.864064][ T7146] vhci_hcd: connection reset by peer [ 145.869788][ T221] vhci_hcd vhci_hcd.3: stop threads [ 145.871833][ T7154] random: crng reseeded on system resumption [ 145.872294][ T221] vhci_hcd vhci_hcd.3: release socket [ 145.881251][ T221] vhci_hcd vhci_hcd.3: disconnect device [ 146.205968][ T53] usb 38-1: SetAddress Request (10) to port 0 [ 146.208295][ T53] usb 38-1: new SuperSpeed USB device number 10 using vhci_hcd [ 146.274178][ T7160] vhci_hcd: connection reset by peer [ 146.277971][ T60] vhci_hcd vhci_hcd.0: stop threads [ 146.280306][ T60] vhci_hcd vhci_hcd.0: release socket [ 146.282465][ T60] vhci_hcd vhci_hcd.0: disconnect device [ 146.642809][ T10] usb 7-1: USB disconnect, device number 4 [ 146.664949][ T10] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 148.058202][ T7208] syzkaller0: entered promiscuous mode [ 148.060208][ T7208] syzkaller0: entered allmulticast mode [ 148.076670][ T7209] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 148.134781][ T829] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 148.202988][ T7212] futex_wake_op: syz.3.279 tries to shift op by 144; fix this program [ 148.294259][ T7197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.306317][ T7197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.320918][ T829] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 148.323400][ T829] usb 7-1: can't read configurations, error -71 [ 148.417476][ T7216] tmpfs: Bad value for 'mpol' [ 149.593225][ T7225] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 149.595690][ T7225] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 149.612693][ T7225] vhci_hcd vhci_hcd.0: Device attached [ 149.894529][ T6031] usb 42-1: SetAddress Request (14) to port 0 [ 149.896623][ T6031] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd [ 150.259001][ T7226] vhci_hcd: connection reset by peer [ 150.261699][ T12] vhci_hcd vhci_hcd.2: stop threads [ 150.263593][ T12] vhci_hcd vhci_hcd.2: release socket [ 150.270598][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 150.537123][ T7242] qnx4: unable to read the superblock [ 150.904680][ T1325] usb 44-1: device descriptor read/8, error -110 [ 151.306275][ T1325] usb usb44-port1: attempt power cycle [ 151.309427][ T53] usb 38-1: device descriptor read/8, error -110 [ 151.361783][ T7269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.299'. [ 151.364572][ T34] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 151.516379][ T34] usb 5-1: config 0 has no interfaces? [ 151.520181][ T34] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 151.523338][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.526780][ T34] usb 5-1: Product: syz [ 151.528244][ T34] usb 5-1: Manufacturer: syz [ 151.529739][ T34] usb 5-1: SerialNumber: syz [ 151.534083][ T34] usb 5-1: config 0 descriptor?? [ 151.705715][ T53] usb usb38-port1: attempt power cycle [ 151.746265][ T34] usb 5-1: USB disconnect, device number 3 [ 151.895556][ T1325] usb usb44-port1: unable to enumerate USB device [ 152.275050][ T53] usb usb38-port1: unable to enumerate USB device [ 153.291557][ T7308] SET target dimension over the limit! [ 153.802832][ T7319] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 153.805740][ T7319] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 153.813055][ T7319] vhci_hcd vhci_hcd.0: Device attached [ 153.946188][ T7322] random: crng reseeded on system resumption [ 154.067583][ T7325] futex_wake_op: syz.0.315 tries to shift op by 144; fix this program [ 154.124561][ T53] usb 40-1: SetAddress Request (10) to port 0 [ 154.127324][ T53] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 154.354971][ T7334] syzkaller0: entered promiscuous mode [ 154.417757][ T7320] vhci_hcd: connection reset by peer [ 154.421540][ T60] vhci_hcd vhci_hcd.1: stop threads [ 154.423748][ T60] vhci_hcd vhci_hcd.1: release socket [ 154.427280][ T60] vhci_hcd vhci_hcd.1: disconnect device [ 154.498551][ T7339] FAULT_INJECTION: forcing a failure. [ 154.498551][ T7339] name failslab, interval 1, probability 0, space 0, times 0 [ 154.502821][ T7339] CPU: 0 UID: 0 PID: 7339 Comm: syz.2.319 Tainted: G L syzkaller #0 PREEMPT(full) [ 154.502840][ T7339] Tainted: [L]=SOFTLOCKUP [ 154.502844][ T7339] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 154.502850][ T7339] Call Trace: [ 154.502857][ T7339] [ 154.502866][ T7339] dump_stack_lvl+0x100/0x190 [ 154.502891][ T7339] should_fail_ex.cold+0x5/0xa [ 154.502904][ T7339] should_failslab+0xc2/0x120 [ 154.502918][ T7339] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 154.502934][ T7339] ? io_submit_one+0x124/0x1fb0 [ 154.502949][ T7339] io_submit_one+0x124/0x1fb0 [ 154.502963][ T7339] ? __lock_acquire+0x4a5/0x2630 [ 154.502977][ T7339] ? irqentry_exit+0x180/0x670 [ 154.502990][ T7339] ? lockdep_hardirqs_on+0x78/0x100 [ 154.503001][ T7339] ? __pfx_io_submit_one+0x10/0x10 [ 154.503017][ T7339] ? __might_fault+0xc5/0x140 [ 154.503036][ T7339] ? __ia32_compat_sys_io_submit+0x1a7/0x3b0 [ 154.503050][ T7339] __ia32_compat_sys_io_submit+0x1a7/0x3b0 [ 154.503065][ T7339] ? __pfx___ia32_compat_sys_io_submit+0x10/0x10 [ 154.503100][ T7339] ? __pfx_ksys_write+0x10/0x10 [ 154.503115][ T7339] __do_fast_syscall_32+0xe3/0x8c0 [ 154.503129][ T7339] do_fast_syscall_32+0x32/0x70 [ 154.503142][ T7339] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 154.503157][ T7339] RIP: 0023:0xf6fdef6c [ 154.503167][ T7339] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 154.503177][ T7339] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 00000000000000f8 [ 154.503189][ T7339] RAX: ffffffffffffffda RBX: 00000000f7f11000 RCX: 0000000000000001 [ 154.503195][ T7339] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 154.503201][ T7339] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 154.503208][ T7339] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 154.503216][ T7339] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 154.503236][ T7339] [ 154.692859][ T7341] FAULT_INJECTION: forcing a failure. [ 154.692859][ T7341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.702012][ T7341] CPU: 2 UID: 0 PID: 7341 Comm: syz.2.320 Tainted: G L syzkaller #0 PREEMPT(full) [ 154.702053][ T7341] Tainted: [L]=SOFTLOCKUP [ 154.702062][ T7341] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 154.702076][ T7341] Call Trace: [ 154.702085][ T7341] [ 154.702094][ T7341] dump_stack_lvl+0x100/0x190 [ 154.702142][ T7341] should_fail_ex.cold+0x5/0xa [ 154.702173][ T7341] _copy_from_user+0x2e/0xd0 [ 154.702209][ T7341] kstrtouint_from_user+0xd6/0x1d0 [ 154.702247][ T7341] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 154.702283][ T7341] ? __lock_acquire+0x4a5/0x2630 [ 154.702321][ T7341] ? lock_acquire+0x1cf/0x380 [ 154.702359][ T7341] proc_fail_nth_write+0x83/0x220 [ 154.702392][ T7341] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 154.702441][ T7341] vfs_write+0x2aa/0x1070 [ 154.702467][ T7341] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 154.702501][ T7341] ? __pfx_vfs_write+0x10/0x10 [ 154.702523][ T7341] ? find_held_lock+0x2b/0x80 [ 154.702547][ T7341] ? __fget_files+0x215/0x3d0 [ 154.702579][ T7341] ? __fget_files+0x21f/0x3d0 [ 154.702612][ T7341] ksys_write+0x12a/0x250 [ 154.702636][ T7341] ? __pfx_ksys_write+0x10/0x10 [ 154.702667][ T7341] do_int80_emulation+0x141/0x6b0 [ 154.702701][ T7341] asm_int80_emulation+0x1a/0x20 [ 154.702723][ T7341] RIP: 0023:0xf7115cab [ 154.702744][ T7341] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 154.702764][ T7341] RSP: 002b:00000000f53cd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 154.702789][ T7341] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f53cd5d0 [ 154.702803][ T7341] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 154.702815][ T7341] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 154.702827][ T7341] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 154.702839][ T7341] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 154.702872][ T7341] [ 155.091626][ T6031] usb 42-1: device descriptor read/8, error -110 [ 157.101879][ T6031] usb usb42-port1: attempt power cycle [ 157.298082][ T7371] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 157.300828][ T7371] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 157.309515][ T7371] vhci_hcd vhci_hcd.0: Device attached [ 157.498562][ T7381] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 157.501493][ T7381] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 157.506651][ T7381] vhci_hcd vhci_hcd.0: Device attached [ 157.575458][ T6031] usb 42-1: SetAddress Request (17) to port 0 [ 157.592266][ T6031] usb 42-1: new SuperSpeed USB device number 17 using vhci_hcd [ 157.624647][ T10] usb 44-1: SetAddress Request (10) to port 0 [ 157.626759][ T10] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd [ 157.716616][ T7386] random: crng reseeded on system resumption [ 157.790288][ T7390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.335'. [ 157.876012][ T7377] vhci_hcd: connection reset by peer [ 157.887264][ T221] vhci_hcd vhci_hcd.3: stop threads [ 157.889575][ T221] vhci_hcd vhci_hcd.3: release socket [ 157.891715][ T221] vhci_hcd vhci_hcd.3: disconnect device [ 157.999330][ T7382] vhci_hcd: connection reset by peer [ 158.004819][ T221] vhci_hcd vhci_hcd.2: stop threads [ 158.007211][ T221] vhci_hcd vhci_hcd.2: release socket [ 158.014793][ T221] vhci_hcd vhci_hcd.2: disconnect device [ 159.086565][ T7411] mkiss: ax0: crc mode is auto. [ 159.234762][ T53] usb 40-1: device descriptor read/8, error -110 [ 159.641427][ T53] usb usb40-port1: attempt power cycle [ 159.981984][ T7419] overlayfs: failed to resolve './cgroup': -2 [ 160.020554][ T7421] futex_wake_op: syz.3.343 tries to shift op by 144; fix this program [ 160.597646][ T7434] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 160.600281][ T7434] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 160.614871][ T7434] vhci_hcd vhci_hcd.0: Device attached [ 160.727309][ T7432] random: crng reseeded on system resumption [ 160.778041][ T7433] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 160.780160][ T7433] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 160.782774][ T7433] vhci_hcd vhci_hcd.0: Device attached [ 160.894631][ T1325] usb 38-1: SetAddress Request (14) to port 0 [ 160.897323][ T1325] usb 38-1: new SuperSpeed USB device number 14 using vhci_hcd [ 160.954599][ T53] usb 40-1: SetAddress Request (13) to port 0 [ 160.957371][ T53] usb 40-1: new SuperSpeed USB device number 13 using vhci_hcd [ 160.962146][ T7435] vhci_hcd: connection reset by peer [ 160.991192][ T221] vhci_hcd vhci_hcd.0: stop threads [ 160.992947][ T221] vhci_hcd vhci_hcd.0: release socket [ 160.995251][ T221] vhci_hcd vhci_hcd.0: disconnect device [ 161.205976][ T7441] vhci_hcd: connection reset by peer [ 161.208657][ T221] vhci_hcd vhci_hcd.1: stop threads [ 161.210276][ T221] vhci_hcd vhci_hcd.1: release socket [ 161.214088][ T221] vhci_hcd vhci_hcd.1: disconnect device [ 162.005732][ T7456] FAULT_INJECTION: forcing a failure. [ 162.005732][ T7456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.011299][ T7456] CPU: 0 UID: 0 PID: 7456 Comm: syz.0.352 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.011345][ T7456] Tainted: [L]=SOFTLOCKUP [ 162.011351][ T7456] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 162.011361][ T7456] Call Trace: [ 162.011369][ T7456] [ 162.011382][ T7456] dump_stack_lvl+0x100/0x190 [ 162.011419][ T7456] should_fail_ex.cold+0x5/0xa [ 162.011441][ T7456] _copy_from_user+0x2e/0xd0 [ 162.011466][ T7456] __sys_bpf+0x243/0x4b90 [ 162.011492][ T7456] ? __pfx___sys_bpf+0x10/0x10 [ 162.011510][ T7456] ? find_held_lock+0x2b/0x80 [ 162.011527][ T7456] ? finish_task_switch.isra.0+0x200/0xb80 [ 162.011548][ T7456] ? finish_task_switch.isra.0+0x200/0xb80 [ 162.011567][ T7456] ? rcu_is_watching+0x12/0xc0 [ 162.011594][ T7456] ? finish_task_switch.isra.0+0x205/0xb80 [ 162.011614][ T7456] ? finish_task_switch.isra.0+0x2c6/0xb80 [ 162.011633][ T7456] ? rcu_is_watching+0x12/0xc0 [ 162.011659][ T7456] ? trace_sched_exit_tp+0x13a/0x180 [ 162.011680][ T7456] ? __schedule+0x1000/0x6120 [ 162.011711][ T7456] ? __pfx___schedule+0x10/0x10 [ 162.011728][ T7456] ? fput+0x79/0x100 [ 162.011756][ T7456] __ia32_sys_bpf+0x79/0xf0 [ 162.011778][ T7456] ? lockdep_hardirqs_on+0x78/0x100 [ 162.011796][ T7456] __do_fast_syscall_32+0xe3/0x8c0 [ 162.011824][ T7456] do_fast_syscall_32+0x32/0x70 [ 162.011844][ T7456] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 162.011866][ T7456] RIP: 0023:0xf70bef6c [ 162.011882][ T7456] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 162.011898][ T7456] RSP: 002b:00000000f548c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 162.011917][ T7456] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000040 [ 162.011927][ T7456] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 162.011937][ T7456] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 162.011946][ T7456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.011957][ T7456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 162.011980][ T7456] [ 162.372085][ T7465] dvmrp1: entered allmulticast mode [ 162.459491][ T7465] fuse: Bad value for 'fd' [ 162.468897][ T7463] dvmrp1: left allmulticast mode [ 162.624951][ T7487] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 162.629079][ T7487] block device autoloading is deprecated and will be removed. [ 162.674636][ T10] usb 44-1: device descriptor read/8, error -110 [ 162.877115][ T6031] usb 42-1: device descriptor read/8, error -110 [ 162.879946][ T7483] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 162.882127][ T7483] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 162.890213][ T7483] vhci_hcd vhci_hcd.0: Device attached [ 162.961349][ T7483] random: crng reseeded on system resumption [ 163.135243][ T10] usb 44-1: SetAddress Request (11) to port 0 [ 163.137667][ T10] usb 44-1: new SuperSpeed USB device number 11 using vhci_hcd [ 163.902006][ T6031] usb usb42-port1: unable to enumerate USB device [ 164.028352][ T7486] vhci_hcd: connection reset by peer [ 164.031266][ T12] vhci_hcd vhci_hcd.3: stop threads [ 164.033002][ T12] vhci_hcd vhci_hcd.3: release socket [ 164.035452][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 164.903871][ T7507] futex_wake_op: syz.2.368 tries to shift op by 144; fix this program [ 166.002776][ T1325] usb 38-1: device descriptor read/8, error -110 [ 166.033577][ T53] usb 40-1: device descriptor read/8, error -110 [ 166.221668][ T53] usb usb40-port1: unable to enumerate USB device [ 166.426881][ T1325] usb usb38-port1: attempt power cycle [ 166.540789][ T7543] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 166.542970][ T7543] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 166.587887][ T7543] vhci_hcd vhci_hcd.0: Device attached [ 166.690521][ T7546] random: crng reseeded on system resumption [ 166.774667][ T1325] usb 38-1: SetAddress Request (16) to port 0 [ 166.777315][ T1325] usb 38-1: new SuperSpeed USB device number 16 using vhci_hcd [ 167.103121][ T7544] vhci_hcd: connection reset by peer [ 167.105817][ T12] vhci_hcd vhci_hcd.0: stop threads [ 167.108455][ T12] vhci_hcd vhci_hcd.0: release socket [ 167.111423][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 167.380510][ T7557] netlink: 48 bytes leftover after parsing attributes in process `syz.1.383'. [ 167.718159][ T7575] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 167.721005][ T7575] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 167.725986][ T7575] vhci_hcd vhci_hcd.0: Device attached [ 167.753115][ T7579] fuse: Unknown parameter '000000000000000000000040x0000000000000005' [ 167.863465][ T7585] tipc: Enabling of bearer rejected, failed to enable media [ 167.921661][ T7589] futex_wake_op: syz.0.391 tries to shift op by 144; fix this program [ 168.045822][ T6032] usb 42-1: SetAddress Request (18) to port 0 [ 168.048838][ T6032] usb 42-1: new SuperSpeed USB device number 18 using vhci_hcd [ 168.186955][ T10] usb 44-1: device descriptor read/8, error -110 [ 168.315616][ T10] usb usb44-port1: attempt power cycle [ 168.392840][ T7576] vhci_hcd: connection reset by peer [ 168.406866][ T1196] vhci_hcd vhci_hcd.2: stop threads [ 168.409153][ T1196] vhci_hcd vhci_hcd.2: release socket [ 168.411547][ T1196] vhci_hcd vhci_hcd.2: disconnect device [ 168.625910][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.394'. [ 168.775501][ T7599] ptrace attach of "/syz-executor exec"[7602] was attempted by "/syz-executor exec"[7599] [ 168.779783][ T7599] netlink: 52 bytes leftover after parsing attributes in process `syz.1.395'. [ 168.783813][ T7599] netlink: 28 bytes leftover after parsing attributes in process `syz.1.395'. [ 168.837715][ T7599] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.846211][ T7599] bridge_slave_1: left allmulticast mode [ 168.848680][ T7599] bridge_slave_1: left promiscuous mode [ 168.850920][ T7599] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.875062][ T10] usb usb44-port1: unable to enumerate USB device [ 168.911101][ T7610] Bluetooth: MGMT ver 1.23 [ 168.960657][ T7612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.399'. [ 168.967647][ T7612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.399'. [ 169.169306][ T7616] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 169.171535][ T7616] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 169.185984][ T7616] vhci_hcd vhci_hcd.0: Device attached [ 169.358080][ T7628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.404'. [ 169.364633][ T7622] random: crng reseeded on system resumption [ 169.454878][ T6031] usb 44-1: SetAddress Request (14) to port 0 [ 169.458250][ T6031] usb 44-1: new SuperSpeed USB device number 14 using vhci_hcd [ 169.739719][ T7618] vhci_hcd: connection reset by peer [ 169.745251][ T1196] vhci_hcd vhci_hcd.3: stop threads [ 169.747538][ T1196] vhci_hcd vhci_hcd.3: release socket [ 169.751221][ T1196] vhci_hcd vhci_hcd.3: disconnect device [ 170.361487][ T7641] netlink: 'syz.2.408': attribute type 3 has an invalid length. [ 170.725278][ T7655] mmap: syz.0.411 (7655) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 171.977852][ T1325] usb 38-1: device descriptor read/8, error -110 [ 172.201986][ T7660] futex_wake_op: syz.2.414 tries to shift op by 144; fix this program [ 172.676543][ T1325] usb usb38-port1: unable to enumerate USB device [ 172.970339][ T7685] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 172.972688][ T7685] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 172.976756][ T7685] vhci_hcd vhci_hcd.0: Device attached [ 173.042245][ T7691] random: crng reseeded on system resumption [ 173.144563][ T6032] usb 42-1: device descriptor read/8, error -110 [ 173.284581][ T1325] usb 40-1: SetAddress Request (14) to port 0 [ 173.287334][ T1325] usb 40-1: new SuperSpeed USB device number 14 using vhci_hcd [ 173.350826][ T7694] netlink: 'syz.2.421': attribute type 1 has an invalid length. [ 173.460166][ T7696] netlink: 28 bytes leftover after parsing attributes in process `syz.2.421'. [ 173.474668][ T7686] vhci_hcd: connection reset by peer [ 173.477124][ T191] vhci_hcd vhci_hcd.1: stop threads [ 173.479478][ T191] vhci_hcd vhci_hcd.1: release socket [ 173.482043][ T191] vhci_hcd vhci_hcd.1: disconnect device [ 173.517067][ T7694] bond3: entered promiscuous mode [ 173.520972][ T7694] 8021q: adding VLAN 0 to HW filter on device bond3 [ 173.527835][ T7696] bond3: entered allmulticast mode [ 173.574535][ T6032] usb usb42-port1: attempt power cycle [ 173.583874][ T7694] bond3: (slave bridge1): making interface the new active one [ 173.587189][ T7694] bridge1: entered promiscuous mode [ 173.589368][ T7694] bridge1: entered allmulticast mode [ 173.592954][ T7694] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 174.068488][ T7709] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20001 [ 174.117139][ T7709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.425'. [ 174.120565][ T7709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.425'. [ 174.123977][ T7709] 8021q: VLANs not supported on vcan0 [ 174.147954][ T6032] usb usb42-port1: unable to enumerate USB device [ 174.167682][ T7711] xt_CT: You must specify a L4 protocol and not use inversions on it [ 174.504586][ T6031] usb 44-1: device descriptor read/8, error -110 [ 174.507659][ T7721] Cannot find add_set index 0 as target [ 174.846695][ T7724] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 174.849890][ T7724] IPv6: NLM_F_CREATE should be set when creating new route [ 174.852822][ T7724] IPv6: NLM_F_CREATE should be set when creating new route [ 174.982580][ T6031] usb usb44-port1: attempt power cycle [ 175.423711][ T7739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.434'. [ 175.683458][ T7749] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 175.685599][ T7749] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 175.688457][ T7749] vhci_hcd vhci_hcd.0: Device attached [ 175.697051][ T7744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.437'. [ 175.700121][ T7744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.437'. [ 175.702874][ T7744] netlink: 'syz.0.437': attribute type 13 has an invalid length. [ 175.706539][ T7744] netlink: 'syz.0.437': attribute type 14 has an invalid length. [ 175.767434][ T7753] random: crng reseeded on system resumption [ 175.777928][ T6031] usb usb44-port1: unable to enumerate USB device [ 176.114549][ T6031] usb 42-1: SetAddress Request (22) to port 0 [ 176.116825][ T6031] usb 42-1: new SuperSpeed USB device number 22 using vhci_hcd [ 176.313519][ T7750] vhci_hcd: connection reset by peer [ 176.317978][ T1196] vhci_hcd vhci_hcd.2: stop threads [ 176.321217][ T1196] vhci_hcd vhci_hcd.2: release socket [ 176.323775][ T1196] vhci_hcd vhci_hcd.2: disconnect device [ 176.968056][ T7775] FAULT_INJECTION: forcing a failure. [ 176.968056][ T7775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.973970][ T7775] CPU: 0 UID: 0 PID: 7775 Comm: syz.2.446 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.973993][ T7775] Tainted: [L]=SOFTLOCKUP [ 176.973998][ T7775] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 176.974067][ T7775] Call Trace: [ 176.974135][ T7775] [ 176.974141][ T7775] dump_stack_lvl+0x100/0x190 [ 176.974791][ T7775] should_fail_ex.cold+0x5/0xa [ 176.974848][ T7775] _copy_from_iter+0x1f4/0x1690 [ 176.975118][ T7775] ? __asan_memset+0x23/0x50 [ 176.975249][ T7775] ? __pfx__copy_from_iter+0x10/0x10 [ 176.975266][ T7775] ? __pfx___alloc_skb+0x10/0x10 [ 176.975598][ T7775] netlink_sendmsg+0x808/0xda0 [ 176.975626][ T7775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.975650][ T7775] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 176.975771][ T7775] ____sys_sendmsg+0x9e1/0xb70 [ 176.975792][ T7775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.975813][ T7775] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.975846][ T7775] ___sys_sendmsg+0x190/0x1e0 [ 176.975871][ T7775] ? __pfx____sys_sendmsg+0x10/0x10 [ 176.975924][ T7775] __sys_sendmsg+0x170/0x220 [ 176.975942][ T7775] ? __pfx___sys_sendmsg+0x10/0x10 [ 176.975968][ T7775] ? __pfx_ksys_write+0x10/0x10 [ 176.975994][ T7775] __do_fast_syscall_32+0xe3/0x8c0 [ 176.976366][ T7775] do_fast_syscall_32+0x32/0x70 [ 176.976389][ T7775] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 176.976414][ T7775] RIP: 0023:0xf6fdef6c [ 176.976433][ T7775] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 176.976451][ T7775] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 176.976516][ T7775] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 176.976528][ T7775] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 176.976544][ T7775] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 176.976554][ T7775] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 176.976565][ T7775] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 176.976588][ T7775] [ 177.097328][ T7777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.447'. [ 177.223514][ T7783] xt_hashlimit: size too large, truncated to 1048576 [ 177.623230][ T7801] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 177.625401][ T7801] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 177.628713][ T7801] vhci_hcd vhci_hcd.0: Device attached [ 177.706399][ T7804] random: crng reseeded on system resumption [ 178.124661][ T960] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 178.253869][ T7802] vhci_hcd: connection closed [ 178.254236][ T191] vhci_hcd vhci_hcd.2: stop threads [ 178.258636][ T191] vhci_hcd vhci_hcd.2: release socket [ 178.261046][ T191] vhci_hcd vhci_hcd.2: disconnect device [ 178.286424][ T960] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 178.289536][ T960] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 178.292516][ T960] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 178.298790][ T960] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 178.301764][ T960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 178.304924][ T960] usb 5-1: Product: syz [ 178.307130][ T960] usb 5-1: Manufacturer: syz [ 178.308786][ T960] usb 5-1: SerialNumber: syz [ 178.354710][ T1325] usb 40-1: device descriptor read/8, error -110 [ 178.398509][ T7812] loop2: detected capacity change from 0 to 7 [ 178.404379][ T7167] Dev loop2: unable to read RDB block 7 [ 178.406957][ T7167] loop2: AHDI p2 p3 [ 178.408269][ T7167] loop2: partition table partially beyond EOD, truncated [ 178.410702][ T7167] loop2: p3 start 335544320 is beyond EOD, truncated [ 178.416646][ T7812] Dev loop2: unable to read RDB block 7 [ 178.418553][ T7812] loop2: AHDI p2 p3 [ 178.419920][ T7812] loop2: partition table partially beyond EOD, truncated [ 178.424132][ T7812] loop2: p3 start 335544320 is beyond EOD, truncated [ 178.528354][ T960] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 178.738520][ T7806] netlink: 'syz.0.456': attribute type 11 has an invalid length. [ 178.741353][ T7806] netlink: 12 bytes leftover after parsing attributes in process `syz.0.456'. [ 178.799867][ T1325] usb usb40-port1: attempt power cycle [ 178.870927][ T960] usb 5-1: USB disconnect, device number 4 [ 178.897141][ T960] usblp0: removed [ 179.264584][ T7820] netlink: 'syz.2.462': attribute type 11 has an invalid length. [ 179.267413][ T7820] netlink: 12 bytes leftover after parsing attributes in process `syz.2.462'. [ 179.375065][ T1325] usb usb40-port1: unable to enumerate USB device [ 179.394210][ T7822] FAULT_INJECTION: forcing a failure. [ 179.394210][ T7822] name failslab, interval 1, probability 0, space 0, times 0 [ 179.398794][ T7822] CPU: 0 UID: 0 PID: 7822 Comm: syz.2.463 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.398813][ T7822] Tainted: [L]=SOFTLOCKUP [ 179.398817][ T7822] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 179.398823][ T7822] Call Trace: [ 179.398827][ T7822] [ 179.398832][ T7822] dump_stack_lvl+0x100/0x190 [ 179.398857][ T7822] should_fail_ex.cold+0x5/0xa [ 179.398872][ T7822] should_failslab+0xc2/0x120 [ 179.398885][ T7822] __kmalloc_cache_noprof+0x7a/0x6f0 [ 179.398901][ T7822] ? tcf_block_get_ext+0x3c8/0x1950 [ 179.398919][ T7822] tcf_block_get_ext+0x3c8/0x1950 [ 179.398933][ T7822] ingress_init+0x259/0x780 [ 179.398947][ T7822] ? __pfx_ingress_init+0x10/0x10 [ 179.398985][ T7822] qdisc_create+0x47b/0x1090 [ 179.399006][ T7822] ? __pfx_ingress_ingress_block_set+0x10/0x10 [ 179.399027][ T7822] tc_modify_qdisc+0x1350/0x2120 [ 179.399045][ T7822] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 179.399058][ T7822] ? __lock_acquire+0x4a5/0x2630 [ 179.399199][ T7822] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 179.399214][ T7822] rtnetlink_rcv_msg+0x3c9/0xe90 [ 179.399228][ T7822] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 179.399244][ T7822] ? ref_tracker_free+0x37e/0x6c0 [ 179.399336][ T7822] netlink_rcv_skb+0x159/0x420 [ 179.399350][ T7822] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 179.399362][ T7822] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 179.399380][ T7822] ? netlink_deliver_tap+0x1ae/0xcc0 [ 179.399394][ T7822] netlink_unicast+0x5aa/0x870 [ 179.399408][ T7822] ? __pfx_netlink_unicast+0x10/0x10 [ 179.399420][ T7822] ? __pfx___might_resched+0x10/0x10 [ 179.399442][ T7822] netlink_sendmsg+0x8b0/0xda0 [ 179.399457][ T7822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.399471][ T7822] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 179.399487][ T7822] ____sys_sendmsg+0x9e1/0xb70 [ 179.399501][ T7822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.399514][ T7822] ? __pfx_____sys_sendmsg+0x10/0x10 [ 179.399535][ T7822] ___sys_sendmsg+0x190/0x1e0 [ 179.399550][ T7822] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.399582][ T7822] __sys_sendmsg+0x170/0x220 [ 179.399593][ T7822] ? __pfx___sys_sendmsg+0x10/0x10 [ 179.399609][ T7822] ? __pfx_ksys_write+0x10/0x10 [ 179.399624][ T7822] __do_fast_syscall_32+0xe3/0x8c0 [ 179.399641][ T7822] do_fast_syscall_32+0x32/0x70 [ 179.399654][ T7822] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 179.399669][ T7822] RIP: 0023:0xf6fdef6c [ 179.399681][ T7822] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 179.399692][ T7822] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 179.399704][ T7822] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 179.399711][ T7822] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 179.399717][ T7822] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 179.399723][ T7822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.399730][ T7822] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 179.399743][ T7822] [ 180.018114][ T7834] netlink: 24 bytes leftover after parsing attributes in process `syz.2.467'. [ 180.396764][ T7839] ptrace attach of "/syz-executor exec"[5956] was attempted by ""[7839] [ 180.461330][ T7841] vlan2: entered promiscuous mode [ 180.463075][ T7841] bridge0: entered promiscuous mode [ 180.589814][ T7847] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 180.676424][ T7845] futex_wake_op: syz.2.472 tries to shift op by 144; fix this program [ 181.224629][ T6031] usb 42-1: device descriptor read/8, error -110 [ 181.588867][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.476'. [ 181.732336][ T7866] FAULT_INJECTION: forcing a failure. [ 181.732336][ T7866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.737262][ T7866] CPU: 3 UID: 0 PID: 7866 Comm: syz.0.475 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.737294][ T7866] Tainted: [L]=SOFTLOCKUP [ 181.737301][ T7866] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 181.737312][ T7866] Call Trace: [ 181.737319][ T7866] [ 181.737326][ T7866] dump_stack_lvl+0x100/0x190 [ 181.737369][ T7866] should_fail_ex.cold+0x5/0xa [ 181.737394][ T7866] _copy_from_iter+0x1f4/0x1690 [ 181.737423][ T7866] ? __asan_memset+0x23/0x50 [ 181.737451][ T7866] ? __pfx__copy_from_iter+0x10/0x10 [ 181.737475][ T7866] ? __pfx___alloc_skb+0x10/0x10 [ 181.737504][ T7866] ? __pfx___might_resched+0x10/0x10 [ 181.737541][ T7866] netlink_sendmsg+0x808/0xda0 [ 181.737567][ T7866] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.737590][ T7866] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 181.737614][ T7866] ____sys_sendmsg+0x9e1/0xb70 [ 181.737635][ T7866] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.737657][ T7866] ? __pfx_____sys_sendmsg+0x10/0x10 [ 181.737691][ T7866] ___sys_sendmsg+0x190/0x1e0 [ 181.737714][ T7866] ? __pfx____sys_sendmsg+0x10/0x10 [ 181.737764][ T7866] __sys_sendmsg+0x170/0x220 [ 181.737781][ T7866] ? __pfx___sys_sendmsg+0x10/0x10 [ 181.737805][ T7866] ? __pfx_ksys_write+0x10/0x10 [ 181.737828][ T7866] __do_fast_syscall_32+0xe3/0x8c0 [ 181.737852][ T7866] do_fast_syscall_32+0x32/0x70 [ 181.737872][ T7866] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 181.737895][ T7866] RIP: 0023:0xf70bef6c [ 181.737910][ T7866] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 181.737926][ T7866] RSP: 002b:00000000f548c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 181.737946][ T7866] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001140 [ 181.737957][ T7866] RDX: 0000000020008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 181.737968][ T7866] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 181.737979][ T7866] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 181.737989][ T7866] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 181.738013][ T7866] [ 181.775291][ T6031] usb usb42-port1: attempt power cycle [ 181.777153][ T7868] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 181.827489][ T7868] overlay: Bad value for 'verity' [ 182.171185][ T7874] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 182.173321][ T7874] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 182.176462][ T7874] vhci_hcd vhci_hcd.0: Device attached [ 182.262480][ T7877] random: crng reseeded on system resumption [ 182.345360][ T6031] usb usb42-port1: unable to enumerate USB device [ 182.463942][ T7880] FAULT_INJECTION: forcing a failure. [ 182.463942][ T7880] name failslab, interval 1, probability 0, space 0, times 0 [ 182.469593][ T53] usb 44-1: SetAddress Request (18) to port 0 [ 182.472204][ T53] usb 44-1: new SuperSpeed USB device number 18 using vhci_hcd [ 182.475047][ T7880] CPU: 3 UID: 0 PID: 7880 Comm: syz.2.482 Tainted: G L syzkaller #0 PREEMPT(full) [ 182.475066][ T7880] Tainted: [L]=SOFTLOCKUP [ 182.475070][ T7880] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 182.475077][ T7880] Call Trace: [ 182.475081][ T7880] [ 182.475086][ T7880] dump_stack_lvl+0x100/0x190 [ 182.475114][ T7880] should_fail_ex.cold+0x5/0xa [ 182.475128][ T7880] ? ethnl_default_set_doit+0x174/0x9b0 [ 182.475140][ T7880] should_failslab+0xc2/0x120 [ 182.475154][ T7880] __kmalloc_noprof+0xe0/0x850 [ 182.475170][ T7880] ? __nla_parse+0x40/0x60 [ 182.475183][ T7880] ethnl_default_set_doit+0x174/0x9b0 [ 182.475196][ T7880] genl_family_rcv_msg_doit+0x214/0x300 [ 182.475212][ T7880] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 182.475225][ T7880] ? genl_get_cmd+0x3ef/0x720 [ 182.475240][ T7880] ? bpf_lsm_capable+0x9/0x10 [ 182.475253][ T7880] ? security_capable+0x80/0x260 [ 182.475330][ T7880] ? ns_capable+0xd2/0xf0 [ 182.475345][ T7880] genl_rcv_msg+0x560/0x800 [ 182.475359][ T7880] ? __pfx_genl_rcv_msg+0x10/0x10 [ 182.475373][ T7880] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 182.475389][ T7880] netlink_rcv_skb+0x159/0x420 [ 182.475400][ T7880] ? __pfx_genl_rcv_msg+0x10/0x10 [ 182.475415][ T7880] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 182.475432][ T7880] ? netlink_deliver_tap+0x1ae/0xcc0 [ 182.475445][ T7880] genl_rcv+0x28/0x40 [ 182.475457][ T7880] netlink_unicast+0x5aa/0x870 [ 182.475470][ T7880] ? __pfx_netlink_unicast+0x10/0x10 [ 182.475486][ T7880] netlink_sendmsg+0x8b0/0xda0 [ 182.475500][ T7880] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.475513][ T7880] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 182.475527][ T7880] ____sys_sendmsg+0x9e1/0xb70 [ 182.475541][ T7880] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.475558][ T7880] ? __pfx_____sys_sendmsg+0x10/0x10 [ 182.475578][ T7880] ___sys_sendmsg+0x190/0x1e0 [ 182.475593][ T7880] ? __pfx____sys_sendmsg+0x10/0x10 [ 182.475623][ T7880] __sys_sendmsg+0x170/0x220 [ 182.475635][ T7880] ? __pfx___sys_sendmsg+0x10/0x10 [ 182.475650][ T7880] ? __pfx_ksys_write+0x10/0x10 [ 182.475664][ T7880] __do_fast_syscall_32+0xe3/0x8c0 [ 182.475680][ T7880] do_fast_syscall_32+0x32/0x70 [ 182.475692][ T7880] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 182.475707][ T7880] RIP: 0023:0xf6fdef6c [ 182.475717][ T7880] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 182.475727][ T7880] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 182.475739][ T7880] RAX: ffffffffffffffda RBX: 000000000000001a RCX: 0000000080000540 [ 182.475746][ T7880] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 182.475752][ T7880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 182.475758][ T7880] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 182.475764][ T7880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 182.475777][ T7880] [ 182.607619][ T7882] futex_wake_op: syz.0.483 tries to shift op by 144; fix this program [ 182.821354][ T7875] vhci_hcd: connection reset by peer [ 182.823592][ T1173] vhci_hcd vhci_hcd.3: stop threads [ 182.825759][ T1173] vhci_hcd vhci_hcd.3: release socket [ 182.828038][ T1173] vhci_hcd vhci_hcd.3: disconnect device [ 183.498984][ T7897] overlayfs: workdir and upperdir must be separate subtrees [ 183.605755][ T7906] FAULT_INJECTION: forcing a failure. [ 183.605755][ T7906] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 183.610179][ T7906] CPU: 1 UID: 0 PID: 7906 Comm: syz.0.493 Tainted: G L syzkaller #0 PREEMPT(full) [ 183.610200][ T7906] Tainted: [L]=SOFTLOCKUP [ 183.610203][ T7906] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 183.610210][ T7906] Call Trace: [ 183.610216][ T7906] [ 183.610223][ T7906] dump_stack_lvl+0x100/0x190 [ 183.610248][ T7906] should_fail_ex.cold+0x5/0xa [ 183.610260][ T7906] ? prepare_alloc_pages+0x16d/0x5f0 [ 183.610281][ T7906] should_fail_alloc_page+0xeb/0x140 [ 183.610294][ T7906] prepare_alloc_pages+0x1f0/0x5f0 [ 183.610309][ T7906] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 183.610328][ T7906] ? rcu_is_watching+0x12/0xc0 [ 183.610412][ T7906] ? trace_mm_page_alloc+0x17a/0x1d0 [ 183.610426][ T7906] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 183.610444][ T7906] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 183.610464][ T7906] ? find_held_lock+0x2b/0x80 [ 183.610474][ T7906] ? is_bpf_text_address+0x8a/0x1a0 [ 183.610493][ T7906] ? is_bpf_text_address+0x8a/0x1a0 [ 183.610511][ T7906] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 183.610526][ T7906] ? is_bpf_text_address+0x94/0x1a0 [ 183.610547][ T7906] ? kernel_text_address+0x8d/0x100 [ 183.610563][ T7906] ? __kernel_text_address+0xd/0x30 [ 183.610578][ T7906] ? unwind_get_return_address+0x59/0xa0 [ 183.610594][ T7906] alloc_pages_bulk_noprof+0x782/0x1490 [ 183.610617][ T7906] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 183.610635][ T7906] ? kasan_save_stack+0x30/0x50 [ 183.610648][ T7906] ? alloc_pages_noprof+0x238/0x390 [ 183.610661][ T7906] __kasan_populate_vmalloc+0xf0/0x210 [ 183.610681][ T7906] alloc_vmap_area+0x95d/0x2bd0 [ 183.610699][ T7906] ? __pfx_alloc_vmap_area+0x10/0x10 [ 183.610714][ T7906] __get_vm_area_node+0x1ca/0x330 [ 183.610729][ T7906] __vmalloc_node_range_noprof+0x213/0x1530 [ 183.610745][ T7906] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 183.610761][ T7906] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 183.610777][ T7906] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 183.610791][ T7906] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 183.610807][ T7906] ? __lock_acquire+0x4a5/0x2630 [ 183.610823][ T7906] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 183.610837][ T7906] ? __lock_acquire+0x4a5/0x2630 [ 183.610856][ T7906] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 183.610871][ T7906] __vmalloc_node_noprof+0xad/0xf0 [ 183.610885][ T7906] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 183.610902][ T7906] __vmalloc_noprof+0xa3/0x120 [ 183.610916][ T7906] ? __pfx___vmalloc_noprof+0x10/0x10 [ 183.610929][ T7906] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 183.610967][ T7906] ? rcu_is_watching+0x12/0xc0 [ 183.610985][ T7906] ? apparmor_capable+0x1d7/0x4d0 [ 183.610996][ T7906] ? __kernel_text_address+0xd/0x30 [ 183.611012][ T7906] bpf_prog_alloc_no_stats+0x58/0x640 [ 183.611028][ T7906] ? security_capable+0x80/0x260 [ 183.611041][ T7906] bpf_prog_alloc+0x3b/0x200 [ 183.611056][ T7906] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 183.611068][ T7906] bpf_prog_load+0x494/0x2c20 [ 183.611080][ T7906] ? _parse_integer_limit+0x17f/0x1d0 [ 183.611100][ T7906] ? __pfx_bpf_prog_load+0x10/0x10 [ 183.611111][ T7906] ? __lock_acquire+0x4a5/0x2630 [ 183.611138][ T7906] __sys_bpf+0x223a/0x4b90 [ 183.611153][ T7906] ? __pfx___sys_bpf+0x10/0x10 [ 183.611165][ T7906] ? proc_fail_nth_write+0x9f/0x220 [ 183.611293][ T7906] ? find_held_lock+0x2b/0x80 [ 183.611305][ T7906] ? find_held_lock+0x2b/0x80 [ 183.611316][ T7906] ? ksys_write+0x190/0x250 [ 183.611328][ T7906] ? __mutex_unlock_slowpath+0x15c/0x790 [ 183.611349][ T7906] ? fput+0x79/0x100 [ 183.611362][ T7906] ? ksys_write+0x1ac/0x250 [ 183.611374][ T7906] __ia32_sys_bpf+0x79/0xf0 [ 183.611387][ T7906] ? lockdep_hardirqs_on+0x78/0x100 [ 183.611398][ T7906] __do_fast_syscall_32+0xe3/0x8c0 [ 183.611413][ T7906] do_fast_syscall_32+0x32/0x70 [ 183.611425][ T7906] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 183.611440][ T7906] RIP: 0023:0xf70bef6c [ 183.611451][ T7906] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 183.611462][ T7906] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 183.611475][ T7906] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800003c0 [ 183.611481][ T7906] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 183.611488][ T7906] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 183.611494][ T7906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.611500][ T7906] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 183.611513][ T7906] [ 183.611736][ T7906] syz.0.493: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 183.771842][ T7906] CPU: 0 UID: 0 PID: 7906 Comm: syz.0.493 Tainted: G L syzkaller #0 PREEMPT(full) [ 183.771862][ T7906] Tainted: [L]=SOFTLOCKUP [ 183.771865][ T7906] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 183.771872][ T7906] Call Trace: [ 183.771878][ T7906] [ 183.771884][ T7906] dump_stack_lvl+0x100/0x190 [ 183.771908][ T7906] warn_alloc.cold+0x95/0x1c1 [ 183.771931][ T7906] ? __pfx_warn_alloc+0x10/0x10 [ 183.771947][ T7906] ? lockdep_hardirqs_on+0x78/0x100 [ 183.771962][ T7906] ? __get_vm_area_node+0x2c5/0x330 [ 183.771977][ T7906] ? __get_vm_area_node+0x208/0x330 [ 183.771992][ T7906] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 183.772008][ T7906] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 183.772023][ T7906] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 183.772038][ T7906] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 183.772055][ T7906] ? __lock_acquire+0x4a5/0x2630 [ 183.772072][ T7906] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 183.772086][ T7906] ? __lock_acquire+0x4a5/0x2630 [ 183.772104][ T7906] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 183.772120][ T7906] __vmalloc_node_noprof+0xad/0xf0 [ 183.772133][ T7906] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 183.772150][ T7906] __vmalloc_noprof+0xa3/0x120 [ 183.772164][ T7906] ? __pfx___vmalloc_noprof+0x10/0x10 [ 183.772177][ T7906] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 183.772190][ T7906] ? rcu_is_watching+0x12/0xc0 [ 183.772207][ T7906] ? apparmor_capable+0x1d7/0x4d0 [ 183.772218][ T7906] ? __kernel_text_address+0xd/0x30 [ 183.772235][ T7906] bpf_prog_alloc_no_stats+0x58/0x640 [ 183.772251][ T7906] ? security_capable+0x80/0x260 [ 183.772264][ T7906] bpf_prog_alloc+0x3b/0x200 [ 183.772278][ T7906] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 183.772290][ T7906] bpf_prog_load+0x494/0x2c20 [ 183.772302][ T7906] ? _parse_integer_limit+0x17f/0x1d0 [ 183.772323][ T7906] ? __pfx_bpf_prog_load+0x10/0x10 [ 183.772338][ T7906] ? __lock_acquire+0x4a5/0x2630 [ 183.772365][ T7906] __sys_bpf+0x223a/0x4b90 [ 183.772380][ T7906] ? __pfx___sys_bpf+0x10/0x10 [ 183.772392][ T7906] ? proc_fail_nth_write+0x9f/0x220 [ 183.772408][ T7906] ? find_held_lock+0x2b/0x80 [ 183.772421][ T7906] ? find_held_lock+0x2b/0x80 [ 183.772431][ T7906] ? ksys_write+0x190/0x250 [ 183.772445][ T7906] ? __mutex_unlock_slowpath+0x15c/0x790 [ 183.772465][ T7906] ? fput+0x79/0x100 [ 183.772478][ T7906] ? ksys_write+0x1ac/0x250 [ 183.772490][ T7906] __ia32_sys_bpf+0x79/0xf0 [ 183.772503][ T7906] ? lockdep_hardirqs_on+0x78/0x100 [ 183.772514][ T7906] __do_fast_syscall_32+0xe3/0x8c0 [ 183.772528][ T7906] do_fast_syscall_32+0x32/0x70 [ 183.772540][ T7906] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 183.772554][ T7906] RIP: 0023:0xf70bef6c [ 183.772564][ T7906] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 183.772575][ T7906] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 183.772586][ T7906] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800003c0 [ 183.772592][ T7906] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 183.772598][ T7906] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 183.772604][ T7906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.772610][ T7906] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 183.772623][ T7906] [ 183.772628][ T7906] Mem-Info: [ 183.886200][ T7906] active_anon:18724 inactive_anon:16 isolated_anon:0 [ 183.886200][ T7906] active_file:15377 inactive_file:39793 isolated_file:0 [ 183.886200][ T7906] unevictable:1768 dirty:401 writeback:0 [ 183.886200][ T7906] slab_reclaimable:7940 slab_unreclaimable:53292 [ 183.886200][ T7906] mapped:26809 shmem:14453 pagetables:1044 [ 183.886200][ T7906] sec_pagetables:295 bounce:0 [ 183.886200][ T7906] kernel_misc_reclaimable:0 [ 183.886200][ T7906] free:23781 free_pcp:12162 free_cma:0 [ 183.900964][ T7906] Node 0 active_anon:8kB inactive_anon:8kB active_file:4kB inactive_file:88kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8052kB pagetables:1632kB sec_pagetables:1104kB all_unreclaimable? yes Balloon:0kB [ 183.910754][ T7906] Node 1 active_anon:75088kB inactive_anon:56kB active_file:61504kB inactive_file:159084kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:95720kB dirty:1600kB writeback:0kB shmem:54276kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5180kB pagetables:2544kB sec_pagetables:76kB all_unreclaimable? no Balloon:0kB [ 183.921256][ T7906] Node 0 DMA free:2276kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:444kB local_pcp:132kB free_cma:0kB [ 183.931266][ T7906] lowmem_reserve[]: 0 285 285 285 285 [ 183.933028][ T7906] Node 0 DMA32 free:16180kB boost:0kB min:13068kB low:16332kB high:19596kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:8kB active_file:4kB inactive_file:16kB unevictable:3536kB writepending:4kB zspages:0kB present:1032196kB managed:292452kB mlocked:0kB bounce:0kB free_pcp:9496kB local_pcp:1128kB free_cma:0kB [ 183.943111][ T7906] lowmem_reserve[]: 0 0 0 0 0 [ 183.946097][ T7906] Node 1 DMA32 free:80976kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:64576kB inactive_anon:56kB active_file:61504kB inactive_file:159084kB unevictable:3536kB writepending:1600kB zspages:2676kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:44608kB local_pcp:13640kB free_cma:0kB [ 183.956639][ T7906] lowmem_reserve[]: 0 0 0 0 0 [ 183.958173][ T7906] Node 0 DMA: 133*4kB (U) 30*8kB (U) 16*16kB (UM) 7*32kB (UM) 2*64kB (M) 1*128kB (M) 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2276kB [ 183.962847][ T7906] Node 0 DMA32: 5*4kB (E) 12*8kB (E) 26*16kB (UME) 19*32kB (ME) 37*64kB (UME) 17*128kB (UME) 9*256kB (UME) 4*512kB (M) 2*1024kB (M) 2*2048kB (U) 0*4096kB = 16180kB [ 183.968688][ T7906] Node 1 DMA32: 1833*4kB (UME) 857*8kB (UME) 707*16kB (UME) 81*32kB (UME) 171*64kB (UME) 59*128kB (UME) 28*256kB (UME) 21*512kB (UM) 6*1024kB (UME) 3*2048kB (UM) 3*4096kB (UM) = 89084kB [ 183.974618][ T7906] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 183.977632][ T7906] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 183.980553][ T7906] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 183.983583][ T7906] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 183.986869][ T7906] 67583 total pagecache pages [ 183.988397][ T7906] 834 pages in swap cache [ 183.989774][ T7906] Free swap = 116808kB [ 183.989924][ T7911] fuse: Bad value for 'group_id' [ 183.991108][ T7906] Total swap = 124996kB [ 183.991120][ T7906] 524155 pages RAM [ 183.991125][ T7906] 0 pages HighMem/MovableOnly [ 183.991129][ T7906] 210149 pages reserved [ 183.991132][ T7906] 0 pages cma reserved [ 184.003834][ T7911] fuse: Bad value for 'group_id' [ 184.246492][ T7919] netlink: 'syz.0.496': attribute type 8 has an invalid length. [ 184.249207][ T7919] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.496'. [ 184.714518][ T34] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 184.724596][ T1325] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 184.864495][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 184.867370][ T34] usb 8-1: config 0 has an invalid interface number: 200 but max is 0 [ 184.869944][ T34] usb 8-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 184.873393][ T34] usb 8-1: config 0 has no interface number 0 [ 184.876868][ T34] usb 8-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 184.881101][ T34] usb 8-1: config 0 interface 200 has no altsetting 0 [ 184.884691][ T1325] usb 5-1: Using ep0 maxpacket: 8 [ 184.886532][ T34] usb 8-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 184.888017][ T1325] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 184.890145][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.892812][ T1325] usb 5-1: config 179 has no interface number 0 [ 184.896393][ T34] usb 8-1: Product: syz [ 184.898682][ T1325] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 184.899966][ T34] usb 8-1: Manufacturer: syz [ 184.903504][ T1325] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 184.905545][ T34] usb 8-1: SerialNumber: syz [ 184.909382][ T1325] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 184.915155][ T1325] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 184.915422][ T34] usb 8-1: config 0 descriptor?? [ 184.918793][ T1325] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 184.925613][ T1325] usb 5-1: config 179 interface 65 has no altsetting 0 [ 184.928007][ T1325] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 184.931089][ T1325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.942553][ T1325] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input31 [ 184.984958][ T5334] input input31: unable to receive magic message: -110 [ 184.991721][ T5334] input input31: unable to receive magic message: -32 [ 184.996529][ T5334] input input31: unable to receive magic message: -32 [ 185.000623][ T5334] input input31: unable to receive magic message: -32 [ 185.006772][ T7167] input input31: unable to receive magic message: -32 [ 185.017197][ T5334] input input31: unable to receive magic message: -32 [ 185.022064][ T5334] input input31: unable to receive magic message: -32 [ 185.094680][ T960] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 185.134138][ T7929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.137992][ T7929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.139292][ T7930] input input31: unable to receive magic message: -32 [ 185.158594][ T34] usb 8-1: USB disconnect, device number 2 [ 185.254544][ T960] usb 7-1: Using ep0 maxpacket: 8 [ 185.259103][ T960] usb 7-1: config 0 has an invalid interface number: 200 but max is 0 [ 185.262159][ T960] usb 7-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 185.266046][ T960] usb 7-1: config 0 has no interface number 0 [ 185.268323][ T960] usb 7-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 185.272715][ T960] usb 7-1: config 0 interface 200 has no altsetting 0 [ 185.277905][ T960] usb 7-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 185.281207][ T960] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.283756][ T960] usb 7-1: Product: syz [ 185.285473][ T960] usb 7-1: Manufacturer: syz [ 185.287174][ T960] usb 7-1: SerialNumber: syz [ 185.291419][ T960] usb 7-1: config 0 descriptor?? [ 185.498180][ T7932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.502287][ T7932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.506856][ T7932] FAULT_INJECTION: forcing a failure. [ 185.506856][ T7932] name failslab, interval 1, probability 0, space 0, times 0 [ 185.510960][ T7932] CPU: 1 UID: 0 PID: 7932 Comm: syz.2.500 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.510981][ T7932] Tainted: [L]=SOFTLOCKUP [ 185.510984][ T7932] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 185.510991][ T7932] Call Trace: [ 185.510998][ T7932] [ 185.511004][ T7932] dump_stack_lvl+0x100/0x190 [ 185.511030][ T7932] should_fail_ex.cold+0x5/0xa [ 185.511056][ T7932] ? tomoyo_realpath_from_path+0xb6/0x690 [ 185.511075][ T7932] should_failslab+0xc2/0x120 [ 185.511089][ T7932] __kmalloc_noprof+0xe0/0x850 [ 185.511109][ T7932] tomoyo_realpath_from_path+0xb6/0x690 [ 185.511128][ T7932] tomoyo_path_number_perm+0x23c/0x580 [ 185.511141][ T7932] ? tomoyo_path_number_perm+0x22e/0x580 [ 185.511156][ T7932] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 185.511183][ T7932] ? find_held_lock+0x2b/0x80 [ 185.511194][ T7932] ? hook_file_ioctl_common+0x146/0x410 [ 185.511209][ T7932] ? __fget_files+0x215/0x3d0 [ 185.511224][ T7932] ? __fget_files+0x21f/0x3d0 [ 185.511237][ T7932] security_file_ioctl_compat+0xd3/0x230 [ 185.511310][ T7932] __ia32_compat_sys_ioctl+0xc2/0x360 [ 185.511329][ T7932] __do_fast_syscall_32+0xe3/0x8c0 [ 185.511345][ T7932] do_fast_syscall_32+0x32/0x70 [ 185.511358][ T7932] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 185.511372][ T7932] RIP: 0023:0xf6fdef6c [ 185.511383][ T7932] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 185.511394][ T7932] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 185.511406][ T7932] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000c008561c [ 185.511413][ T7932] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 185.511419][ T7932] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 185.511425][ T7932] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 185.511431][ T7932] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 185.511445][ T7932] [ 185.511490][ T7932] ERROR: Out of memory at tomoyo_realpath_from_path. [ 185.594956][ T960] usb 7-1: USB disconnect, device number 7 [ 185.974752][ T24] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 186.124566][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 186.128877][ T24] usb 8-1: config 0 has an invalid interface number: 200 but max is 0 [ 186.132409][ T24] usb 8-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 186.137853][ T24] usb 8-1: config 0 has no interface number 0 [ 186.140621][ T24] usb 8-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 186.148270][ T24] usb 8-1: config 0 interface 200 has no altsetting 0 [ 186.152731][ T24] usb 8-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 186.156093][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.158567][ T24] usb 8-1: Product: syz [ 186.160000][ T24] usb 8-1: Manufacturer: syz [ 186.161581][ T24] usb 8-1: SerialNumber: syz [ 186.165632][ T24] usb 8-1: config 0 descriptor?? [ 186.373885][ T7938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.377206][ T7938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.391338][ T24] usb 8-1: USB disconnect, device number 3 [ 187.000417][ T7945] bond0: (slave rose0): refused to change device type [ 187.024201][ T7947] FAULT_INJECTION: forcing a failure. [ 187.024201][ T7947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.028887][ T7947] CPU: 2 UID: 0 PID: 7947 Comm: syz.2.506 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.028907][ T7947] Tainted: [L]=SOFTLOCKUP [ 187.028911][ T7947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 187.028918][ T7947] Call Trace: [ 187.028922][ T7947] [ 187.028927][ T7947] dump_stack_lvl+0x100/0x190 [ 187.028953][ T7947] should_fail_ex.cold+0x5/0xa [ 187.028967][ T7947] _copy_from_user+0x2e/0xd0 [ 187.028984][ T7947] kstrtouint_from_user+0xd6/0x1d0 [ 187.029002][ T7947] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 187.029019][ T7947] ? __lock_acquire+0x4a5/0x2630 [ 187.029036][ T7947] ? lock_acquire+0x1cf/0x380 [ 187.029053][ T7947] proc_fail_nth_write+0x83/0x220 [ 187.029070][ T7947] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 187.029088][ T7947] vfs_write+0x2aa/0x1070 [ 187.029100][ T7947] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 187.029116][ T7947] ? __pfx_vfs_write+0x10/0x10 [ 187.029125][ T7947] ? find_held_lock+0x2b/0x80 [ 187.029136][ T7947] ? __fget_files+0x215/0x3d0 [ 187.029150][ T7947] ? __fget_files+0x21f/0x3d0 [ 187.029164][ T7947] ksys_write+0x12a/0x250 [ 187.029175][ T7947] ? __pfx_ksys_write+0x10/0x10 [ 187.029189][ T7947] do_int80_emulation+0x141/0x6b0 [ 187.029205][ T7947] asm_int80_emulation+0x1a/0x20 [ 187.029217][ T7947] RIP: 0023:0xf7115cab [ 187.029228][ T7947] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 187.029239][ T7947] RSP: 002b:00000000f53cd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 187.029251][ T7947] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000f53cd5d0 [ 187.029257][ T7947] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 187.029263][ T7947] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 187.029269][ T7947] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 187.029275][ T7947] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 187.029289][ T7947] [ 187.212975][ T7952] FAULT_INJECTION: forcing a failure. [ 187.212975][ T7952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.217511][ T7952] CPU: 1 UID: 0 PID: 7952 Comm: syz.2.508 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.217531][ T7952] Tainted: [L]=SOFTLOCKUP [ 187.217535][ T7952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 187.217542][ T7952] Call Trace: [ 187.217547][ T7952] [ 187.217552][ T7952] dump_stack_lvl+0x100/0x190 [ 187.217590][ T7952] should_fail_ex.cold+0x5/0xa [ 187.217605][ T7952] _copy_from_iter+0x1f4/0x1690 [ 187.217623][ T7952] ? __asan_memset+0x23/0x50 [ 187.217641][ T7952] ? __pfx__copy_from_iter+0x10/0x10 [ 187.217655][ T7952] ? __pfx___alloc_skb+0x10/0x10 [ 187.217690][ T7952] netlink_sendmsg+0x808/0xda0 [ 187.217708][ T7952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.217721][ T7952] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 187.217736][ T7952] ____sys_sendmsg+0x9e1/0xb70 [ 187.217749][ T7952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.217762][ T7952] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.217782][ T7952] ___sys_sendmsg+0x190/0x1e0 [ 187.217797][ T7952] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.217828][ T7952] __sys_sendmsg+0x170/0x220 [ 187.217839][ T7952] ? __pfx___sys_sendmsg+0x10/0x10 [ 187.217855][ T7952] ? __pfx_ksys_write+0x10/0x10 [ 187.217869][ T7952] __do_fast_syscall_32+0xe3/0x8c0 [ 187.217885][ T7952] do_fast_syscall_32+0x32/0x70 [ 187.217898][ T7952] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 187.217911][ T7952] RIP: 0023:0xf6fdef6c [ 187.217922][ T7952] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 187.217933][ T7952] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 187.217945][ T7952] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 187.217952][ T7952] RDX: 000000000000c114 RSI: 0000000000000000 RDI: 0000000000000000 [ 187.217958][ T7952] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 187.217964][ T7952] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 187.217970][ T7952] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 187.217984][ T7952] [ 187.496944][ T7962] netlink: 'syz.2.512': attribute type 2 has an invalid length. [ 187.507062][ T7962] ÃM¯”ÛÓó: entered promiscuous mode [ 187.555407][ T53] usb 44-1: device descriptor read/8, error -110 [ 187.572770][ T24] usb 5-1: USB disconnect, device number 5 [ 187.572888][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 187.620759][ T7965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.513'. [ 187.623857][ T7965] bridge_slave_1: left allmulticast mode [ 187.625808][ T7965] bridge_slave_1: left promiscuous mode [ 187.628476][ T7965] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.634844][ T7965] bridge_slave_0: left allmulticast mode [ 187.636919][ T7965] bridge_slave_0: left promiscuous mode [ 187.639028][ T7965] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.677392][ T7966] 9p: Bad value for 'rfdno' [ 187.955593][ T53] usb usb44-port1: attempt power cycle [ 188.250390][ T7975] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1688227217 (3376454434 ns) > initial count (1786943000 ns). Using initial count to start timer. [ 188.256522][ T7976] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 188.265153][ T7976] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 188.356018][ T7982] gretap0: entered promiscuous mode [ 188.540292][ T53] usb usb44-port1: unable to enumerate USB device [ 188.814370][ T7999] FAULT_INJECTION: forcing a failure. [ 188.814370][ T7999] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 188.814421][ T7999] CPU: 3 UID: 0 PID: 7999 Comm: syz.2.524 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.814439][ T7999] Tainted: [L]=SOFTLOCKUP [ 188.814443][ T7999] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 188.814450][ T7999] Call Trace: [ 188.814454][ T7999] [ 188.814459][ T7999] dump_stack_lvl+0x100/0x190 [ 188.814483][ T7999] should_fail_ex.cold+0x5/0xa [ 188.814495][ T7999] ? prepare_alloc_pages+0x16d/0x5f0 [ 188.814525][ T7999] should_fail_alloc_page+0xeb/0x140 [ 188.814538][ T7999] prepare_alloc_pages+0x1f0/0x5f0 [ 188.814557][ T7999] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 188.814584][ T7999] ? rcu_is_watching+0x12/0xc0 [ 188.814609][ T7999] ? trace_mm_page_alloc+0x17a/0x1d0 [ 188.814629][ T7999] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 188.814656][ T7999] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 188.814682][ T7999] ? find_held_lock+0x2b/0x80 [ 188.814693][ T7999] ? is_bpf_text_address+0x8a/0x1a0 [ 188.814710][ T7999] ? is_bpf_text_address+0x8a/0x1a0 [ 188.814728][ T7999] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 188.814740][ T7999] ? is_bpf_text_address+0x94/0x1a0 [ 188.814756][ T7999] ? kernel_text_address+0x8d/0x100 [ 188.814772][ T7999] ? _prb_read_valid+0x72a/0x880 [ 188.814786][ T7999] ? __kernel_text_address+0xd/0x30 [ 188.814801][ T7999] ? unwind_get_return_address+0x59/0xa0 [ 188.814818][ T7999] alloc_pages_bulk_noprof+0x782/0x1490 [ 188.814841][ T7999] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 188.814859][ T7999] ? kasan_save_stack+0x30/0x50 [ 188.814873][ T7999] ? alloc_pages_noprof+0x238/0x390 [ 188.814887][ T7999] __kasan_populate_vmalloc+0xf0/0x210 [ 188.814907][ T7999] alloc_vmap_area+0x95d/0x2bd0 [ 188.814945][ T7999] ? __pfx_alloc_vmap_area+0x10/0x10 [ 188.814962][ T7999] __get_vm_area_node+0x1ca/0x330 [ 188.814978][ T7999] __vmalloc_node_range_noprof+0x213/0x1530 [ 188.814992][ T7999] ? vc_uniscr_check+0x1a0/0x5a0 [ 188.815314][ T7999] ? drm_fb_helper_damage_area+0xb4/0xe0 [ 188.815416][ T7999] ? vc_uniscr_check+0x1a0/0x5a0 [ 188.815437][ T7999] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 188.815452][ T7999] ? __lock_acquire+0x4a5/0x2630 [ 188.815468][ T7999] ? __pfx_bit_putcs+0x10/0x10 [ 188.815527][ T7999] ? input_handler_for_each_handle+0x116/0x250 [ 188.815737][ T7999] ? vc_uniscr_check+0x1a0/0x5a0 [ 188.815753][ T7999] __vmalloc_node_noprof+0xad/0xf0 [ 188.815766][ T7999] ? vc_uniscr_check+0x1a0/0x5a0 [ 188.815784][ T7999] vc_uniscr_check+0x1a0/0x5a0 [ 188.815804][ T7999] do_con_write+0x67c/0x8540 [ 188.815824][ T7999] ? __pfx_do_con_write+0x10/0x10 [ 188.815834][ T7999] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 188.815850][ T7999] ? add_softcursor+0x1c0/0x290 [ 188.815868][ T7999] con_write+0x23/0xb0 [ 188.815878][ T7999] n_tty_write+0x44f/0x12d0 [ 188.815899][ T7999] ? __pfx_n_tty_write+0x10/0x10 [ 188.815911][ T7999] ? trace_kmalloc+0x101/0x130 [ 188.815923][ T7999] ? __pfx_woken_wake_function+0x10/0x10 [ 188.815943][ T7999] ? rcu_is_watching+0x12/0xc0 [ 188.815966][ T7999] ? file_tty_write.isra.0+0x694/0x890 [ 188.815990][ T7999] ? kfree+0x2ec/0x6b0 [ 188.816011][ T7999] ? __pfx_n_tty_write+0x10/0x10 [ 188.816030][ T7999] file_tty_write.isra.0+0x4d2/0x890 [ 188.816060][ T7999] vfs_write+0x6ac/0x1070 [ 188.816073][ T7999] ? __pfx_tty_write+0x10/0x10 [ 188.816091][ T7999] ? __pfx_vfs_write+0x10/0x10 [ 188.816100][ T7999] ? find_held_lock+0x2b/0x80 [ 188.816120][ T7999] ksys_write+0x12a/0x250 [ 188.816130][ T7999] ? __pfx_ksys_write+0x10/0x10 [ 188.816140][ T7999] ? __pfx_ksys_write+0x10/0x10 [ 188.816154][ T7999] __do_fast_syscall_32+0xe3/0x8c0 [ 188.816169][ T7999] do_fast_syscall_32+0x32/0x70 [ 188.816181][ T7999] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 188.816196][ T7999] RIP: 0023:0xf6fdef6c [ 188.816206][ T7999] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 188.816217][ T7999] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 188.816229][ T7999] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001980 [ 188.816235][ T7999] RDX: 0000000000001006 RSI: 0000000000000000 RDI: 0000000000000000 [ 188.816241][ T7999] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 188.816247][ T7999] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 188.816253][ T7999] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 188.816272][ T7999] [ 189.030664][ T8005] netlink: 'syz.3.526': attribute type 2 has an invalid length. [ 189.042101][ T8005] ÃM¯”ÛÓó: entered promiscuous mode [ 189.054723][ T8007] can0: slcan on pty24. [ 189.179024][ T8006] can0 (unregistered): slcan off pty24. [ 189.398878][ T8016] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 189.515922][ T8024] futex_wake_op: syz.0.529 tries to shift op by 144; fix this program [ 190.507665][ T63] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 190.511947][ T63] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 190.516319][ T63] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 190.520758][ T63] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 190.525712][ T63] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 190.584636][ T24] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 190.726286][ T8036] chnl_net:caif_netlink_parms(): no params data found [ 190.754882][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 190.759092][ T24] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.762854][ T24] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.769311][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 190.771550][ T24] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 190.774507][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.778638][ T24] usb 7-1: config 0 descriptor?? [ 190.808530][ T8036] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.811132][ T8036] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.813667][ T8036] bridge_slave_0: entered allmulticast mode [ 190.816809][ T8036] bridge_slave_0: entered promiscuous mode [ 190.820884][ T8036] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.823364][ T8036] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.825940][ T8036] bridge_slave_1: entered allmulticast mode [ 190.828743][ T8036] bridge_slave_1: entered promiscuous mode [ 190.845591][ T8036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.850216][ T8036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.866544][ T8036] team0: Port device team_slave_0 added [ 190.869858][ T8036] team0: Port device team_slave_1 added [ 190.883819][ T8036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.886212][ T8036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.894371][ T8036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.899158][ T8036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.901382][ T8036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.909664][ T8036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.939845][ T8036] hsr_slave_0: entered promiscuous mode [ 190.942321][ T8036] hsr_slave_1: entered promiscuous mode [ 190.952456][ T8036] debugfs: 'hsr0' already exists in 'hsr' [ 190.954356][ T8036] Cannot create hsr debugfs directory [ 191.045757][ T24] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 191.048074][ T24] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 191.055313][ T24] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 191.057618][ T24] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 191.059922][ T24] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 191.075385][ T24] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 191.171174][ T8036] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 191.181148][ T8036] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 191.191262][ T8036] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 191.197226][ T8036] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 191.267772][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.283463][ T8036] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.286462][ T8036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.288885][ T8036] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.291153][ T8036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.297336][ T8034] i2c i2c-2: unsupported multi-msg i2c transaction [ 191.306140][ T34] usb 7-1: USB disconnect, device number 8 [ 191.361344][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.378114][ T8036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.389936][ T1196] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.393967][ T1196] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.408525][ T8036] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.417517][ T1196] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.420531][ T1196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.442854][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.450947][ T1196] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.453551][ T1196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.553023][ T8066] netlink: 20 bytes leftover after parsing attributes in process `syz.3.535'. [ 191.568290][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.651188][ T8036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.724737][ T46] bridge_slave_0: left allmulticast mode [ 191.727005][ T46] bridge_slave_0: left promiscuous mode [ 191.730689][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.145005][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.153191][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.159674][ T46] bond0 (unregistering): Released all slaves [ 192.167918][ T46] bond1 (unregistering): Released all slaves [ 192.178159][ T46] bond2 (unregistering): Released all slaves [ 192.224671][ T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 192.241125][ T8094] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 192.244330][ T8094] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 192.270550][ T8094] vhci_hcd vhci_hcd.0: Device attached [ 192.310560][ T8036] veth0_vlan: entered promiscuous mode [ 192.351388][ T8036] veth1_vlan: entered promiscuous mode [ 192.369856][ T8036] veth0_macvtap: entered promiscuous mode [ 192.374705][ T8036] veth1_macvtap: entered promiscuous mode [ 192.384603][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 192.386848][ T8036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.387689][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.392726][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.394226][ T8036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.397957][ T9] usb 7-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 192.402364][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.407112][ T9] usb 7-1: config 0 descriptor?? [ 192.426114][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.440366][ T1196] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.443575][ T1196] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.455454][ T1196] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.513048][ T1196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.515936][ T1196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.572813][ T1196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.580372][ T1196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.584564][ T63] Bluetooth: hci4: command tx timeout [ 192.594647][ T6031] usb 38-1: SetAddress Request (18) to port 0 [ 192.596752][ T6031] usb 38-1: new SuperSpeed USB device number 18 using vhci_hcd [ 192.675784][ T46] hsr_slave_0: left promiscuous mode [ 192.678730][ T46] hsr_slave_1: left promiscuous mode [ 192.681274][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.683772][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.701754][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.704312][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.711701][ T46] batman_adv: batadv0: Interface deactivated: macsec1 [ 192.714011][ T46] batman_adv: batadv0: Removing interface: macsec1 [ 192.724135][ T46] veth1_macvtap: left promiscuous mode [ 192.726500][ T46] veth0_macvtap: left promiscuous mode [ 192.728362][ T46] veth1_vlan: left promiscuous mode [ 192.730204][ T46] veth0_vlan: left promiscuous mode [ 192.820096][ T9] kye 0003:0458:5016.0004: control desc unexpectedly large [ 192.843043][ T9] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5016.0004/input/input33 [ 192.867862][ T8096] vhci_hcd: connection reset by peer [ 192.871256][ T13] vhci_hcd vhci_hcd.0: stop threads [ 192.874489][ T13] vhci_hcd vhci_hcd.0: release socket [ 192.876427][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 192.934775][ T9] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5016.0004/input/input34 [ 192.972558][ T46] team0 (unregistering): Port device team_slave_1 removed [ 192.982835][ T46] team0 (unregistering): Port device team_slave_0 removed [ 193.049806][ T9] kye 0003:0458:5016.0004: input,hiddev0,hidraw1: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 193.072133][ T9] usb 7-1: USB disconnect, device number 9 [ 193.176055][ T8131] fido_id[8131]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb7/report_descriptor': No such file or directory [ 193.258020][ T5951] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 193.261250][ T5951] CPU: 3 UID: 0 PID: 5951 Comm: kworker/u33:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.261276][ T5951] Tainted: [L]=SOFTLOCKUP [ 193.261280][ T5951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 193.261355][ T5951] Workqueue: hci4 hci_rx_work [ 193.261540][ T5951] Call Trace: [ 193.261544][ T5951] [ 193.261550][ T5951] dump_stack_lvl+0x100/0x190 [ 193.261572][ T5951] sysfs_warn_dup.cold+0x1c/0x28 [ 193.261590][ T5951] sysfs_create_dir_ns+0x24b/0x2b0 [ 193.261608][ T5951] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 193.261625][ T5951] ? find_held_lock+0x2b/0x80 [ 193.261637][ T5951] ? kobject_add_internal+0x25f/0x930 [ 193.261653][ T5951] ? kobject_add_internal+0x25f/0x930 [ 193.261668][ T5951] ? do_raw_spin_unlock+0x145/0x1e0 [ 193.261687][ T5951] kobject_add_internal+0x2c8/0x930 [ 193.261704][ T5951] kobject_add+0x16a/0x1e0 [ 193.261718][ T5951] ? __pfx_kobject_add+0x10/0x10 [ 193.261731][ T5951] ? class_to_subsys+0x10f/0x150 [ 193.261899][ T5951] ? kobject_put+0xb9/0x640 [ 193.261913][ T5951] ? _raw_spin_unlock+0x28/0x50 [ 193.261936][ T5951] device_add+0x294/0x1950 [ 193.261997][ T5951] ? __pfx_dev_set_name+0x10/0x10 [ 193.262016][ T5951] ? __pfx_device_add+0x10/0x10 [ 193.262032][ T5951] ? mgmt_send_event_skb+0x2fb/0x460 [ 193.262056][ T5951] hci_conn_add_sysfs+0x1a3/0x260 [ 193.262070][ T5951] le_conn_complete_evt+0x11eb/0x1f60 [ 193.262091][ T5951] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 193.262111][ T5951] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 193.262128][ T5951] ? skb_pull_data+0x15f/0x1e0 [ 193.262145][ T5951] hci_le_meta_evt+0x34a/0x5f0 [ 193.262163][ T5951] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 193.262182][ T5951] hci_event_packet+0x51c/0xcd0 [ 193.262197][ T5951] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 193.262215][ T5951] ? __pfx_hci_event_packet+0x10/0x10 [ 193.262232][ T5951] ? kcov_remote_start+0x374/0x660 [ 193.262247][ T5951] ? lockdep_hardirqs_on+0x78/0x100 [ 193.262274][ T5951] hci_rx_work+0x451/0xfc0 [ 193.262302][ T5951] process_one_work+0xa23/0x19a0 [ 193.262336][ T5951] ? __pfx_process_one_work+0x10/0x10 [ 193.262371][ T5951] ? __pfx_hci_rx_work+0x10/0x10 [ 193.262398][ T5951] worker_thread+0x5ef/0xe50 [ 193.262426][ T5951] ? kthread+0x13a/0x450 [ 193.262440][ T5951] ? __pfx_worker_thread+0x10/0x10 [ 193.262455][ T5951] kthread+0x370/0x450 [ 193.262468][ T5951] ? __pfx_kthread+0x10/0x10 [ 193.262484][ T5951] ret_from_fork+0x754/0xd80 [ 193.262503][ T5951] ? __pfx_ret_from_fork+0x10/0x10 [ 193.262521][ T5951] ? __switch_to+0x7b4/0x1120 [ 193.262534][ T5951] ? __pfx_kthread+0x10/0x10 [ 193.262549][ T5951] ret_from_fork_asm+0x1a/0x30 [ 193.262568][ T5951] [ 193.262587][ T5951] kobject: kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 193.276111][ T8144] FAULT_INJECTION: forcing a failure. [ 193.276111][ T8144] name failslab, interval 1, probability 0, space 0, times 0 [ 193.279727][ T5951] Bluetooth: hci4: failed to register connection device [ 193.280222][ T8144] CPU: 1 UID: 0 PID: 8144 Comm: syz.3.541 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.280240][ T8144] Tainted: [L]=SOFTLOCKUP [ 193.280243][ T8144] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 193.280250][ T8144] Call Trace: [ 193.280255][ T8144] [ 193.280260][ T8144] dump_stack_lvl+0x100/0x190 [ 193.280288][ T8144] should_fail_ex.cold+0x5/0xa [ 193.280303][ T8144] should_failslab+0xc2/0x120 [ 193.280316][ T8144] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 193.280333][ T8144] ? __alloc_skb+0x140/0x710 [ 193.280354][ T8144] __alloc_skb+0x140/0x710 [ 193.280369][ T8144] ? __alloc_skb+0x5b7/0x710 [ 193.280385][ T8144] ? __pfx___alloc_skb+0x10/0x10 [ 193.280400][ T8144] ? genl_rcv_msg+0x4be/0x800 [ 193.280418][ T8144] netlink_ack+0x117/0xb80 [ 193.280433][ T8144] netlink_rcv_skb+0x333/0x420 [ 193.280445][ T8144] ? __pfx_genl_rcv_msg+0x10/0x10 [ 193.280458][ T8144] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 193.280476][ T8144] ? netlink_deliver_tap+0x1ae/0xcc0 [ 193.280489][ T8144] genl_rcv+0x28/0x40 [ 193.280500][ T8144] netlink_unicast+0x5aa/0x870 [ 193.280513][ T8144] ? __pfx_netlink_unicast+0x10/0x10 [ 193.280530][ T8144] netlink_sendmsg+0x8b0/0xda0 [ 193.280543][ T8144] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.280557][ T8144] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 193.280572][ T8144] ____sys_sendmsg+0x9e1/0xb70 [ 193.280585][ T8144] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.280598][ T8144] ? __pfx_____sys_sendmsg+0x10/0x10 [ 193.280617][ T8144] ___sys_sendmsg+0x190/0x1e0 [ 193.280632][ T8144] ? __pfx____sys_sendmsg+0x10/0x10 [ 193.280662][ T8144] __sys_sendmsg+0x170/0x220 [ 193.280673][ T8144] ? __pfx___sys_sendmsg+0x10/0x10 [ 193.280688][ T8144] ? __pfx_ksys_write+0x10/0x10 [ 193.280702][ T8144] __do_fast_syscall_32+0xe3/0x8c0 [ 193.280718][ T8144] do_fast_syscall_32+0x32/0x70 [ 193.280730][ T8144] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 193.280744][ T8144] RIP: 0023:0xf7fb4f6c [ 193.280754][ T8144] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 193.280764][ T8144] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 193.280776][ T8144] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 193.280782][ T8144] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 193.280789][ T8144] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 193.280795][ T8144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.280801][ T8144] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 193.280814][ T8144] [ 193.546376][ T8161] netlink: 'syz.0.542': attribute type 2 has an invalid length. [ 193.569856][ T8161] ÃM¯”ÛÓó: entered promiscuous mode [ 193.626650][ T8164] set match dimension is over the limit! [ 193.736160][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 193.736178][ T40] audit: type=1326 audit(1776150632.347:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8167 comm="syz.3.544" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb4f6c code=0x0 [ 194.034946][ T8049] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 194.171225][ T8189] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 194.217066][ T8049] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 194.221484][ T8049] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 194.227141][ T8049] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 194.233838][ T8049] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 194.240034][ T8049] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 194.244956][ T8049] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 194.250123][ T8049] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 194.254582][ T8049] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 194.258252][ T8049] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 194.266448][ T8049] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 194.270515][ T8049] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 194.273980][ T8049] usb 8-1: Product: syz [ 194.275857][ T8049] usb 8-1: Manufacturer: syz [ 194.277763][ T8049] usb 8-1: SerialNumber: syz [ 194.282058][ T8049] usb 8-1: config 0 descriptor?? [ 194.297305][ T8193] futex_wake_op: syz.4.548 tries to shift op by 144; fix this program [ 194.489924][ T24] usb 8-1: USB disconnect, device number 4 [ 194.664605][ T5951] Bluetooth: hci4: command tx timeout [ 194.739135][ T8202] fuse: Bad value for 'fd' [ 194.938543][ T8206] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 194.940711][ T8206] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 194.946660][ T8206] vhci_hcd vhci_hcd.0: Device attached [ 195.739054][ T8207] vhci_hcd: connection closed [ 195.746152][ T1196] vhci_hcd vhci_hcd.0: stop threads [ 195.750374][ T1196] vhci_hcd vhci_hcd.0: release socket [ 195.752663][ T1196] vhci_hcd vhci_hcd.0: disconnect device [ 195.842938][ T8214] FAULT_INJECTION: forcing a failure. [ 195.842938][ T8214] name failslab, interval 1, probability 0, space 0, times 0 [ 195.849993][ T8214] CPU: 1 UID: 0 PID: 8214 Comm: syz.4.554 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.850028][ T8214] Tainted: [L]=SOFTLOCKUP [ 195.850035][ T8214] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 195.850046][ T8214] Call Trace: [ 195.850054][ T8214] [ 195.850061][ T8214] dump_stack_lvl+0x100/0x190 [ 195.850095][ T8214] should_fail_ex.cold+0x5/0xa [ 195.850117][ T8214] ? tomoyo_encode2+0xfb/0x3c0 [ 195.850142][ T8214] should_failslab+0xc2/0x120 [ 195.850162][ T8214] __kmalloc_noprof+0xe0/0x850 [ 195.850193][ T8214] tomoyo_encode2+0xfb/0x3c0 [ 195.850231][ T8214] tomoyo_encode+0x29/0x50 [ 195.850256][ T8214] tomoyo_realpath_from_path+0x18c/0x690 [ 195.850289][ T8214] tomoyo_path_number_perm+0x23c/0x580 [ 195.850311][ T8214] ? tomoyo_path_number_perm+0x22e/0x580 [ 195.850334][ T8214] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 195.850377][ T8214] ? find_held_lock+0x2b/0x80 [ 195.850395][ T8214] ? hook_file_ioctl_common+0x146/0x410 [ 195.850416][ T8214] ? __fget_files+0x215/0x3d0 [ 195.850440][ T8214] ? __fget_files+0x21f/0x3d0 [ 195.850461][ T8214] security_file_ioctl_compat+0xd3/0x230 [ 195.850486][ T8214] __ia32_compat_sys_ioctl+0xc2/0x360 [ 195.850514][ T8214] __do_fast_syscall_32+0xe3/0x8c0 [ 195.850539][ T8214] do_fast_syscall_32+0x32/0x70 [ 195.850559][ T8214] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 195.850579][ T8214] RIP: 0023:0xf708ef6c [ 195.850594][ T8214] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 195.850610][ T8214] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 195.850627][ T8214] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000ae80 [ 195.850636][ T8214] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 195.850645][ T8214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 195.850654][ T8214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.850708][ T8214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 195.850730][ T8214] [ 195.850795][ T8214] ERROR: Out of memory at tomoyo_realpath_from_path. [ 196.181638][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.555'. [ 196.192406][ T8217] tipc: Enabling of bearer rejected, failed to enable media [ 196.232075][ T8219] tmpfs: Bad value for 'mpol' [ 196.744708][ T5951] Bluetooth: hci4: command 0x040f tx timeout [ 196.820959][ T8237] netlink: 20 bytes leftover after parsing attributes in process `syz.4.559'. [ 197.131291][ T8246] futex_wake_op: syz.0.564 tries to shift op by 144; fix this program [ 197.635115][ T6031] usb 38-1: device descriptor read/8, error -110 [ 198.075293][ T6031] usb usb38-port1: attempt power cycle [ 198.235358][ T8283] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 198.238126][ T8283] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 198.263705][ T8283] vhci_hcd vhci_hcd.0: Device attached [ 198.534578][ T53] usb 46-1: SetAddress Request (2) to port 0 [ 198.536652][ T53] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 198.638680][ T6031] usb usb38-port1: unable to enumerate USB device [ 198.824577][ T8284] vhci_hcd: connection reset by peer [ 198.827088][ T5951] Bluetooth: hci4: command 0x040f tx timeout [ 198.829674][ T191] vhci_hcd vhci_hcd.4: stop threads [ 198.831399][ T191] vhci_hcd vhci_hcd.4: release socket [ 198.833348][ T191] vhci_hcd vhci_hcd.4: disconnect device [ 199.476426][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.566536][ T40] audit: type=1326 audit(1776150637.997:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8309 comm="syz.2.575" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 199.581565][ T40] audit: type=1326 audit(1776150638.007:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8309 comm="syz.2.575" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 199.589252][ T40] audit: type=1326 audit(1776150638.007:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8309 comm="syz.2.575" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 199.598803][ T40] audit: type=1326 audit(1776150638.007:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8309 comm="syz.2.575" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 199.607701][ T40] audit: type=1326 audit(1776150638.007:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8309 comm="syz.2.575" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 199.615657][ T8320] syz.2.575 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 199.791623][ T40] audit: type=1326 audit(1776150638.007:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8309 comm="syz.2.575" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 199.807683][ T40] audit: type=1326 audit(1776150638.007:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8309 comm="syz.2.575" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 199.819068][ T40] audit: type=1326 audit(1776150638.007:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8309 comm="syz.2.575" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 199.829455][ T40] audit: type=1326 audit(1776150638.007:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8309 comm="syz.2.575" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 199.865261][ T40] audit: type=1326 audit(1776150638.007:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8309 comm="syz.2.575" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 200.904605][ T5951] Bluetooth: hci4: command 0x040f tx timeout [ 200.968942][ T8241] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 200.971654][ T8241] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 200.984792][ T8323] ------------[ cut here ]------------ [ 200.987036][ T8323] workqueue: cannot queue hci_tx_work on wq hci4 [ 200.989721][ T8323] WARNING: kernel/workqueue.c:2282 at __queue_work+0xd08/0x1150, CPU#3: kbnepd bnep0/8323 [ 200.994433][ T8323] Modules linked in: [ 200.997054][ T8323] CPU: 3 UID: 0 PID: 8323 Comm: kbnepd bnep0 Tainted: G L syzkaller #0 PREEMPT(full) [ 201.001801][ T8323] Tainted: [L]=SOFTLOCKUP [ 201.003709][ T8323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 201.008885][ T8323] RIP: 0010:__queue_work+0xd0c/0x1150 [ 201.011444][ T8323] Code: 00 00 00 fc ff df 49 8d 94 24 78 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 04 04 00 00 48 8d 3d 48 a0 0d 0f 48 8b 75 18 <67> 48 0f b9 3a e9 2a f7 ff ff e8 05 e0 38 00 90 0f 0b 90 e9 b2 f5 [ 201.019476][ T8323] RSP: 0018:ffffc90003a1f840 EFLAGS: 00010046 [ 201.021994][ T8323] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffff1100c32b98d SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 201.025185][ T8323] RDX: ffff888075580978 RSI: ffffffff8a82b940 RDI: ffffffff90dd04d0 [ 201.028679][ T8323] RBP: ffff88806195cc50 R08: 0000000000000005 R09: 0000000000000000 [ 201.031226][ T8323] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888075580800 [ 201.033769][ T8323] R13: ffff8880267b8000 R14: 0000000000000055 R15: ffff88804e619000 [ 201.036608][ T8323] FS: 0000000000000000(0000) GS:ffff888097440000(0000) knlGS:0000000000000000 [ 201.040687][ T8323] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 201.043559][ T8323] CR2: 00007f25c402bff8 CR3: 000000002ad0a000 CR4: 0000000000352ef0 [ 201.046941][ T8323] Call Trace: [ 201.048385][ T8323] [ 201.049690][ T8323] ? hci_send_acl+0x7c4/0xee0 [ 201.051712][ T8323] ? queue_work_on+0xea/0x1e0 [ 201.053932][ T8323] ? rcu_is_watching+0x12/0xc0 [ 201.056108][ T8323] queue_work_on+0x180/0x1e0 [ 201.058810][ T8323] l2cap_chan_send+0x4ba/0x2cf0 [ 201.061466][ T8323] ? l2cap_sock_sendmsg+0x3d4/0x4b0 [ 201.064074][ T8323] ? mark_held_locks+0x40/0x70 [ 201.066151][ T8323] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 201.068368][ T8323] ? __pfx___mutex_lock+0x10/0x10 [ 201.070407][ T8323] ? __pfx_l2cap_chan_send+0x10/0x10 [ 201.072642][ T8323] ? l2cap_sock_sendmsg+0x2d9/0x4b0 [ 201.074725][ T8323] ? l2cap_sock_sendmsg+0x2d9/0x4b0 [ 201.076916][ T8323] l2cap_sock_sendmsg+0x3e7/0x4b0 [ 201.079058][ T8323] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 201.082134][ T8323] ? __pfx___schedule+0x10/0x10 [ 201.085065][ T8323] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 201.087576][ T8323] sock_sendmsg+0x35b/0x3d0 [ 201.089488][ T8323] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 201.091789][ T8323] ? __pfx_sock_sendmsg+0x10/0x10 [ 201.093747][ T8323] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 201.096237][ T8323] ? iov_iter_kvec+0x42/0x1d0 [ 201.098205][ T8323] bnep_session+0x1254/0x2dc0 [ 201.100451][ T8323] ? __pfx_bnep_session+0x10/0x10 [ 201.103239][ T8323] ? do_raw_spin_lock+0x128/0x260 [ 201.106122][ T8323] ? __pfx_woken_wake_function+0x10/0x10 [ 201.108587][ T8323] ? rcu_is_watching+0x12/0xc0 [ 201.110649][ T8323] ? __kthread_parkme+0x18c/0x230 [ 201.112756][ T8323] ? kthread+0x13a/0x450 [ 201.114514][ T8323] ? __pfx_bnep_session+0x10/0x10 [ 201.116607][ T8323] kthread+0x370/0x450 [ 201.118284][ T8323] ? __pfx_kthread+0x10/0x10 [ 201.120415][ T8323] ret_from_fork+0x754/0xd80 [ 201.122703][ T8323] ? __pfx_ret_from_fork+0x10/0x10 [ 201.125340][ T8323] ? __switch_to+0x7b4/0x1120 [ 201.127576][ T8323] ? __pfx_kthread+0x10/0x10 [ 201.129465][ T8323] ret_from_fork_asm+0x1a/0x30 [ 201.131520][ T8323] [ 201.132864][ T8323] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 201.136032][ T8323] CPU: 3 UID: 0 PID: 8323 Comm: kbnepd bnep0 Tainted: G L syzkaller #0 PREEMPT(full) [ 201.141054][ T8323] Tainted: [L]=SOFTLOCKUP [ 201.143345][ T8323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 201.147723][ T8323] Call Trace: [ 201.149156][ T8323] [ 201.150444][ T8323] dump_stack_lvl+0x100/0x190 [ 201.152458][ T8323] vpanic+0x552/0x970 [ 201.154310][ T8323] ? __pfx_vpanic+0x10/0x10 [ 201.156452][ T8323] panic+0xd1/0xe0 [ 201.158289][ T8323] ? __pfx_panic+0x10/0x10 [ 201.160345][ T8323] ? check_panic_on_warn+0x1f/0x90 [ 201.162618][ T8323] check_panic_on_warn.cold+0x19/0x34 [ 201.164738][ T8323] ? __queue_work+0xd08/0x1150 [ 201.166744][ T8323] __warn.cold+0x191/0x348 [ 201.168707][ T8323] __report_bug+0x296/0x3d0 [ 201.170291][ T8323] ? __queue_work+0xd08/0x1150 [ 201.172190][ T8323] ? __pfx___report_bug+0x10/0x10 [ 201.174509][ T8323] ? __pfx_hci_tx_work+0x10/0x10 [ 201.176599][ T8323] ? __lock_acquire+0x4a5/0x2630 [ 201.178201][ T8323] ? l2cap_sock_alloc_skb_cb+0x229/0x500 [ 201.180018][ T8323] report_bug_entry+0xe1/0x290 [ 201.181574][ T8323] ? __queue_work+0xd0c/0x1150 [ 201.183269][ T8323] handle_bug+0x1cd/0x2a0 [ 201.185092][ T8323] exc_invalid_op+0x17/0x50 [ 201.187240][ T8323] asm_exc_invalid_op+0x1a/0x20 [ 201.189359][ T8323] RIP: 0010:__queue_work+0xd0c/0x1150 [ 201.191454][ T8323] Code: 00 00 00 fc ff df 49 8d 94 24 78 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 04 04 00 00 48 8d 3d 48 a0 0d 0f 48 8b 75 18 <67> 48 0f b9 3a e9 2a f7 ff ff e8 05 e0 38 00 90 0f 0b 90 e9 b2 f5 [ 201.197834][ T8323] RSP: 0018:ffffc90003a1f840 EFLAGS: 00010046 [ 201.200259][ T8323] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffff1100c32b98d [ 201.203706][ T8323] RDX: ffff888075580978 RSI: ffffffff8a82b940 RDI: ffffffff90dd04d0 [ 201.206414][ T8323] RBP: ffff88806195cc50 R08: 0000000000000005 R09: 0000000000000000 [ 201.209565][ T8323] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888075580800 [ 201.212779][ T8323] R13: ffff8880267b8000 R14: 0000000000000055 R15: ffff88804e619000 [ 201.215569][ T8323] ? __pfx_hci_tx_work+0x10/0x10 [ 201.217224][ T8323] ? hci_send_acl+0x7c4/0xee0 [ 201.218777][ T8323] ? queue_work_on+0xea/0x1e0 [ 201.220389][ T8323] ? rcu_is_watching+0x12/0xc0 [ 201.222021][ T8323] queue_work_on+0x180/0x1e0 [ 201.223875][ T8323] l2cap_chan_send+0x4ba/0x2cf0 [ 201.225863][ T8323] ? l2cap_sock_sendmsg+0x3d4/0x4b0 [ 201.227920][ T8323] ? mark_held_locks+0x40/0x70 [ 201.229756][ T8323] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 201.231843][ T8323] ? __pfx___mutex_lock+0x10/0x10 [ 201.233639][ T8323] ? __pfx_l2cap_chan_send+0x10/0x10 [ 201.235395][ T8323] ? l2cap_sock_sendmsg+0x2d9/0x4b0 [ 201.237092][ T8323] ? l2cap_sock_sendmsg+0x2d9/0x4b0 [ 201.238793][ T8323] l2cap_sock_sendmsg+0x3e7/0x4b0 [ 201.240468][ T8323] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 201.242308][ T8323] ? __pfx___schedule+0x10/0x10 [ 201.244036][ T8323] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 201.246117][ T8323] sock_sendmsg+0x35b/0x3d0 [ 201.248068][ T8323] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 201.250315][ T8323] ? __pfx_sock_sendmsg+0x10/0x10 [ 201.252074][ T8323] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 201.254105][ T8323] ? iov_iter_kvec+0x42/0x1d0 [ 201.255759][ T8323] bnep_session+0x1254/0x2dc0 [ 201.257383][ T8323] ? __pfx_bnep_session+0x10/0x10 [ 201.259286][ T8323] ? do_raw_spin_lock+0x128/0x260 [ 201.261204][ T8323] ? __pfx_woken_wake_function+0x10/0x10 [ 201.263337][ T8323] ? rcu_is_watching+0x12/0xc0 [ 201.265084][ T8323] ? __kthread_parkme+0x18c/0x230 [ 201.266770][ T8323] ? kthread+0x13a/0x450 [ 201.268172][ T8323] ? __pfx_bnep_session+0x10/0x10 [ 201.269825][ T8323] kthread+0x370/0x450 [ 201.271199][ T8323] ? __pfx_kthread+0x10/0x10 [ 201.272706][ T8323] ret_from_fork+0x754/0xd80 [ 201.274293][ T8323] ? __pfx_ret_from_fork+0x10/0x10 [ 201.276260][ T8323] ? __switch_to+0x7b4/0x1120 [ 201.278541][ T8323] ? __pfx_kthread+0x10/0x10 [ 201.280753][ T8323] ret_from_fork_asm+0x1a/0x30 [ 201.282354][ T8323] [ 201.284043][ T8323] Kernel Offset: disabled [ 201.285436][ T8323] Rebooting in 86400 seconds..