last executing test programs: 2m15.856664769s ago: executing program 0 (id=1357): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={0x0, 0x1}) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, 0x0, 0x0) r1 = socket(0x2, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(r2, 0x8, &(0x7f0000000400)=0x800002) mlock(&(0x7f0000313000/0x3000)=nil, 0x3000) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x6) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f0000000280)={@my=0x0, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e1f}, 0x53) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x400, 0x24) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@deltaction={0x30, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) close(0x3) open_by_handle_at(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="10000000020102737e29ab000000d4bd0900000000000000cd910d61975bd8e32ddecad45f85a4e70a88423c4a51754b61fa3eafcee0193a99d602267e482f426e80f3280ff7c6aa855304dd7943c3a239243d6fe5dc963923979bd496128cab853b81731361e2fc626aaf5f9d379e76a1d956194fe157101183d38af8342b82c8c0d6ad65e92b1039"], 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f00000003c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000500)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './bus'}}, {@index_on}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@fsmagic={'fsmagic', 0x3d, 0x7}}, {@flag='silent'}, {@euid_gt}, {@euid_eq}, {@obj_role={'obj_role', 0x3d, 'workdir'}}, {@fsname={'fsname', 0x3d, 'sysfs\x00'}}, {@appraise}]}) 2m14.906315228s ago: executing program 0 (id=1364): r0 = socket(0x400000000010, 0x3, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000300)={@local, @random="1ab900", @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "b70bff", 0x4c, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[@fragment={0x3b, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffc}], {{}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x1, {0x8000}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x0, 0x0, 0x0, 0x1}}}}}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x1095, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r3, r4, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) openat$sequencer(0xffffff9c, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r5, 0x1269, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0}) 2m14.61695726s ago: executing program 0 (id=1365): openat$cachefiles(0xffffff9c, &(0x7f0000000040), 0x80400, 0x0) r0 = syz_io_uring_setup(0x1d8c, &(0x7f0000000800)={0x0, 0x6acb, 0x10100, 0xffffffff, 0x1}, &(0x7f0000000300)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0xf0, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$can_j1939(r5, &(0x7f0000000840)={&(0x7f0000000680)={0x1d, r4, 0x1, {0x0, 0xf0}}, 0x18, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x8084) 2m14.437003564s ago: executing program 0 (id=1366): r0 = socket$netlink(0x10, 0x3, 0x15) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600030000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'veth0_to_team\x00', {0x2, 0x0, @empty}}) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r0}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x11, 0x4, 0x5, 0x2, 0x50808, 0x1, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value=r1}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r3, 0x10e, 0x5, &(0x7f0000000040)=""/162, &(0x7f0000000100)=0xa2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x60}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000001001400000000080000001801000020696c2500000000002020207b1af8ff00000000bfa1000000000000070100007cffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbffffe}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOWNER(r5, 0x400454cc, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb}, 0x4c) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="28007000fedbdf250600030004000000290000000000000000000004000000"], 0x28}}, 0x81) openat$dlm_monitor(0xffffff9c, &(0x7f00000001c0), 0x187801, 0x0) 2m13.876210122s ago: executing program 0 (id=1367): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req={0xfffff72b, 0xe, 0x4, 0x3c2}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x41a803, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'veth1_macvtap\x00', 0x1000}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$pidfd(0xffffff9c, &(0x7f0000000180), 0x108000, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000380)) r4 = memfd_secret(0x0) fchownat(r4, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000000)=0x401, 0x4) listen(r2, 0x6) r5 = socket$netlink(0x10, 0x3, 0x15) r6 = epoll_create1(0x80000) epoll_pwait2(r6, &(0x7f0000009bc0)=[{}], 0x1, &(0x7f0000009c00)={0x0, 0x989680}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000009c80)={0x40000004}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'nicvf0\x00', @random="bf9705c76c86"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f0000000240)='./file0\x00', 0x100000, 0x96) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) 2m13.627255803s ago: executing program 0 (id=1368): sched_yield() sched_yield() (async) sched_yield() (async) sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() (async) sched_yield() (async, rerun: 64) r0 = openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) sched_yield() (async, rerun: 64) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e24, @local}}, 0x9, 0x401, 0x400, 0x1, 0x9}, &(0x7f0000000100)=0x98) (rerun: 64) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e23, 0x6, @mcast2, 0x3}}}, &(0x7f0000000200)=0x84) (async) sched_yield() r2 = openat$null(0xffffff9c, &(0x7f0000000240), 0x10001, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000280)={r1, @in6={{0xa, 0x4e20, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x38}, 0x5}}}, &(0x7f0000000340)=0x84) (async) sched_yield() (async) pselect6(0x40, &(0x7f0000000380)={0x80000001, 0x2, 0x200, 0x8000000000000000, 0x0, 0x5, 0x79, 0x3}, &(0x7f00000003c0)={0x67, 0x6, 0x5376, 0x1b26, 0x3, 0x1, 0x7, 0xa06e}, &(0x7f0000000400)={0x10000, 0x7f, 0x7, 0x5, 0x1, 0x4, 0xd92, 0x9}, &(0x7f0000000440)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x6, 0x1]}, 0x8}) (async) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000500)) (async, rerun: 64) sched_yield() (async, rerun: 64) sched_yield() r3 = syz_open_dev$swradio(&(0x7f0000000540), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000580)={0x1, 0x0, '\x00', {0x0, @bt={0x10000, 0x80000000, 0x0, 0x2, 0x1, 0x4, 0x5, 0x2, 0x8, 0x81, 0x1ff, 0xc, 0x2, 0x4, 0x4, 0x32, {0x8, 0x1}, 0x6f, 0xff}}}) (async, rerun: 64) sched_yield() (async, rerun: 64) sched_yield() (async, rerun: 64) sched_yield() (async, rerun: 64) sched_yield() (async, rerun: 32) sched_yield() (rerun: 32) 2m12.428195595s ago: executing program 2 (id=1376): socket$nl_rdma(0x10, 0x3, 0x14) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000140)=[r3], &(0x7f0000000340), &(0x7f0000006500), 0x0, 0x0, 0x1}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000440)=0x13) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@getchain={0x4c, 0x66, 0x500, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x2}, {0xb, 0xffff}, {0xa, 0xfff2}}, [{0x8, 0xb, 0xfffffffd}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0x4}, {0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000910000/0x3000)=nil, 0x3000, 0xb635773f06ebbeef, 0x80010, r2, 0x0) (async) mmap(&(0x7f0000910000/0x3000)=nil, 0x3000, 0xb635773f06ebbeef, 0x80010, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) (async) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) eventfd2(0xff, 0x80801) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="110000000400000003e600000200000010000000", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRESOCT=r0, @ANYBLOB='\x00'/28], 0x50) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$inet_udplite(0x2, 0x2, 0x88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @sock_ops, r2, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) 2m12.226970323s ago: executing program 2 (id=1377): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x2f, 0x2, 0x70bd25, 0x25dfdbff, {0xb}, [@typed={0x8, 0xae, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x4000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) recvmmsg(0xffffffffffffffff, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000005180)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000bc0)=@newtaction={0x8c, 0x30, 0x48b, 0x70bd2a, 0x0, {}, [{0x78, 0x1, [@m_ctinfo={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_simple={0x44, 0x1, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'nat\x00'}, @TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x8c}}, 0x40) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) unshare(0x6e000000) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000012c0)="5e02503afc873be99a74b8ef294e01846a35b564513bd287b53a70bb7ae984f63d2719d824097449ce0cc42fbbd79930e1f551e7819b970ab7f82be0246b15ee889cdf1cf7233bbbee36e5af8e5d257ea5ffd38b861df3d4cf12d54cf6703b7dcbf01b6020b7aea02196b3d09b4b7eee6322e2513c71ddf3724185dc51624121589fcd82b0fda3ec58ca7f25fa027966304cd64e579ef1f278a048411d8956ad8aa3a21a64d6399f66a4a3d931864cf5c599cacf1ccc00344d879887397ee0100c5e493060bb480832", 0xc9}, {&(0x7f00000013c0)="98c0db406f230144b7eb9fc440392202276407138d4ed1122d5f70cb49244e292150d7042e5f9bd2f639ccf5d038ecf156a89e04b16096f8e730827366a023a3b6b0f5af60346c145a620a0c2d86bb2ee22ee7cdc42f557420a99eef7d57ca6ec5f7dde289b5536bf4f67091ff40860db92befbe9a90c79af6fd5b9f59d4f9ce113300a50e3c5d47e9cc0096d9b6e501c2426a4775b2c782d7bf78fa1ef913501a536c4ba2f49144135005d45bb767582732497d3015740d36f0cebf8d4a2b23e1e66422ac2a59770a8632fa9e801058eaec0e2475", 0xd5}], 0x2, &(0x7f00000014c0)=[{0x14, 0x10f, 0x7ff, "1197dfcb5fac46cd"}, {0x90, 0x11, 0x80000001, "34008bb67c9603e2cf80f194460a7fa8a8a792f189a29643bb3733dfe80f35af59c33684abecbf5ac6ab111940265f98f88bc9206d4c7c9eca032ccdc5d5f58e5ece3927e3fe7afa2c5aa2fd15102400ca3fc1bb66dc4822a58b544453d294f436319209e04c11b68c6aa1b8769ad14171fd0afffb6a75f969e0e3f9c9a10d3b7f7c"}, {0xc, 0x107, 0x80}, {0xf4, 0x103, 0x6, "2fe4fd5ea85f765ace25b69b0a92a50f50c4c7d47d2a1619bda9462e358eb48e3a9e49aa72bcccb54d8899d3e020e6232fc0632a7282fdf5a8cefb85b8b92a4f8ef6d4edbe8b46509a4641203183309eb50f6ab32448e990f5b17904b6bb5f874a36cf8cf92df8ff820e4d67644c564985a693a5d7cd5c34f312f3fef80172554510a24a33148c2fa54c93ebbb09c89046359e642cbe5e8c4e4bb6ae25f42ddde31c599bbde340c36e322b30c41126ae2516f8f2668fa4115a5e0286af7b86b3790c6aae5c5f4084bb1347f3b0c4b1e0e280cbc46854174be0d6f5d242024e391a937e2f06"}, {0xa0, 0xff, 0x5, "974941e51259647403744b72d3fa03d163ce530fe58c06b39a267934723ff077019524935d931574d1bdd831e322c5c1873d37918b03d29f36c35c98c385fffd79851781d25fc627c0acbe1a9814672da04e1f7ffebb3a1df4f2046d5459b1873c838e9ce3291cd2301d9adc1bd71785f2e11f57e066eccac0506eab97fdc90c7adab68272808a710c5088e2a91ecba57e7cce"}, {0x90, 0x10a, 0x3, "482324543ba9334e748d8b97b5d847316ccc61b27d545914c136961c3183ee9cc2b6ce292fa4256a339cae9f70b4ffc3b6724b4e5366cbe3fd5e12d811e6157f1db25e55346aa0b1b9db07e92c4e05d19646086d181560b4d39d04700f165aa1be015d14e42badbf5565e0a58a6b0136a0a1e95d9a760eaae74ef3d3d1ae7355d2"}, {0x14, 0x101, 0x9, "7ed9e7349a4e"}], 0x2e8}, 0x200400c4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) r5 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f0000000140)={{0x0, 0x1}, {0xf}, 0xfffffffc}) r6 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0xc94, 0x340, 0x25, 0x148, 0x340, 0x60, 0xc00, 0x2a8, 0x2a8, 0xc00, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x4, 0xd5, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00', {0xffff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xa, 0x4, 0xec1, 'syz1\x00', {0xbdc}}}}, {{@ip={@broadcast, @multicast1, 0xffffffff, 0x0, 'veth1_to_bond\x00', 'gre0\x00'}, 0x0, 0x878, 0x8c0, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x3ff}, {0x59}, {0x4, 0x3}, {0x0, 0x2}, {0x2, 0x1}, {0x8}, {0xffffffff, 0x3}, {0x77, 0x1}, {0x9, 0x2}, {0x1b91, 0x1}, {0xd76, 0x3}], [{0xe670, 0x5}, {0x9, 0x6}, {0x6, 0xb792}, {0x1, 0x7}, {0xf912, 0x4}, {0x7, 0x1}, {0x8c2b, 0x3}, {0x3, 0xa}, {0x1, 0x6}, {0x4, 0x400}, {0xca, 0x9}], 0x2}, {[{0x4, 0x1}, {0x1}, {0x8, 0x2}, {0xa, 0x3}, {0x355, 0x3}, {0x3ff, 0x2}, {0x8}, {0xffffff34, 0x1}, {0x307d, 0x3}, {0x4}, {0x6b46, 0x3}], [{0x2, 0x5}, {0x2, 0x9}, {0xfffffffa, 0x88}, {0xfffff000, 0x175a}, {0x7, 0x200}, {0x8000}, {0x3ff}, {0x2, 0x6de89782}, {0x6, 0x519a}, {0x0, 0x8}, {0x7, 0x88}], 0x0, 0x7}, {[{0x0, 0x2}, {0x8f8}, {0x8, 0x3}, {0x2, 0x2}, {0x80000001, 0x1}, {0x2, 0x3}, {0x6}, {0x8001, 0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x2}], [{0x3fbe27c4, 0x9}, {0xdf, 0x7fff}, {0x8, 0x5}, {0x8, 0x7}, {0x3, 0x3}, {0xffff, 0x8}, {0x7, 0x6}, {0xffff, 0x8}, {0x4e24, 0x81}, {0x1, 0x84}, {0x101, 0x8}], 0xb, 0x5}, {[{0x2, 0x3}, {0x401, 0x1}, {0x40, 0x2}, {0x2, 0x2}, {0x80000000}, {0x2, 0x1}, {0xb, 0x3}, {0x8, 0x1}, {0x80, 0x1}, {0x5}, {0x8}], [{0xb, 0x7ff}, {0x1000, 0x1}, {0x9, 0xf}, {0x2, 0x8}, {0x2, 0x101}, {0x5, 0x7fff}, {0x7, 0x4}, {0x9, 0x4}, {0xfffff800, 0xffffff80}, {0x0, 0xfffffffe}, {0x5, 0x7}], 0x3, 0xa}, {[{0x8, 0x2}, {0x5, 0x1}, {0x0, 0x3}, {0x0, 0x1}, {0x9, 0x3}, {0x17c087d, 0x2}, {0x7fff, 0x3}, {0x80, 0x3}, {0x0, 0x3}, {0x40, 0x1}, {0x9, 0x2}], [{0x80000000, 0xfffffffc}, {0xfffffd00, 0x7}, {0x3, 0xc10}, {0xeb1d, 0x10001}, {0x8, 0x2}, {0xaf9c, 0x283}, {0x4, 0x2}, {0x7f, 0x9}, {0x400, 0x38000000}, {0x2, 0xb}, {0x2, 0x2}], 0xa, 0x1}, {[{0x535}, {0xffff, 0x3}, {0x3, 0x1}, {0xe}, {0x1, 0x2}, {0x7}, {0x4, 0x3}, {0x5}, {0x8, 0x3}, {0x37, 0x1}, {0x8}], [{0x4, 0x200}, {0x0, 0x9}, {0x4, 0x81}, {0xfffffc00, 0xfff}, {0x2, 0x1}, {0x3ff, 0x8}, {0x9, 0x6}, {0x40, 0x101}, {0xfffffffe, 0x7e05d4a7}, {0x0, 0x866}, {0x5, 0x6}], 0x1, 0x6}, {[{0x6, 0x2}, {0x3}, {0x401, 0x1}, {0x7fffffff, 0x1}, {0xff, 0x2}, {0x99e0}, {0x4}, {0x6}, {0x6417, 0x1}, {0x8}, {0x0, 0x1}], [{0x2, 0x1}, {0x8104, 0x9}, {0x9, 0xe}, {0x100, 0x9}, {0x9, 0x75}, {0xede, 0xff}, {0x3, 0x9f}, {0xfffffffe, 0x1}, {0x94, 0x5}, {0x4, 0x9}, {0x2, 0x9}], 0x2, 0x7}, {[{0x6}, {0x5, 0x3}, {0x3ff, 0x3}, {0x80, 0x2}, {0x6, 0x2}, {}, {0x18000, 0x2}, {0x2, 0x2}, {0x8, 0x2}, {0x133, 0x3}, {0xd, 0x2}], [{0x80, 0xbca}, {0x1, 0xab9f}, {0x6, 0x1}, {0x0, 0x7}, {0x8, 0x1ff}, {0x49, 0x7}, {0x1, 0x63d14f22}, {0x2, 0x8}, {0x8727, 0x401}, {0x3, 0x1}, {0x8, 0xf}], 0x9, 0x8}, {[{0x7}, {0xc}, {0xfffffffb, 0x2}, {0x5, 0x2}, {0x7}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x40, 0x2}, {0x10, 0x2}, {0xfff, 0x1}], [{0x2, 0xfff}, {0x5, 0x1}, {0xc4, 0x9}, {0x8, 0x9}, {0x3, 0x9}, {0x5, 0x6}, {0x5, 0xa}, {0x200, 0x8}, {0x2, 0x6}, {0xfffffe1e}, {0x1ed, 0x6}], 0x5, 0x3}, {[{0xfffffff7, 0x2}, {0x5, 0x3}, {0x0, 0x3}, {0x80, 0x2}, {0x10001, 0x1}, {0xa, 0x2}, {0x4000000, 0x1}, {0x8}, {0x1, 0x1}, {0x0, 0x2}, {0x8, 0x1}], [{0x0, 0x77d}, {0x0, 0x3935}, {0x0, 0x4cf6}, {0x200, 0xfffffff3}, {0x10001, 0x401}, {0xffff, 0x7}, {0x4, 0x6}, {0x8001, 0x6}, {0x4, 0xffffffff}, {0x5}, {0x80, 0x3}], 0x5, 0xb}, {[{0x5791}, {0xfffffff8}, {0x2, 0x2}, {0x4, 0x1}, {0x6, 0x2}, {0xffffffff, 0x1}, {0x5, 0x3}, {0x2}, {0x8}, {0x3, 0x2}, {0x8}], [{0x6800000, 0x9}, {0x2, 0x9}, {0x5, 0x1000}, {0xfffffbff, 0x7}, {0x8001, 0x3}, {0x3, 0x7}, {0x3}, {0x3, 0xf73}, {0x6, 0x4}, {0x6, 0x2}, {0x4, 0x7}], 0x6, 0xa}], 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0xcf0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) r8 = gettid() sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r7, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r8], 0x28}}, 0x0) 2m9.058905581s ago: executing program 2 (id=1390): unshare(0x2000400) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) mq_timedsend(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x6, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) ptrace$poke(0x4, 0x0, 0x0, 0x7) mq_open(&(0x7f0000001600)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\aXg\xbb\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x8a=\x0f\n*\x8a\x99\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5\x00\x00\x00\x00\x00\x00\x00\x01\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbbV\x1a\x8a\x03#T\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8', 0x40, 0xb, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='numa_maps\x00') read$FUSE(r1, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@private0}, &(0x7f0000000040)=0x14) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000200)={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x21a7dca69adbb342) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x2000717e, 0x100, 0x14, 0x1b3}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee1, 0x0, 0x0, 0x229}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x2, 0x4, @fd_index=0xa, 0x9, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r5, 0x5361, 0xfffffffd, 0x2, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x7ddd, 0x500, 0x0, 0x0, 0x0) 2m7.077166238s ago: executing program 2 (id=1398): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1a010c005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99080805", @ANYRES16], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r1, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/129, 0x81}], 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) r4 = inotify_init1(0x80000) inotify_add_watch(r4, &(0x7f0000000080)='.\x00', 0x2000775) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x4) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000000000bd0000000008ff040001000000", 0x24) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r7, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x10010, r0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r7, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000015}, 0x44000) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000001a00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 2m6.395973053s ago: executing program 2 (id=1401): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req={0xfffff72b, 0xe, 0x4, 0x3c2}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x41a803, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'veth1_macvtap\x00', 0x1000}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$pidfd(0xffffff9c, &(0x7f0000000180), 0x108000, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000380)) r4 = memfd_secret(0x0) fchownat(r4, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000000)=0x401, 0x4) listen(r2, 0x6) r5 = socket$netlink(0x10, 0x3, 0x15) r6 = epoll_create1(0x80000) epoll_pwait2(r6, &(0x7f0000009bc0)=[{}], 0x1, &(0x7f0000009c00)={0x0, 0x989680}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000009c80)={0x40000004}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'nicvf0\x00', @random="bf9705c76c86"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f0000000240)='./file0\x00', 0x100000, 0x96) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) 2m6.246614166s ago: executing program 2 (id=1403): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r1 = socket(0x1d, 0x2, 0x6) getsockname$packet(r1, 0x0, &(0x7f0000000380)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) fcntl$setlease(r3, 0x400, 0x1) syz_pidfd_open(r2, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1m58.226349785s ago: executing program 32 (id=1368): sched_yield() sched_yield() (async) sched_yield() (async) sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() (async) sched_yield() (async, rerun: 64) r0 = openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) sched_yield() (async, rerun: 64) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e24, @local}}, 0x9, 0x401, 0x400, 0x1, 0x9}, &(0x7f0000000100)=0x98) (rerun: 64) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e23, 0x6, @mcast2, 0x3}}}, &(0x7f0000000200)=0x84) (async) sched_yield() r2 = openat$null(0xffffff9c, &(0x7f0000000240), 0x10001, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000280)={r1, @in6={{0xa, 0x4e20, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x38}, 0x5}}}, &(0x7f0000000340)=0x84) (async) sched_yield() (async) pselect6(0x40, &(0x7f0000000380)={0x80000001, 0x2, 0x200, 0x8000000000000000, 0x0, 0x5, 0x79, 0x3}, &(0x7f00000003c0)={0x67, 0x6, 0x5376, 0x1b26, 0x3, 0x1, 0x7, 0xa06e}, &(0x7f0000000400)={0x10000, 0x7f, 0x7, 0x5, 0x1, 0x4, 0xd92, 0x9}, &(0x7f0000000440)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x6, 0x1]}, 0x8}) (async) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000500)) (async, rerun: 64) sched_yield() (async, rerun: 64) sched_yield() r3 = syz_open_dev$swradio(&(0x7f0000000540), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000580)={0x1, 0x0, '\x00', {0x0, @bt={0x10000, 0x80000000, 0x0, 0x2, 0x1, 0x4, 0x5, 0x2, 0x8, 0x81, 0x1ff, 0xc, 0x2, 0x4, 0x4, 0x32, {0x8, 0x1}, 0x6f, 0xff}}}) (async, rerun: 64) sched_yield() (async, rerun: 64) sched_yield() (async, rerun: 64) sched_yield() (async, rerun: 64) sched_yield() (async, rerun: 32) sched_yield() (rerun: 32) 1m50.969674305s ago: executing program 33 (id=1403): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r1 = socket(0x1d, 0x2, 0x6) getsockname$packet(r1, 0x0, &(0x7f0000000380)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) fcntl$setlease(r3, 0x400, 0x1) syz_pidfd_open(r2, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) 41.236235905s ago: executing program 5 (id=1874): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000007060108000000000000000000000000050001"], 0x1c}, 0x1, 0x3f, 0x0, 0x800}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r2, 0x4068aea3, &(0x7f0000000240)={0xed, 0x0, 0x4}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000002d80)={'ip_vti0\x00', &(0x7f0000000480)=@ethtool_gstrings={0x1b, 0x6, 0xfa, "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"}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000700)={r5, 0x1ff, 0x9, 0x1}) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r6, &(0x7f00000001c0)={0x1d, r7}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000080)=0x1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)}, 0x94) bind$can_raw(r6, &(0x7f0000000040), 0x10) ftruncate(0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x19b1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000006}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e21, 0x3c7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c) 41.035753288s ago: executing program 5 (id=1875): syz_io_uring_setup(0x64d, &(0x7f0000000100)={0x0, 0xf27d, 0x8, 0x2, 0x801e7}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000140)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x1000000}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, 0xae, 0x7, 0x6, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_sa={0x2, 0x1, 0x4d5, 0x3, 0x0, 0xbf, 0x2, 0x80000000}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd2d, 0x3506}]}, 0x30}}, 0x20000880) 41.004783019s ago: executing program 5 (id=1876): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x40000000000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x7d) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @mcast2, 0xb}, r5}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e28, 0x711, @loopback, 0x206}, {0xa, 0x4e21, 0x0, @empty, 0x8}, r5, 0x8}}, 0x48) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 40.652987399s ago: executing program 5 (id=1877): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r0, @ANYRES32=r2], 0x44}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x300, 0x54801}, 0x0) 40.505886925s ago: executing program 5 (id=1878): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000040)=0x80000001, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$ppp(0xffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r1, &(0x7f0000000300)) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 39.62480084s ago: executing program 5 (id=1887): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xb, 0xfffffffffffffffe, 0xfffffffc}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000019340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000019380)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000"], 0x50}}, 0x4000850) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000190c0)={0x11, 0x6, &(0x7f00000191c0)=ANY=[@ANYRESDEC, @ANYRES64=r1], &(0x7f0000019080)='syzkaller\x00', 0x5, 0xb9, &(0x7f0000019200)=""/185, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0xb) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000192c0)=ANY=[@ANYRESHEX=r4, @ANYRES8=r5, @ANYRESDEC, @ANYRES32=r2, @ANYRESOCT=r5, @ANYRES16=r3, @ANYRES32=r4, @ANYRES8, @ANYRES32=r2], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x20000011) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000019180)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141040, 0x42) mount(&(0x7f0000000000)=@sr0, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x100080f, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r8 = syz_io_uring_setup(0x3e79, &(0x7f0000000480)={0x0, 0xbe09, 0x800, 0x0, 0x31e, 0x0, r7}, &(0x7f00000000c0)=0x0, &(0x7f0000019380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0xb, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) io_uring_enter(r8, 0x4, 0xfcc0, 0x41, 0x0, 0x0) 24.093582179s ago: executing program 34 (id=1887): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xb, 0xfffffffffffffffe, 0xfffffffc}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000019340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000019380)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000"], 0x50}}, 0x4000850) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000190c0)={0x11, 0x6, &(0x7f00000191c0)=ANY=[@ANYRESDEC, @ANYRES64=r1], &(0x7f0000019080)='syzkaller\x00', 0x5, 0xb9, &(0x7f0000019200)=""/185, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0xb) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000192c0)=ANY=[@ANYRESHEX=r4, @ANYRES8=r5, @ANYRESDEC, @ANYRES32=r2, @ANYRESOCT=r5, @ANYRES16=r3, @ANYRES32=r4, @ANYRES8, @ANYRES32=r2], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x20000011) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000019180)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141040, 0x42) mount(&(0x7f0000000000)=@sr0, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x100080f, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r8 = syz_io_uring_setup(0x3e79, &(0x7f0000000480)={0x0, 0xbe09, 0x800, 0x0, 0x31e, 0x0, r7}, &(0x7f00000000c0)=0x0, &(0x7f0000019380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0xb, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) io_uring_enter(r8, 0x4, 0xfcc0, 0x41, 0x0, 0x0) 6.382096851s ago: executing program 6 (id=2083): socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r0 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) listen(r2, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) close_range(r1, r2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x26e1, 0x0) close(r6) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x8800000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2760, 0x0) 5.965879478s ago: executing program 3 (id=2085): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt_cache\x00') exit(0xfffffffffffffff7) write$sysctl(r0, &(0x7f00000001c0)='2\x00', 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00'}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYRES32=r4], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000000900020073797a32000000006c000480680001800b000100746172676574000058000280400003009b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd656422a619b2ffcd000000000000000000000001000000000000000a000100484d41524b00000008000240000000000900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r2, @ANYRES64=r6, @ANYBLOB="4409400000000000000012800e00010069703665727370b3012b4182616e0000008e7c28fa7708544b3d1ac58cbc0c00"], 0x40}, 0x1, 0x0, 0x0, 0x4040080}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000040)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f00008c2000/0x4000)=nil, 0x4000, 0xb635773f06ebbeef, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r7, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r8, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r9 = socket$inet(0x2, 0x3, 0x9) setsockopt$sock_int(r9, 0x1, 0x2e, &(0x7f0000000000)=0x7b, 0x4) shutdown(r9, 0x0) recvmmsg(r9, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 5.38583646s ago: executing program 6 (id=2087): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x10, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r4 = socket$netlink(0x10, 0x3, 0x9) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x2afb, &(0x7f0000000300)={0x0, 0x3b85, 0x10000, 0x2, 0x22, 0x0, r5}, &(0x7f0000000380), &(0x7f00000003c0)) memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) sendfile(r3, r3, 0x0, 0x40008) 5.102278315s ago: executing program 4 (id=2088): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x1, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) (fail_nth: 6) 5.005450017s ago: executing program 3 (id=2091): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11000000040000000400000006"], 0x50) r2 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00') pread64(r2, &(0x7f0000000140)=""/116, 0x74, 0x4) 4.874609307s ago: executing program 4 (id=2092): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000a00), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000a40)={0x2, 0x5, 0x3, 0x40, 0x4, 0x3}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x5}, 0x18) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r8, {0x0, 0xfff8}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x100, "e4353954ade21075ae3a75d22487acfc"}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0xf, 0x4, 0x6, 0x2, 0x3f, 0xfffffffc, 0x2}}, {0x8, 0x2, [0xa, 0x1]}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x42, &(0x7f0000000080)=0xffff7b6e, 0x4) getsockopt$inet6_buf(r9, 0x29, 0x6, &(0x7f0000000100)=""/28, &(0x7f0000000240)=0xffffffffffffffb9) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000800000000000000f1ffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) r10 = openat$vicodec0(0xffffff9c, &(0x7f0000001200), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r10, 0xc0185648, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x26, '\x00', @p_u32=&(0x7f0000000100)=0xfffffffe}}) r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmmsg(r11, &(0x7f00000047c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x1fe0}}], 0x1, 0x10) 4.874310763s ago: executing program 3 (id=2093): syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400"], &(0x7f0000000100)=""/125, 0x4e, 0x7d, 0x1, 0x6}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xd7) 4.568961814s ago: executing program 3 (id=2094): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x118, 0x137db) ptrace$pokeuser(0x6, r1, 0xfc, 0x6000003f) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x24, &(0x7f0000000700)={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x601) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x80015b18, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000010001fff00000000000000000006", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a005124"], 0x40}}, 0x0) 4.185490039s ago: executing program 6 (id=2095): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], 0x30}, 0x1, 0x0, 0x0, 0x8815}, 0xc000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$autofs(0xffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0/file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xf, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb}, 0x94) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r4, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) 4.062504782s ago: executing program 1 (id=2096): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffd}, 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 3.912956233s ago: executing program 4 (id=2097): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000680)=@data_frame={@msdu=@type11={{0x0, 0x2, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_a, @device_a, @broadcast, {0x8, 0x9}, @broadcast, @void, @value=@ver_80211n={0x0, 0x4, 0x2, 0x3, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, @a_msdu=[{@device_b}, {@broadcast, @device_b, 0x8d, "e36bfd8a732a4b8e111bd5c80d921e33e1e6d1a5f8b3a459311296f62de17f83a9b0d6098dc8c6af86a8a49c8b914960981125ad50158335f275292a17b84478dac583e10cbdf7e0fe524fe8b5bce8f6c4f025ea755af0006c366cd5233bec15825d8575c87644d9c4d3ca47a77ce82a0fcb6bb48781e5fd6a82d94904fc25230b4be1a52ef5c8c6b58aa00e09"}, {@broadcast, @broadcast, 0xd8, "6a5bd45376fc808935c40b3c0a3111c1edfdab4dc54dcea1a1dec876436cc607d78b86cbc67a80a47ab26885209d74514728bdd2709a1dbae8bf09b9adb01700330eb3eabf1b285cedc9e4bc06ed5cd463d12eb0686afef4b82e0735a9a46ecd78a01401696cd3f147a3a243077ebf3f4c623b3def6a25ee4a278aca276dfde31867e9c79315be632a441a243177112354e2bf7453d32b3c6c1e5529734ad6c6afbbf7ded61a5d06e8cadacf00237a49357ede0b31d699189093ed6246c751e96c37ef33e55c33179b7ffa4312e968114bbdc332c8d8faa5"}, {@device_b, @device_a, 0xb8, "ea15483a73bffdb637e661e4ddb426c16c432b5035bcc1ac3d680919d5e2e4f1b7dc7dfba464d2086cf05367c6faee5ef476976db462e030e4cd9379a1676d00aa1b5054d0c5160d4b197fed43d59e9def97615a7d92a5b1fca5566ed356a6477874e61ad03af80ccef8ad1e24d8d0da2752252981b461bafb16ec79aa0c26f0ff2e32458125ab8eacb0b94696461c5bd0fc046eaebaf2ac3da85efd15b1af0424a70b503d56a4c62394be462a0c672ed670f07e50dca956"}, {@device_a, @device_b, 0xa5, "7e32101c016b3cc15932503e02f9a32d888b7986a465364fc16f565d23e64e98693186398e4313fa58d03f53d45da64adec5f47a46b2c5dc5d97837e450132fb242e9e2e24f9bb0e0afe621d64da6ff0d26df071619bec51c83c86ac3de08bfe706efe86597e68d8a04b3ff69fb39133318d275dcb7d605e07625bb306bf3f3b1c83e2e523e59b82e30f52e09c1a39699cdc54838307a1c51d460aefd21fe3c694bfbec9ac"}, {@broadcast, @broadcast, 0x77, "a21c7f7f9f72d07bc953c3558c49c503bec25899bb286d5b5083df2a8f855608d7b77c9f213db648302210ef20422d7270db7a515b255ebc5fc79704dbf93585b926bd4cd8af7d37cfa199f95278fb281460414ea60633c614dfee71238c03c668723fe7586f62ee16095d3f9f9287e2b9a901ed5c5c8f"}, {@broadcast, @device_b, 0x32, "aef0d671c0c9f6d7953b0c748eb84d83605d940e2ebefa4cf171698f1ce74395dd44475f179303655d403e52cfa5361c0ff0"}]}, 0x3fa) nanosleep(0x0, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000140)="41000200010001", 0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x14044017}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptp0(0xffffff9c, &(0x7f0000000000), 0x2000, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x24}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x3f00, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x2, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x5c, 0x160, 0x134, 0x3e0, 0x240, 0x228, 0x25a, 0x240, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [0x0, 0xffffff00], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xec, 0x134, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x24}, {0x0, "d176"}}, @common=@unspec=@state={{0x24}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2={0xfc, 0x2, '\x00', 0x4}, [0x0, 0x0, 0xff000000], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x364) 3.912636678s ago: executing program 1 (id=2098): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8126}}) io_uring_enter(0xffffffffffffffff, 0x38c5, 0x2000000, 0x0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io'], 0xc) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'unlock', ' ', 'io'}, 0xa) 3.804202062s ago: executing program 1 (id=2099): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x121000, 0x0) read$FUSE(r1, &(0x7f0000002a80)={0x2020}, 0xfffffffe) (async) setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) 3.20562684s ago: executing program 6 (id=2100): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000100)=0xc) r2 = syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030d0902"], 0x0) syz_usb_disconnect(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x48810) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000500)=""/4096) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket(0x5, 0x80000, 0x2) syz_open_dev$char_usb(0xc, 0xb4, 0x9) read$char_usb(r6, &(0x7f0000000480)=""/74, 0x4a) 3.106122623s ago: executing program 1 (id=2101): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x200ac2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000de180a01020000000000000000000000660900020073797a32000048e6165d0e17f8b3e900000900cb"], 0x2c}}, 0x8004) r1 = openat$vsock(0xffffff9c, &(0x7f0000000080), 0x200400, 0x0) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x37}, 0x3}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x10b282, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.290290506s ago: executing program 4 (id=2102): r0 = socket(0xa, 0x3, 0x3a) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xa, 0x2}, @int={0x0, 0x0, 0x0, 0x1, 0x5}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x4e, 0x0, 0x1}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x141, 0x0, 0x4}, 0x18) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x85c68e8ab9c77084, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r3, 0x10c, 0x3, &(0x7f0000000080), &(0x7f0000000040)=0x4) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200087300fe8000000000000000000020000000bbfe8000000000000000000000000000aa"], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) gettid() r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) readv(r4, &(0x7f00000006c0), 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1e9]}}, 0x5c) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 2.289996539s ago: executing program 1 (id=2103): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x10, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r4 = socket$netlink(0x10, 0x3, 0x9) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x2afb, &(0x7f0000000300)={0x0, 0x3b85, 0x10000, 0x2, 0x22, 0x0, r5}, &(0x7f0000000380), &(0x7f00000003c0)) memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) sendfile(r3, r3, 0x0, 0x40008) 2.145905433s ago: executing program 6 (id=2104): keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000a80)=""/4096, 0x1000) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) syz_usb_connect(0x3, 0x36, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f00000007c0), 0x10) (async) r1 = openat$adsp1(0xffffff9c, &(0x7f0000000840), 0x400, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000000000)={0x9, {"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", 0xfffffffffffffe2d}}, 0x1006) (async) readv(r1, &(0x7f0000001bc0)=[{&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={@local, 0x2b}) (async) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='nilfs2\x00', 0x8080, &(0x7f0000000100)='discard') 1.595799227s ago: executing program 3 (id=2105): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000a00), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000a40)={0x2, 0x5, 0x3, 0x40, 0x4, 0x3}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x5}, 0x18) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r8, {0x0, 0xfff8}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x100, "e4353954ade21075ae3a75d22487acfc"}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0xf, 0x4, 0x6, 0x2, 0x3f, 0xfffffffc, 0x2}}, {0x8, 0x2, [0xa, 0x1]}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x42, &(0x7f0000000080)=0xffff7b6e, 0x4) getsockopt$inet6_buf(r9, 0x29, 0x6, &(0x7f0000000100)=""/28, &(0x7f0000000240)=0xffffffffffffffb9) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000800000000000000f1ffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) r10 = openat$vicodec0(0xffffff9c, &(0x7f0000001200), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r10, 0xc0185648, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x26, '\x00', @p_u32=&(0x7f0000000100)=0xfffffffe}}) r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmmsg(r11, &(0x7f00000047c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x1fe0}}], 0x1, 0x10) 955.640303ms ago: executing program 1 (id=2106): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = semget$private(0x0, 0x2, 0x50) semctl$GETNCNT(r1, 0x1, 0xe, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000070000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400006b78759e6100001000010000000000000000000000000a20000000000a01010000000002050000000900010073797a30000000005c000000030a01030000000000000000050000000900010073797a30000000000900030073797a320000000008000a400000000328000480080002400000001208009d932a6b5be165e7b223f4243d0140000000001400030076657468305f766972745f776966690014000000110001"], 0xa4}}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509a914"], 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f0000001d00)=[{{&(0x7f0000001d40)=@isdn, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/174, 0xae}, {&(0x7f0000000600)=""/210, 0xd2}], 0x2, &(0x7f0000000440)=""/80, 0x50}, 0xe}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000700)=""/151, 0x97}, {&(0x7f00000007c0)=""/197, 0xc5}, {&(0x7f00000008c0)=""/95, 0x5f}, {&(0x7f0000000340)}, {&(0x7f0000000940)=""/133, 0x85}, {&(0x7f0000000a00)=""/219, 0xdb}, {&(0x7f0000000b00)=""/107, 0x6b}, {&(0x7f0000000b80)=""/134, 0x86}, {&(0x7f0000000c40)=""/28, 0x1c}], 0x9, &(0x7f0000000d00)=""/4096, 0x1000}}], 0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) read(r6, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc040ff0b, 0x0) ioctl$KVM_SET_SREGS(r10, 0x4138ae84, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x4004001) syz_open_dev$video(&(0x7f00000000c0), 0x1, 0x20080) 911.951224ms ago: executing program 4 (id=2107): r0 = openat$fuse(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x130, 0x0, 0x2, {0x0, 0x0, 0x0, '\x00', {0x7ff, 0x7ff, 0xadf, 0x10, r3, 0x0, 0x8000, '\x00', 0x6, 0x81, 0x1, 0x3, {0x0, 0x6}, {0x4000000000006, 0xb}, {0x2000001, 0xd}, {0x1000000000, 0xa00}, 0x2, 0x6, 0xfff, 0x7}}}}) write$FUSE_INIT(r1, &(0x7f0000001200)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x22000100}}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x6c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) write$FUSE_WRITE(r0, &(0x7f00000003c0)={0x18, 0x0, r2, {0x8000}}, 0x18) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb8, 0xb8, 0x6, [@struct={0xc, 0x5, 0x0, 0x4, 0x1, 0x4, [{0xc, 0x3, 0x3}, {0x7, 0x4, 0x2}, {0xb, 0x2, 0x1}, {0x6, 0x3, 0x401}, {0x10001, 0x0, 0x8000}]}, @union={0xb, 0x6, 0x0, 0x5, 0x0, 0xa4b2, [{0xb, 0x3, 0x8}, {0xc, 0x5, 0x2}, {0x10, 0x5, 0x38}, {0xf, 0x5, 0x67e0}, {0x6, 0x4, 0x1}, {0xd, 0x3, 0x1}]}, @var={0xa, 0x0, 0x0, 0xe, 0x1, 0x1}, @func={0x1, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x61, 0x30, 0x5f, 0x61]}}, &(0x7f0000000280)=""/248, 0xd6, 0xf8, 0x1, 0x7}, 0x28) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000020180)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0x10012, r8, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r7, 0x4028af11, &(0x7f00000001c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000001000000000400000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r9, &(0x7f0000000100)=[{&(0x7f0000000140)=""/197, 0xc5}], 0x1, 0x36, 0x0) read$FUSE(r9, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r10, &(0x7f0000000180), 0x8) write$P9_RSTATu(r9, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f00000001c0)={{0x1, 0x2, 0x100, 0x1, 0x462}}) r11 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x2182) ioctl$CEC_RECEIVE(r11, 0xc0386106, &(0x7f0000000000)={0x0, 0x7, 0x1, 0xfffffffd, 0x0, 0x9, '&\x00', 0x0, 0x0, 0x4a, 0x0, 0x0, 0x7, 0xe}) 635.454472ms ago: executing program 3 (id=2108): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], 0x30}, 0x1, 0x0, 0x0, 0x8815}, 0xc000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$autofs(0xffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0/file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xf, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb}, 0x94) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r4, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) 520.563599ms ago: executing program 6 (id=2109): r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a00), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000200)={0x20, r1, 0x329, 0xfffffffc, 0x1000000, {0x16}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000860}, 0x4008004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}, 0x3d) shutdown(r5, 0x1) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000004000000080002"], 0x24}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r4, 0x8, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000800}, 0x804) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000c80)=ANY=[@ANYBLOB="1c0000ff", @ANYRES16=r0, @ANYBLOB="11042dbd7000ffdbdf25050000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x44044080) 0s ago: executing program 4 (id=2110): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00'}, 0x94) syz_io_uring_setup(0x370a, 0x0, 0x0, &(0x7f0000000380)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000089}, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) dup2(0xffffffffffffffff, r0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) (fail_nth: 1) kernel console output (not intermixed with test programs): CPU: 1 UID: 0 PID: 11403 Comm: syz.3.1418 Tainted: G L syzkaller #0 PREEMPT(full) [ 385.764885][T11403] Tainted: [L]=SOFTLOCKUP [ 385.764889][T11403] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 385.764895][T11403] Call Trace: [ 385.764899][T11403] [ 385.764904][T11403] dump_stack_lvl+0x16c/0x1f0 [ 385.764943][T11403] should_fail_ex+0x512/0x640 [ 385.764962][T11403] ? kmem_cache_alloc_noprof+0x62/0x770 [ 385.764976][T11403] should_failslab+0xc2/0x120 [ 385.764993][T11403] kmem_cache_alloc_noprof+0x83/0x770 [ 385.765006][T11403] ? getname_flags.part.0+0x4c/0x550 [ 385.765020][T11403] ? getname_flags.part.0+0x4c/0x550 [ 385.765030][T11403] ? apparmor_capable+0x1d7/0x4e0 [ 385.765041][T11403] getname_flags.part.0+0x4c/0x550 [ 385.765053][T11403] getname_flags+0x93/0xf0 [ 385.765067][T11403] user_path_at+0x24/0x60 [ 385.765081][T11403] vfs_open_tree+0x2d0/0x940 [ 385.765097][T11403] ? _raw_spin_unlock+0x28/0x50 [ 385.765124][T11403] ? __pfx_vfs_open_tree+0x10/0x10 [ 385.765145][T11403] __do_sys_open_tree+0x3b/0x160 [ 385.765161][T11403] __do_fast_syscall_32+0xe8/0x680 [ 385.765173][T11403] do_fast_syscall_32+0x32/0x80 [ 385.765194][T11403] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 385.765209][T11403] RIP: 0023:0xf707d579 [ 385.765217][T11403] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 385.765227][T11403] RSP: 002b:00000000f546d55c EFLAGS: 00000296 ORIG_RAX: 00000000000001ac [ 385.765238][T11403] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000000000000 [ 385.765244][T11403] RDX: 0000000000089901 RSI: 0000000000000000 RDI: 0000000000000000 [ 385.765259][T11403] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 385.765266][T11403] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 385.765272][T11403] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 385.765285][T11403] [ 386.177142][T11411] binder: 11410:11411 unknown command 0 [ 386.179462][T11411] binder: 11410:11411 ioctl c0306201 800001c0 returned -22 [ 388.515150][ T5986] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 388.853544][ T5951] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 388.858239][ T5951] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 388.861056][ T5951] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 388.864582][ T5951] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 388.867108][ T5951] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 388.973562][T11435] chnl_net:caif_netlink_parms(): no params data found [ 389.042866][T11435] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.045212][T11435] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.047502][T11435] bridge_slave_0: entered allmulticast mode [ 389.050130][T11435] bridge_slave_0: entered promiscuous mode [ 389.053657][T11435] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.055958][T11435] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.058251][T11435] bridge_slave_1: entered allmulticast mode [ 389.059986][ T5993] usb 5-1: USB disconnect, device number 9 [ 389.060954][T11435] bridge_slave_1: entered promiscuous mode [ 389.080629][T11435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.085885][T11435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.100758][T11435] team0: Port device team_slave_0 added [ 389.105470][T11435] team0: Port device team_slave_1 added [ 389.120394][T11435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.122790][T11435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.131170][T11435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.135662][T11435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.137894][T11435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.146289][T11435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.187467][T11435] hsr_slave_0: entered promiscuous mode [ 389.189843][T11435] hsr_slave_1: entered promiscuous mode [ 389.191984][T11435] debugfs: 'hsr0' already exists in 'hsr' [ 389.193788][T11435] Cannot create hsr debugfs directory [ 389.315881][T11435] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 389.320517][T11435] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 389.328437][T11435] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 389.345774][T11435] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 389.417882][T11435] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.420313][T11435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.422961][T11435] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.425280][T11435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.514882][T10456] syz_tun (unregistering): left allmulticast mode [ 389.536636][ T6158] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.543397][ T6158] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.555405][T11435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.566475][T11435] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.579302][ T6158] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.582348][ T6158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.595913][ T6185] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.598201][ T6185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.747890][T11435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.991821][T11471] overlayfs: upper fs does not support tmpfile. [ 390.053087][ T6164] dvmrp6 (unregistering): left allmulticast mode [ 390.061032][T11474] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1431'. [ 390.269857][ T6164] bond0 (unregistering): Released all slaves [ 390.277415][ T6164] bond1 (unregistering): Released all slaves [ 390.290328][ T6164] bond2 (unregistering): (slave lo): Releasing backup interface [ 390.294259][ T6164] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 390.298167][ T6164] bond2 (unregistering): Released all slaves [ 390.359236][T11435] veth0_vlan: entered promiscuous mode [ 390.387973][T11435] veth1_vlan: entered promiscuous mode [ 390.523483][T11435] veth0_macvtap: entered promiscuous mode [ 390.527852][T11435] veth1_macvtap: entered promiscuous mode [ 390.540488][T11435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.543066][ T6164] tipc: Left network mode [ 390.569333][T11435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.577457][ T6164] IPVS: stopping master sync thread 8172 ... [ 390.596887][ T6344] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.599734][ T6344] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.604424][ T6344] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.607238][ T6344] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.673141][ T8568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.675792][ T8568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.713681][ T6185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.716155][ T6185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.885586][ T6164] hsr_slave_0: left promiscuous mode [ 390.887993][ T6164] hsr_slave_1: left promiscuous mode [ 390.902671][ T6164] pimreg (unregistering): left allmulticast mode [ 390.920032][ T5951] Bluetooth: hci4: command tx timeout [ 391.263168][T11493] 9p: Bad value for 'rfdno' [ 391.334733][T11496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.337763][T11496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.511687][ T6164] team0 (unregistering): Port device vxcan1 removed [ 391.797544][T11496] netlink: 'syz.1.1436': attribute type 4 has an invalid length. [ 391.801014][T11496] netlink: 'syz.1.1436': attribute type 1 has an invalid length. [ 391.806634][T11496] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1436'. [ 392.018825][ T6164] IPVS: stop unused estimator thread 0... [ 392.113285][T11509] ip6erspan0: entered promiscuous mode [ 392.115137][T11509] ip6erspan0: entered allmulticast mode [ 392.122042][T11509] syzkaller0: entered promiscuous mode [ 392.124966][T11509] syzkaller0: entered allmulticast mode [ 392.443027][T11521] loop6: detected capacity change from 0 to 524288000 [ 392.492657][T11521] Invalid logical block size (131067) [ 392.992527][ T5951] Bluetooth: hci4: command tx timeout [ 393.088842][T11531] bridge0: port 3(syz_tun) entered blocking state [ 393.091260][T11531] bridge0: port 3(syz_tun) entered disabled state [ 393.094141][T11531] syz_tun: entered allmulticast mode [ 393.097677][T11531] syz_tun: entered promiscuous mode [ 393.100810][T11531] bridge0: port 3(syz_tun) entered blocking state [ 393.103186][T11531] bridge0: port 3(syz_tun) entered forwarding state [ 393.192135][T11533] input: syz0 as /devices/virtual/input/input15 [ 393.312234][ T40] kauditd_printk_skb: 48 callbacks suppressed [ 393.312251][ T40] audit: type=1326 audit(1768739061.016:4474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11532 comm="syz.4.1445" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x0 [ 395.073293][ T5951] Bluetooth: hci4: command tx timeout [ 396.119668][ T5961] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 396.123855][ T5961] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 396.135142][ T5961] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 396.146994][ T5961] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 396.152339][ T5961] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 396.465142][T11577] chnl_net:caif_netlink_parms(): no params data found [ 396.537140][T11577] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.540391][T11577] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.543577][T11577] bridge_slave_0: entered allmulticast mode [ 396.548035][T11577] bridge_slave_0: entered promiscuous mode [ 396.551984][T11577] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.554596][T11577] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.555254][ T6220] usb 7-1: USB disconnect, device number 27 [ 396.557389][T11577] bridge_slave_1: entered allmulticast mode [ 396.569879][T11577] bridge_slave_1: entered promiscuous mode [ 396.590526][T11577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.595608][T11577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.615187][T11577] team0: Port device team_slave_0 added [ 396.618751][T11577] team0: Port device team_slave_1 added [ 396.635700][T11577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.637915][T11577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.646237][T11577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.650635][T11577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.653143][T11577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.661161][T11577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.689169][T11577] hsr_slave_0: entered promiscuous mode [ 396.691553][T11577] hsr_slave_1: entered promiscuous mode [ 396.793502][T11577] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 396.799040][T11577] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 396.803824][T11577] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 396.812355][T11577] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 396.831109][T11577] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.833485][T11577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.836070][T11577] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.838396][T11577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.871199][T11577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.879391][ T6185] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.882748][ T6185] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.894637][T11577] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.900578][ T8568] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.903052][ T8568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.911721][ T6185] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.914862][ T6185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.047718][T11577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.162511][ T5961] Bluetooth: hci4: command tx timeout [ 397.192348][T11577] veth0_vlan: entered promiscuous mode [ 397.199202][T11577] veth1_vlan: entered promiscuous mode [ 397.218156][T11577] veth0_macvtap: entered promiscuous mode [ 397.224674][T11577] veth1_macvtap: entered promiscuous mode [ 397.236877][T11577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.244800][T11577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.251764][ T6185] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.262538][ T6185] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.267067][ T6185] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.270584][ T6185] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.316206][ T6171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.319271][ T6171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.333696][ T8568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.336226][ T8568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.760259][T11628] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1466'. [ 397.881225][T11633] syzkaller0: entered promiscuous mode [ 397.884105][T11633] syzkaller0: entered allmulticast mode [ 398.202702][ T5961] Bluetooth: hci0: command tx timeout [ 398.782485][ T6029] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 398.893915][ T40] audit: type=1326 audit(1768739066.606:4475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11654 comm="syz.1.1474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 398.902113][ T40] audit: type=1326 audit(1768739066.606:4476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11654 comm="syz.1.1474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 398.910990][ T40] audit: type=1326 audit(1768739066.606:4477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11654 comm="syz.1.1474" exe="/syz-executor" sig=0 arch=40000003 syscall=447 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 398.919083][ T40] audit: type=1326 audit(1768739066.606:4478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11654 comm="syz.1.1474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 398.927637][ T40] audit: type=1326 audit(1768739066.606:4479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11654 comm="syz.1.1474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 398.935492][ T6029] usb 10-1: Using ep0 maxpacket: 8 [ 398.939658][ T6029] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 398.940550][ T40] audit: type=1326 audit(1768739066.606:4480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11654 comm="syz.1.1474" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 398.943512][ T6029] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 398.954965][ T40] audit: type=1326 audit(1768739066.606:4481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11654 comm="syz.1.1474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 398.954991][ T40] audit: type=1326 audit(1768739066.606:4482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11654 comm="syz.1.1474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 398.955012][ T40] audit: type=1326 audit(1768739066.606:4483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11654 comm="syz.1.1474" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 398.955032][ T40] audit: type=1326 audit(1768739066.606:4484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11654 comm="syz.1.1474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 398.987659][ T6029] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 398.990866][ T6029] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 398.995086][ T6029] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 399.000447][ T6029] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 399.004435][ T6029] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.254759][ T6029] usb 10-1: GET_CAPABILITIES returned 0 [ 399.257347][ T6029] usbtmc 10-1:16.0: can't read capabilities [ 399.288681][T11664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1475'. [ 400.112717][ T5944] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 400.263235][ T5944] usb 9-1: no configurations [ 400.264749][ T5944] usb 9-1: can't read configurations, error -22 [ 400.272553][ T5961] Bluetooth: hci0: command tx timeout [ 400.392509][ T5944] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 400.553485][ T5944] usb 9-1: no configurations [ 400.555206][ T5944] usb 9-1: can't read configurations, error -22 [ 400.557450][ T5944] usb usb9-port1: attempt power cycle [ 400.959637][ T5944] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 400.973391][ T5944] usb 9-1: no configurations [ 400.974902][ T5944] usb 9-1: can't read configurations, error -22 [ 401.352702][ T5944] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 401.384001][ T5944] usb 9-1: no configurations [ 401.385905][ T5944] usb 9-1: can't read configurations, error -22 [ 401.388796][ T5944] usb usb9-port1: unable to enumerate USB device [ 401.996898][T11690] syzkaller0: entered promiscuous mode [ 401.998827][T11690] syzkaller0: entered allmulticast mode [ 402.064831][T11690] tipc: Started in network mode [ 402.066487][T11690] tipc: Node identity 362d76683a01, cluster identity 4711 [ 402.071041][T11690] tipc: Enabled bearer , priority 0 [ 402.354465][ T5961] Bluetooth: hci0: command tx timeout [ 402.791711][T11686] tipc: Resetting bearer [ 402.859759][T11686] tipc: Disabling bearer [ 403.282544][T11481] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 403.422131][T11715] overlayfs: missing 'lowerdir' [ 403.452525][T11481] usb 9-1: Using ep0 maxpacket: 8 [ 403.517249][T11481] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 403.520134][T11481] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 403.523379][T11481] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 403.526539][T11481] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 403.540580][T11481] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 403.547980][T11481] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 403.551546][T11481] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.684862][T11732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.687669][T11732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.810977][T11481] usb 9-1: GET_CAPABILITIES returned 0 [ 403.813014][T11481] usbtmc 9-1:16.0: can't read capabilities [ 404.093604][T11732] netlink: 'syz.1.1494': attribute type 4 has an invalid length. [ 404.096135][T11732] netlink: 'syz.1.1494': attribute type 1 has an invalid length. [ 404.098658][T11732] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1494'. [ 404.125868][T11732] usbtmc 10-1:16.0: send_request_dev_dep_msg_in returned -90 [ 404.186971][T11743] cgroup: Name too long [ 404.432481][ T5961] Bluetooth: hci0: command tx timeout [ 404.569759][T11752] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 405.657587][T11781] netlink: 'syz.4.1505': attribute type 1 has an invalid length. [ 406.426369][T11785] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.734715][T11789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.737536][T11789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.903306][T11792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1508'. [ 407.093725][T11801] cgroup: Name too long [ 407.240170][ T5986] IPVS: starting estimator thread 0... [ 407.332515][T11810] IPVS: using max 44 ests per chain, 105600 per kthread [ 407.796359][T11822] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 407.798288][T11822] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 407.872509][T11822] vhci_hcd vhci_hcd.0: Device attached [ 408.142538][ T5986] usb 48-1: SetAddress Request (2) to port 0 [ 408.145252][ T5986] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 408.175196][T11829] FAULT_INJECTION: forcing a failure. [ 408.175196][T11829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.179154][T11829] CPU: 2 UID: 0 PID: 11829 Comm: syz.1.1518 Tainted: G L syzkaller #0 PREEMPT(full) [ 408.179170][T11829] Tainted: [L]=SOFTLOCKUP [ 408.179174][T11829] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 408.179180][T11829] Call Trace: [ 408.179185][T11829] [ 408.179189][T11829] dump_stack_lvl+0x16c/0x1f0 [ 408.179210][T11829] should_fail_ex+0x512/0x640 [ 408.179225][T11829] _copy_to_user+0x32/0xd0 [ 408.179239][T11829] simple_read_from_buffer+0xcb/0x170 [ 408.179255][T11829] proc_fail_nth_read+0x197/0x240 [ 408.179273][T11829] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 408.179291][T11829] ? rw_verify_area+0xcf/0x6c0 [ 408.179304][T11829] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 408.179320][T11829] vfs_read+0x1e4/0xcf0 [ 408.179336][T11829] ? __pfx___mutex_lock+0x10/0x10 [ 408.179348][T11829] ? __pfx_vfs_read+0x10/0x10 [ 408.179361][T11829] ? find_held_lock+0x2b/0x80 [ 408.179378][T11829] ? __fget_files+0x20e/0x3c0 [ 408.179396][T11829] ksys_read+0x12a/0x250 [ 408.179410][T11829] ? __pfx_ksys_read+0x10/0x10 [ 408.179428][T11829] __do_fast_syscall_32+0xe8/0x680 [ 408.179440][T11829] do_fast_syscall_32+0x32/0x80 [ 408.179451][T11829] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 408.179464][T11829] RIP: 0023:0xf7f23579 [ 408.179473][T11829] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 408.179483][T11829] RSP: 002b:00000000f5416590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 408.179493][T11829] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f5416620 [ 408.179500][T11829] RDX: 000000000000000f RSI: 00000000f73b6ff4 RDI: 0000000000000000 [ 408.179506][T11829] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 408.179512][T11829] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 408.179517][T11829] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 408.179530][T11829] [ 408.267169][T11823] vhci_hcd: connection reset by peer [ 408.274208][ T6185] vhci_hcd vhci_hcd.5: stop threads [ 408.275898][ T6185] vhci_hcd vhci_hcd.5: release socket [ 408.279662][ T6185] vhci_hcd vhci_hcd.5: disconnect device [ 408.315462][T11835] tipc: Started in network mode [ 408.317059][T11835] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 408.321231][T11835] tipc: Enabled bearer , priority 10 [ 408.324161][T11835] netlink: 'syz.4.1520': attribute type 1 has an invalid length. [ 408.465334][T11841] FAULT_INJECTION: forcing a failure. [ 408.465334][T11841] name failslab, interval 1, probability 0, space 0, times 0 [ 408.481829][T11841] CPU: 2 UID: 0 PID: 11841 Comm: syz.4.1522 Tainted: G L syzkaller #0 PREEMPT(full) [ 408.481848][T11841] Tainted: [L]=SOFTLOCKUP [ 408.481852][T11841] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 408.481858][T11841] Call Trace: [ 408.481862][T11841] [ 408.481866][T11841] dump_stack_lvl+0x16c/0x1f0 [ 408.481886][T11841] should_fail_ex+0x512/0x640 [ 408.481899][T11841] ? fs_reclaim_acquire+0xae/0x150 [ 408.481924][T11841] should_failslab+0xc2/0x120 [ 408.481941][T11841] __kmalloc_noprof+0xeb/0x910 [ 408.481952][T11841] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 408.481971][T11841] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 408.481985][T11841] tomoyo_realpath_from_path+0xc2/0x6e0 [ 408.482001][T11841] ? tomoyo_profile+0x47/0x60 [ 408.482018][T11841] tomoyo_path_number_perm+0x245/0x580 [ 408.482030][T11841] ? tomoyo_path_number_perm+0x237/0x580 [ 408.482044][T11841] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 408.482069][T11841] ? find_held_lock+0x2b/0x80 [ 408.482082][T11841] ? hook_file_ioctl_common+0x144/0x410 [ 408.482098][T11841] ? __fget_files+0x20e/0x3c0 [ 408.482112][T11841] ? __fput_deferred+0x470/0x480 [ 408.482125][T11841] security_file_ioctl_compat+0x9b/0x240 [ 408.482140][T11841] __ia32_compat_sys_ioctl+0xc3/0x370 [ 408.482155][T11841] __do_fast_syscall_32+0xe8/0x680 [ 408.482167][T11841] do_fast_syscall_32+0x32/0x80 [ 408.482177][T11841] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 408.482190][T11841] RIP: 0023:0xf7f95579 [ 408.482199][T11841] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 408.482209][T11841] RSP: 002b:00000000f548655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 408.482219][T11841] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0185648 [ 408.482226][T11841] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 408.482232][T11841] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 408.482238][T11841] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 408.482243][T11841] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 408.482256][T11841] [ 408.482261][T11841] ERROR: Out of memory at tomoyo_realpath_from_path. [ 408.553386][T11843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.571801][T11843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.877731][T11848] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 408.913417][T11848] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 408.915915][T11848] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 408.918979][T11848] vhci_hcd vhci_hcd.0: Device attached [ 408.931264][ T40] kauditd_printk_skb: 149 callbacks suppressed [ 408.931280][ T40] audit: type=1326 audit(1768739076.636:4634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11845 comm="syz.4.1524" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x0 [ 409.140277][T11854] (syz.1.1526,11854,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 409.143347][T11854] (syz.1.1526,11854,3):ocfs2_fill_super:1177 ERROR: status = -22 [ 409.212898][ T980] usb 46-1: SetAddress Request (2) to port 0 [ 409.214887][ T980] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 409.334818][ T6220] tipc: Node number set to 4269801494 [ 409.475139][T11860] lo speed is unknown, defaulting to 1000 [ 409.478115][T11860] lo speed is unknown, defaulting to 1000 [ 409.491296][T11860] lo speed is unknown, defaulting to 1000 [ 409.507937][T11860] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 409.534879][T11860] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 409.611743][T11860] lo speed is unknown, defaulting to 1000 [ 409.616156][T11860] lo speed is unknown, defaulting to 1000 [ 409.619923][T11860] lo speed is unknown, defaulting to 1000 [ 409.626826][T11860] lo speed is unknown, defaulting to 1000 [ 409.629713][T11860] lo speed is unknown, defaulting to 1000 [ 409.679544][T11863] lo speed is unknown, defaulting to 1000 [ 409.784385][T11865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.788224][T11865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.843106][T11849] vhci_hcd: connection reset by peer [ 409.845610][ T6172] vhci_hcd vhci_hcd.4: stop threads [ 409.847428][ T6172] vhci_hcd vhci_hcd.4: release socket [ 409.849254][ T6172] vhci_hcd vhci_hcd.4: disconnect device [ 409.878330][T11868] overlayfs: missing 'lowerdir' [ 410.422445][T11882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.426306][T11882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.518697][T11886] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1535'. [ 410.580680][ T40] audit: type=1326 audit(1768739078.286:4635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11877 comm="syz.1.1533" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 410.591619][ T40] audit: type=1326 audit(1768739078.286:4636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11877 comm="syz.1.1533" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 410.600583][ T40] audit: type=1326 audit(1768739078.296:4637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11877 comm="syz.1.1533" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 410.607467][ T40] audit: type=1326 audit(1768739078.296:4638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11877 comm="syz.1.1533" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 410.614527][ T40] audit: type=1326 audit(1768739078.296:4639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11877 comm="syz.1.1533" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 410.620420][T11880] pim6reg: entered allmulticast mode [ 410.620920][ T40] audit: type=1326 audit(1768739078.296:4640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11877 comm="syz.1.1533" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 410.629079][ T40] audit: type=1326 audit(1768739078.296:4641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11877 comm="syz.1.1533" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 410.636145][ T40] audit: type=1326 audit(1768739078.296:4642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11877 comm="syz.1.1533" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 410.642839][ T40] audit: type=1326 audit(1768739078.296:4643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11877 comm="syz.1.1533" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 410.823501][T11894] overlayfs: missing 'lowerdir' [ 410.867479][T11899] Invalid argument reading file caps for ./file0 [ 411.026541][T11908] [U] [ 411.108136][T11877] pim6reg: left allmulticast mode [ 411.373113][T11924] netlink: 'syz.5.1547': attribute type 3 has an invalid length. [ 411.382225][T11924] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 411.593160][T11928] overlayfs: missing 'workdir' [ 411.644272][T11930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.647886][T11930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.050023][T11939] syzkaller0: entered promiscuous mode [ 412.052341][T11939] syzkaller0: entered allmulticast mode [ 412.067525][T11939] tipc: Started in network mode [ 412.069771][T11939] tipc: Node identity 2af632e9ad93, cluster identity 4711 [ 412.073532][T11939] tipc: Enabled bearer , priority 0 [ 412.081530][T11939] tipc: Resetting bearer [ 412.084326][T11939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.088385][T11939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.094101][T11938] tipc: Resetting bearer [ 412.103109][T11938] tipc: Disabling bearer [ 412.185104][T11941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1556'. [ 412.187996][T11941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1556'. [ 412.191087][T11941] netlink: 'syz.3.1556': attribute type 18 has an invalid length. [ 412.195217][T11941] netlink: 'syz.3.1556': attribute type 15 has an invalid length. [ 412.285156][T11949] (syz.3.1558,11949,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 412.288607][T11949] (syz.3.1558,11949,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 412.660351][T11957] overlayfs: missing 'workdir' [ 412.958829][T11976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.966814][T11976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.996862][T11976] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1566'. [ 413.233046][ T5986] usb 48-1: device descriptor read/8, error -110 [ 413.635164][ T5986] usb usb48-port1: attempt power cycle [ 413.866471][T11986] tipc: Enabled bearer , priority 10 [ 413.882367][T11988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.883931][T11986] netlink: 'syz.5.1568': attribute type 1 has an invalid length. [ 413.885583][T11988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.900435][T11991] netlink: 'syz.3.1571': attribute type 39 has an invalid length. [ 414.034546][T11995] lo speed is unknown, defaulting to 1000 [ 414.078897][T11996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.083048][T11996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.103573][T11993] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 414.106411][T11993] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 414.110425][T11993] vhci_hcd vhci_hcd.0: Device attached [ 414.126105][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 414.126117][ T40] audit: type=1800 audit(1768739081.836:4667): pid=11993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1569" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 414.203441][ T5986] usb usb48-port1: unable to enumerate USB device [ 414.272655][ T980] usb 46-1: device descriptor read/8, error -110 [ 414.296913][T11988] netlink: 'syz.4.1570': attribute type 4 has an invalid length. [ 414.299508][T11988] netlink: 'syz.4.1570': attribute type 1 has an invalid length. [ 414.301993][T11988] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1570'. [ 414.327463][T11988] usbtmc 10-1:16.0: send_request_dev_dep_msg_in returned -90 [ 414.392763][ T6029] usb 40-1: SetAddress Request (18) to port 0 [ 414.395173][ T6029] usb 40-1: new SuperSpeed USB device number 18 using vhci_hcd [ 414.663050][ T980] usb usb46-port1: attempt power cycle [ 414.674990][T11999] vhci_hcd: connection reset by peer [ 414.677220][ T6164] vhci_hcd vhci_hcd.1: stop threads [ 414.679570][ T6164] vhci_hcd vhci_hcd.1: release socket [ 414.681912][ T6164] vhci_hcd vhci_hcd.1: disconnect device [ 414.791779][T12011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.794867][T12011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.982567][ T10] tipc: Node number set to 204240488 [ 415.223822][ T980] usb usb46-port1: unable to enumerate USB device [ 415.380982][T12021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.385903][T12021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.407029][T12021] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1577'. [ 416.050049][T12029] syzkaller1: entered promiscuous mode [ 416.052313][T12029] syzkaller1: entered allmulticast mode [ 416.340275][T12035] kAFS: unparsable volume name [ 416.829694][T12046] tipc: Enabled bearer , priority 0 [ 416.833542][T12046] tipc: Resetting bearer [ 416.837094][T12045] tipc: Disabling bearer [ 417.275825][T12058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.283104][T12058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.330547][T12058] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1590'. [ 418.010686][T12079] lo speed is unknown, defaulting to 1000 [ 418.050844][T12081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.051743][T12080] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1595'. [ 418.054595][T12081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.832135][T12090] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1599'. [ 419.472652][ T6029] usb 40-1: device descriptor read/8, error -110 [ 419.884118][ T6029] usb usb40-port1: attempt power cycle [ 419.919170][T12108] lo speed is unknown, defaulting to 1000 [ 419.951596][T12110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.971869][T12110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.072533][T12113] syzkaller1: entered promiscuous mode [ 420.075090][T12113] syzkaller1: entered allmulticast mode [ 420.268003][T12117] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 420.270134][T12117] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 420.274460][T12117] vhci_hcd vhci_hcd.0: Device attached [ 420.289584][T12118] vhci_hcd: connection closed [ 420.289859][ T6172] vhci_hcd vhci_hcd.4: stop threads [ 420.299818][ T6172] vhci_hcd vhci_hcd.4: release socket [ 420.301579][ T6172] vhci_hcd vhci_hcd.4: disconnect device [ 420.358904][T12122] lo speed is unknown, defaulting to 1000 [ 420.452980][ T6029] usb usb40-port1: unable to enumerate USB device [ 420.724596][T12135] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1613'. [ 420.728223][T12135] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1613'. [ 420.733145][T12135] syzkaller0: entered promiscuous mode [ 420.735013][T12135] syzkaller0: entered allmulticast mode [ 420.739207][T12135] 0: reclassify loop, rule prio 0, protocol 800 [ 421.618867][T12151] syzkaller1: entered promiscuous mode [ 421.620908][T12151] syzkaller1: entered allmulticast mode [ 421.978240][T12157] FAULT_INJECTION: forcing a failure. [ 421.978240][T12157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.982487][T12157] CPU: 1 UID: 0 PID: 12157 Comm: syz.3.1620 Tainted: G L syzkaller #0 PREEMPT(full) [ 421.982504][T12157] Tainted: [L]=SOFTLOCKUP [ 421.982508][T12157] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 421.982515][T12157] Call Trace: [ 421.982519][T12157] [ 421.982524][T12157] dump_stack_lvl+0x16c/0x1f0 [ 421.982544][T12157] should_fail_ex+0x512/0x640 [ 421.982560][T12157] _copy_from_user+0x2e/0xd0 [ 421.982573][T12157] io_uring_setup+0xc1/0x1f80 [ 421.982588][T12157] ? __pfx_io_uring_setup+0x10/0x10 [ 421.982603][T12157] ? __mutex_unlock_slowpath+0x161/0x790 [ 421.982615][T12157] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 421.982631][T12157] ? fput+0x70/0xf0 [ 421.982641][T12157] ? ksys_write+0x1ac/0x250 [ 421.982655][T12157] ? __pfx_ksys_write+0x10/0x10 [ 421.982672][T12157] __ia32_sys_io_uring_setup+0xc2/0x170 [ 421.982690][T12157] __do_fast_syscall_32+0xe8/0x680 [ 421.982702][T12157] do_fast_syscall_32+0x32/0x80 [ 421.982712][T12157] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 421.982725][T12157] RIP: 0023:0xf707d579 [ 421.982734][T12157] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 421.982744][T12157] RSP: 002b:00000000f546d50c EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 421.982766][T12157] RAX: ffffffffffffffda RBX: 0000000000000111 RCX: 0000000080000340 [ 421.982774][T12157] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 421.982780][T12157] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 421.982786][T12157] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 421.982791][T12157] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 421.982805][T12157] [ 422.685819][T12164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.689608][T12164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.796601][T12174] tipc: Enabling of bearer rejected, already enabled [ 422.880030][T12168] 9p: Bad value for 'wfdno' [ 422.889693][T12168] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1623'. [ 424.188311][T12198] netlink: 'syz.1.1631': attribute type 28 has an invalid length. [ 424.446201][T12202] binder: 12199:12202 ioctl c0306201 80000080 returned -14 [ 424.466695][T12202] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 424.925899][T12206] binder: 12203:12206 ioctl c0306201 80000080 returned -14 [ 424.934993][T12206] FAULT_INJECTION: forcing a failure. [ 424.934993][T12206] name failslab, interval 1, probability 0, space 0, times 0 [ 424.940419][T12206] CPU: 1 UID: 0 PID: 12206 Comm: syz.4.1633 Tainted: G L syzkaller #0 PREEMPT(full) [ 424.940460][T12206] Tainted: [L]=SOFTLOCKUP [ 424.940466][T12206] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 424.940476][T12206] Call Trace: [ 424.940484][T12206] [ 424.940492][T12206] dump_stack_lvl+0x16c/0x1f0 [ 424.940523][T12206] should_fail_ex+0x512/0x640 [ 424.940543][T12206] ? fs_reclaim_acquire+0xae/0x150 [ 424.940572][T12206] should_failslab+0xc2/0x120 [ 424.940598][T12206] __kmalloc_noprof+0xeb/0x910 [ 424.940618][T12206] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 424.940647][T12206] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 424.940670][T12206] tomoyo_realpath_from_path+0xc2/0x6e0 [ 424.940696][T12206] ? tomoyo_profile+0x47/0x60 [ 424.940725][T12206] tomoyo_path_number_perm+0x245/0x580 [ 424.940744][T12206] ? tomoyo_path_number_perm+0x237/0x580 [ 424.940766][T12206] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 424.940813][T12206] ? find_held_lock+0x2b/0x80 [ 424.940834][T12206] ? hook_file_ioctl_common+0x144/0x410 [ 424.940861][T12206] ? __fget_files+0x20e/0x3c0 [ 424.940883][T12206] ? __fput_deferred+0x470/0x480 [ 424.940904][T12206] security_file_ioctl_compat+0x9b/0x240 [ 424.940926][T12206] __ia32_compat_sys_ioctl+0xc3/0x370 [ 424.940948][T12206] __do_fast_syscall_32+0xe8/0x680 [ 424.940966][T12206] do_fast_syscall_32+0x32/0x80 [ 424.940981][T12206] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 424.941001][T12206] RIP: 0023:0xf7f95579 [ 424.941012][T12206] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 424.941027][T12206] RSP: 002b:00000000f544455c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 424.941042][T12206] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000c0306201 [ 424.941051][T12206] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 424.941060][T12206] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 424.941069][T12206] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 424.941077][T12206] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 424.941100][T12206] [ 424.941137][T12206] ERROR: Out of memory at tomoyo_realpath_from_path. [ 425.108282][T12209] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 425.130240][T12209] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 425.143712][T12209] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1634'. [ 425.266186][T12216] IPVS: set_ctl: invalid protocol: 100 172.20.20.170:20002 [ 425.271256][T12218] usb usb1: usbfs: process 12218 (syz.4.1639) did not claim interface 0 before use [ 426.862767][T12235] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 426.864789][T12235] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 426.885992][T12235] vhci_hcd vhci_hcd.0: Device attached [ 426.926433][ T40] audit: type=1326 audit(1768739094.636:4668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12232 comm="syz.5.1645" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x0 [ 427.173054][ T5986] usb 48-1: SetAddress Request (6) to port 0 [ 427.175770][ T5986] usb 48-1: new SuperSpeed USB device number 6 using vhci_hcd [ 427.817225][T12236] vhci_hcd: connection reset by peer [ 427.819237][ T6172] vhci_hcd vhci_hcd.5: stop threads [ 427.821039][ T6172] vhci_hcd vhci_hcd.5: release socket [ 427.823045][ T6172] vhci_hcd vhci_hcd.5: disconnect device [ 428.124252][T12253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.127143][T12253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.971992][T12265] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1651'. [ 429.071047][T12263] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 429.073389][T12263] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 429.076982][T12263] vhci_hcd vhci_hcd.0: Device attached [ 429.122173][T12269] fuse: Bad value for 'fd' [ 429.126012][T12269] 9pnet_virtio: no channels available for device syz [ 429.589880][T12273] netlink: 'syz.3.1654': attribute type 2 has an invalid length. [ 429.816381][T12266] vhci_hcd: connection closed [ 429.817130][ T6171] vhci_hcd vhci_hcd.5: stop threads [ 429.821673][ T6171] vhci_hcd vhci_hcd.5: release socket [ 429.825628][ T6171] vhci_hcd vhci_hcd.5: disconnect device [ 429.916451][T12275] CUSE: unknown device info "xKJ H+ۤ2LhnL1`Ccn80(3նi" [ 429.919851][T12275] CUSE: unknown device info "ٮ,<_eF" [ 429.922100][T12275] CUSE: unknown device info "3ܟ,̘" [ 429.932444][T12275] CUSE: unknown device info "J2S Z !e/J+-na4\N4" [ 429.935398][T12275] CUSE: unknown device info " [ 429.935398][T12275] fzXS! [ 429.935398][T12275] AxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 429.940846][T12275] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TM_/V{" [ 429.952554][T12275] CUSE: unknown device info "whU~V߶ݸFsX,xkq/Q]3H" [ 429.955129][T12275] CUSE: zero length info key specified [ 430.402219][T12282] lo speed is unknown, defaulting to 1000 [ 430.404522][T12282] lo speed is unknown, defaulting to 1000 [ 430.406985][T12282] lo speed is unknown, defaulting to 1000 [ 430.415033][T12282] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 430.429070][T12282] lo speed is unknown, defaulting to 1000 [ 430.431773][T12282] lo speed is unknown, defaulting to 1000 [ 430.435566][T12282] lo speed is unknown, defaulting to 1000 [ 430.438213][T12282] lo speed is unknown, defaulting to 1000 [ 430.442223][T12282] lo speed is unknown, defaulting to 1000 [ 431.668486][T12297] netlink: 'syz.1.1660': attribute type 3 has an invalid length. [ 431.675410][T12297] netlink: 'syz.1.1660': attribute type 1 has an invalid length. [ 431.683692][T12297] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1660'. [ 431.692057][T12297] NCSI netlink: No device for ifindex 0 [ 431.833915][T12303] batman_adv: batadv0: Adding interface: ipvlan0 [ 431.836546][T12303] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.854178][T12303] batman_adv: batadv0: Interface activated: ipvlan0 [ 431.974089][T12308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.977997][T12308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.171752][T12308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1664'. [ 432.175557][T12308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1664'. [ 432.245489][T12311] netlink: 'syz.5.1665': attribute type 2 has an invalid length. [ 432.282557][ T5986] usb 48-1: device descriptor read/8, error -110 [ 432.684995][ T5986] usb usb48-port1: attempt power cycle [ 432.753267][ T10] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 432.902216][T12317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.907662][T12317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.984894][T12320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.990101][T12320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.114060][T12336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.118211][T12336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.205641][ T6029] libceph: connect (1)[c::]:6789 error -101 [ 434.208105][ T6029] libceph: mon0 (1)[c::]:6789 connect error [ 434.210129][T12337] ceph: No mds server is up or the cluster is laggy [ 434.271534][ T40] audit: type=1800 audit(1768739101.976:4669): pid=12337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1673" name="file1" dev="overlay" ino=281 res=0 errno=0 [ 434.794487][ T5986] usb usb48-port1: unable to enumerate USB device [ 435.485927][T12342] FAULT_INJECTION: forcing a failure. [ 435.485927][T12342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.491362][T12342] CPU: 1 UID: 0 PID: 12342 Comm: syz.4.1674 Tainted: G L syzkaller #0 PREEMPT(full) [ 435.491390][T12342] Tainted: [L]=SOFTLOCKUP [ 435.491396][T12342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 435.491406][T12342] Call Trace: [ 435.491415][T12342] [ 435.491424][T12342] dump_stack_lvl+0x16c/0x1f0 [ 435.491456][T12342] should_fail_ex+0x512/0x640 [ 435.491481][T12342] _copy_from_user+0x2e/0xd0 [ 435.491502][T12342] move_addr_to_kernel+0x65/0x170 [ 435.491523][T12342] __get_compat_msghdr+0x3f1/0x4d0 [ 435.491548][T12342] get_compat_msghdr+0xd2/0x170 [ 435.491569][T12342] ? __pfx_get_compat_msghdr+0x10/0x10 [ 435.491599][T12342] ___sys_sendmsg+0x1ae/0x1d0 [ 435.491623][T12342] ? __pfx____sys_sendmsg+0x10/0x10 [ 435.491656][T12342] ? find_held_lock+0x2b/0x80 [ 435.491694][T12342] __sys_sendmsg+0x16d/0x220 [ 435.491717][T12342] ? __pfx___sys_sendmsg+0x10/0x10 [ 435.491750][T12342] ? do_user_addr_fault+0x843/0x1370 [ 435.491776][T12342] __do_fast_syscall_32+0xe8/0x680 [ 435.491797][T12342] do_fast_syscall_32+0x32/0x80 [ 435.491841][T12342] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 435.491863][T12342] RIP: 0023:0xf7f95579 [ 435.491884][T12342] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 435.491899][T12342] RSP: 002b:00000000f548655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 435.491916][T12342] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000400 [ 435.491927][T12342] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 435.491937][T12342] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 435.491946][T12342] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 435.491956][T12342] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 435.491980][T12342] [ 435.686798][T12347] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 435.695563][T12347] netlink: 'syz.4.1676': attribute type 8 has an invalid length. [ 435.998789][T12352] netlink: 'syz.4.1677': attribute type 2 has an invalid length. [ 436.184424][T12356] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1678'. [ 437.535162][T12362] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 437.537939][T12362] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 437.541459][T12362] vhci_hcd vhci_hcd.0: Device attached [ 437.550243][ T40] audit: type=1326 audit(1768739105.256:4670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12359 comm="syz.3.1680" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x0 [ 437.804868][ T10] usb 44-1: SetAddress Request (11) to port 0 [ 437.808288][ T10] usb 44-1: new SuperSpeed USB device number 11 using vhci_hcd [ 437.953037][T12317] usbtmc 10-1:16.0: stb usb_control_msg returned -110 [ 439.250492][T12383] binder: BINDER_SET_CONTEXT_MGR already set [ 439.252610][T12383] binder: 12382:12383 ioctl 4018620d 800002c0 returned -16 [ 439.543312][T12363] vhci_hcd: connection reset by peer [ 439.545965][ T6185] vhci_hcd vhci_hcd.3: stop threads [ 439.548268][ T6185] vhci_hcd vhci_hcd.3: release socket [ 439.550662][ T6185] vhci_hcd vhci_hcd.3: disconnect device [ 440.206396][T12391] tipc: Started in network mode [ 440.208031][T12391] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 440.211021][T12391] tipc: Enabling of bearer rejected, failed to enable media [ 440.373094][T12397] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1691'. [ 440.591646][T12406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1696'. [ 440.622972][T12406] random: crng reseeded on system resumption [ 440.647950][T12406] 9p: Bad value for 'rfdno' [ 440.663227][ T5961] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 440.791191][T12410] tipc: Enabled bearer , priority 10 [ 440.837379][T12414] syzkaller1: entered promiscuous mode [ 440.839151][T12414] syzkaller1: entered allmulticast mode [ 440.965830][T12412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1698'. [ 441.159798][T12418] lo speed is unknown, defaulting to 1000 [ 441.171192][T12418] lo speed is unknown, defaulting to 1000 [ 441.449870][ T5961] Bluetooth: Wrong link type (-71) [ 441.468972][T12440] binder_alloc: 12439: binder_alloc_buf size 4096 failed, no address space [ 441.476304][T12440] binder_alloc: allocated: 8192 (num: 2 largest: 4096), free: 0 (num: 0 largest: 0) [ 441.546419][T12442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1706'. [ 441.550693][T12443] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 441.552104][T12442] random: crng reseeded on system resumption [ 441.552848][T12443] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 441.560490][T12443] vhci_hcd vhci_hcd.0: Device attached [ 441.576653][T12442] 9p: Bad value for 'rfdno' [ 441.584939][ T5961] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 441.658287][T12447] tipc: Enabling of bearer rejected, already enabled [ 442.192149][T12444] vhci_hcd: connection closed [ 442.195278][ T6171] vhci_hcd vhci_hcd.3: stop threads [ 442.198729][ T6171] vhci_hcd vhci_hcd.3: release socket [ 442.200637][ T6171] vhci_hcd vhci_hcd.3: disconnect device [ 442.247203][T12457] syzkaller1: entered promiscuous mode [ 442.249530][T12457] syzkaller1: entered allmulticast mode [ 442.363350][T12460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.366872][T12460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.377518][T12460] usbtmc 10-1:16.0: send_request_dev_dep_msg_in returned -90 [ 442.435100][ T5944] libceph: connect (1)[c::]:6789 error -101 [ 442.437654][ T5944] libceph: mon0 (1)[c::]:6789 connect error [ 442.443195][T12460] ceph: No mds server is up or the cluster is laggy [ 442.498289][ T40] audit: type=1800 audit(1768739110.206:4671): pid=12466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1711" name="file1" dev="overlay" ino=2644 res=0 errno=0 [ 442.540326][ T40] audit: type=1804 audit(1768739110.246:4672): pid=12465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1712" name="/newroot/53/file0" dev="tmpfs" ino=321 res=1 errno=0 [ 442.541770][T12465] ref_ctr going negative. vaddr: 0x80ffd002, curr val: -2360, delta: 1 [ 442.553187][T12465] ref_ctr increment failed for inode: 0x141 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88804dbd0c40 [ 442.650918][ T980] tipc: Node number set to 2271556329 [ 442.858995][T12476] tipc: Enabling of bearer rejected, already enabled [ 442.912785][ T10] usb 44-1: device descriptor read/8, error -110 [ 443.566285][ T10] usb usb44-port1: attempt power cycle [ 443.998255][T12488] syzkaller1: entered promiscuous mode [ 444.000448][T12488] syzkaller1: entered allmulticast mode [ 444.458174][ T10] usb usb44-port1: unable to enumerate USB device [ 444.507285][T12502] netlink: 'syz.4.1724': attribute type 1 has an invalid length. [ 444.594731][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.597295][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.837201][T12502] bond2: entered promiscuous mode [ 444.839234][T12502] bond2: entered allmulticast mode [ 444.848062][T12502] 8021q: adding VLAN 0 to HW filter on device bond2 [ 444.858480][T12509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.861789][T12509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.963185][T12512] tipc: Enabling of bearer rejected, already enabled [ 445.221870][T12519] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1730'. [ 445.345035][T12523] MTD: Couldn't look up '/dev/sg0': -15 [ 445.387492][T12521] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 445.390576][T12521] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 445.400310][T12521] vhci_hcd vhci_hcd.0: Device attached [ 445.407313][T12528] FAULT_INJECTION: forcing a failure. [ 445.407313][T12528] name failslab, interval 1, probability 0, space 0, times 0 [ 445.411593][T12528] CPU: 2 UID: 0 PID: 12528 Comm: syz.4.1732 Tainted: G L syzkaller #0 PREEMPT(full) [ 445.411610][T12528] Tainted: [L]=SOFTLOCKUP [ 445.411614][T12528] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 445.411621][T12528] Call Trace: [ 445.411625][T12528] [ 445.411630][T12528] dump_stack_lvl+0x16c/0x1f0 [ 445.411672][T12528] should_fail_ex+0x512/0x640 [ 445.411693][T12528] ? __kmalloc_cache_noprof+0x5f/0x800 [ 445.411707][T12528] should_failslab+0xc2/0x120 [ 445.411752][T12528] __kmalloc_cache_noprof+0x80/0x800 [ 445.411767][T12528] ? allocate_cgrp_cset_links+0xca/0x230 [ 445.411786][T12528] ? allocate_cgrp_cset_links+0xca/0x230 [ 445.411801][T12528] allocate_cgrp_cset_links+0xca/0x230 [ 445.411819][T12528] find_css_set+0x785/0x1c70 [ 445.411835][T12528] ? __pfx_find_css_set+0x10/0x10 [ 445.411857][T12528] cgroup_migrate_prepare_dst+0x10b/0x7f0 [ 445.411874][T12528] cgroup_attach_task+0x3cc/0x700 [ 445.411888][T12528] ? __pfx_cgroup_attach_task+0x10/0x10 [ 445.411900][T12528] ? iput.part.0+0x192/0x1190 [ 445.411916][T12528] ? cgroup_attach_permissions+0x2a1/0x790 [ 445.411936][T12528] __cgroup_procs_write+0x452/0x780 [ 445.411952][T12528] ? __pfx___cgroup_procs_write+0x10/0x10 [ 445.411975][T12528] cgroup_procs_write+0x26/0x60 [ 445.411990][T12528] cgroup_file_write+0x1e9/0x790 [ 445.412000][T12528] ? __pfx_cgroup_procs_write+0x10/0x10 [ 445.412014][T12528] ? __pfx_cgroup_file_write+0x10/0x10 [ 445.412024][T12528] ? __kmalloc_noprof+0x35d/0x910 [ 445.412038][T12528] kernfs_fop_write_iter+0x3af/0x570 [ 445.412053][T12528] ? __pfx_cgroup_file_write+0x10/0x10 [ 445.412065][T12528] vfs_write+0x7d3/0x11d0 [ 445.412080][T12528] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 445.412097][T12528] ? __pfx_vfs_write+0x10/0x10 [ 445.412110][T12528] ? find_held_lock+0x2b/0x80 [ 445.412133][T12528] ksys_write+0x12a/0x250 [ 445.412147][T12528] ? __pfx_ksys_write+0x10/0x10 [ 445.412162][T12528] ? do_user_addr_fault+0x843/0x1370 [ 445.412178][T12528] __do_fast_syscall_32+0xe8/0x680 [ 445.412190][T12528] do_fast_syscall_32+0x32/0x80 [ 445.412201][T12528] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 445.412214][T12528] RIP: 0023:0xf7f95579 [ 445.412223][T12528] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 445.412233][T12528] RSP: 002b:00000000f548655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 445.412244][T12528] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000140 [ 445.412250][T12528] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 445.412256][T12528] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 445.412262][T12528] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 445.412267][T12528] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 445.412281][T12528] [ 445.549489][T12531] syzkaller1: entered promiscuous mode [ 445.551890][T12531] syzkaller1: entered allmulticast mode [ 445.602529][ T73] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 445.602628][T12534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.608658][T12534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.662505][ T73] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 445.738428][T12537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.742249][T12537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.016362][T12534] netlink: 'syz.1.1734': attribute type 4 has an invalid length. [ 446.019178][T12534] netlink: 'syz.1.1734': attribute type 1 has an invalid length. [ 446.021929][T12534] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1734'. [ 446.051859][T12524] vhci_hcd: connection reset by peer [ 446.053962][ T6185] vhci_hcd vhci_hcd.3: stop threads [ 446.055822][ T6185] vhci_hcd vhci_hcd.3: release socket [ 446.058199][T12534] usbtmc 10-1:16.0: send_request_dev_dep_msg_in returned -90 [ 446.060811][ T6185] vhci_hcd vhci_hcd.3: disconnect device [ 446.156039][T12537] netlink: 'syz.4.1735': attribute type 4 has an invalid length. [ 446.159310][T12537] netlink: 'syz.4.1735': attribute type 1 has an invalid length. [ 446.162747][T12537] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1735'. [ 446.186097][T12537] usbtmc 10-1:16.0: send_request_dev_dep_msg_in returned -90 [ 446.604592][T12541] tipc: Enabling of bearer rejected, failed to enable media [ 446.636969][T12543] batman_adv: batadv0: Interface deactivated: ipvlan0 [ 446.642607][T12543] batman_adv: batadv0: Removing interface: ipvlan0 [ 446.774096][T12552] random: crng reseeded on system resumption [ 447.003874][ T40] audit: type=1326 audit(1768739114.716:4673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12557 comm="syz.1.1743" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f23579 code=0x0 [ 447.747596][T12567] tipc: Enabling of bearer rejected, failed to enable media [ 447.932712][T12580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1750'. [ 448.280430][T12591] tipc: Enabling of bearer rejected, already enabled [ 448.336454][T12593] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1757'. [ 449.052999][ T5961] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 449.390581][T12617] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 449.393507][T12617] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 449.398582][T12617] vhci_hcd vhci_hcd.0: Device attached [ 449.404280][T12619] vhci_hcd: connection closed [ 449.404543][ T1196] vhci_hcd vhci_hcd.5: stop threads [ 449.408802][ T1196] vhci_hcd vhci_hcd.5: release socket [ 449.410641][ T1196] vhci_hcd vhci_hcd.5: disconnect device [ 449.437469][T12622] FAULT_INJECTION: forcing a failure. [ 449.437469][T12622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.443727][T12622] CPU: 3 UID: 0 PID: 12622 Comm: syz.1.1765 Tainted: G L syzkaller #0 PREEMPT(full) [ 449.443755][T12622] Tainted: [L]=SOFTLOCKUP [ 449.443760][T12622] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 449.443770][T12622] Call Trace: [ 449.443775][T12622] [ 449.443782][T12622] dump_stack_lvl+0x16c/0x1f0 [ 449.443811][T12622] should_fail_ex+0x512/0x640 [ 449.443832][T12622] _copy_from_user+0x2e/0xd0 [ 449.443850][T12622] get_compat_msghdr+0xa7/0x170 [ 449.443870][T12622] ? __pfx_get_compat_msghdr+0x10/0x10 [ 449.443892][T12622] ? __lock_acquire+0x436/0x2890 [ 449.443918][T12622] ___sys_recvmsg+0x191/0x1a0 [ 449.443949][T12622] ? __pfx____sys_recvmsg+0x10/0x10 [ 449.443971][T12622] ? find_held_lock+0x2b/0x80 [ 449.443998][T12622] ? __pfx___might_resched+0x10/0x10 [ 449.444023][T12622] do_recvmmsg+0x55d/0x750 [ 449.444046][T12622] ? __pfx_do_recvmmsg+0x10/0x10 [ 449.444082][T12622] ? __fget_files+0x20e/0x3c0 [ 449.444106][T12622] __sys_recvmmsg+0x21c/0x280 [ 449.444126][T12622] ? __pfx___sys_recvmmsg+0x10/0x10 [ 449.444147][T12622] ? __pfx_ksys_write+0x10/0x10 [ 449.444171][T12622] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 449.444192][T12622] ? __do_fast_syscall_32+0x9a/0x680 [ 449.444207][T12622] ? lockdep_hardirqs_on+0x7c/0x110 [ 449.444221][T12622] __do_fast_syscall_32+0xe8/0x680 [ 449.444237][T12622] do_fast_syscall_32+0x32/0x80 [ 449.444252][T12622] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 449.444270][T12622] RIP: 0023:0xf7f23579 [ 449.444284][T12622] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 449.444298][T12622] RSP: 002b:00000000f541655c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 449.444313][T12622] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800055c0 [ 449.444322][T12622] RDX: 000000000400023c RSI: 0000000000000300 RDI: 0000000000000000 [ 449.444331][T12622] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 449.444340][T12622] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 449.444348][T12622] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 449.444369][T12622] [ 449.647919][T12625] syzkaller1: entered promiscuous mode [ 449.650221][T12625] syzkaller1: entered allmulticast mode [ 449.754494][T12633] netlink: 'syz.3.1768': attribute type 1 has an invalid length. [ 449.847369][T12635] bond2: entered promiscuous mode [ 449.849726][T12635] bond2: entered allmulticast mode [ 449.852724][T12635] 8021q: adding VLAN 0 to HW filter on device bond2 [ 450.003968][ T5961] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 450.126271][T12647] binder: 12645:12647 unknown command 0 [ 450.128791][T12647] binder: 12645:12647 ioctl c0306201 80000080 returned -22 [ 450.143058][T12647] binder: 12645:12647 ioctl c0306201 800003c0 returned -14 [ 450.154690][T12646] loop7: detected capacity change from 0 to 16384 [ 450.324522][T12650] loop7: detected capacity change from 16384 to 0 [ 450.326000][ C0] blk_print_req_error: 123 callbacks suppressed [ 450.326011][ C0] I/O error, dev loop7, sector 6656 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 2 [ 450.513991][T12657] FAULT_INJECTION: forcing a failure. [ 450.513991][T12657] name failslab, interval 1, probability 0, space 0, times 0 [ 450.520161][T12657] CPU: 2 UID: 0 PID: 12657 Comm: syz.5.1777 Tainted: G L syzkaller #0 PREEMPT(full) [ 450.520179][T12657] Tainted: [L]=SOFTLOCKUP [ 450.520182][T12657] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 450.520188][T12657] Call Trace: [ 450.520192][T12657] [ 450.520196][T12657] dump_stack_lvl+0x16c/0x1f0 [ 450.520217][T12657] should_fail_ex+0x512/0x640 [ 450.520230][T12657] ? __kmalloc_noprof+0xca/0x910 [ 450.520243][T12657] should_failslab+0xc2/0x120 [ 450.520259][T12657] __kmalloc_noprof+0xeb/0x910 [ 450.520271][T12657] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 450.520286][T12657] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 450.520298][T12657] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 450.520312][T12657] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 450.520324][T12657] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 450.520335][T12657] ? genl_get_cmd+0x194/0x580 [ 450.520347][T12657] ? bpf_lsm_capable+0x9/0x10 [ 450.520364][T12657] ? security_capable+0x7e/0x260 [ 450.520377][T12657] ? ns_capable+0xd7/0x110 [ 450.520392][T12657] genl_rcv_msg+0x55c/0x800 [ 450.520405][T12657] ? __pfx_genl_rcv_msg+0x10/0x10 [ 450.520416][T12657] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 450.520436][T12657] netlink_rcv_skb+0x158/0x420 [ 450.520452][T12657] ? __pfx_genl_rcv_msg+0x10/0x10 [ 450.520463][T12657] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 450.520485][T12657] ? netlink_deliver_tap+0x1ae/0xd30 [ 450.520501][T12657] genl_rcv+0x28/0x40 [ 450.520510][T12657] netlink_unicast+0x5aa/0x870 [ 450.520528][T12657] ? __pfx_netlink_unicast+0x10/0x10 [ 450.520549][T12657] netlink_sendmsg+0x8c8/0xdd0 [ 450.520567][T12657] ? __pfx_netlink_sendmsg+0x10/0x10 [ 450.520584][T12657] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 450.520614][T12657] ____sys_sendmsg+0xa5d/0xc30 [ 450.520627][T12657] ? __pfx_____sys_sendmsg+0x10/0x10 [ 450.520637][T12657] ? get_compat_msghdr+0x11a/0x170 [ 450.520657][T12657] ___sys_sendmsg+0x134/0x1d0 [ 450.520677][T12657] ? __pfx____sys_sendmsg+0x10/0x10 [ 450.520697][T12657] ? find_held_lock+0x2b/0x80 [ 450.520719][T12657] __sys_sendmsg+0x16d/0x220 [ 450.520733][T12657] ? __pfx___sys_sendmsg+0x10/0x10 [ 450.520756][T12657] __do_fast_syscall_32+0xe8/0x680 [ 450.520768][T12657] do_fast_syscall_32+0x32/0x80 [ 450.520778][T12657] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 450.520791][T12657] RIP: 0023:0xf6ffd579 [ 450.520800][T12657] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 450.520810][T12657] RSP: 002b:00000000f53ed55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 450.520820][T12657] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 450.520827][T12657] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 450.520832][T12657] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 450.520838][T12657] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 450.520844][T12657] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 450.520857][T12657] [ 450.742574][ T73] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 451.042075][T12665] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 451.044214][T12665] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 451.076134][T12665] vhci_hcd vhci_hcd.0: Device attached [ 451.354541][ T7469] usb 48-1: SetAddress Request (10) to port 0 [ 451.357272][ T7469] usb 48-1: new SuperSpeed USB device number 10 using vhci_hcd [ 451.523856][T12666] vhci_hcd: connection reset by peer [ 451.529059][ T6171] vhci_hcd vhci_hcd.5: stop threads [ 451.531384][ T6171] vhci_hcd vhci_hcd.5: release socket [ 451.532464][T12670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.534355][ T6171] vhci_hcd vhci_hcd.5: disconnect device [ 451.538937][T12670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.557585][T12670] input: syz0 as /devices/virtual/input/input17 [ 451.577636][T12670] sctp: [Deprecated]: syz.1.1781 (pid 12670) Use of struct sctp_assoc_value in delayed_ack socket option. [ 451.577636][T12670] Use struct sctp_sack_info instead [ 451.585032][T12670] sctp: [Deprecated]: syz.1.1781 (pid 12670) Use of struct sctp_assoc_value in delayed_ack socket option. [ 451.585032][T12670] Use struct sctp_sack_info instead [ 453.966806][T12695] syzkaller1: entered promiscuous mode [ 453.969225][T12695] syzkaller1: entered allmulticast mode [ 454.392803][T12698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.396738][T12698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.630896][T12701] netlink: 'syz.1.1790': attribute type 1 has an invalid length. [ 454.645479][T12701] bond2: entered promiscuous mode [ 454.647413][T12701] 8021q: adding VLAN 0 to HW filter on device bond2 [ 454.666171][T12701] 8021q: adding VLAN 0 to HW filter on device bond3 [ 454.670254][T12701] bond2: (slave bond3): making interface the new active one [ 454.672766][T12701] bond3: entered promiscuous mode [ 454.674928][T12701] bond2: (slave bond3): Enslaving as an active interface with an up link [ 454.782215][T12710] netlink: 'syz.1.1793': attribute type 1 has an invalid length. [ 454.785206][T12710] netlink: 'syz.1.1793': attribute type 6 has an invalid length. [ 454.787951][T12710] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1793'. [ 454.998680][T12722] FAULT_INJECTION: forcing a failure. [ 454.998680][T12722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.005548][T12722] CPU: 1 UID: 0 PID: 12722 Comm: syz.5.1797 Tainted: G L syzkaller #0 PREEMPT(full) [ 455.005565][T12722] Tainted: [L]=SOFTLOCKUP [ 455.005569][T12722] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 455.005575][T12722] Call Trace: [ 455.005579][T12722] [ 455.005583][T12722] dump_stack_lvl+0x16c/0x1f0 [ 455.005603][T12722] should_fail_ex+0x512/0x640 [ 455.005618][T12722] ? __pfx_compat_drm_getunique+0x10/0x10 [ 455.005633][T12722] _copy_to_user+0x32/0xd0 [ 455.005647][T12722] ? __pfx_compat_drm_getunique+0x10/0x10 [ 455.005663][T12722] compat_drm_getunique+0x15f/0x180 [ 455.005677][T12722] ? __pfx_compat_drm_getunique+0x10/0x10 [ 455.005692][T12722] ? hook_file_ioctl_common+0x144/0x410 [ 455.005708][T12722] drm_compat_ioctl+0x29b/0x460 [ 455.005724][T12722] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 455.005738][T12722] __ia32_compat_sys_ioctl+0x242/0x370 [ 455.005753][T12722] __do_fast_syscall_32+0xe8/0x680 [ 455.005765][T12722] do_fast_syscall_32+0x32/0x80 [ 455.005776][T12722] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 455.005789][T12722] RIP: 0023:0xf6ffd579 [ 455.005797][T12722] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 455.005808][T12722] RSP: 002b:00000000f53ed55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 455.005818][T12722] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000082187201 [ 455.005825][T12722] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 455.005831][T12722] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 455.005837][T12722] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 455.005842][T12722] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 455.005855][T12722] [ 455.111742][T12730] FAULT_INJECTION: forcing a failure. [ 455.111742][T12730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.117013][T12730] CPU: 1 UID: 0 PID: 12730 Comm: syz.5.1799 Tainted: G L syzkaller #0 PREEMPT(full) [ 455.117051][T12730] Tainted: [L]=SOFTLOCKUP [ 455.117057][T12730] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 455.117066][T12730] Call Trace: [ 455.117072][T12730] [ 455.117079][T12730] dump_stack_lvl+0x16c/0x1f0 [ 455.117102][T12730] should_fail_ex+0x512/0x640 [ 455.117117][T12730] _copy_to_user+0x32/0xd0 [ 455.117130][T12730] msr_read+0x14e/0x250 [ 455.117146][T12730] ? __pfx_msr_read+0x10/0x10 [ 455.117160][T12730] ? bpf_lsm_file_permission+0x9/0x10 [ 455.117173][T12730] ? security_file_permission+0x71/0x210 [ 455.117188][T12730] ? rw_verify_area+0xcf/0x6c0 [ 455.117201][T12730] ? __pfx_msr_read+0x10/0x10 [ 455.117215][T12730] vfs_read+0x1e4/0xcf0 [ 455.117232][T12730] ? __pfx_vfs_read+0x10/0x10 [ 455.117245][T12730] ? find_held_lock+0x2b/0x80 [ 455.117259][T12730] ? __fget_files+0x204/0x3c0 [ 455.117275][T12730] ? __fget_files+0x20e/0x3c0 [ 455.117293][T12730] ksys_read+0x12a/0x250 [ 455.117307][T12730] ? __pfx_ksys_read+0x10/0x10 [ 455.117322][T12730] ? do_user_addr_fault+0x843/0x1370 [ 455.117337][T12730] __do_fast_syscall_32+0xe8/0x680 [ 455.117349][T12730] do_fast_syscall_32+0x32/0x80 [ 455.117359][T12730] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 455.117372][T12730] RIP: 0023:0xf6ffd579 [ 455.117380][T12730] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 455.117390][T12730] RSP: 002b:00000000f53ed55c EFLAGS: 00000296 ORIG_RAX: 0000000000000003 [ 455.117400][T12730] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080019540 [ 455.117407][T12730] RDX: 0000000000018ff8 RSI: 0000000000000000 RDI: 0000000000000000 [ 455.117413][T12730] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 455.117418][T12730] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 455.117424][T12730] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 455.117437][T12730] [ 455.299716][T12731] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1800'. [ 455.535187][T12743] binder: 12742:12743 unknown command 0 [ 455.538153][T12743] binder: 12742:12743 ioctl c0306201 80000080 returned -22 [ 455.544270][T12743] binder: 12742:12743 ioctl c0306201 800003c0 returned -14 [ 455.627678][T12747] syzkaller1: entered promiscuous mode [ 455.630169][T12747] syzkaller1: entered allmulticast mode [ 455.749662][T12728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.419770][ T40] audit: type=1326 audit(1768739124.126:4674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12753 comm="syz.5.1806" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffd579 code=0x0 [ 456.442645][ T7469] usb 48-1: device descriptor read/8, error -110 [ 456.684091][ T73] hid-generic 0000:0000:0093.0003: unknown main item tag 0x0 [ 456.699657][ T73] hid-generic 0000:0000:0093.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 456.833339][ T7469] usb usb48-port1: attempt power cycle [ 457.006099][T12769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1811'. [ 457.449325][ T7469] usb usb48-port1: unable to enumerate USB device [ 457.700368][T12789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.704360][T12789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.729931][T12791] tmpfs: Bad value for 'mpol' [ 457.794178][T12791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1816'. [ 457.835803][T12794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.840044][T12794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.101857][T12807] dummy0: entered allmulticast mode [ 458.148187][T12789] netlink: 'syz.5.1817': attribute type 4 has an invalid length. [ 458.152658][T12789] netlink: 'syz.5.1817': attribute type 1 has an invalid length. [ 458.155112][T12789] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1817'. [ 458.176174][T12789] usbtmc 10-1:16.0: send_request_dev_dep_msg_in returned -90 [ 458.253878][T12809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1823'. [ 458.981232][T12806] dummy0: left allmulticast mode [ 459.511340][T12828] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 459.513338][T12828] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 459.516161][T12828] vhci_hcd vhci_hcd.0: Device attached [ 459.793205][T12834] netlink: 'syz.3.1830': attribute type 3 has an invalid length. [ 459.796717][T12834] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1830'. [ 459.812562][ T980] usb 40-1: SetAddress Request (22) to port 0 [ 459.822755][ T980] usb 40-1: new SuperSpeed USB device number 22 using vhci_hcd [ 459.882761][T12830] vhci_hcd: connection reset by peer [ 459.885770][ T6164] vhci_hcd vhci_hcd.1: stop threads [ 459.888906][ T6164] vhci_hcd vhci_hcd.1: release socket [ 459.891240][ T6164] vhci_hcd vhci_hcd.1: disconnect device [ 460.400697][T12852] lo speed is unknown, defaulting to 1000 [ 460.445361][T12852] lo speed is unknown, defaulting to 1000 [ 460.506358][T12856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.509545][T12856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.391748][T12870] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 461.394256][T12870] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 461.397347][T12870] vhci_hcd vhci_hcd.0: Device attached [ 461.672656][ T5986] usb 48-1: SetAddress Request (14) to port 0 [ 461.678221][ T5986] usb 48-1: new SuperSpeed USB device number 14 using vhci_hcd [ 461.874865][T12871] vhci_hcd: connection reset by peer [ 461.883204][ T6171] vhci_hcd vhci_hcd.5: stop threads [ 461.884904][ T6171] vhci_hcd vhci_hcd.5: release socket [ 461.887310][ T6171] vhci_hcd vhci_hcd.5: disconnect device [ 462.561268][T12884] syzkaller1: entered promiscuous mode [ 462.564063][T12884] syzkaller1: entered allmulticast mode [ 463.069545][T12891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.073225][T12891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.102916][T12891] wireguard0: entered promiscuous mode [ 463.105242][T12891] wireguard0: entered allmulticast mode [ 463.779863][T12914] netlink: 'syz.5.1853': attribute type 1 has an invalid length. [ 463.782343][T12914] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1853'. [ 463.895127][T12921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.898924][T12921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.053242][T12927] : renamed from bond_slave_0 [ 464.304632][T12921] netlink: 'syz.1.1856': attribute type 4 has an invalid length. [ 464.307732][T12921] netlink: 'syz.1.1856': attribute type 1 has an invalid length. [ 464.310673][T12921] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1856'. [ 464.343967][T12921] usbtmc 10-1:16.0: send_request_dev_dep_msg_in returned -90 [ 464.823369][ T7469] IPVS: starting estimator thread 0... [ 464.912605][T12936] IPVS: using max 44 ests per chain, 105600 per kthread [ 464.922768][ T980] usb 40-1: device descriptor read/8, error -110 [ 465.039766][T12948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.045469][T12948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.079580][T12948] wireguard0: entered promiscuous mode [ 465.082510][T12948] wireguard0: entered allmulticast mode [ 465.334680][ T980] usb usb40-port1: attempt power cycle [ 465.473615][T12960] bridge0: entered promiscuous mode [ 465.475998][T12960] bridge0: entered allmulticast mode [ 465.481882][T12960] rdma_rxe: rxe_newlink: failed to add syz_tun [ 465.533957][T12962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.538400][T12962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.637988][T12964] openvswitch: netlink: IP tunnel dst address not specified [ 465.903327][ T980] usb usb40-port1: unable to enumerate USB device [ 465.952894][T12962] netlink: 'syz.1.1868': attribute type 4 has an invalid length. [ 465.955747][T12962] netlink: 'syz.1.1868': attribute type 1 has an invalid length. [ 465.959506][T12962] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1868'. [ 466.050657][T12962] usbtmc 10-1:16.0: send_request_dev_dep_msg_in returned -90 [ 466.714807][T12995] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1881'. [ 466.752632][ T5986] usb 48-1: device descriptor read/8, error -110 [ 466.845494][T12995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1881'. [ 466.883023][T13002] netlink: 35 bytes leftover after parsing attributes in process `syz.1.1882'. [ 466.888937][T13002] fuse: Unknown parameter 'f .' [ 467.143055][ T5986] usb usb48-port1: attempt power cycle [ 467.706341][ T5986] usb usb48-port1: unable to enumerate USB device [ 467.952892][ T5961] Bluetooth: hci3: command 0x0406 tx timeout [ 468.891135][T13034] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1896'. [ 469.871390][T13044] overlayfs: workdir and upperdir must be separate subtrees [ 469.877637][ T40] audit: type=1326 audit(1768739137.586:4675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13045 comm="syz.4.1900" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 469.888668][ T40] audit: type=1326 audit(1768739137.586:4676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13045 comm="syz.4.1900" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 469.899193][ T40] audit: type=1326 audit(1768739137.586:4677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13045 comm="syz.4.1900" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 469.908678][ T40] audit: type=1326 audit(1768739137.586:4678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13045 comm="syz.4.1900" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 469.920244][ T40] audit: type=1326 audit(1768739137.586:4679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13045 comm="syz.4.1900" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 469.929312][ T40] audit: type=1326 audit(1768739137.586:4680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13045 comm="syz.4.1900" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 470.122486][ T40] audit: type=1326 audit(1768739137.826:4681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13045 comm="syz.4.1900" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 470.137532][ T40] audit: type=1326 audit(1768739137.836:4682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13045 comm="syz.4.1900" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 471.038678][T13068] FAULT_INJECTION: forcing a failure. [ 471.038678][T13068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.045306][T13068] CPU: 3 UID: 0 PID: 13068 Comm: syz.3.1907 Tainted: G L syzkaller #0 PREEMPT(full) [ 471.045334][T13068] Tainted: [L]=SOFTLOCKUP [ 471.045339][T13068] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 471.045348][T13068] Call Trace: [ 471.045354][T13068] [ 471.045360][T13068] dump_stack_lvl+0x16c/0x1f0 [ 471.045391][T13068] should_fail_ex+0x512/0x640 [ 471.045415][T13068] _copy_to_user+0x32/0xd0 [ 471.045438][T13068] simple_read_from_buffer+0xcb/0x170 [ 471.045462][T13068] proc_fail_nth_read+0x197/0x240 [ 471.045499][T13068] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 471.045527][T13068] ? rw_verify_area+0xcf/0x6c0 [ 471.045548][T13068] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 471.045575][T13068] vfs_read+0x1e4/0xcf0 [ 471.045600][T13068] ? __pfx___mutex_lock+0x10/0x10 [ 471.045617][T13068] ? __pfx_vfs_read+0x10/0x10 [ 471.045633][T13068] ? find_held_lock+0x2b/0x80 [ 471.045661][T13068] ? __fget_files+0x20e/0x3c0 [ 471.045693][T13068] ksys_read+0x12a/0x250 [ 471.045715][T13068] ? __pfx_ksys_read+0x10/0x10 [ 471.045736][T13068] ? rcu_is_watching+0x12/0xc0 [ 471.045767][T13068] __do_fast_syscall_32+0xe8/0x680 [ 471.045788][T13068] do_fast_syscall_32+0x32/0x80 [ 471.045806][T13068] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 471.045828][T13068] RIP: 0023:0xf707d579 [ 471.045841][T13068] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 471.045856][T13068] RSP: 002b:00000000f546d590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 471.045874][T13068] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00000000f546d620 [ 471.045884][T13068] RDX: 000000000000000f RSI: 00000000f7416ff4 RDI: 0000000000000000 [ 471.045893][T13068] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 471.045903][T13068] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 471.045914][T13068] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 471.045938][T13068] [ 471.208721][T13072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1908'. [ 471.211665][T13072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1908'. [ 471.214548][T13072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1908'. [ 471.234153][T13072] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1908'. [ 471.424179][T13080] FAULT_INJECTION: forcing a failure. [ 471.424179][T13080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.429561][T13080] CPU: 2 UID: 0 PID: 13080 Comm: syz.3.1910 Tainted: G L syzkaller #0 PREEMPT(full) [ 471.429587][T13080] Tainted: [L]=SOFTLOCKUP [ 471.429592][T13080] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 471.429601][T13080] Call Trace: [ 471.429607][T13080] [ 471.429614][T13080] dump_stack_lvl+0x16c/0x1f0 [ 471.429642][T13080] should_fail_ex+0x512/0x640 [ 471.429663][T13080] _copy_from_user+0x2e/0xd0 [ 471.429682][T13080] bpf_test_init.isra.0+0xaf/0x100 [ 471.429707][T13080] bpf_prog_test_run_flow_dissector+0x236/0x980 [ 471.429736][T13080] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 471.429760][T13080] ? find_held_lock+0x2b/0x80 [ 471.429781][T13080] ? __fget_files+0x204/0x3c0 [ 471.429811][T13080] ? __fget_files+0x20e/0x3c0 [ 471.429829][T13080] ? __might_fault+0x90/0x190 [ 471.429851][T13080] ? fput+0x70/0xf0 [ 471.429867][T13080] ? __bpf_prog_get+0x97/0x2a0 [ 471.429886][T13080] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 471.429909][T13080] __sys_bpf+0x1035/0x4980 [ 471.429927][T13080] ? __pfx___sys_bpf+0x10/0x10 [ 471.429941][T13080] ? find_held_lock+0x2b/0x80 [ 471.429981][T13080] ? find_held_lock+0x2b/0x80 [ 471.430007][T13080] ? __mutex_unlock_slowpath+0x161/0x790 [ 471.430037][T13080] ? fput+0x70/0xf0 [ 471.430050][T13080] ? arch_syscall_is_vdso_sigreturn+0x1bd/0x230 [ 471.430076][T13080] ? syscall_user_dispatch+0x78/0x140 [ 471.430100][T13080] __ia32_sys_bpf+0x76/0xe0 [ 471.430116][T13080] __do_fast_syscall_32+0xe8/0x680 [ 471.430135][T13080] do_fast_syscall_32+0x32/0x80 [ 471.430151][T13080] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 471.430169][T13080] RIP: 0023:0xf707d579 [ 471.430182][T13080] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 471.430197][T13080] RSP: 002b:00000000f542b55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 471.430213][T13080] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000740 [ 471.430223][T13080] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 471.430232][T13080] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 471.430240][T13080] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 471.430249][T13080] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 471.430271][T13080] [ 472.036790][T13094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.041291][T13094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.288681][T13100] lo speed is unknown, defaulting to 1000 [ 472.294902][T13100] lo speed is unknown, defaulting to 1000 [ 472.603226][T13106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1918'. [ 472.621020][T13106] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1918'. [ 474.626563][T13121] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 474.629344][T13121] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 474.632967][T13121] vhci_hcd vhci_hcd.0: Device attached [ 474.760468][T13122] vhci_hcd: connection closed [ 474.760780][ T6341] vhci_hcd vhci_hcd.1: stop threads [ 474.764813][ T6341] vhci_hcd vhci_hcd.1: release socket [ 474.766505][ T6341] vhci_hcd vhci_hcd.1: disconnect device [ 475.415525][T13127] lo speed is unknown, defaulting to 1000 [ 475.418652][T13127] lo speed is unknown, defaulting to 1000 [ 475.483346][T13127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.487100][T13127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.954769][T13152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.373052][T13155] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 477.569730][T13155] /dev/sr0: Can't open blockdev [ 477.575905][T13158] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1931'. [ 478.110544][T13168] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 478.113220][T13168] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 478.123317][T13169] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 478.126088][T13169] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 478.150866][T13169] vhci_hcd vhci_hcd.0: Device attached [ 478.385208][T13169] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1934'. [ 478.422627][ T980] usb 40-1: SetAddress Request (26) to port 0 [ 478.426900][ T980] usb 40-1: new SuperSpeed USB device number 26 using vhci_hcd [ 478.798850][T13170] vhci_hcd: connection reset by peer [ 478.801378][ T8568] vhci_hcd vhci_hcd.1: stop threads [ 478.803768][ T8568] vhci_hcd vhci_hcd.1: release socket [ 478.806650][ T8568] vhci_hcd vhci_hcd.1: disconnect device [ 479.395191][T13189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.398093][T13189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.815347][T13189] netlink: 'syz.4.1940': attribute type 4 has an invalid length. [ 479.817828][T13189] netlink: 'syz.4.1940': attribute type 1 has an invalid length. [ 479.820383][T13189] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1940'. [ 479.852889][T13189] usbtmc 10-1:16.0: send_request_dev_dep_msg_in returned -90 [ 480.526941][T13201] syzkaller1: entered promiscuous mode [ 480.528742][T13201] syzkaller1: entered allmulticast mode [ 482.032723][T13221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.036309][T13221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.459701][T13221] usbtmc 10-1:16.0: send_request_dev_dep_msg_in returned -90 [ 482.940349][ T10] usb 10-1: USB disconnect, device number 2 [ 483.008107][T13228] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1953'. [ 483.017793][ T5951] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 483.023312][ T5951] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 483.026844][ T5951] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 483.029901][ T5951] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 483.034236][ T5951] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 483.088340][T13229] lo speed is unknown, defaulting to 1000 [ 483.105518][T13229] lo speed is unknown, defaulting to 1000 [ 483.212244][T13229] chnl_net:caif_netlink_parms(): no params data found [ 483.248167][T13251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.252042][T13251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.294710][T13229] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.297899][T13229] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.301133][T13229] bridge_slave_0: entered allmulticast mode [ 483.305780][T13229] bridge_slave_0: entered promiscuous mode [ 483.310556][T13229] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.314058][T13229] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.317159][T13229] bridge_slave_1: entered allmulticast mode [ 483.321055][T13229] bridge_slave_1: entered promiscuous mode [ 483.352155][T13229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.356751][T13229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.379102][T13229] team0: Port device team_slave_0 added [ 483.386609][T13229] team0: Port device team_slave_1 added [ 483.408633][T13229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.410959][T13229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.422103][T13229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.427439][T13229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.430078][T13229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.440795][T13229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.480522][T13229] hsr_slave_0: entered promiscuous mode [ 483.484437][T13229] hsr_slave_1: entered promiscuous mode [ 483.487440][T13229] debugfs: 'hsr0' already exists in 'hsr' [ 483.489884][T13229] Cannot create hsr debugfs directory [ 483.613645][T13229] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 483.618795][T13229] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 483.623523][T13229] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 483.628736][T13229] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 483.652216][T13229] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.654928][T13229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.657804][T13229] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.660178][T13229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.713564][T13229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.728554][ T8568] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.731520][ T8568] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.743221][T13229] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.753034][ T1196] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.756092][ T1196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.766161][ T8568] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.768496][ T8568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.792566][ T980] usb 40-1: device descriptor read/8, error -110 [ 483.899731][T13229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.058094][T13229] veth0_vlan: entered promiscuous mode [ 484.074171][T13229] veth1_vlan: entered promiscuous mode [ 484.097340][T13229] veth0_macvtap: entered promiscuous mode [ 484.101318][T13229] veth1_macvtap: entered promiscuous mode [ 484.113878][T13229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.121580][T13229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.140969][T13277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.141650][ T6122] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.148006][T13277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.149311][ T6122] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.155550][T13277] netlink: 212916 bytes leftover after parsing attributes in process `syz.4.1962'. [ 484.175259][ T6122] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.178120][ T6122] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.195395][ T980] usb usb40-port1: attempt power cycle [ 484.239862][ T6171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.242856][ T6171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.281075][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.285276][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.758807][ T980] usb usb40-port1: unable to enumerate USB device [ 485.082623][ T5961] Bluetooth: hci1: command tx timeout [ 485.197619][T13302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.201609][T13302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.342577][T13307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.346971][T13307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.414716][T13311] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1973'. [ 485.414871][T13302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.423985][T13302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.617221][T13319] rdma_rxe: rxe_newlink: failed to add syz_tun [ 486.937007][T13350] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1987'. [ 487.152618][ T5961] Bluetooth: hci1: command tx timeout [ 488.024586][T13400] tipc: Enabling of bearer rejected, already enabled [ 488.080653][ T5961] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 488.179166][T13401] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 488.181702][T13401] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 488.212177][T13401] vhci_hcd vhci_hcd.0: Device attached [ 488.228380][T13401] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1992'. [ 488.287637][T13413] syzkaller1: entered promiscuous mode [ 488.289795][T13413] syzkaller1: entered allmulticast mode [ 488.492781][ T5986] usb 50-1: SetAddress Request (2) to port 0 [ 488.496801][ T5986] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd [ 488.671609][T13406] vhci_hcd: connection reset by peer [ 488.674225][ T6341] vhci_hcd vhci_hcd.6: stop threads [ 488.676762][ T6341] vhci_hcd vhci_hcd.6: release socket [ 488.679069][ T6341] vhci_hcd vhci_hcd.6: disconnect device [ 489.251732][ T5961] Bluetooth: hci1: command tx timeout [ 489.657249][T13433] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2003'. [ 489.660281][T13433] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2003'. [ 489.709141][T13434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2003'. [ 489.972122][T13443] lo speed is unknown, defaulting to 1000 [ 490.005482][T13443] lo speed is unknown, defaulting to 1000 [ 490.312994][ T73] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 490.506094][ T73] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.510378][ T73] usb 11-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 490.514494][ T73] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.520575][ T73] usb 11-1: config 0 descriptor?? [ 490.575073][T13465] overlayfs: conflicting lowerdir path [ 490.734913][ T73] usbhid 11-1:0.0: can't add hid device: -71 [ 490.740899][ T73] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 490.748541][ T73] usb 11-1: USB disconnect, device number 2 [ 490.865626][T13470] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 491.192543][ T73] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 491.312829][ T5951] Bluetooth: hci1: command tx timeout [ 491.363750][ T73] usb 11-1: config index 0 descriptor too short (expected 36, got 27) [ 491.366615][ T73] usb 11-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 491.370984][ T73] usb 11-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 491.376104][ T73] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.380796][ T73] usb 11-1: config 0 descriptor?? [ 491.390761][ T73] usbhid 11-1:0.0: couldn't find an input interrupt endpoint [ 491.458070][T13493] input: syz1 as /devices/virtual/input/input18 [ 491.604862][ T73] usb 11-1: USB disconnect, device number 3 [ 492.489926][T13506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2025'. [ 492.539549][T13508] input: syz1 as /devices/virtual/input/input19 [ 492.569598][T13510] FAULT_INJECTION: forcing a failure. [ 492.569598][T13510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 492.573794][T13510] CPU: 2 UID: 0 PID: 13510 Comm: syz.3.2026 Tainted: G L syzkaller #0 PREEMPT(full) [ 492.573812][T13510] Tainted: [L]=SOFTLOCKUP [ 492.573816][T13510] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 492.573823][T13510] Call Trace: [ 492.573827][T13510] [ 492.573832][T13510] dump_stack_lvl+0x16c/0x1f0 [ 492.573853][T13510] should_fail_ex+0x512/0x640 [ 492.573868][T13510] _copy_from_user+0x2e/0xd0 [ 492.573881][T13510] get_compat_msghdr+0xa7/0x170 [ 492.573897][T13510] ? __pfx_get_compat_msghdr+0x10/0x10 [ 492.573915][T13510] ___sys_sendmsg+0x1ae/0x1d0 [ 492.573931][T13510] ? __pfx____sys_sendmsg+0x10/0x10 [ 492.573951][T13510] ? find_held_lock+0x2b/0x80 [ 492.573973][T13510] __sys_sendmsg+0x16d/0x220 [ 492.573988][T13510] ? __pfx___sys_sendmsg+0x10/0x10 [ 492.574007][T13510] ? do_user_addr_fault+0x843/0x1370 [ 492.574022][T13510] __do_fast_syscall_32+0xe8/0x680 [ 492.574035][T13510] do_fast_syscall_32+0x32/0x80 [ 492.574046][T13510] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 492.574059][T13510] RIP: 0023:0xf707d579 [ 492.574068][T13510] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 492.574078][T13510] RSP: 002b:00000000f546d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 492.574088][T13510] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080009b40 [ 492.574095][T13510] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 492.574101][T13510] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 492.574107][T13510] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 492.574113][T13510] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 492.574126][T13510] [ 492.680084][T13513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2028'. [ 492.881528][T13523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.885129][T13523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.075426][T13532] netlink: zone id is out of range [ 493.077498][T13532] netlink: zone id is out of range [ 493.091251][T13523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.099472][T13532] netlink: zone id is out of range [ 493.101637][T13532] netlink: zone id is out of range [ 493.104276][T13523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.112689][T13532] netlink: zone id is out of range [ 493.114646][T13532] netlink: zone id is out of range [ 493.116354][T13532] netlink: zone id is out of range [ 493.118081][T13532] netlink: zone id is out of range [ 493.122550][T13532] netlink: zone id is out of range [ 493.124321][T13532] netlink: zone id is out of range [ 493.393062][ T5951] Bluetooth: hci1: command 0x0405 tx timeout [ 493.552622][ T5986] usb 50-1: device descriptor read/8, error -110 [ 493.741647][ T5961] Bluetooth: hci2: unexpected event for opcode 0x080c [ 493.761081][T13545] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 493.804503][T13550] FAULT_INJECTION: forcing a failure. [ 493.804503][T13550] name failslab, interval 1, probability 0, space 0, times 0 [ 493.812828][T13550] CPU: 0 UID: 0 PID: 13550 Comm: syz.3.2041 Tainted: G L syzkaller #0 PREEMPT(full) [ 493.812858][T13550] Tainted: [L]=SOFTLOCKUP [ 493.812864][T13550] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 493.812874][T13550] Call Trace: [ 493.812882][T13550] [ 493.812891][T13550] dump_stack_lvl+0x16c/0x1f0 [ 493.812918][T13550] should_fail_ex+0x512/0x640 [ 493.812935][T13550] ? __kvmalloc_node_noprof+0x129/0xa40 [ 493.812960][T13550] should_failslab+0xc2/0x120 [ 493.812981][T13550] __kvmalloc_node_noprof+0x14a/0xa40 [ 493.813004][T13550] ? __pfx___mutex_lock+0x10/0x10 [ 493.813021][T13550] ? nf_hook_entries_grow+0x28f/0x860 [ 493.813052][T13550] ? nf_hook_entries_grow+0x28f/0x860 [ 493.813073][T13550] nf_hook_entries_grow+0x28f/0x860 [ 493.813094][T13550] ? __mutex_unlock_slowpath+0x161/0x790 [ 493.813114][T13550] __nf_register_net_hook+0x1cd/0x730 [ 493.813142][T13550] nf_register_net_hook+0x109/0x160 [ 493.813168][T13550] nf_register_net_hooks+0x5d/0xd0 [ 493.813195][T13550] nf_ct_netns_do_get+0x251/0x620 [ 493.813218][T13550] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 493.813242][T13550] ? xt_find_match+0x1f1/0x290 [ 493.813256][T13550] ? __mutex_lock+0x27b/0x1ca0 [ 493.813272][T13550] ? __mutex_unlock_slowpath+0x161/0x790 [ 493.813291][T13550] nf_ct_netns_get+0x39/0x150 [ 493.813312][T13550] state_mt_check+0x68/0x120 [ 493.813328][T13550] ? __pfx_state_mt_check+0x10/0x10 [ 493.813347][T13550] xt_check_match+0x286/0xa50 [ 493.813366][T13550] ? __pfx_xt_check_match+0x10/0x10 [ 493.813385][T13550] ? xt_find_match+0x1f6/0x290 [ 493.813406][T13550] ? xt_find_match+0x1f6/0x290 [ 493.813431][T13550] find_check_entry.constprop.0+0x34e/0xa20 [ 493.813460][T13550] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 493.813491][T13550] ? kfree+0x2f8/0x6e0 [ 493.813505][T13550] ? kasan_quarantine_put+0xa1/0x240 [ 493.813527][T13550] ? translate_table+0xc0e/0x17b0 [ 493.813545][T13550] ? xt_check_table_hooks+0x206/0x340 [ 493.813568][T13550] translate_table+0xd0b/0x17b0 [ 493.813603][T13550] ? __pfx_translate_table+0x10/0x10 [ 493.813631][T13550] translate_compat_table+0x1474/0x18d0 [ 493.813662][T13550] ? __pfx_translate_compat_table+0x10/0x10 [ 493.813698][T13550] compat_do_replace+0x272/0x520 [ 493.813719][T13550] ? __pfx_compat_do_replace+0x10/0x10 [ 493.813743][T13550] ? __local_bh_enable_ip+0xa4/0x120 [ 493.813777][T13550] ? bpf_lsm_capable+0x9/0x10 [ 493.813797][T13550] ? security_capable+0x7e/0x260 [ 493.813819][T13550] do_ip6t_set_ctl+0x5ed/0xbc0 [ 493.813837][T13550] ? find_held_lock+0x2b/0x80 [ 493.813860][T13550] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 493.813880][T13550] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 493.813903][T13550] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 493.813919][T13550] ? __mutex_lock+0x27b/0x1ca0 [ 493.813936][T13550] ? smc_setsockopt+0x100/0xa00 [ 493.813962][T13550] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 493.813984][T13550] nf_setsockopt+0x8d/0xf0 [ 493.814002][T13550] ipv6_setsockopt+0x135/0x170 [ 493.814026][T13550] tcp_setsockopt+0xa7/0x100 [ 493.814054][T13550] smc_setsockopt+0x1b6/0xa00 [ 493.814073][T13550] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 493.814104][T13550] ? __pfx_smc_setsockopt+0x10/0x10 [ 493.814126][T13550] ? aa_sock_opt_perm+0xfd/0x1b0 [ 493.814154][T13550] ? __pfx_smc_setsockopt+0x10/0x10 [ 493.814176][T13550] do_sock_setsockopt+0xf3/0x1d0 [ 493.814206][T13550] __sys_setsockopt+0x120/0x1a0 [ 493.814232][T13550] __ia32_sys_setsockopt+0xbc/0x160 [ 493.814250][T13550] ? __do_fast_syscall_32+0x9a/0x680 [ 493.814267][T13550] ? lockdep_hardirqs_on+0x7c/0x110 [ 493.814285][T13550] __do_fast_syscall_32+0xe8/0x680 [ 493.814301][T13550] do_fast_syscall_32+0x32/0x80 [ 493.814316][T13550] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 493.814337][T13550] RIP: 0023:0xf707d579 [ 493.814351][T13550] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 493.814369][T13550] RSP: 002b:00000000f546d55c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 493.814385][T13550] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 493.814395][T13550] RDX: 0000000000000040 RSI: 0000000080000fc0 RDI: 0000000000000364 [ 493.814407][T13550] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 493.814416][T13550] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 493.814425][T13550] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 493.814449][T13550] [ 493.814674][T13550] cannot load conntrack support for proto=10 [ 493.963584][ T5986] usb usb50-port1: attempt power cycle [ 494.035494][T13558] 9p: Bad value for 'rfdno' [ 494.432579][ T73] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 494.485048][T13561] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 494.487914][T13561] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 494.491423][T13561] vhci_hcd vhci_hcd.0: Device attached [ 494.504502][T13566] vhci_hcd: connection closed [ 494.506010][ T46] vhci_hcd vhci_hcd.3: stop threads [ 494.509982][ T46] vhci_hcd vhci_hcd.3: release socket [ 494.511964][ T46] vhci_hcd vhci_hcd.3: disconnect device [ 494.573209][ T5986] usb usb50-port1: unable to enumerate USB device [ 494.582551][ T73] usb 11-1: Using ep0 maxpacket: 8 [ 494.585637][ T73] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 494.588261][ T73] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 494.591395][ T73] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 494.594619][ T73] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 494.597830][ T73] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 494.602353][ T73] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 494.606678][ T73] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.830622][ T73] usb 11-1: GET_CAPABILITIES returned 0 [ 494.834813][ T73] usbtmc 11-1:16.0: can't read capabilities [ 495.038727][T13564] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2044'. [ 495.594073][T13578] syzkaller1: entered promiscuous mode [ 495.596325][T13578] syzkaller1: entered allmulticast mode [ 497.154408][T13599] random: crng reseeded on system resumption [ 497.498805][T13611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.501656][T13611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.518311][T13611] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2057'. [ 497.571616][T13616] netlink: 'syz.4.2060': attribute type 2 has an invalid length. [ 497.581283][T13616] @;: entered promiscuous mode [ 497.588745][T13618] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2059'. [ 497.591710][T13618] netlink: 'syz.3.2059': attribute type 7 has an invalid length. [ 497.594516][T13618] netlink: 'syz.3.2059': attribute type 8 has an invalid length. [ 497.596857][T13618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2059'. [ 498.566620][T13642] lo speed is unknown, defaulting to 1000 [ 498.570181][T13642] lo speed is unknown, defaulting to 1000 [ 498.644880][T13647] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2068'. [ 498.650762][T13650] syzkaller1: entered promiscuous mode [ 498.653787][T13650] syzkaller1: entered allmulticast mode [ 498.670839][T13647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.674685][T13647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.140585][T13659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.146150][T13659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.179099][T13659] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2072'. [ 500.140653][T13670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 500.306107][T13684] syzkaller0: entered promiscuous mode [ 500.308554][T13684] syzkaller0: entered allmulticast mode [ 500.317266][T13684] net_ratelimit: 18 callbacks suppressed [ 500.317283][T13684] 0: reclassify loop, rule prio 0, protocol 800 [ 500.601002][T13694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.607156][T13694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.637635][T13694] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2082'. [ 500.656032][T13697] syzkaller1: entered promiscuous mode [ 500.658470][T13697] syzkaller1: entered allmulticast mode [ 501.210706][T13705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.213636][T13705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.804776][T13713] syzkaller0: entered promiscuous mode [ 501.807149][T13713] syzkaller0: entered allmulticast mode [ 501.811527][T13713] FAULT_INJECTION: forcing a failure. [ 501.811527][T13713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.817138][T13713] CPU: 3 UID: 0 PID: 13713 Comm: syz.4.2088 Tainted: G L syzkaller #0 PREEMPT(full) [ 501.817163][T13713] Tainted: [L]=SOFTLOCKUP [ 501.817169][T13713] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 501.817180][T13713] Call Trace: [ 501.817186][T13713] [ 501.817193][T13713] dump_stack_lvl+0x16c/0x1f0 [ 501.817225][T13713] should_fail_ex+0x512/0x640 [ 501.817251][T13713] _copy_from_iter+0x43b/0x16c0 [ 501.817277][T13713] ? __pfx__copy_from_iter+0x10/0x10 [ 501.817305][T13713] ? _copy_from_iter+0x161/0x16c0 [ 501.817334][T13713] skb_copy_datagram_from_iter+0x124/0x740 [ 501.817356][T13713] ? dev_get_by_index+0x17c/0x380 [ 501.817385][T13713] packet_sendmsg+0x2221/0x54a0 [ 501.817418][T13713] ? __lock_acquire+0x436/0x2890 [ 501.817441][T13713] ? aa_sk_perm+0x2f2/0xae0 [ 501.817465][T13713] ? __pfx_packet_sendmsg+0x10/0x10 [ 501.817483][T13713] ? __pfx_aa_sk_perm+0x10/0x10 [ 501.817510][T13713] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 501.817534][T13713] ____sys_sendmsg+0xa5d/0xc30 [ 501.817552][T13713] ? __pfx_____sys_sendmsg+0x10/0x10 [ 501.817570][T13713] ? get_compat_msghdr+0x11a/0x170 [ 501.817603][T13713] ___sys_sendmsg+0x134/0x1d0 [ 501.817628][T13713] ? __pfx____sys_sendmsg+0x10/0x10 [ 501.817662][T13713] ? find_held_lock+0x2b/0x80 [ 501.817698][T13713] __sys_sendmsg+0x16d/0x220 [ 501.817721][T13713] ? __pfx___sys_sendmsg+0x10/0x10 [ 501.817754][T13713] ? do_user_addr_fault+0x843/0x1370 [ 501.817778][T13713] __do_fast_syscall_32+0xe8/0x680 [ 501.817798][T13713] do_fast_syscall_32+0x32/0x80 [ 501.817816][T13713] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 501.817836][T13713] RIP: 0023:0xf7f95579 [ 501.817851][T13713] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 501.817866][T13713] RSP: 002b:00000000f548655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 501.817883][T13713] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800000c0 [ 501.817893][T13713] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 501.817903][T13713] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 501.817913][T13713] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 501.817923][T13713] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 501.817946][T13713] [ 501.987927][T13719] xt_ecn: cannot match TCP bits for non-tcp packets [ 503.110629][T13741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.123930][T13741] Bluetooth: MGMT ver 1.23 [ 503.201846][T13748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2099'. [ 503.223330][T13745] xt_CT: No such helper "snmp" [ 503.799947][T13750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.809030][T13750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.922340][T13738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.240838][T13750] usbtmc 11-1:16.0: send_request_dev_dep_msg_in returned -90 [ 504.920368][T13764] nilfs2: Unknown parameter 'discard*T#nvbIkݻBk/ [ 504.920368][T13764] V1bBk~}nilfs2' [ 505.046469][ T40] audit: type=1326 audit(1768739172.756:4683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13755 comm="syz.4.2102" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 505.054802][ T40] audit: type=1326 audit(1768739172.756:4684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13755 comm="syz.4.2102" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 505.062573][ T40] audit: type=1326 audit(1768739172.756:4685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13755 comm="syz.4.2102" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 505.069287][ T40] audit: type=1326 audit(1768739172.756:4686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13755 comm="syz.4.2102" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 505.083548][ T40] audit: type=1326 audit(1768739172.756:4687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13755 comm="syz.4.2102" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 505.092552][ T40] audit: type=1326 audit(1768739172.766:4688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13755 comm="syz.4.2102" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 505.098996][ T40] audit: type=1326 audit(1768739172.766:4689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13755 comm="syz.4.2102" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 505.105191][ T40] audit: type=1326 audit(1768739172.766:4690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13755 comm="syz.4.2102" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 505.112707][ T40] audit: type=1326 audit(1768739172.766:4691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13755 comm="syz.4.2102" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 505.121349][ T40] audit: type=1326 audit(1768739172.776:4692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13755 comm="syz.4.2102" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 505.135703][T13758] pim6reg: entered allmulticast mode [ 505.152488][ T5961] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 505.156057][ T5961] Bluetooth: hci2: command 0x0406 tx timeout [ 506.045002][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.048838][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.067308][T13775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.076128][T13775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.543768][T13786] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2109'. [ 507.063728][T13790] FAULT_INJECTION: forcing a failure. [ 507.063728][T13790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 507.065286][T13790] [ 507.065293][T13790] ====================================================== [ 507.065297][T13790] WARNING: possible circular locking dependency detected [ 507.065303][T13790] syzkaller #0 Tainted: G L [ 507.065309][T13790] ------------------------------------------------------ [ 507.065313][T13790] syz.4.2110/13790 is trying to acquire lock: [ 507.065318][T13790] ffffffff8e2d6ac0 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 507.065347][T13790] [ 507.065347][T13790] but task is already holding lock: [ 507.065350][T13790] ffff88802b23add8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 507.065374][T13790] [ 507.065374][T13790] which lock already depends on the new lock. [ 507.065374][T13790] [ 507.065377][T13790] [ 507.065377][T13790] the existing dependency chain (in reverse order) is: [ 507.065380][T13790] [ 507.065380][T13790] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 507.065393][T13790] _raw_spin_lock_nested+0x31/0x40 [ 507.065408][T13790] raw_spin_rq_lock_nested+0x29/0x130 [ 507.065420][T13790] task_rq_lock+0xcf/0x490 [ 507.065432][T13790] cgroup_move_task+0x81/0x2a0 [ 507.065450][T13790] css_set_move_task+0x288/0x5f0 [ 507.065464][T13790] cgroup_post_fork+0x201/0x9e0 [ 507.065479][T13790] copy_process+0x56b6/0x7430 [ 507.065493][T13790] kernel_clone+0xfc/0x910 [ 507.065506][T13790] user_mode_thread+0xc8/0x110 [ 507.065520][T13790] rest_init+0x23/0x2b0 [ 507.065531][T13790] start_kernel+0x3ef/0x4d0 [ 507.065555][T13790] x86_64_start_reservations+0x18/0x30 [ 507.065566][T13790] x86_64_start_kernel+0x130/0x190 [ 507.065577][T13790] common_startup_64+0x13e/0x148 [ 507.065589][T13790] [ 507.065589][T13790] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 507.065601][T13790] _raw_spin_lock_irqsave+0x3a/0x60 [ 507.065615][T13790] try_to_wake_up+0xb7/0x1860 [ 507.065627][T13790] __wake_up_common+0x135/0x1f0 [ 507.065635][T13790] __wake_up+0x31/0x60 [ 507.065648][T13790] tty_port_default_wakeup+0x4d/0x60 [ 507.065665][T13790] serial8250_tx_chars+0x68e/0x860 [ 507.065680][T13790] serial8250_handle_irq+0x761/0xcb0 [ 507.065690][T13790] serial8250_default_handle_irq+0x9e/0x270 [ 507.065703][T13790] serial8250_interrupt+0xf8/0x1d0 [ 507.065716][T13790] __handle_irq_event_percpu+0x236/0x890 [ 507.065734][T13790] handle_irq_event+0xab/0x1e0 [ 507.065747][T13790] handle_edge_irq+0x3ca/0x9e0 [ 507.065758][T13790] __common_interrupt+0xd0/0x2f0 [ 507.065773][T13790] common_interrupt+0xba/0xe0 [ 507.065785][T13790] asm_common_interrupt+0x26/0x40 [ 507.065795][T13790] pv_native_safe_halt+0xf/0x20 [ 507.065810][T13790] default_idle+0x13/0x20 [ 507.065819][T13790] default_idle_call+0x6c/0xb0 [ 507.065832][T13790] do_idle+0x38d/0x510 [ 507.065849][T13790] cpu_startup_entry+0x4f/0x60 [ 507.065865][T13790] start_secondary+0x21d/0x2d0 [ 507.065874][T13790] common_startup_64+0x13e/0x148 [ 507.065884][T13790] [ 507.065884][T13790] -> #2 (&tty->write_wait){-...}-{3:3}: [ 507.065897][T13790] _raw_spin_lock_irqsave+0x3a/0x60 [ 507.065911][T13790] __wake_up+0x1c/0x60 [ 507.065923][T13790] tty_port_default_wakeup+0x4d/0x60 [ 507.065938][T13790] serial8250_tx_chars+0x68e/0x860 [ 507.065953][T13790] __start_tx+0x3df/0x490 [ 507.065967][T13790] serial8250_start_tx+0x368/0x530 [ 507.065981][T13790] __uart_start+0x295/0x500 [ 507.065993][T13790] uart_write+0x218/0xb30 [ 507.066007][T13790] n_tty_write+0x434/0x1280 [ 507.066016][T13790] file_tty_write.constprop.0+0x503/0x9b0 [ 507.066031][T13790] redirected_tty_write+0xd4/0x120 [ 507.066045][T13790] vfs_write+0x7d3/0x11d0 [ 507.066058][T13790] ksys_write+0x12a/0x250 [ 507.066071][T13790] do_syscall_64+0xcd/0xf80 [ 507.066080][T13790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.066089][T13790] [ 507.066089][T13790] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 507.066101][T13790] _raw_spin_lock_irqsave+0x3a/0x60 [ 507.066115][T13790] serial8250_console_write+0x181/0x1890 [ 507.066124][T13790] console_flush_one_record+0x796/0xc60 [ 507.066137][T13790] console_unlock+0xef/0x240 [ 507.066148][T13790] vprintk_emit+0x407/0x6b0 [ 507.066160][T13790] _printk+0xc7/0x100 [ 507.066168][T13790] register_console+0x823/0x1210 [ 507.066181][T13790] univ8250_console_init+0x5f/0x90 [ 507.066195][T13790] console_init+0x152/0x600 [ 507.066206][T13790] start_kernel+0x298/0x4d0 [ 507.066216][T13790] x86_64_start_reservations+0x18/0x30 [ 507.066228][T13790] x86_64_start_kernel+0x130/0x190 [ 507.066238][T13790] common_startup_64+0x13e/0x148 [ 507.066249][T13790] [ 507.066249][T13790] -> #0 (console_owner){-.-.}-{0:0}: [ 507.066265][T13790] __lock_acquire+0x1669/0x2890 [ 507.066275][T13790] lock_acquire+0x179/0x330 [ 507.066283][T13790] console_lock_spinning_enable+0x72/0x80 [ 507.066294][T13790] console_flush_one_record+0x73f/0xc60 [ 507.066306][T13790] console_unlock+0xef/0x240 [ 507.066318][T13790] vprintk_emit+0x407/0x6b0 [ 507.066330][T13790] _printk+0xc7/0x100 [ 507.066338][T13790] should_fail_ex+0x4e7/0x640 [ 507.066349][T13790] strncpy_from_user+0x3b/0x2e0 [ 507.066359][T13790] strncpy_from_user_nofault+0x7f/0x180 [ 507.066371][T13790] bpf_probe_read_compat_str+0xe8/0x180 [ 507.066385][T13790] bpf_prog_573c5a647519ba93+0x3e/0x44 [ 507.066393][T13790] bpf_trace_run4+0x252/0x5e0 [ 507.066407][T13790] __bpf_trace_sched_switch+0x145/0x190 [ 507.066419][T13790] __traceiter_sched_switch+0x6f/0xc0 [ 507.066430][T13790] __schedule+0x1a41/0x6150 [ 507.066444][T13790] schedule+0xe7/0x3a0 [ 507.066457][T13790] exit_to_user_mode_loop+0x72/0x540 [ 507.066468][T13790] __do_fast_syscall_32+0x4a4/0x680 [ 507.066477][T13790] do_fast_syscall_32+0x32/0x80 [ 507.066486][T13790] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 507.066498][T13790] [ 507.066498][T13790] other info that might help us debug this: [ 507.066498][T13790] [ 507.066501][T13790] Chain exists of: [ 507.066501][T13790] console_owner --> &p->pi_lock --> &rq->__lock [ 507.066501][T13790] [ 507.066516][T13790] Possible unsafe locking scenario: [ 507.066516][T13790] [ 507.066519][T13790] CPU0 CPU1 [ 507.066522][T13790] ---- ---- [ 507.066524][T13790] lock(&rq->__lock); [ 507.066530][T13790] lock(&p->pi_lock); [ 507.066537][T13790] lock(&rq->__lock); [ 507.066543][T13790] lock(console_owner); [ 507.066549][T13790] [ 507.066549][T13790] *** DEADLOCK *** [ 507.066549][T13790] [ 507.066551][T13790] 4 locks held by syz.4.2110/13790: [ 507.066557][T13790] #0: ffff88802b23add8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 507.066582][T13790] #1: ffffffff8e3c9520 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x1d5/0x5e0 [ 507.066608][T13790] #2: ffffffff8e3b6f00 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 507.066629][T13790] #3: ffffffff8e3b6f78 (console_srcu){....}-{0:0}, at: console_flush_one_record+0x103/0xc60 [ 507.066660][T13790] [ 507.066660][T13790] stack backtrace: [ 507.066667][T13790] CPU: 0 UID: 0 PID: 13790 Comm: syz.4.2110 Tainted: G L syzkaller #0 PREEMPT(full) [ 507.066681][T13790] Tainted: [L]=SOFTLOCKUP [ 507.066685][T13790] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 507.066691][T13790] Call Trace: [ 507.066695][T13790] [ 507.066699][T13790] dump_stack_lvl+0x116/0x1f0 [ 507.066716][T13790] print_circular_bug+0x275/0x340 [ 507.066732][T13790] check_noncircular+0x146/0x160 [ 507.066756][T13790] __lock_acquire+0x1669/0x2890 [ 507.066772][T13790] lock_acquire+0x179/0x330 [ 507.066786][T13790] ? console_lock_spinning_enable+0x61/0x80 [ 507.066806][T13790] ? console_lock_spinning_enable+0x4a/0x80 [ 507.066827][T13790] console_lock_spinning_enable+0x72/0x80 [ 507.066846][T13790] ? console_lock_spinning_enable+0x61/0x80 [ 507.066864][T13790] console_flush_one_record+0x73f/0xc60 [ 507.066884][T13790] ? __pfx_console_flush_one_record+0x10/0x10 [ 507.066897][T13790] ? __lock_acquire+0x436/0x2890 [ 507.066908][T13790] ? is_printk_cpu_sync_owner+0x32/0x40 [ 507.066923][T13790] console_unlock+0xef/0x240 [ 507.066936][T13790] ? __pfx_console_unlock+0x10/0x10 [ 507.066949][T13790] ? do_raw_spin_unlock+0x100/0x230 [ 507.066961][T13790] ? _printk+0xc7/0x100 [ 507.066970][T13790] ? __down_trylock_console_sem+0xb0/0x140 [ 507.066982][T13790] vprintk_emit+0x407/0x6b0 [ 507.066995][T13790] ? __pfx_vprintk_emit+0x10/0x10 [ 507.067008][T13790] ? sched_clock+0x38/0x60 [ 507.067023][T13790] ? sched_clock_cpu+0x6c/0x530 [ 507.067039][T13790] _printk+0xc7/0x100 [ 507.067048][T13790] ? __pfx__printk+0x10/0x10 [ 507.067059][T13790] ? __pfx____ratelimit+0x10/0x10 [ 507.067073][T13790] ? __lock_acquire+0x436/0x2890 [ 507.067083][T13790] should_fail_ex+0x4e7/0x640 [ 507.067095][T13790] strncpy_from_user+0x3b/0x2e0 [ 507.067106][T13790] strncpy_from_user_nofault+0x7f/0x180 [ 507.067118][T13790] bpf_probe_read_compat_str+0xe8/0x180 [ 507.067133][T13790] bpf_prog_573c5a647519ba93+0x3e/0x44 [ 507.067142][T13790] bpf_trace_run4+0x252/0x5e0 [ 507.067157][T13790] ? __pfx_bpf_trace_run4+0x10/0x10 [ 507.067203][T13790] ? __lock_acquire+0x436/0x2890 [ 507.067212][T13790] ? __lock_acquire+0x436/0x2890 [ 507.067221][T13790] __bpf_trace_sched_switch+0x145/0x190 [ 507.067235][T13790] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 507.067248][T13790] ? psi_group_change+0x4f0/0xbe0 [ 507.067262][T13790] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 507.067281][T13790] __traceiter_sched_switch+0x6f/0xc0 [ 507.067293][T13790] __schedule+0x1a41/0x6150 [ 507.067310][T13790] ? __fget_files+0x20e/0x3c0 [ 507.067325][T13790] ? __pfx___schedule+0x10/0x10 [ 507.067340][T13790] ? fput+0x70/0xf0 [ 507.067350][T13790] schedule+0xe7/0x3a0 [ 507.067364][T13790] exit_to_user_mode_loop+0x72/0x540 [ 507.067377][T13790] __do_fast_syscall_32+0x4a4/0x680 [ 507.067388][T13790] do_fast_syscall_32+0x32/0x80 [ 507.067398][T13790] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 507.067411][T13790] RIP: 0023:0xf7f95579 [ 507.067419][T13790] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 507.067429][T13790] RSP: 002b:00000000f5465590 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 507.067439][T13790] RAX: 0000000000000001 RBX: 000000000000000d RCX: 00000000f5465610 [ 507.067445][T13790] RDX: 0000000000000001 RSI: 00000000f7426ff4 RDI: 0000000000000000 [ 507.067451][T13790] RBP: 00000000f7455018 R08: 0000000000000000 R09: 0000000000000000 [ 507.067457][T13790] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 507.067463][T13790] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 507.067472][T13790] [ 507.458956][T13790] CPU: 0 UID: 0 PID: 13790 Comm: syz.4.2110 Tainted: G L syzkaller #0 PREEMPT(full) [ 507.458984][T13790] Tainted: [L]=SOFTLOCKUP [ 507.458991][T13790] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 507.459002][T13790] Call Trace: [ 507.459011][T13790] [ 507.459020][T13790] dump_stack_lvl+0x116/0x1f0 [ 507.459053][T13790] should_fail_ex+0x512/0x640 [ 507.459076][T13790] strncpy_from_user+0x3b/0x2e0 [ 507.459094][T13790] strncpy_from_user_nofault+0x7f/0x180 [ 507.459116][T13790] bpf_probe_read_compat_str+0xe8/0x180 [ 507.459142][T13790] bpf_prog_573c5a647519ba93+0x3e/0x44 [ 507.459157][T13790] bpf_trace_run4+0x252/0x5e0 [ 507.459203][T13790] ? __pfx_bpf_trace_run4+0x10/0x10 [ 507.459228][T13790] ? __lock_acquire+0x436/0x2890 [ 507.459243][T13790] ? __lock_acquire+0x436/0x2890 [ 507.459259][T13790] __bpf_trace_sched_switch+0x145/0x190 [ 507.459282][T13790] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 507.459303][T13790] ? psi_group_change+0x4f0/0xbe0 [ 507.459320][T13790] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 507.459349][T13790] __traceiter_sched_switch+0x6f/0xc0 [ 507.459370][T13790] __schedule+0x1a41/0x6150 [ 507.459398][T13790] ? __fget_files+0x20e/0x3c0 [ 507.459427][T13790] ? __pfx___schedule+0x10/0x10 [ 507.459451][T13790] ? fput+0x70/0xf0 [ 507.459468][T13790] schedule+0xe7/0x3a0 [ 507.459490][T13790] exit_to_user_mode_loop+0x72/0x540 [ 507.459512][T13790] __do_fast_syscall_32+0x4a4/0x680 [ 507.459530][T13790] do_fast_syscall_32+0x32/0x80 [ 507.459547][T13790] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 507.459567][T13790] RIP: 0023:0xf7f95579 [ 507.459581][T13790] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 507.459597][T13790] RSP: 002b:00000000f5465590 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 507.459613][T13790] RAX: 0000000000000001 RBX: 000000000000000d RCX: 00000000f5465610 [ 507.459624][T13790] RDX: 0000000000000001 RSI: 00000000f7426ff4 RDI: 0000000000000000 [ 507.459634][T13790] RBP: 00000000f7455018 R08: 0000000000000000 R09: 0000000000000000 [ 507.459644][T13790] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 507.459654][T13790] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 507.459670][T13790] [ 513.232740][ T5951] Bluetooth: hci4: command 0x0406 tx timeout