last executing test programs: 1m39.432494683s ago: executing program 0 (id=4543): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) (async) close(r2) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) close(r0) mknodat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x81c0, 0x0) fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) (async) r3 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x1, 0x80) (async) r4 = fsmount(r3, 0x1, 0x80) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r5, 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWSET={0xa4, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x60, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x24, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xec}}, 0x20050800) (async) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWSET={0xa4, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x60, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x24, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xec}}, 0x20050800) dup(r6) (async) r8 = dup(r6) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) 1m39.202226267s ago: executing program 0 (id=4544): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f000000a280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x18, 0x5a, 0x301, 0x80000003, 0x25dfdbfc, {0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x2004e080) (fail_nth: 6) 1m39.069503091s ago: executing program 0 (id=4545): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @func={0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x50}, 0x20) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.io_service_time\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGETKEYCODE(r4, 0x4b4c, &(0x7f0000000240)={0x7ff, 0x3}) r5 = dup(r3) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, 0x0, &(0x7f00000001c0)) write$6lowpan_enable(r5, 0x0, 0x0) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) 1m37.552593132s ago: executing program 0 (id=4563): modify_ldt$write2(0x11, &(0x7f0000000040)={0x4001, 0x100000, 0x1000}, 0x10) modify_ldt$read(0x0, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000000)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000180)="aa061e648c1375c9d572160f5dae306158436b0fab81413dd8c043da327c50ea695993b01bbe5f3d3f501e041653697da5d2131e56b9966b55c85361b27b8c1184175be866b212d071332ad6b7d466ab6e35b983b2be298e68e6de390073bfc6f0279a35917fcd4cb78a650a2ee95f02f00837a04f287c8a8383c39ebdcab3026d3de9c3db6bf878d3995a4d38c74f1f4e8aafaf200e81d5b88951af64cf6152e1158eded8b435055ad9b57e445505ab01e72aa67eb1f1e12fe52bea36d9ee745d219b54dadda1fcaece4b00b3c1319dd81eea0729481f86fab24cd0095bc0f6d726052ddf3f5d87258df76c917d806486a05e09", 0xf4}, {&(0x7f0000000280)="c9d0b0a9fb41ab09e94ad874662cd98b993962c8f1b486a3860f2364fa0aac2c4dd822f4691b1c965219bee71d31c734b7f8c0ff2a5ec700508db560e89265615d5de8894e99517a13a4961fe1fe299e037141a9cc8ea6bf92d3867d50ea45d3054fabfb37061cf98cb5b1a9c1e87b4c2a23e3155411bc86d10ba37dde0624fcac2639b29746a21059836e73eef9ea9874b90b7fb6935d2a01168dddee1cdcc15d3d1f7857", 0xa5}, {&(0x7f0000000600)="8063877fce2e4427", 0x8}, {&(0x7f0000000640)="7019ea1b91154a820fe0a82372b7edde1b162bcf8fed226111b12ee235fc2835105751f5013e432f41bae38f9b8ccd32c693bd0b450a509fe4a46621f523a5218d2fd4af31c0c74cf490299709c060cb3c7ae9006b4696858fd3b75bf4bdf1b30dea3e92d7228fc105c4cfde69a1e22f6023c3d01f0061bfef3293268fc8a52a5d81d8dd09ec50dbe7e7c2d924cc6b6cbe4c7c1178d0582eb9c3b3428420053e7f154ed7fc27b510603b7ccb40603df5d3b921b79b6a98f2eb0963600ea97766bb59e6377e51cf20c154432ab825ea67bd48d162a7ef2b9e54999d66613bfd453dc8ebb01fb52b968dcaa88f", 0xec}, {&(0x7f0000000740)="0c6d31321f6faf19717644a02eac339067f62f2c5d4a77b61c0a328c58d28f5dce25708daae1823ce5b8a15f7570294253e84a008ad180f65a0160d9aa", 0x3d}], 0x5, &(0x7f00000007c0)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x2}}], 0x10}}, {{&(0x7f0000000800)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000840)="f6aeacf6d0f1fe350213d6562acc455f9c6499154981cfefab6d2ec02b0d85a83d23a31c9e43c42c0635432b16e0a270db17702d2f14e4f56ef71f4cc7197ab2ad8a7af2fb66dc99d4e1135609c6272060495963d84fcafd75fe71b7380888590c55d0ae3ac1c057c046002a768c1407657ac306e7873fc53daa8dfcedf5b690aee7cb6ccfd6757d8a9710b63ef31c77e1b0e5ea911c0fd1b234a58b87e6feffc3be248693d71a65c3c44c4b778cf44692c82fe6d9fbd8f2b2423596c260897434fcde8b9ffd4c26e9ff295fdef3add982f6737323372d137cec26bac4bec65b229762f4ea2fed10", 0xe8}, {&(0x7f0000000940)="6949fb4a721f26c4ffa3672b4c060efc581c0ff9e639448d9e7f779e648d8e1a13ce7c48da5ee79a1d10bb0c904b4d95e636d2f0b7178a42b42c75505edccece3f725aefbba56659b374ef39c56b4a6585e5f9703dfca84a36c1ec2029ffbe9603f12d3a70d552ac0822cf150d5a9c2d07e6335e31e0c01596ddc25036430b84008aef647c17fd08dd9978539879500806ee456b7da947a92329aa575ec69f697d2f801c4658531128eda8b47f69db73f89e01cc40434c1da4370e2d88a20b635f4f3a29831fc9fda39ce1ae168d79d5ac86f45735a6d0bd02a0fab2745c4a3520a026c1971eab629ae48535ca78b9", 0xef}, {&(0x7f0000000a40)="211d66fe6d5d30bcf499d503a78a7a53612428961fdca0bdd5df0dc60feb7c33f18aa05f5c333131d5879bfb1f80729cbd3ea51ac9ab84ceabd5e8db43ab25455bd41b6abcb6bf8e9e65ee1387324e87954860e15add2bfe2cff22dfd329d09f4c045c7425522c8196f33134e67758a20ad477ab22d0ca351cf94bbd93bfe408a415311f82497cf92005182030f258d32c93fb9579d65f17acb1fca472ccaf0d1098a1a0ba1aa6215da55acdbd7b1ee790b64695", 0xb4}, {&(0x7f0000000b00)="380da0c556e6eb3196aa32c9d1d3460c8fca4189607c317cbec5212d8a9daff6f4010ba38713c29b68d89335d8ef7838645c396e5d8ea34b389afcbcaf6ad7a489e0c0f01eea47221657b76f7ee91832705a02bf62896f5eddd198fe17e458ef4dccc64b09a93311615260e8e7bba67077d73ba3d1125a630828381d688e430c2c09c739dd31b643d3263172a2f8554b811ad2bfe805a38919f3345712dd30d9f7bcb2e1da3a42f70d4ef06af8444fc85bec3de277ce3d73cbe9be24823824f694ade3fa40313f94689bf10dbc39c04f42d48086dad7a78d", 0xd8}], 0x4}}], 0x2, 0x44008894) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRES8=r1, @ANYRESDEC=r1], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f00000000c0)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r5, &(0x7f0000000180)={0x10, 0x17, 0xfffd, {0x7, './file0'}}, 0x10) open(&(0x7f0000000140)='./file0\x00', 0x33f, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r2], 0x6c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feba52718001ca6bee058605ddeee2691e307df7d0000000011"], 0x0, 0x1a}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="15000000080000000400000000001a0000000000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000000100"/28], 0x48) migrate_pages(r2, 0xa94b, &(0x7f0000000b80), &(0x7f0000000bc0)=0x27e0407a) syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) 1m37.164516894s ago: executing program 0 (id=4569): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x28}}, 0x50) recvmmsg(r4, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002042, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0xfffffffffffffed1, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="100000000100001801000000"], 0x10, 0x40}}], 0x1, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x39011, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0xffff, 0x0, @loopback}]}, &(0x7f0000000240)=0xc) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x8070bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) 1m36.683355677s ago: executing program 0 (id=4576): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2000000, 0xe2001) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x41e43, 0x8) (fail_nth: 6) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0xfffffffffffffff8]}}) 1m36.565340017s ago: executing program 32 (id=4576): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2000000, 0xe2001) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x41e43, 0x8) (fail_nth: 6) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0xfffffffffffffff8]}}) 7.267132297s ago: executing program 1 (id=4973): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) setpgid(0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x3}, 0xffffffc9}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) getdents(r1, 0x0, 0xfffffffffffffe25) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x1700, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0xfffd, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast}}}}) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r7, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000080)=@x86={0x1, 0x0, 0x2, 0x0, 0x7, 0x1, 0x2, 0xb, 0x0, 0x8, 0x7, 0x7, 0x0, 0xca, 0xff, 0x4, 0x0, 0x2, 0x6, '\x00', 0x0, 0x1}) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) mount_setattr(r2, &(0x7f0000019080)='./file0\x00', 0x0, &(0x7f00000190c0)={0x100002, 0x40, 0x20000, {r1}}, 0x20) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0xeeee0000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000c40)) 6.102978824s ago: executing program 1 (id=4979): socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24000815}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ffffffff000000000300000000000000000000000000000203000000000000000000000902"], 0x0, 0x4a}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0xbe, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "6fdfa0d2001efbb3e29a4ac275ca11b984ff5def6ed2e4ea9bc0eabdd34c732b", "df23520b57e4c98679c7795a27c7bf3e7d776b600ba8d82d6ba417e219edd86fb708441efcf75fe803412dae374281c2", "5df814aa2e34e4f8a759805b993e2d69a8f476de686861a9850edbe3", {"2c1d21e1830800000000000000963b0c", "e40ca7e0a7b4bbc4bc9720c876a57954"}}}}}}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000280)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000140)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r4, 0x0) ioctl$TCSETS(r3, 0x89f0, &(0x7f0000000100)={0xfffffffc, 0x0, 0xfffffffc, 0x802, 0x13, "5dee0000005940000000000f00"}) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x111}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000fee000/0x12000)=nil, 0x12000}, 0x1}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f00000003c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x4000, 0x1}) sched_setaffinity(r0, 0x8, &(0x7f0000000300)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) sendfile(r6, r6, 0x0, 0x40008) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cd0606000000000000006b943e8bb0ac60081e33dff8150835f7519d5f73b4f5d80e40000900ffff000000005d092392f816d0fdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 4.783111709s ago: executing program 1 (id=4985): r0 = socket$inet6(0xa, 0xa, 0x400000) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x2, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000080), 0x4) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0xfd9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_io_uring_setup(0x7fae, &(0x7f0000000440)={0x0, 0x911f, 0x1, 0x2, 0x115}, &(0x7f0000000080), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_FILES2(r3, 0xd, &(0x7f0000000800)={0x1, 0x0, 0x0, &(0x7f0000000700)=[{0x0}], &(0x7f00000007c0)=[0x749]}, 0x20) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2e}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004080) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='wchan\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r6, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xa}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x24}}, 0x0) 3.765732649s ago: executing program 2 (id=4987): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) setpgid(0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x3}, 0xffffffc9}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) getdents(r1, 0x0, 0xfffffffffffffe25) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x1700, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0xfffd, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast}}}}) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r7, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000080)=@x86={0x1, 0x0, 0x2, 0x0, 0x7, 0x1, 0x2, 0xb, 0x0, 0x8, 0x7, 0x7, 0x0, 0xca, 0xff, 0x4, 0x0, 0x2, 0x6, '\x00', 0x0, 0x1}) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) mount_setattr(r2, &(0x7f0000019080)='./file0\x00', 0x0, &(0x7f00000190c0)={0x100002, 0x40, 0x20000, {r1}}, 0x20) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0xeeee0000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000c40)) 3.698569268s ago: executing program 1 (id=4989): syz_open_dev$video(&(0x7f0000000040), 0x101, 0xab02) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0xdc1b, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000280)) linkat(r3, &(0x7f00000001c0)='./file1\x00', r3, &(0x7f0000000240)='./bus\x00', 0x1000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) close_range(r4, r3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r5}, 0x10) unshare(0x2c020400) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)=@newtclass={0x60, 0x28, 0x10, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0xfff3}, {0x2, 0x3}, {0xffe0, 0x1}}, [@tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x8, 0x12}}, @tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x1, 0x20}}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_sfb={0x8}]}, 0x60}}, 0x0) ioprio_set$pid(0x2, 0x0, 0x4004) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_emit_ethernet(0xcd, 0x0, 0x0) msgget$private(0x0, 0x722) msgrcv(0x0, &(0x7f00000004c0)={0x0, ""/4}, 0x2000, 0xffffff7f00000000, 0x3000) r6 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10, 0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56e, 0xfc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x19, 0x40, 0x7f, [{{0x9, 0x4, 0x0, 0x80, 0x1, 0x3, 0x1, 0x1, 0x1, {0x9, 0x21, 0xff21, 0x1, 0x1, {0x22, 0x50f}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xb, 0x0, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x2, 0x0, 0x32}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x8, 0x4, 0x6, 0x20, 0xd}, 0x26, &(0x7f0000000180)={0x5, 0xf, 0x26, 0x3, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x8c, 0x40, 0x400}, @ss_container_id={0x14, 0x10, 0x4, 0x39, "ee5490a75f3ab7d6e6c268a2342d82e5"}]}}) r7 = fsopen(&(0x7f0000000380)='overlay\x00', 0x1) write(r7, &(0x7f00000003c0)="b0d54c2101ddda616163fffb2ece99e522cf5ab340b2ec3da224c19f87c3101439e1e3d2c265b96c520b1aae4d57395f3b7c4851707a857eccfcd673f3a7af0aef0d977c16defcedbfa14c4f62a56dd7eb87adbe8e6a8e9a919dd6c67b88d60ef7a098730efe48b2520d98caa8d1b00f83c5371cad8a62c0880d713f52078b05e419cd7690787706018fbed01c71c894359100e907f18609915ad0861a36ed9739d0098f22c77fd8f5c351", 0xab) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10) open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e61e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.905677492s ago: executing program 4 (id=4994): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000440)='syzkaller\x00'}, 0x94) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) bind$ax25(r1, &(0x7f0000000380)={{0x3, @default, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}, 0x48) r2 = dup(r1) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88020}, 0x80) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r4 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x8a102) r5 = openat$dsp1(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x7) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="9e36d448b388dd965f7a3312779a", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r10, 0x84, 0x72, &(0x7f0000000180)={r11, 0xfffff789, 0x10}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000010180)={r11, 0xe4}, &(0x7f00000101c0)=0xc) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000080)='macsec0\x00', 0x10) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000140)=0x12) close(r4) 2.802980945s ago: executing program 4 (id=4995): openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000100)={'syz1\x00', {0x0, 0x5df8}, 0x53, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfff, 0xfffffff8, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xd283], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x40000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x2, 0x0, 0x18f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3e82, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8000, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) r3 = syz_open_dev$sndpcmp(&(0x7f0000000400), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(r3, 0x80044121, 0x0) syz_io_uring_setup(0x1e1e, 0x0, 0x0, &(0x7f0000000000)) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)={0x0, 0x0, 0x13}, 0x18) ioctl$FS_IOC_SETFLAGS(r4, 0xc0189436, &(0x7f0000000140)) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) 2.802596018s ago: executing program 2 (id=4996): socket(0x2a, 0xa, 0x6e2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x400, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0xc}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c891}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) setresuid(0xee01, 0xee01, 0xee00) r2 = msgget$private(0x0, 0x100) msgctl$IPC_SET(r2, 0x1, &(0x7f0000002880)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x7}, 0x0, 0x0, 0x1, 0x2, 0x10001, 0x4e, 0xffffffffffffffca, 0x8, 0x8580, 0x3, 0x0, 0xffffffffffffffff}) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000800000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000009500000047b4c92adc1b13dff256e5fa77413c365463f3d58cce6c000ab7eb2f711dd74ce14bca56e5"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$6lowpan_enable(0xffffff9c, &(0x7f0000000bc0), 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000040)="cb", 0xfffffdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYRES16=0x0], &(0x7f0000000240)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 2.564522357s ago: executing program 3 (id=4997): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) (async) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x6e) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) syz_open_dev$cec(&(0x7f00000001c0), 0x0, 0xd59002) (async) r3 = userfaultfd(0x801) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x3c32}) io_setup(0x9, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (async) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="340000043e000701feffffff00000000017c0000040042800c00018006000600800a0000100002800c0014800800068004008d00"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) clock_adjtime(0x0, &(0x7f00000006c0)={0x7fff, 0x1000000007fff, 0x0, 0x0, 0x10000000000000, 0x2c43, 0xfffffffffffffffa, 0x2, 0x0, 0x300, 0x0, 0x2902, 0x20, 0x100000001, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x5, 0x6, 0x0, 0x80}) 2.479407748s ago: executing program 2 (id=4998): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x6}, 0x94) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x28, r1, 0xe6e964277ae08d57, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x90) (fail_nth: 4) sendmmsg$inet(r0, 0x0, 0x0, 0x8000) 2.396162418s ago: executing program 4 (id=4999): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r2 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000280)='\xebU\x95\xa4i\xea`\xe0[\x9a\x84\x11\xc9&R:\xe9\xea\xec\xe05@b\x1f\xab\xb7\xe6\xd4\x18\xe7D@\xf5\xb2\xb4\xe8i$\x038\x99\xfb;\xbeR\xbf\xc2\r\x13\xf0\xf0\xec\x94\xad\nA\xee>\xb3i4\\\xc8\xd7 \x8d\xe0D\x953|) \xd8p\x12\x11\x81\x7f\x93\a\xfb!\x83\xc2\xd8\xe4\x98\xae\xb7\f\x0fR\xd3\xad\xa5\xca\xd5\xc2\bv+\x9a\x94\xd0\x05\x8d\xef\x9f94>\xa5?\x9a\x11Et\xef\xea\xe9e\x81\'jB\xca\f\xccz\x15x\x1cn\xe4\xf3\xbd\xb4q{\xb33\xffM\x95Jm\x90\x00\x15\r\xc8R\xb4\xf89>\xb7\x1e\xe3\x99\x99_~\xdb\xdc\xfd\x0f\x8f\xfc\xe4\xa4\xe8\x03K\xea\xb2\x91H|EB\xfd2\x10atXE\xee\xf4\x13c\xb5u\x85w$\xd3}\x19\xe7n\xf9\xe7\x11@\xceB\xd7/\xde\x80F\xe0\xd0dI\xedfq]\xb1\xaa\x9b)\\o\xd1\xdcx\x06\x80\x9f\xb3\xcc\r\b\xcb\xb1\x1c\x03G\xe4\xf0H`\x0e\xe1\xc7\x13\x9e%J\xe6\xe2\xe6\xb4:\xa8\xf51~\xc5\x8a\xfe++s\x0f\xa9\x00\x00A\xb8\xf1\xdb', &(0x7f00000000c0)="8c", 0xff57) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f000058a000/0x1000)=nil, 0x1000, 0x1000003, 0x1010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000b40)=[{{&(0x7f0000000540)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000004c0)="fb3e52406a0bd632e08eb416af8460577a3883ce76b6147cd9de485a076200ce6508299f76c5b1c12eca7334ca9d0d2cfa628643a901", 0x36}], 0x1, &(0x7f0000003380)=ANY=[@ANYBLOB="180000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="240000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r0, @ANYRES64=r4, @ANYRES32=r2, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="180000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="28f4ffff0000160001008000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r4, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="340000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32=r3, @ANYRES32=r3], 0xf4, 0x20080045}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000980)="6f4b281934b95862a1b9962926d3e7aa818843f67381aa3236c9d5afa988e903cded8e5199a322aca0883c", 0x2b}, {&(0x7f0000001100)="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", 0x1000}, {&(0x7f00000009c0)="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", 0xfc}, {&(0x7f0000000c00)="f2afdacb9fafca49f15777aa4c7195726b53e0763f916f931de3c8978b11fba00050feaabf26fdf8269c56cb79d5f249da7e6166bc0560f9a1965446a2a804f865675a7b2091706cf17921161aa6e8e2befbc1ff41a0f1609851259b5d99be44d29ba2c60f31d590e3652610e7ae98c89bdb798afbcaf14deb4e12a5a01ab2d56342dee858105341f3124bd700b41fe42a6861408aedc9a14e3ebfd4fc263f48a53e4c784af1c8f074090da09f3b4517ae26f17b9acfd77927738db81e345c69207b4ce687d7ca3d347850c130b59bc83f0b04", 0xd3}], 0x4, &(0x7f0000000b00)=[@cred={{0x18}}], 0x18, 0x40}}], 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800004000004000000000000004000095000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="d84c8c434b7924420ce429b8", @ANYRES16=r6, @ANYBLOB="8b3300000000fcdbdf2505"], 0x28}}, 0x50) recvmmsg(r5, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002042, 0x0) r7 = socket(0x10, 0x5, 0x0) bind$vsock_stream(r7, &(0x7f0000000040), 0x10) listen(r7, 0x0) connect$vsock_stream(r7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0xfffffffffffffed1, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="100000000100001801000000"], 0x10, 0x40}}], 0x1, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r9, 0x0, 0x39011, 0x0) 2.222634177s ago: executing program 3 (id=5000): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 2.124900712s ago: executing program 3 (id=5001): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x2, 0x141002) r2 = socket$isdn(0x22, 0x3, 0x0) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f00000002c0)=0x9, 0x4) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0xc0045543, &(0x7f0000000080)=0xfdfd) (fail_nth: 1) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[], 0x38}}, 0x0) 2.038752678s ago: executing program 3 (id=5002): r0 = socket$inet6(0xa, 0xa, 0x400000) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x2, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000080), 0x4) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0xfd9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_io_uring_setup(0x7fae, &(0x7f0000000440)={0x0, 0x911f, 0x1, 0x2, 0x115}, &(0x7f0000000080), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_FILES2(r3, 0xd, &(0x7f0000000800)={0x1, 0x0, 0x0, &(0x7f0000000700)=[{0x0}], &(0x7f00000007c0)=[0x749]}, 0x20) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2e}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004080) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='wchan\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r5 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000000, 0x3, 0x9, 0xfffffffffeffff83, 0x3, 0x1, {0xffffffffffffffff, 0x3ff, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3f9, 0x7ffffffb, 0x6, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x12}}}, 0xa0) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r6, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xa}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x24}}, 0x0) 1.462935738s ago: executing program 2 (id=5003): r0 = socket$inet6(0xa, 0xa, 0x400000) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x2, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000080), 0x4) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0xfd9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_io_uring_setup(0x7fae, &(0x7f0000000440)={0x0, 0x911f, 0x1, 0x2, 0x115}, &(0x7f0000000080), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_FILES2(r3, 0xd, &(0x7f0000000800)={0x1, 0x0, 0x0, &(0x7f0000000700)=[{0x0}], &(0x7f00000007c0)=[0x749]}, 0x20) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2e}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004080) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='wchan\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r5 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000000, 0x3, 0x9, 0xfffffffffeffff83, 0x3, 0x1, {0xffffffffffffffff, 0x3ff, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3f9, 0x7ffffffb, 0x6, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x12}}}, 0xa0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r7, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xa}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x24}}, 0x0) 1.225244365s ago: executing program 4 (id=5004): socket(0x2a, 0xa, 0x6e2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x400, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0xc}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c891}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) setresuid(0xee01, 0xee01, 0xee00) r2 = msgget$private(0x0, 0x100) msgctl$IPC_SET(r2, 0x1, &(0x7f0000002880)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x7}, 0x0, 0x0, 0x1, 0x2, 0x10001, 0x4e, 0xffffffffffffffca, 0x8, 0x8580, 0x3, 0x0, 0xffffffffffffffff}) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000800000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000009500000047b4c92adc1b13dff256e5fa77413c365463f3d58cce6c000ab7eb2f711dd74ce14bca56e5"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$6lowpan_enable(0xffffff9c, &(0x7f0000000bc0), 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) r4 = accept4(r3, 0x0, 0x0, 0x0) write(r4, &(0x7f0000000040)="cb", 0xfffffdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYRES16=0x0], &(0x7f0000000240)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 682.572553ms ago: executing program 4 (id=5005): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) setpgid(0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x3}, 0xffffffc9}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) getdents(r1, 0x0, 0xfffffffffffffe25) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x1700, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0xfffd, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast}}}}) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r7, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000080)=@x86={0x1, 0x0, 0x2, 0x0, 0x7, 0x1, 0x2, 0xb, 0x0, 0x8, 0x7, 0x7, 0x0, 0xca, 0xff, 0x4, 0x0, 0x2, 0x6, '\x00', 0x0, 0x1}) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) mount_setattr(r2, &(0x7f0000019080)='./file0\x00', 0x0, &(0x7f00000190c0)={0x100002, 0x40, 0x20000, {r1}}, 0x20) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0xeeee0000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000c40)) 566.549402ms ago: executing program 3 (id=5006): socket(0x2a, 0xa, 0x6e2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x400, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0xc}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c891}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) setresuid(0xee01, 0xee01, 0xee00) r2 = msgget$private(0x0, 0x100) msgctl$IPC_SET(r2, 0x1, &(0x7f0000002880)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x7}, 0x0, 0x0, 0x1, 0x2, 0x10001, 0x4e, 0xffffffffffffffca, 0x8, 0x8580, 0x3, 0x0, 0xffffffffffffffff}) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$6lowpan_enable(0xffffff9c, &(0x7f0000000bc0), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) r4 = accept4(r3, 0x0, 0x0, 0x0) write(r4, &(0x7f0000000040)="cb", 0xfffffdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0600000004000000030000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000ac0da1becf7969a0a79c6c7ad3936f48062c65df501aaac66b41"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYRES16=0x0], &(0x7f0000000240)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 554.149656ms ago: executing program 2 (id=5007): r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3f09, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r0, 0x46f3, 0x0, 0x63, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r5 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r5, &(0x7f0000000080)={0x18, 0x2, {0x1, @multicast2}}, 0x1e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a00)=@newtaction={0x24b4, 0x30, 0x1, 0x10000, 0x25dfdbfb, {}, [{0x24a0, 0x1, [@m_gact={0xbc, 0x6, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x5, 0xc, 0x3, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x168, 0x7, 0x8, 0x80000001, 0x8000}}]}, {0x5f, 0x6, "48d4ccf80ec3d13fecae9c90bedf1a9af8ac51d58161ccad367b61e1162654b3fb3848e92702de10ab028e8bbc6d8083a85a7473ad16ad240219b0e815d600af3fe89df304656cb80ef196a90b004cd662b3bae9eed375a9df7381"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x16c, 0x1, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x9, 0x8, 0xd}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xb, 0x2, 0x0, 0x0, 0x6}, 0x1}}]}, {0x103, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x134, 0x15, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xaff, 0xfffff801, 0x8, 0x7fff, 0x3ff}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x0, 0x10000000, 0x7ff, 0x1}, @broadcast, @empty}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x7, 0x3, 0x9, 0x4}, @multicast2, @dev={0xac, 0x14, 0x14, 0xa}, 0xffffff00, 0x4}}]}, {0x91, 0x6, "a6ed3373570006cd59f3d9ed778fbf2338e9f66cd0efbc713a63a1306bccc4093b51d7b6bc311bd646f9069ee1c4b18285e4de5dc7a219a92cb7aaf53052cc24f943fd74fa18b5d5d1ecfab6f7e5799cb413c6c0838be3fc09fe4486048d030d45439a132d0ac4a53e13447c188b53e7ad04c03bc6dba9130b87535ad748d7c73dfb27104bff60996b2ec1df6a"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mirred={0x10d0, 0x3, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x584, 0x5, 0x1, 0x9, 0x80f}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0xe, 0x7, 0x7, 0x20000000}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0xfffffffb, 0x3, 0x7, 0x1}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0xe, 0x7, 0x9, 0x800}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x8000, 0xffffffffffffffff, 0x1, 0xae}, 0x2}}]}, {0x1004, 0x6, "e22e951da4c4d02a3fbe139377eb1937b29b50c5961806ad52912797e33527237713888a6b56c47cb0e0798346335bb46ca7b14efb12d84a1062d648f43baaada04c97830065266e62ccb297816808d1e6a0b1e0d7519de001afc65fd97b83755dbc42761ec5f8afd2608bab3fc21b1b7e64c900c5c73d6bd3ff65da797dd2edf96cef09fab88e71e996fbc47df8c9dcf6a8a2a788f4f6b8335b483f0b6d85240867a7d93919bbc7a88e88b64216d3ff62ccd0dfa20a4cd4dc981eab60f7293dad644e0d6a0d3f21312b55f446a48fe274f449afe2773d0c1dd0ad55a0798555700fb463123c2d8ba4ef0c5e3c13083d5d5b0c37c2d97a048b2cdd10f968833c649cd167a3783246680a5252e429cc5e0a07549d279c20cf564a11f791c55726e9c401e84c76db14b07ccf3d7f3bf7b43d9adc9e0d47d8431863a2539d89b6cd449bb89ee04e32fc830956fdf95c6c3ec321030a87e99ca1609186605b9cf2f3059805f7630cc9d065d3d1a6b3a9c869f4d1ed9986f4182660a31590146ac1ebe5ddd36ec3d1b491febdf7da64b078eb7fda66648199f15e45f854b79a14159168fed94e2fe1231163a7e6984207a1d7d676e15d4e449b72cf10d9c9225d1ddd4f058b293b23367259e6e804ae24b3d0e68828b1f31e9110d069aaa1f57d41538b77f45492a4738b474645c405e79a37a4cc0cde4b177b2a132d35ce541c1d5bc3fae37eef019da58bd0eb8573ee15dc441a82e2a622a6877ec5589c661c415c8da97da9d57f75fea7f9ddfbe6b09f65f9e9912d33ae4e864d66f9097b9793caed37d66d55a01bd065991eefd5a13e655e1f77d4bf8b6d99e7c34cf91e38f14e6c593ea8cf5713dc5f7324fe4c74d3a58e555e9c0f6ab91b628d6bb4dcdacc407d7d5c58f04a70c907da275cc46f1f2e92972bce809c1bc4f3d405eb150e5e1937175d67caa707542bf790d520a2e5fc3119dfb1a0cdc224c02906c013c67dff9319ecff2347f46ed25abb198c3d789c41180650f1788e0971bfc161818111ac3cd692236a82907ba6cb2e2899be5a37fc2e1f7d48895da6e68f8550328a0ba39f4ba545f807de24b89ce377e5281c7f2893da86883cd57a3ea97b4c7c9c2bc3419227edefe544d8b3d4ba9f40f6ffb651d6585f21128b92cf554e7e756c050f75ad4da469603af27559c5351d84d5f026f96e9947d0a5a6fd42a9185759dea30230861a4cf2d1d5a33a153123eb96fc56c0f66644ef276a27716bb6c3a39bbd698f3eab12eb7f6a9731cbeaf0d38f0adb591b6aa0c88e892ca92ec5e57b3d64c94b360c1db3989fce49d1fe48824c223b3b21e450674868e6b158eb711395eb95371143bd699e28f891cfba69dc3071d181b272f33b6d5512e8ebd0844d295e791486c922a60a8cc668992511fa6c9186a33a13bc5ce1d573fa83c93cae50c236d67c4e5f6c9ac04dcd28c857d462e21981a9f38a9379ad34926506d403066b85b4bd15a9bfae2e6126ad2a702f6c124c69441b0b81f514415d75af1d81498a2d452bea04949dd2d9151953650fa4a9db818b98bbe58a4e20ab281a523ae098ea09775d9be5753076e8c81c066c3522bd85122c3df379509bfcd77c4d644823a5d36acce6b9eecf63056d5266620994a7fbbd715a6171ccd0913b4682839d7c41b2c7700abb99f3224b98046724e09b83401ff5988a4c80621b43f0373ad1b87b79e3f03c6443a8db0bafa46045b82440f3d321ad778500b56346ac94361dadee2dd9a3bd6404752f3944b040a47bbbf6a5e307653e6bfd60cb54af336f13a4a8e40b05bac4b00ccc03cfa36c22aa81dc15881c1c21915aea548e3b8ed4d3f5fb0580cc3b7e024c08f0acf1444d9f47848b05ae8e37c820ed22872fab81dca9e8de8dae9e9bfc9be070860e6e77b945b94cc37473613b84625e654bde71b343f581c7839f9a0943eb04230d426eba082bc58f00997060b3daf23445b8312f76b5e572011181cb2c24559c17724c1b99fafe338cde714cbe24b283e2be6b727e42f49f27d29554e72695c659cb5773c376b04b0e41b0619736cc63f05d45c7e3cb095b6ce7695ff0bb774c66dbce36277972e027e064cf6a1947c27248fc0322b47f9fe60c2de11d32814e367f2341f80709977a6c4bee311e5eff292b7d0844062cb200bbfedd394732ca9d3180924edfc9c85c6c032c97be24ef41b7020d3fb8ee584686bb4a89ecba0ef718be46a476ae787408a8d41434f3c0303f6dab195c0b55275498c38e88874799291812634c23f1490a80706f966339c2bdbe3aef1b359b22e00e2288528a26bd1f4053ccc49f75511719473ed6500bf71148da3fbce9db38bf489fc1d9881ca57425437be0fa017e8307960d8a9905b999bbd748df25e837217c4425d33e06e9f162154e00cd8c5b0c5de475924eaf1893abf05ecded0ee6f3b6e0d880fee86a5d92688468de36995f61bafaec92f39acb23f2dcfae43ec6e1cf343370869928d55290aa1e71f1fa487efab2ae6ec7d0b91da083aacf7aa236053e117db762664d0c198c8526224a8a077f40558b2202d702380dc8c2ba05c0afab07a26dc950866f264e338c0f06bd0bbc00ed3266a22e366c34d2505235d90c1d044e78a400d5ba29a1bf4013ba66c095245add367b093dbdbb475828ac0dbb8c3d736507a6e468401704a352b84472680cdce0c6b592f3364fd2456cb0d01a65502e83424f45b1905fcbc297697087688de461b7c82651ce2c5a6da89f1a7fa3767d10a8733153019095a2995c995c01a7843989e45aa4a60bd0c8512cf515a1cf79b55cf2874db41c235ceea757536abbcab443a09b8d091d69dbe0481b2a8edf5088aa65e7e6bdecda2d711c382d8e58e5f368579448d0d39ebd98c38f9c65204874c793282ce11633f6ddbb52989d74dde0a8bfab14efe596e0920ab4eaf73ab8a2f1fed00e29b27fa9ea9a69901ac44e64e0124c8992dacdd3731c349f29ee813b68e5c6702e743e6acbbe81c83e3c624da2cf7edeff30ce7140ceb943fadd56257a67fb9b8c9c840fb494af39534b6263a7bea8f2a8f8055de9d8738efb54c6ead8df74d898adfe4bba7459a42e9a44efb382bcf0cbed6b20e9ec013316f1142cfae1e039b41b4f4bb7b31f8bef39dab7d366326c421cc631c57a6abbe45332abf6a925ae716bab451969453d53782084ad6e3b618d7105fe95adf0f6154443e65ab8c6df09e9176b59634fb137197855424421bf2f9c12c36592997d536297ebdd59baaa96d1a02b19a4217412f86ef78d5b3e188bae0441ddd17233701d73c54b0552149958c3cc7af26b6ee5e4cdab3dbd21c3ea2497bd6fcb6a9ec38a4ae88db664dd34b04cbecdbb9a2e52d75d490b220267f3d943b90c01c4c0d9bbf4c4b3f0db976a8456f0bccbd638844f687927526934a9555f3f1574445a41f6b82bb32e2ece41dc851564a7e42f8ee8872d8d0715e10d6afd5081948177a87c12e8ef893ce6928a2d7edb4fac975871ce4ba7031f9ef4fb7378f7c46facc8629fe25db8ce728347c018ea09ecd3c8c134f860889d5bfd43b117f6ea83ab8d82fb63d4f21fccc058339d6805355884f9a5fbaf8009940c6357c00b73e2f228b52921c97397224fc53fac20ffef9a24d79b21d038fe61b66799f2580ebac2438cadcbea14a9f334af0af2e93525ddee3bd2b766e7935b310333a315951dfa4e356d771124a3dfb0c45208daa8f9f8f6a97eb23f22fe35b0d36ee4825d58ff4e9a4c24dc334fe37d27d020755f9a6135b69c9c845f04cb7c0065e9fb70b6ce733cf25a77f86193e728fe4ad97f055f1f905b993effb7c1a90faff83198470d1e1024f012547744554bd4c90f025cbfb30acab5b76d673c1661fc6e4d9493a775af9649b2a39fac3b790b270da6fec2f72ac646a105ab776b89a4aaf15e97e8288fac0dd7d5603508fc8e6b8c4f8eb245d171afe591e3eab92c791d8a69394c4999269fdd90babeb05cae0e742afed12b026dfd87fbe0d93f16f704278bbad4ee568291caf5e670cc61acb35c9e4b0e3a63115b392576366439aea0a0d92c3a2132222c6f2cc69c45496e8c0664465513c68bafbb33e3d37bc287b79b73254c5a8e945c0cfacd950651ff8789a3d16af7bd92da801b4cda918269adf2e8930b7ea87be7a1d6739d2440cddfdb66df9bb240e82f1799bc4bb77ee66e16431dc8e96978e84fa2dcec71f5ce7db3cbc699e57b592f1215bb6b1d9805e1cbd3c2357ba7cf7ea59305d1c16d52b83a23cd17f6dd28be9c1cd848019bb8209c520140b8b0567974d0d4ec53f09f0852d68d26d1afbc3914edb66ea0064c0f000ec6372f58b9613821777675e7aa546c360191bd18e4cea3fc2eaeb923d4a6d2e3d7c734cbe5cbb5566e6321002fe10e145e8395224fe31a6850e4b37e79a39ddf49d89035c6e54e59f1378f97d716a5d531b034c62dd1ad79c1d3009c097900e9576e0a3de8542352553398bb6fa8b68b0d4923f5af64940b5b83fca0435796436615f6a5887cef290e818a9c7452e317c58246515fe2ce3532a5a057e4e275f9612dd01fb8f953ba786c100987c1160f3c1471681cb80b4dd78cbfe0d950da0bcb143332a0356362f93992eeb97a416534f8eb174453ddaa5f82d226564d29f0f24053e8379fb7fdb0bf71ffe5929fa1b120d1134a95782c917dfb02e9d1a199e4ac36f5a0cf8e8c310bb975cf5b125cce7a42f90d71cf9f5e8ed77155f8e900de76405361967142a86928c44be24dd1a6cff2fa1186d160ced9edc6ab213fa6fc8712423027b87b9d59e042e906f22c928eaa01e4ac773143ab6308b46180de217b495a660a616737712fafaa7da4ffba8371783a7050032c94498fc09633715ffca0a6877a5a7a7b28e5a9539ff5e152a0790700c2a2655f72ba383d142c0f51e6b4687dcf0f95d177ee0fe4ea47bb4e74f45ccf742c378df42f98c123343b5b96a206c428b2d9e2deddbe6863f4ac76c2d2c50c2051b03c8bbbfb9cac62d470b3a067fee62a514883c3a00632b4098ca4803b184e387349673e576dfbd6bc6a9b8a49fc993755180372c9809c9c6733ca289025b2e44af74fa4bf579a2fd59149221178b304d4711ffb2929901cb618d4546812feb3498aaa04e1e5e7344f125e8048748656a54c21ca8dcffdf7cdcccd37cf7c44146fe93e5f2d52e915b964c1e663621dceeea8b8920e5d21988270de932d280a079016f09504557d617bc6ef4e5743efc7bf674d957870ceaa91f5f51ef089a1e2ab5f2fa65f4cf17f3ebae2d640ed4e1b949cef0a924ee2ea5ebf85ade23a2a48d068d113f788e5d39e2a58b1ddb1f2c7826a26af9f4078ae42857f8b516b59340e5ddf7e2115fea65ac16c675a42fc4a5f31c628304e7fc32756b705004acd1b5cf6e8dba7827b2b15365cc439356b09b1e05a71c518840a12d1dc03a60208e70fe2d8e34c1a5aa8677b66fcc9c58815dd83893d5e3998ff64cd7d606665555d64574445527753800ef76bbd8b08cafb6308fba9ea738589e56fe372cadeedb2e7234824b35e7097dc7a03c3d79e0ad0467aa3b32f896546e334a6bbf4d432bd2c7c802ae706462176f8b032f5c49a4db0f93eb5e0e6a24e074bb8ea5fdd145095985513409ab074a71907374f17421c7f043f7290653e1e11cd64e4bbec64805f3f00f7bef3cec00cd909e014ed9c917f429780bd752ce48e229cd1ec4d01f6f317b4b5703673ea0d3e262513cbc5d4af364288d2c00be0f9fb3a74681de461aad2ecff65"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbedit={0x1070, 0x19, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x10, 0x10, 0x0, 0x80, 0x7}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x3, 0x7, 0x7, 0x6}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xf13}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x24b4}, 0x1, 0x0, 0x0, 0x804}, 0x48c5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r7, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$IP_VS_SO_GET_INFO(r8, 0x0, 0x481, &(0x7f0000000200), &(0x7f0000000280)=0xc) socket$inet_tcp(0x2, 0x1, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) getpid() sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000140012800b00010067656e657665000004000280080004589543d86f330919ae6d00e1ff0000"], 0x3c}}, 0x0) 359.505201ms ago: executing program 1 (id=5008): r0 = openat$fb1(0xffffff9c, &(0x7f0000000040), 0x80000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x110) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x1010, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x24008000, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000e85000/0x2000)=nil], 0x0, &(0x7f0000000000), 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xc0}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000002280)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x7a, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r5}, 0x10) getdents(0xffffffffffffffff, 0x0, 0xffffff82) ioctl$FBIOBLANK(r0, 0x4611, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3) mount$9p_virtio(&(0x7f0000002380), &(0x7f0000002340)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000002240), 0x1000, 0x0) r6 = syz_io_uring_setup(0x34b6, &(0x7f0000000180)={0x0, 0x0, 0x30c0, 0x1}, &(0x7f0000000100), &(0x7f00000022c0)) r7 = epoll_create(0xaf2) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000080)={0xe000200f}) chdir(&(0x7f0000000100)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x1c5) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0xffffffffffffffc8) 340.864901ms ago: executing program 4 (id=5009): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x18020, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x4) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, r4, 0x2) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = fanotify_init(0x1, 0x1000) fanotify_mark(r6, 0x9, 0x1031, r5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r7 = socket(0xa, 0x3, 0x3a) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x8, 0x5, 0x528, 0x32c, 0x32c, 0xffffffff, 0x32c, 0x32c, 0x460, 0x460, 0xffffffff, 0x460, 0x460, 0x5, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'veth0_to_bond\x00', 'team_slave_0\x00'}, 0x0, 0x10c, 0x154, 0x0, {}, [@common=@frag={{0x30}, {[], 0x0, 0x0, 0x7}}, @common=@unspec=@statistic={{0x38}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@mcast2, @ipv6=@private2, @icmp_id, @gre_key}}}, {{@ipv6={@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth0_to_bond\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@local, @ipv6=@private2, @gre_key, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@dev, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port, @gre_key}}}, {{@uncond, 0x0, 0xec, 0x134, 0x0, {}, [@common=@hbh={{0x48}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4=@dev, @icmp_id}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x584) setrlimit(0xa, &(0x7f0000000240)={0x6, 0x4}) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, 0x0, 0x0) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x7f, 0x1}, 0x60) 224.204709ms ago: executing program 1 (id=5010): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4000421) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000340)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x3, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000001d00)="44f9", 0x2, 0x1, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, 0x0) timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setrlimit(0x7, &(0x7f0000000000)={0x4, 0x6}) mq_open(&(0x7f000084dff0)='z\xbf\x17', 0x6e93ebbbcc0884f2, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) splice(r3, 0x0, r2, 0x0, 0x406f413, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r7, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x4, {0x0, 0x10001, 0x0, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, r8, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newae={0x13c, 0x1e, 0x200, 0x70bd2c, 0x25dfdbfe, {{@in6=@empty, 0x4d5, 0x2, 0x32}, @in6=@local, 0x0, 0x3505}, [@sa={0xe0, 0x6, {{@in=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x19}, 0x4e20, 0x4, 0x4e22, 0x100, 0x2, 0x20, 0x0, 0x2b, 0x0, r8}, {@in=@dev={0xac, 0x14, 0x14, 0x12}, 0x4d5, 0x3c}, @in=@remote, {0x4, 0x3, 0x7, 0x3, 0x0, 0xe, 0x7, 0x9}, {0x5, 0x6, 0x8001, 0x8}, {0x4, 0x1000, 0x1}, 0x70bd27, 0x0, 0xa, 0x1, 0x2, 0x14}}, @coaddr={0x14, 0xe, @in6=@local}, @etimer_thresh={0x8, 0xc, 0x7}]}, 0x13c}}, 0x0) futex(&(0x7f0000000180)=0x1, 0xd, 0x0, &(0x7f0000000240), &(0x7f0000000280)=0x1, 0x2) 9.16447ms ago: executing program 2 (id=5011): syz_emit_ethernet(0x56, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = io_uring_setup(0x58e1, 0x0) r5 = syz_io_uring_setup(0x487, &(0x7f00000000c0)={0x0, 0x900f, 0x800, 0x2004, 0x165, 0x0, r4}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000140)={&(0x7f0000001000)={[{0x0, 0x5, 0x3, 0x700}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x60, 0x1, {0x1}}) io_uring_enter(r5, 0x3517, 0x173d, 0x47, 0x0, 0x700) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) syz_open_pts(0xffffffffffffffff, 0x802) 0s ago: executing program 3 (id=5012): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000540)={'c6xdigio\x00', [0x109, 0x80008000, 0x86c, 0xa, 0x0, 0x0, 0x1, 0xf, 0x1000, 0x1, 0x8, 0x5, 0x6, 0x1, 0x1138fce9, 0x6, 0xffffffa7, 0x2000001, 0xfffffffd, 0x65c, 0x3ff, 0x10004, 0x800, 0xe2df, 0x9, 0x6, 0x4, 0x3, 0x7, 0x5, 0x5]}) (fail_nth: 4) kernel console output (not intermixed with test programs): 000000 [ 1163.249041][T25215] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1163.249054][T25215] [ 1163.828079][T25216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4655'. [ 1164.430114][T25240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4661'. [ 1165.599150][T25281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4664'. [ 1165.618471][T25280] input: syz1 as /devices/virtual/input/input65 [ 1165.876311][T25286] Bluetooth: MGMT ver 1.23 [ 1166.193512][T25288] netlink: 'syz.1.4668': attribute type 11 has an invalid length. [ 1166.211513][T25288] fuse: Bad value for 'user_id' [ 1166.213249][T25288] fuse: Bad value for 'user_id' [ 1166.567536][T25296] block nbd2: shutting down sockets [ 1167.219011][T25330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4674'. [ 1167.320744][T25335] tipc: Started in network mode [ 1167.322344][T25335] tipc: Node identity 72f507a1c244, cluster identity 4711 [ 1167.324838][T25335] tipc: Enabled bearer , priority 0 [ 1167.328381][T25335] syzkaller0: entered promiscuous mode [ 1167.330234][T25335] syzkaller0: entered allmulticast mode [ 1167.345216][T25335] tipc: Resetting bearer [ 1167.379629][T25334] tipc: Resetting bearer [ 1167.395447][T25334] tipc: Disabling bearer [ 1167.553616][T25341] netlink: 'syz.2.4678': attribute type 11 has an invalid length. [ 1167.567387][T25341] fuse: Bad value for 'user_id' [ 1167.569172][T25341] fuse: Bad value for 'user_id' [ 1167.691012][T25346] dlm: non-version read from control device 36 [ 1167.693721][T25346] dlm: non-version read from control device 36 [ 1167.696331][T25346] dlm: non-version read from control device 36 [ 1167.699016][T25346] dlm: non-version read from control device 36 [ 1167.702519][T25346] dlm: non-version read from control device 36 [ 1167.705295][T25346] dlm: non-version read from control device 36 [ 1167.707789][T25346] dlm: non-version read from control device 36 [ 1167.710516][T25346] dlm: non-version read from control device 36 [ 1167.731023][T25349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4675'. [ 1168.074814][ T5968] Bluetooth: hci0: command 0x0c1a tx timeout [ 1168.081124][ T5959] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1168.238975][ T40] kauditd_printk_skb: 34 callbacks suppressed [ 1168.239107][ T40] audit: type=1326 audit(1753421821.568:22693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25352 comm="syz.3.4682" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc1579 code=0x0 [ 1168.779085][T25368] genirq: Flags mismatch irq 5. 00200000 (pcl812) vs. 00200000 (pcl812) [ 1168.832575][T25370] tipc: Enabled bearer , priority 0 [ 1168.838231][T25370] syzkaller0: entered promiscuous mode [ 1168.840589][T25370] syzkaller0: entered allmulticast mode [ 1168.914296][T25370] tipc: Resetting bearer [ 1168.921624][T25369] tipc: Resetting bearer [ 1168.935235][T25369] tipc: Disabling bearer [ 1169.055520][T25376] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4688'. [ 1169.233418][T25386] FAULT_INJECTION: forcing a failure. [ 1169.233418][T25386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1169.238836][T25386] CPU: 3 UID: 0 PID: 25386 Comm: syz.4.4690 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(full) [ 1169.238860][T25386] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1169.238871][T25386] Call Trace: [ 1169.238878][T25386] [ 1169.238886][T25386] dump_stack_lvl+0x16c/0x1f0 [ 1169.238908][T25386] should_fail_ex+0x512/0x640 [ 1169.238931][T25386] _copy_to_user+0x32/0xd0 [ 1169.238954][T25386] simple_read_from_buffer+0xcb/0x170 [ 1169.238983][T25386] proc_fail_nth_read+0x197/0x270 [ 1169.239008][T25386] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1169.239034][T25386] ? rw_verify_area+0xcf/0x680 [ 1169.239060][T25386] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1169.239084][T25386] vfs_read+0x1e4/0xc60 [ 1169.239100][T25386] ? fdget_pos+0x2a2/0x370 [ 1169.239125][T25386] ? __pfx_vfs_read+0x10/0x10 [ 1169.239139][T25386] ? find_held_lock+0x2b/0x80 [ 1169.239164][T25386] ? __fget_files+0x20e/0x3c0 [ 1169.239189][T25386] ? handle_mm_fault+0x250/0xd10 [ 1169.239222][T25386] ksys_read+0x12a/0x250 [ 1169.239238][T25386] ? __pfx_ksys_read+0x10/0x10 [ 1169.239256][T25386] ? rcu_is_watching+0x12/0xc0 [ 1169.239279][T25386] __do_fast_syscall_32+0x7c/0x3a0 [ 1169.239300][T25386] do_fast_syscall_32+0x32/0x80 [ 1169.239319][T25386] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1169.239357][T25386] RIP: 0023:0xf703e579 [ 1169.239372][T25386] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1169.239389][T25386] RSP: 002b:00000000f502e590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1169.239419][T25386] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f502e620 [ 1169.239431][T25386] RDX: 000000000000000f RSI: 00000000f73a4ff4 RDI: 0000000000000000 [ 1169.239442][T25386] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1169.239451][T25386] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1169.239462][T25386] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1169.239486][T25386] [ 1169.314587][ C3] vkms_vblank_simulate: vblank timer overrun [ 1170.010833][T25407] FAULT_INJECTION: forcing a failure. [ 1170.010833][T25407] name failslab, interval 1, probability 0, space 0, times 0 [ 1170.014720][T25407] CPU: 2 UID: 0 PID: 25407 Comm: syz.3.4697 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(full) [ 1170.014740][T25407] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1170.014751][T25407] Call Trace: [ 1170.014756][T25407] [ 1170.014760][T25407] dump_stack_lvl+0x16c/0x1f0 [ 1170.014775][T25407] should_fail_ex+0x512/0x640 [ 1170.014787][T25407] ? fs_reclaim_acquire+0xae/0x150 [ 1170.014802][T25407] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1170.014813][T25407] should_failslab+0xc2/0x120 [ 1170.014825][T25407] __kmalloc_noprof+0xd2/0x510 [ 1170.014839][T25407] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1170.014850][T25407] ? tomoyo_profile+0x47/0x60 [ 1170.014863][T25407] tomoyo_path_number_perm+0x245/0x580 [ 1170.014882][T25407] ? tomoyo_path_number_perm+0x237/0x580 [ 1170.014897][T25407] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1170.014926][T25407] ? find_held_lock+0x2b/0x80 [ 1170.014936][T25407] ? hook_file_ioctl_common+0x145/0x410 [ 1170.014954][T25407] ? __fget_files+0x20e/0x3c0 [ 1170.014969][T25407] ? __fput_deferred+0x480/0x480 [ 1170.014984][T25407] security_file_ioctl_compat+0x9b/0x240 [ 1170.015001][T25407] __ia32_compat_sys_ioctl+0xc3/0x370 [ 1170.015017][T25407] __do_fast_syscall_32+0x7c/0x3a0 [ 1170.015030][T25407] do_fast_syscall_32+0x32/0x80 [ 1170.015041][T25407] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1170.015054][T25407] RIP: 0023:0xf7fc1579 [ 1170.015062][T25407] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1170.015073][T25407] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1170.015083][T25407] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000400448c9 [ 1170.015090][T25407] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1170.015096][T25407] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1170.015102][T25407] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1170.015108][T25407] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1170.015121][T25407] [ 1170.015127][T25407] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1172.072965][ T6025] usb 6-1: new low-speed USB device number 63 using dummy_hcd [ 1172.533881][ T6025] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1172.540710][ T6025] usb 6-1: config 0 has no interfaces? [ 1172.548133][ T6025] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1172.553763][ T6025] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.699909][ T6025] usb 6-1: config 0 descriptor?? [ 1173.450338][T16013] usb 6-1: USB disconnect, device number 63 [ 1174.535322][T25491] overlay: ./file1 is not a directory [ 1175.892508][T25515] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 1175.944695][T25517] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1175.977336][T25517] FAULT_INJECTION: forcing a failure. [ 1175.977336][T25517] name failslab, interval 1, probability 0, space 0, times 0 [ 1175.981891][T25517] CPU: 3 UID: 0 PID: 25517 Comm: syz.4.4724 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(full) [ 1175.981905][T25517] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1175.981912][T25517] Call Trace: [ 1175.981917][T25517] [ 1175.981921][T25517] dump_stack_lvl+0x16c/0x1f0 [ 1175.981936][T25517] should_fail_ex+0x512/0x640 [ 1175.981948][T25517] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1175.981961][T25517] should_failslab+0xc2/0x120 [ 1175.981974][T25517] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1175.981984][T25517] ? __pfx___might_resched+0x10/0x10 [ 1175.982009][T25517] ? alloc_vmap_area+0x645/0x29c0 [ 1175.982026][T25517] alloc_vmap_area+0x645/0x29c0 [ 1175.982045][T25517] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1175.982062][T25517] __get_vm_area_node+0x1ca/0x330 [ 1175.982079][T25517] __vmalloc_node_range_noprof+0x271/0x14b0 [ 1175.982094][T25517] ? vhost_task_create+0x1d2/0x2e0 [ 1175.982109][T25517] ? local_lock_release+0x99/0x140 [ 1175.982125][T25517] ? vhost_task_create+0x1d2/0x2e0 [ 1175.982140][T25517] ? rcu_read_unlock+0x17/0x60 [ 1175.982154][T25517] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1175.982174][T25517] ? vhost_task_create+0x1d2/0x2e0 [ 1175.982188][T25517] __vmalloc_node_noprof+0xad/0xf0 [ 1175.982202][T25517] ? vhost_task_create+0x1d2/0x2e0 [ 1175.982218][T25517] copy_process+0x2c70/0x7650 [ 1175.982237][T25517] ? __pfx_copy_process+0x10/0x10 [ 1175.982252][T25517] ? lockdep_init_map_type+0x5c/0x280 [ 1175.982269][T25517] ? lockdep_init_map_type+0x5c/0x280 [ 1175.982283][T25517] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1175.982299][T25517] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1175.982311][T25517] vhost_task_create+0x1d2/0x2e0 [ 1175.982325][T25517] ? __pfx_vhost_task_create+0x10/0x10 [ 1175.982340][T25517] ? kvm_mmu_post_init_vm+0xb4/0x370 [ 1175.982356][T25517] ? __pfx_vhost_task_fn+0x10/0x10 [ 1175.982377][T25517] kvm_mmu_post_init_vm+0x1b7/0x370 [ 1175.982392][T25517] kvm_arch_vcpu_ioctl_run+0x66/0x18c0 [ 1175.982406][T25517] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 1175.982422][T25517] kvm_vcpu_ioctl+0x5eb/0x1690 [ 1175.982436][T25517] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1175.982449][T25517] ? tomoyo_path_number_perm+0x18d/0x580 [ 1175.982465][T25517] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1175.982479][T25517] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1175.982495][T25517] ? do_vfs_ioctl+0x523/0x1a60 [ 1175.982509][T25517] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1175.982534][T25517] kvm_vcpu_compat_ioctl+0x20f/0x3d0 [ 1175.982547][T25517] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 1175.982560][T25517] ? __fget_files+0x20e/0x3c0 [ 1175.982575][T25517] ? __fput_deferred+0x480/0x480 [ 1175.982590][T25517] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 1175.982603][T25517] __ia32_compat_sys_ioctl+0x23f/0x370 [ 1175.982619][T25517] __do_fast_syscall_32+0x7c/0x3a0 [ 1175.982632][T25517] do_fast_syscall_32+0x32/0x80 [ 1175.982643][T25517] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1175.982656][T25517] RIP: 0023:0xf703e579 [ 1175.982665][T25517] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1175.982676][T25517] RSP: 002b:00000000f502e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1175.982686][T25517] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 1175.982693][T25517] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1175.982699][T25517] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1175.982705][T25517] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1175.982711][T25517] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1175.982724][T25517] [ 1175.982825][T25517] syz.4.4724: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1176.106533][T25517] CPU: 3 UID: 0 PID: 25517 Comm: syz.4.4724 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(full) [ 1176.106549][T25517] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1176.106556][T25517] Call Trace: [ 1176.106561][T25517] [ 1176.106565][T25517] dump_stack_lvl+0x16c/0x1f0 [ 1176.106581][T25517] warn_alloc+0x248/0x3a0 [ 1176.106593][T25517] ? __pfx_warn_alloc+0x10/0x10 [ 1176.106604][T25517] ? kfree+0x2b4/0x4d0 [ 1176.106622][T25517] ? __get_vm_area_node+0x208/0x330 [ 1176.106639][T25517] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 1176.106655][T25517] ? local_lock_release+0x99/0x140 [ 1176.106672][T25517] ? vhost_task_create+0x1d2/0x2e0 [ 1176.106688][T25517] ? rcu_read_unlock+0x17/0x60 [ 1176.106702][T25517] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1176.106722][T25517] ? vhost_task_create+0x1d2/0x2e0 [ 1176.106736][T25517] __vmalloc_node_noprof+0xad/0xf0 [ 1176.106750][T25517] ? vhost_task_create+0x1d2/0x2e0 [ 1176.106766][T25517] copy_process+0x2c70/0x7650 [ 1176.106792][T25517] ? __pfx_copy_process+0x10/0x10 [ 1176.106806][T25517] ? lockdep_init_map_type+0x5c/0x280 [ 1176.106822][T25517] ? lockdep_init_map_type+0x5c/0x280 [ 1176.106836][T25517] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1176.106852][T25517] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1176.106864][T25517] vhost_task_create+0x1d2/0x2e0 [ 1176.106878][T25517] ? __pfx_vhost_task_create+0x10/0x10 [ 1176.106893][T25517] ? kvm_mmu_post_init_vm+0xb4/0x370 [ 1176.106909][T25517] ? __pfx_vhost_task_fn+0x10/0x10 [ 1176.106930][T25517] kvm_mmu_post_init_vm+0x1b7/0x370 [ 1176.106944][T25517] kvm_arch_vcpu_ioctl_run+0x66/0x18c0 [ 1176.106957][T25517] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 1176.106973][T25517] kvm_vcpu_ioctl+0x5eb/0x1690 [ 1176.106987][T25517] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1176.106999][T25517] ? tomoyo_path_number_perm+0x18d/0x580 [ 1176.107015][T25517] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1176.107029][T25517] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1176.107046][T25517] ? do_vfs_ioctl+0x523/0x1a60 [ 1176.107061][T25517] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1176.107085][T25517] kvm_vcpu_compat_ioctl+0x20f/0x3d0 [ 1176.107098][T25517] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 1176.107112][T25517] ? __fget_files+0x20e/0x3c0 [ 1176.107126][T25517] ? __fput_deferred+0x480/0x480 [ 1176.107140][T25517] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 1176.107154][T25517] __ia32_compat_sys_ioctl+0x23f/0x370 [ 1176.107170][T25517] __do_fast_syscall_32+0x7c/0x3a0 [ 1176.107183][T25517] do_fast_syscall_32+0x32/0x80 [ 1176.107194][T25517] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1176.107207][T25517] RIP: 0023:0xf703e579 [ 1176.107215][T25517] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1176.107226][T25517] RSP: 002b:00000000f502e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1176.107236][T25517] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 1176.107243][T25517] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1176.107249][T25517] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1176.107255][T25517] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1176.107261][T25517] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1176.107274][T25517] [ 1176.107278][T25517] Mem-Info: [ 1176.211999][T25517] active_anon:6438 inactive_anon:1474 isolated_anon:0 [ 1176.211999][T25517] active_file:2214 inactive_file:11696 isolated_file:0 [ 1176.211999][T25517] unevictable:1772 dirty:259 writeback:0 [ 1176.211999][T25517] slab_reclaimable:5802 slab_unreclaimable:61942 [ 1176.211999][T25517] mapped:30607 shmem:7521 pagetables:1404 [ 1176.211999][T25517] sec_pagetables:334 bounce:0 [ 1176.211999][T25517] kernel_misc_reclaimable:0 [ 1176.211999][T25517] free:63619 free_pcp:1917 free_cma:0 [ 1176.225882][T25517] Node 0 active_anon:412kB inactive_anon:404kB active_file:8kB inactive_file:152kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:2868kB dirty:16kB writeback:0kB shmem:3548kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7596kB pagetables:1540kB sec_pagetables:1196kB all_unreclaimable? yes Balloon:0kB [ 1176.236108][T25517] Node 1 active_anon:25340kB inactive_anon:5492kB active_file:8848kB inactive_file:46632kB unevictable:3552kB isolated(anon):0kB isolated(file):0kB mapped:119560kB dirty:1020kB writeback:0kB shmem:26536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7144kB pagetables:4076kB sec_pagetables:140kB all_unreclaimable? no Balloon:0kB [ 1176.248633][T25517] Node 0 DMA free:2652kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1176.257787][T25517] lowmem_reserve[]: 0 289 289 289 289 [ 1176.259527][T25517] Node 0 DMA32 free:26300kB boost:0kB min:13220kB low:16524kB high:19828kB reserved_highatomic:2048KB free_highatomic:1180KB active_anon:412kB inactive_anon:400kB active_file:8kB inactive_file:152kB unevictable:3536kB writepending:16kB present:1032196kB managed:295992kB mlocked:0kB bounce:0kB free_pcp:2532kB local_pcp:240kB free_cma:0kB [ 1176.269395][T25517] lowmem_reserve[]: 0 0 0 0 0 [ 1176.271087][T25517] Node 1 DMA32 free:225448kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25340kB inactive_anon:5492kB active_file:8848kB inactive_file:46632kB unevictable:3552kB writepending:1020kB present:1048432kB managed:948284kB mlocked:16kB bounce:0kB free_pcp:5108kB local_pcp:928kB free_cma:0kB [ 1176.281028][T25517] lowmem_reserve[]: 0 0 0 0 0 [ 1176.282543][T25517] Node 0 DMA: 53*4kB (UM) 21*8kB (UM) 12*16kB (UM) 7*32kB (UM) 3*64kB (UM) 1*128kB (M) 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2652kB [ 1176.287365][T25517] Node 0 DMA32: 1137*4kB (UMEH) 365*8kB (UMEH) 215*16kB (UMEH) 178*32kB (UMEH) 71*64kB (UMEH) 23*128kB (UMEH) 6*256kB (U) 1*512kB (H) 0*1024kB 0*2048kB 0*4096kB = 26140kB [ 1176.291179][T25528] netlink: 'syz.3.4727': attribute type 1 has an invalid length. [ 1176.292697][T25517] Node 1 DMA32: 2893*4kB (UME) 1010*8kB (UME) 643*16kB (UME) 288*32kB (UME) 171*64kB (UME) 214*128kB (UME) 148*256kB (UM) 97*512kB (UM) 53*1024kB (UM) 3*2048kB (M) 0*4096kB = 225460kB [ 1176.301351][T25517] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1176.304296][T25517] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1176.307349][T25517] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1176.307831][T25528] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1176.310254][T25517] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1176.310266][T25517] 22434 total pagecache pages [ 1176.310270][T25517] 1020 pages in swap cache [ 1176.310275][T25517] Free swap = 104028kB [ 1176.310279][T25517] Total swap = 124996kB [ 1176.310284][T25517] 524155 pages RAM [ 1176.310288][T25517] 0 pages HighMem/MovableOnly [ 1176.310293][T25517] 209246 pages reserved [ 1176.310296][T25517] 0 pages cma reserved [ 1176.377922][T25528] bond19: (slave veth3): Enslaving as an active interface with a down link [ 1176.435480][T25528] bond19: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1176.473692][ T40] audit: type=1326 audit(1753421829.275:22694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25530 comm="syz.4.4728" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e598 code=0x7ffc0000 [ 1176.484822][ T40] audit: type=1326 audit(1753421829.275:22695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25530 comm="syz.4.4728" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e598 code=0x7ffc0000 [ 1176.493399][ T40] audit: type=1326 audit(1753421829.275:22696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25530 comm="syz.4.4728" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1176.502118][ T40] audit: type=1326 audit(1753421829.275:22697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25530 comm="syz.4.4728" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e598 code=0x7ffc0000 [ 1176.508893][ T40] audit: type=1326 audit(1753421829.275:22698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25530 comm="syz.4.4728" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1176.515772][ T40] audit: type=1326 audit(1753421829.275:22699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25530 comm="syz.4.4728" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1176.522955][ T40] audit: type=1326 audit(1753421829.275:22700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25530 comm="syz.4.4728" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e598 code=0x7ffc0000 [ 1176.529785][ T40] audit: type=1326 audit(1753421829.275:22701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25530 comm="syz.4.4728" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e598 code=0x7ffc0000 [ 1176.540615][ T40] audit: type=1326 audit(1753421829.275:22702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25530 comm="syz.4.4728" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1176.548650][ T40] audit: type=1326 audit(1753421829.275:22703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25530 comm="syz.4.4728" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e598 code=0x7ffc0000 [ 1177.166173][T25551] ufs: You didn't specify the type of your ufs filesystem [ 1177.166173][T25551] [ 1177.166173][T25551] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1177.166173][T25551] [ 1177.166173][T25551] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1177.179388][T25551] ufs: ufs_fill_super(): bad magic number [ 1177.183925][T25551] net_ratelimit: 2 callbacks suppressed [ 1177.183934][T25551] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 1177.416849][T25553] tipc: Started in network mode [ 1177.421704][T25553] tipc: Node identity 7e60c6971029, cluster identity 4711 [ 1177.424118][T25553] tipc: Enabled bearer , priority 0 [ 1177.427459][T25553] syzkaller0: entered promiscuous mode [ 1177.429267][T25553] syzkaller0: entered allmulticast mode [ 1177.506812][T25553] tipc: Resetting bearer [ 1177.516748][T25553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4736'. [ 1177.522394][T25552] tipc: Resetting bearer [ 1177.534184][T25552] tipc: Disabling bearer [ 1177.796453][T25559] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1177.806158][T25559] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1177.809876][T25559] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1177.812874][T25559] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1177.824698][T25559] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 1177.835695][T25559] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 1177.838403][T25559] kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 1177.841133][T25559] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 1177.844028][T25559] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 1177.855199][T25564] FAULT_INJECTION: forcing a failure. [ 1177.855199][T25564] name failslab, interval 1, probability 0, space 0, times 0 [ 1177.866159][T25564] CPU: 2 UID: 0 PID: 25564 Comm: syz.1.4738 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(full) [ 1177.866185][T25564] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1177.866197][T25564] Call Trace: [ 1177.866204][T25564] [ 1177.866211][T25564] dump_stack_lvl+0x16c/0x1f0 [ 1177.866233][T25564] should_fail_ex+0x512/0x640 [ 1177.866253][T25564] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1177.866276][T25564] should_failslab+0xc2/0x120 [ 1177.866293][T25564] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1177.866311][T25564] ? __alloc_skb+0x2b2/0x380 [ 1177.866333][T25564] __alloc_skb+0x2b2/0x380 [ 1177.866352][T25564] ? __pfx___alloc_skb+0x10/0x10 [ 1177.866370][T25564] ? genl_rcv_msg+0x550/0x800 [ 1177.866390][T25564] ? genl_rcv_msg+0x4bb/0x800 [ 1177.866414][T25564] netlink_ack+0x15d/0xb80 [ 1177.866435][T25564] ? __lock_acquire+0x622/0x1c90 [ 1177.866463][T25564] netlink_rcv_skb+0x332/0x420 [ 1177.866481][T25564] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1177.866506][T25564] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1177.866537][T25564] ? netlink_deliver_tap+0x1ae/0xd30 [ 1177.866554][T25564] ? is_vmalloc_addr+0x86/0xa0 [ 1177.866570][T25564] genl_rcv+0x28/0x40 [ 1177.866589][T25564] netlink_unicast+0x58a/0x850 [ 1177.866616][T25564] ? __pfx_netlink_unicast+0x10/0x10 [ 1177.866643][T25564] netlink_sendmsg+0x8d1/0xdd0 [ 1177.866670][T25564] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1177.866694][T25564] ? __import_iovec+0x1dd/0x650 [ 1177.866720][T25564] ____sys_sendmsg+0xa95/0xc70 [ 1177.866764][T25564] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1177.866784][T25564] ? get_compat_msghdr+0x11a/0x170 [ 1177.866814][T25564] ___sys_sendmsg+0x134/0x1d0 [ 1177.866840][T25564] ? __pfx____sys_sendmsg+0x10/0x10 [ 1177.866872][T25564] ? find_held_lock+0x2b/0x80 [ 1177.866906][T25564] __sys_sendmsg+0x16d/0x220 [ 1177.866927][T25564] ? __pfx___sys_sendmsg+0x10/0x10 [ 1177.866956][T25564] ? rcu_is_watching+0x12/0xc0 [ 1177.866976][T25564] __do_fast_syscall_32+0x7c/0x3a0 [ 1177.866998][T25564] do_fast_syscall_32+0x32/0x80 [ 1177.867017][T25564] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1177.867040][T25564] RIP: 0023:0xf7f23579 [ 1177.867054][T25564] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1177.867070][T25564] RSP: 002b:00000000f504655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1177.867088][T25564] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000580 [ 1177.867100][T25564] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1177.867111][T25564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1177.867121][T25564] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1177.867131][T25564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1177.867155][T25564] [ 1177.989686][T25568] netlink: 136 bytes leftover after parsing attributes in process `syz.3.4741'. [ 1177.992477][T25568] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 1178.986777][T25585] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 1179.427503][T25589] i2c i2c-1: Invalid block write size 34 [ 1179.742732][T25591] vxcan1 speed is unknown, defaulting to 1000 [ 1179.962308][T25608] FAULT_INJECTION: forcing a failure. [ 1179.962308][T25608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1179.973341][T25608] CPU: 2 UID: 0 PID: 25608 Comm: syz.3.4753 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(full) [ 1179.973368][T25608] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1179.973379][T25608] Call Trace: [ 1179.973385][T25608] [ 1179.973393][T25608] dump_stack_lvl+0x16c/0x1f0 [ 1179.973416][T25608] should_fail_ex+0x512/0x640 [ 1179.973437][T25608] _copy_to_user+0x32/0xd0 [ 1179.973459][T25608] msr_read+0x14e/0x250 [ 1179.973479][T25608] ? __pfx_msr_read+0x10/0x10 [ 1179.973496][T25608] ? bpf_lsm_file_permission+0x9/0x10 [ 1179.973519][T25608] ? security_file_permission+0x71/0x210 [ 1179.973547][T25608] ? rw_verify_area+0xcf/0x680 [ 1179.973571][T25608] ? __pfx_msr_read+0x10/0x10 [ 1179.973590][T25608] vfs_read+0x1e4/0xc60 [ 1179.973612][T25608] ? __pfx_vfs_read+0x10/0x10 [ 1179.973626][T25608] ? find_held_lock+0x2b/0x80 [ 1179.973645][T25608] ? __fget_files+0x204/0x3c0 [ 1179.973676][T25608] ? __fget_files+0x20e/0x3c0 [ 1179.973701][T25608] ? handle_mm_fault+0x250/0xd10 [ 1179.973735][T25608] ksys_read+0x12a/0x250 [ 1179.973751][T25608] ? __pfx_ksys_read+0x10/0x10 [ 1179.973769][T25608] ? rcu_is_watching+0x12/0xc0 [ 1179.973790][T25608] __do_fast_syscall_32+0x7c/0x3a0 [ 1179.973816][T25608] do_fast_syscall_32+0x32/0x80 [ 1179.973834][T25608] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1179.973862][T25608] RIP: 0023:0xf7fc1579 [ 1179.973876][T25608] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1179.973893][T25608] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000003 [ 1179.973910][T25608] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080019680 [ 1179.973921][T25608] RDX: 0000000000018ff8 RSI: 0000000000000000 RDI: 0000000000000000 [ 1179.973932][T25608] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1179.973942][T25608] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1179.973952][T25608] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1179.973975][T25608] [ 1180.239197][T25620] FAULT_INJECTION: forcing a failure. [ 1180.239197][T25620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1180.245199][T25620] CPU: 2 UID: 0 PID: 25620 Comm: syz.3.4756 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(full) [ 1180.245224][T25620] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1180.245234][T25620] Call Trace: [ 1180.245241][T25620] [ 1180.245248][T25620] dump_stack_lvl+0x16c/0x1f0 [ 1180.245271][T25620] should_fail_ex+0x512/0x640 [ 1180.245294][T25620] _copy_to_user+0x32/0xd0 [ 1180.245315][T25620] simple_read_from_buffer+0xcb/0x170 [ 1180.245344][T25620] proc_fail_nth_read+0x197/0x270 [ 1180.245369][T25620] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1180.245395][T25620] ? rw_verify_area+0xcf/0x680 [ 1180.245420][T25620] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1180.245444][T25620] vfs_read+0x1e4/0xc60 [ 1180.245460][T25620] ? fdget_pos+0x2a2/0x370 [ 1180.245481][T25620] ? __pfx_vfs_read+0x10/0x10 [ 1180.245495][T25620] ? find_held_lock+0x2b/0x80 [ 1180.245522][T25620] ? __fget_files+0x20e/0x3c0 [ 1180.245555][T25620] ksys_read+0x12a/0x250 [ 1180.245571][T25620] ? __pfx_ksys_read+0x10/0x10 [ 1180.245589][T25620] ? rcu_is_watching+0x12/0xc0 [ 1180.245612][T25620] __do_fast_syscall_32+0x7c/0x3a0 [ 1180.245633][T25620] do_fast_syscall_32+0x32/0x80 [ 1180.245651][T25620] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1180.245672][T25620] RIP: 0023:0xf7fc1579 [ 1180.245686][T25620] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1180.245701][T25620] RSP: 002b:00000000f50e6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1180.245717][T25620] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f50e6620 [ 1180.245729][T25620] RDX: 000000000000000f RSI: 00000000f7454ff4 RDI: 0000000000000000 [ 1180.245739][T25620] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1180.245750][T25620] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1180.245760][T25620] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1180.245783][T25620] [ 1180.354934][T25622] FAULT_INJECTION: forcing a failure. [ 1180.354934][T25622] name failslab, interval 1, probability 0, space 0, times 0 [ 1180.359092][T25622] CPU: 3 UID: 0 PID: 25622 Comm: syz.3.4757 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(full) [ 1180.359107][T25622] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1180.359113][T25622] Call Trace: [ 1180.359117][T25622] [ 1180.359121][T25622] dump_stack_lvl+0x16c/0x1f0 [ 1180.359136][T25622] should_fail_ex+0x512/0x640 [ 1180.359147][T25622] ? fs_reclaim_acquire+0xae/0x150 [ 1180.359162][T25622] ? tomoyo_encode2+0x100/0x3e0 [ 1180.359172][T25622] should_failslab+0xc2/0x120 [ 1180.359184][T25622] __kmalloc_noprof+0xd2/0x510 [ 1180.359194][T25622] ? d_absolute_path+0x136/0x1a0 [ 1180.359210][T25622] tomoyo_encode2+0x100/0x3e0 [ 1180.359221][T25622] tomoyo_encode+0x29/0x50 [ 1180.359230][T25622] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1180.359244][T25622] tomoyo_path_number_perm+0x245/0x580 [ 1180.359258][T25622] ? tomoyo_path_number_perm+0x237/0x580 [ 1180.359273][T25622] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1180.359301][T25622] ? find_held_lock+0x2b/0x80 [ 1180.359312][T25622] ? hook_file_ioctl_common+0x145/0x410 [ 1180.359330][T25622] ? __fget_files+0x20e/0x3c0 [ 1180.359345][T25622] ? __fput_deferred+0x480/0x480 [ 1180.359360][T25622] security_file_ioctl_compat+0x9b/0x240 [ 1180.359376][T25622] __ia32_compat_sys_ioctl+0xc3/0x370 [ 1180.359393][T25622] __do_fast_syscall_32+0x7c/0x3a0 [ 1180.359405][T25622] do_fast_syscall_32+0x32/0x80 [ 1180.359416][T25622] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1180.359430][T25622] RIP: 0023:0xf7fc1579 [ 1180.359438][T25622] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1180.359448][T25622] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1180.359459][T25622] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005304 [ 1180.359465][T25622] RDX: 0000000080000e00 RSI: 0000000000000000 RDI: 0000000000000000 [ 1180.359472][T25622] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1180.359478][T25622] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1180.359484][T25622] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1180.359497][T25622] [ 1180.359506][T25622] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1180.497238][ T6025] usb 7-1: new low-speed USB device number 78 using dummy_hcd [ 1180.691216][ T6025] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1180.697457][ T6025] usb 7-1: config 0 has no interfaces? [ 1180.699665][ T6025] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1180.707333][ T6025] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.719529][ T6025] usb 7-1: config 0 descriptor?? [ 1180.976526][ T6025] usb 7-1: USB disconnect, device number 78 [ 1181.172807][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 1181.575636][T25654] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1181.583377][T25654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4768'. [ 1181.796918][T25667] FAULT_INJECTION: forcing a failure. [ 1181.796918][T25667] name failslab, interval 1, probability 0, space 0, times 0 [ 1181.805283][T25667] CPU: 1 UID: 0 PID: 25667 Comm: syz.2.4772 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(full) [ 1181.805310][T25667] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1181.805321][T25667] Call Trace: [ 1181.805327][T25667] [ 1181.805335][T25667] dump_stack_lvl+0x16c/0x1f0 [ 1181.805361][T25667] should_fail_ex+0x512/0x640 [ 1181.805378][T25667] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1181.805409][T25667] should_failslab+0xc2/0x120 [ 1181.805429][T25667] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1181.805455][T25667] ? lockdep_init_map_type+0x5c/0x280 [ 1181.805479][T25667] ? binder_transaction+0xc65/0x9af0 [ 1181.805510][T25667] binder_transaction+0xc65/0x9af0 [ 1181.805551][T25667] ? __lock_acquire+0x622/0x1c90 [ 1181.805581][T25667] ? __pfx_binder_transaction+0x10/0x10 [ 1181.805615][T25667] ? find_held_lock+0x2b/0x80 [ 1181.805634][T25667] ? __lock_acquire+0xb8a/0x1c90 [ 1181.805670][T25667] ? find_held_lock+0x2b/0x80 [ 1181.805686][T25667] ? __might_fault+0xe3/0x190 [ 1181.805703][T25667] ? __might_fault+0xe3/0x190 [ 1181.805718][T25667] ? __might_fault+0x13b/0x190 [ 1181.805750][T25667] binder_thread_write+0xaae/0x4e70 [ 1181.805775][T25667] ? kasan_save_track+0x14/0x30 [ 1181.805799][T25667] ? __pfx_binder_thread_write+0x10/0x10 [ 1181.805822][T25667] ? binder_debug+0xde/0x1a0 [ 1181.805845][T25667] ? binder_debug+0xde/0x1a0 [ 1181.805862][T25667] ? __pfx_binder_debug+0x10/0x10 [ 1181.805881][T25667] ? find_held_lock+0x2b/0x80 [ 1181.805909][T25667] ? __pfx_binder_ioctl+0x10/0x10 [ 1181.805930][T25667] binder_ioctl+0x26a7/0x72c0 [ 1181.805959][T25667] ? tomoyo_path_number_perm+0x295/0x580 [ 1181.805987][T25667] ? tomoyo_path_number_perm+0x18d/0x580 [ 1181.806013][T25667] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1181.806037][T25667] ? __pfx_binder_ioctl+0x10/0x10 [ 1181.806059][T25667] ? do_vfs_ioctl+0x523/0x1a60 [ 1181.806083][T25667] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1181.806123][T25667] ? find_held_lock+0x2b/0x80 [ 1181.806140][T25667] ? hook_file_ioctl_common+0x145/0x410 [ 1181.806168][T25667] ? __fget_files+0x20e/0x3c0 [ 1181.806192][T25667] ? __fput_deferred+0x480/0x480 [ 1181.806215][T25667] ? __pfx_binder_ioctl+0x10/0x10 [ 1181.806236][T25667] compat_ptr_ioctl+0x6e/0xa0 [ 1181.806275][T25667] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 1181.806297][T25667] __ia32_compat_sys_ioctl+0x23f/0x370 [ 1181.806323][T25667] __do_fast_syscall_32+0x7c/0x3a0 [ 1181.806345][T25667] do_fast_syscall_32+0x32/0x80 [ 1181.806363][T25667] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1181.806384][T25667] RIP: 0023:0xf7fd3579 [ 1181.806398][T25667] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1181.806415][T25667] RSP: 002b:00000000f50f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1181.806433][T25667] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0306201 [ 1181.806444][T25667] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1181.806454][T25667] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1181.806464][T25667] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1181.806474][T25667] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1181.806496][T25667] [ 1181.942137][ C1] vkms_vblank_simulate: vblank timer overrun [ 1182.434734][T25686] input: syz1 as /devices/virtual/input/input67 [ 1182.495957][ T40] kauditd_printk_skb: 57 callbacks suppressed [ 1182.496059][ T40] audit: type=1804 audit(1753421834.897:22761): pid=25686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4777" name="/newroot/584/bus" dev="tmpfs" ino=3406 res=1 errno=0 [ 1182.519343][ T61] usb 7-1: new low-speed USB device number 79 using dummy_hcd [ 1182.970563][T25695] FAULT_INJECTION: forcing a failure. [ 1182.970563][T25695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1182.987806][T25695] CPU: 2 UID: 0 PID: 25695 Comm: syz.1.4779 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(full) [ 1182.987822][T25695] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1182.987829][T25695] Call Trace: [ 1182.987834][T25695] [ 1182.987838][T25695] dump_stack_lvl+0x16c/0x1f0 [ 1182.987853][T25695] should_fail_ex+0x512/0x640 [ 1182.987878][T25695] _copy_from_user+0x2e/0xd0 [ 1182.987892][T25695] video_usercopy+0x723/0x1440 [ 1182.987905][T25695] ? __pfx___video_do_ioctl+0x10/0x10 [ 1182.987916][T25695] ? __pfx_video_usercopy+0x10/0x10 [ 1182.987932][T25695] ? hook_file_ioctl_common+0x145/0x410 [ 1182.987949][T25695] v4l2_ioctl+0x1bd/0x250 [ 1182.987958][T25695] ? __pfx_fput+0x1/0x10 [ 1182.987986][T25695] v4l2_compat_ioctl32+0x214/0x2c0 [ 1182.988002][T25695] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 1182.988017][T25695] __ia32_compat_sys_ioctl+0x23f/0x370 [ 1182.988033][T25695] __do_fast_syscall_32+0x7c/0x3a0 [ 1182.988046][T25695] do_fast_syscall_32+0x32/0x80 [ 1182.988057][T25695] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1182.988070][T25695] RIP: 0023:0xf7f23579 [ 1182.988079][T25695] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1182.988089][T25695] RSP: 002b:00000000f504655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1182.988099][T25695] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0d05604 [ 1182.988106][T25695] RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 1182.988112][T25695] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1182.988118][T25695] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1182.988124][T25695] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1182.988137][T25695] [ 1183.110931][ T61] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1183.114383][ T61] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1183.119673][ T61] usb 7-1: config 0 has no interface number 0 [ 1183.127269][ T61] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1183.130849][ T61] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.147114][ T61] usb 7-1: config 0 descriptor?? [ 1183.169407][ T61] iowarrior 7-1:0.1: no interrupt-in endpoint found [ 1183.423800][ T61] usb 7-1: USB disconnect, device number 79 [ 1184.074478][T25706] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 1185.064294][T25722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4787'. [ 1185.116060][T25732] syzkaller1: entered promiscuous mode [ 1185.118423][T25732] syzkaller1: entered allmulticast mode [ 1185.570561][T25746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4794'. [ 1185.608198][ T5968] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1185.621523][ T5968] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1185.629690][ T5968] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1185.634410][ T5968] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1185.637530][ T5968] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1185.667568][T25747] vxcan1 speed is unknown, defaulting to 1000 [ 1185.802959][T15858] syz-executor (15858) used greatest stack depth: 19832 bytes left [ 1185.862696][T25747] chnl_net:caif_netlink_parms(): no params data found [ 1186.029324][T25747] bridge0: port 1(bridge_slave_0) entered blocking state [ 1186.035277][T25747] bridge0: port 1(bridge_slave_0) entered disabled state [ 1186.038375][T25747] bridge_slave_0: entered allmulticast mode [ 1186.043825][T25747] bridge_slave_0: entered promiscuous mode [ 1186.049366][T25747] bridge0: port 2(bridge_slave_1) entered blocking state [ 1186.052427][T25747] bridge0: port 2(bridge_slave_1) entered disabled state [ 1186.055595][T25747] bridge_slave_1: entered allmulticast mode [ 1186.059626][T25747] bridge_slave_1: entered promiscuous mode [ 1186.120270][T25747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1186.125984][T25747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1186.196020][T25747] team0: Port device team_slave_0 added [ 1186.202017][T25747] team0: Port device team_slave_1 added [ 1186.328082][T25747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1186.331790][T25747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1186.344055][T25747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1186.357834][T25747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1186.368700][T25747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1186.387879][ T61] usb 6-1: new low-speed USB device number 64 using dummy_hcd [ 1186.392642][T25747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1186.397819][T25770] syzkaller1: entered promiscuous mode [ 1186.403472][T25770] syzkaller1: entered allmulticast mode [ 1186.537811][T25747] hsr_slave_0: entered promiscuous mode [ 1186.541160][T25747] hsr_slave_1: entered promiscuous mode [ 1186.543327][T25747] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1186.545857][T25747] Cannot create hsr debugfs directory [ 1186.549505][ T61] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1186.552101][ T61] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1186.555840][ T61] usb 6-1: config 0 has no interface number 0 [ 1186.557775][ T61] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1186.560988][ T61] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.569250][ T61] usb 6-1: config 0 descriptor?? [ 1186.573870][ T61] iowarrior 6-1:0.1: no interrupt-in endpoint found [ 1186.798072][ T61] usb 6-1: USB disconnect, device number 64 [ 1187.078632][T25747] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1187.091784][T25747] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1187.098673][T25747] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1187.108684][T25747] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1187.198050][T25747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1187.216487][T25747] 8021q: adding VLAN 0 to HW filter on device team0 [ 1187.234871][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 1187.237226][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1187.244664][T16113] bridge0: port 2(bridge_slave_1) entered blocking state [ 1187.246982][T16113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1187.433579][T25747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1187.541263][T25797] netlink: 'syz.1.4802': attribute type 11 has an invalid length. [ 1187.561298][T25747] veth0_vlan: entered promiscuous mode [ 1187.577571][T25747] veth1_vlan: entered promiscuous mode [ 1187.581702][T25797] fuse: Bad value for 'user_id' [ 1187.583294][T25797] fuse: Bad value for 'user_id' [ 1187.621369][T25747] veth0_macvtap: entered promiscuous mode [ 1187.632352][T25747] veth1_macvtap: entered promiscuous mode [ 1187.672042][T25747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1187.683113][T25747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1187.690173][T25747] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.693878][T25747] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.696711][T25747] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.699482][T25747] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.776311][T15370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1187.779854][T15370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1187.802804][T16113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1187.806738][T16113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1187.842727][ T5959] Bluetooth: hci3: command tx timeout [ 1188.041475][T25805] FAULT_INJECTION: forcing a failure. [ 1188.041475][T25805] name failslab, interval 1, probability 0, space 0, times 0 [ 1188.045549][T25805] CPU: 0 UID: 0 PID: 25805 Comm: syz.1.4803 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(full) [ 1188.045565][T25805] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1188.045571][T25805] Call Trace: [ 1188.045575][T25805] [ 1188.045579][T25805] dump_stack_lvl+0x16c/0x1f0 [ 1188.045595][T25805] should_fail_ex+0x512/0x640 [ 1188.045605][T25805] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1188.045618][T25805] should_failslab+0xc2/0x120 [ 1188.045630][T25805] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1188.045640][T25805] ? alloc_empty_file+0x55/0x1e0 [ 1188.045655][T25805] alloc_empty_file+0x55/0x1e0 [ 1188.045668][T25805] path_openat+0xda/0x2cb0 [ 1188.045677][T25805] ? do_fast_syscall_32+0x32/0x80 [ 1188.045687][T25805] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1188.045705][T25805] ? __pfx_path_openat+0x10/0x10 [ 1188.045718][T25805] do_filp_open+0x20b/0x470 [ 1188.045728][T25805] ? __pfx_do_filp_open+0x10/0x10 [ 1188.045747][T25805] ? _raw_spin_unlock+0x28/0x50 [ 1188.045762][T25805] ? alloc_fd+0x471/0x7d0 [ 1188.045780][T25805] do_sys_openat2+0x11b/0x1d0 [ 1188.045793][T25805] ? __pfx_do_sys_openat2+0x10/0x10 [ 1188.045808][T25805] ? handle_mm_fault+0x2ab/0xd10 [ 1188.045826][T25805] __ia32_compat_sys_openat+0x16d/0x210 [ 1188.045841][T25805] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1188.045858][T25805] ? rcu_is_watching+0x12/0xc0 [ 1188.045872][T25805] __do_fast_syscall_32+0x7c/0x3a0 [ 1188.045883][T25805] do_fast_syscall_32+0x32/0x80 [ 1188.045895][T25805] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1188.045907][T25805] RIP: 0023:0xf7f23579 [ 1188.045916][T25805] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1188.045926][T25805] RSP: 002b:00000000f5002460 EFLAGS: 00000293 ORIG_RAX: 0000000000000127 [ 1188.045936][T25805] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f72367c8 [ 1188.045943][T25805] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000f73b4ff4 [ 1188.045949][T25805] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1188.045955][T25805] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1188.045965][T25805] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1188.045978][T25805] [ 1188.145966][ C0] vkms_vblank_simulate: vblank timer overrun [ 1188.488740][T25813] FAULT_INJECTION: forcing a failure. [ 1188.488740][T25813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1188.492794][T25813] CPU: 3 UID: 0 PID: 25813 Comm: syz.4.4805 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(full) [ 1188.492810][T25813] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1188.492816][T25813] Call Trace: [ 1188.492821][T25813] [ 1188.492825][T25813] dump_stack_lvl+0x16c/0x1f0 [ 1188.492840][T25813] should_fail_ex+0x512/0x640 [ 1188.492854][T25813] _copy_from_user+0x2e/0xd0 [ 1188.492866][T25813] generic_map_update_batch+0x380/0x610 [ 1188.492887][T25813] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1188.492906][T25813] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1188.492922][T25813] bpf_map_do_batch+0x5b4/0x680 [ 1188.492937][T25813] __sys_bpf+0x189f/0x4ea0 [ 1188.492948][T25813] ? __pfx___sys_bpf+0x10/0x10 [ 1188.492957][T25813] ? ksys_write+0x190/0x250 [ 1188.492970][T25813] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1188.492989][T25813] ? fput+0x70/0xf0 [ 1188.493001][T25813] ? ksys_write+0x1ac/0x250 [ 1188.493010][T25813] ? __pfx_ksys_write+0x10/0x10 [ 1188.493025][T25813] __ia32_sys_bpf+0x76/0xe0 [ 1188.493036][T25813] __do_fast_syscall_32+0x7c/0x3a0 [ 1188.493049][T25813] do_fast_syscall_32+0x32/0x80 [ 1188.493060][T25813] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1188.493073][T25813] RIP: 0023:0xf703e579 [ 1188.493082][T25813] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1188.493092][T25813] RSP: 002b:00000000f500d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 1188.493102][T25813] RAX: ffffffffffffffda RBX: 000000000000001a RCX: 0000000080000680 [ 1188.493109][T25813] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 1188.493115][T25813] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1188.493121][T25813] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1188.493127][T25813] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1188.493141][T25813] [ 1188.731975][T25817] FAULT_INJECTION: forcing a failure. [ 1188.731975][T25817] name failslab, interval 1, probability 0, space 0, times 0 [ 1188.736916][T25817] CPU: 3 UID: 0 PID: 25817 Comm: syz.4.4806 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(full) [ 1188.736931][T25817] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1188.736938][T25817] Call Trace: [ 1188.736942][T25817] [ 1188.736947][T25817] dump_stack_lvl+0x16c/0x1f0 [ 1188.736961][T25817] should_fail_ex+0x512/0x640 [ 1188.736985][T25817] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1188.736999][T25817] should_failslab+0xc2/0x120 [ 1188.737011][T25817] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1188.737022][T25817] ? __alloc_skb+0x2b2/0x380 [ 1188.737035][T25817] __alloc_skb+0x2b2/0x380 [ 1188.737045][T25817] ? __pfx___alloc_skb+0x10/0x10 [ 1188.737060][T25817] ? __pfx___schedule+0x10/0x10 [ 1188.737090][T25817] alloc_skb_with_frags+0xe0/0x860 [ 1188.737119][T25817] sock_alloc_send_pskb+0x7fb/0x990 [ 1188.737158][T25817] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1188.737191][T25817] ? __lock_acquire+0x622/0x1c90 [ 1188.737217][T25817] __ip_append_data+0x21c6/0x4240 [ 1188.737244][T25817] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1188.737276][T25817] ? ip_dst_mtu_maybe_forward.constprop.0+0x311/0x6e0 [ 1188.737303][T25817] ? __pfx___ip_append_data+0x10/0x10 [ 1188.737333][T25817] ip_make_skb+0x27f/0x300 [ 1188.737358][T25817] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1188.737383][T25817] ? __pfx_ip_make_skb+0x10/0x10 [ 1188.737409][T25817] ? ipv4_dst_check+0x1a8/0x3b0 [ 1188.737436][T25817] ? udp_sendmsg+0x17da/0x2870 [ 1188.737454][T25817] udp_sendmsg+0x17da/0x2870 [ 1188.737475][T25817] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1188.737496][T25817] ? __pfx_udp_sendmsg+0x10/0x10 [ 1188.737533][T25817] ? __pfx___might_resched+0x10/0x10 [ 1188.737555][T25817] ? aa_sk_perm+0x2f4/0xb10 [ 1188.737585][T25817] ? __import_iovec+0x1dd/0x650 [ 1188.737604][T25817] ? __pfx_udp_sendmsg+0x10/0x10 [ 1188.737622][T25817] inet_sendmsg+0x105/0x140 [ 1188.737644][T25817] ____sys_sendmsg+0x973/0xc70 [ 1188.737665][T25817] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1188.737681][T25817] ? get_compat_msghdr+0x11a/0x170 [ 1188.737708][T25817] ? bpf_trace_run4+0x27e/0x5a0 [ 1188.737731][T25817] ___sys_sendmsg+0x134/0x1d0 [ 1188.737745][T25817] ? bpf_trace_run4+0x2be/0x5a0 [ 1188.737764][T25817] ? __pfx____sys_sendmsg+0x10/0x10 [ 1188.737777][T25817] ? __lock_acquire+0x622/0x1c90 [ 1188.737821][T25817] __sys_sendmmsg+0x2f9/0x420 [ 1188.737839][T25817] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1188.737870][T25817] ? fput+0x70/0xf0 [ 1188.737886][T25817] ? ksys_write+0x1ac/0x250 [ 1188.737904][T25817] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 1188.737921][T25817] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 1188.737937][T25817] __do_fast_syscall_32+0x7c/0x3a0 [ 1188.737958][T25817] do_fast_syscall_32+0x32/0x80 [ 1188.737973][T25817] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1188.737991][T25817] RIP: 0023:0xf703e579 [ 1188.738003][T25817] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1188.738015][T25817] RSP: 002b:00000000f500d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 1188.738029][T25817] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000080004d00 [ 1188.738038][T25817] RDX: 0000000000000300 RSI: 0000000000000f00 RDI: 0000000000000000 [ 1188.738046][T25817] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1188.738055][T25817] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1188.738063][T25817] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1188.738087][T25817] [ 1189.477561][T25827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4809'. [ 1189.526350][T25830] netlink: 'syz.2.4810': attribute type 11 has an invalid length. [ 1189.544831][T25830] fuse: Bad value for 'user_id' [ 1189.546856][T25830] fuse: Bad value for 'user_id' [ 1189.665564][T25832] netlink: 'syz.2.4811': attribute type 9 has an invalid length. [ 1189.668156][T25832] netlink: 'syz.2.4811': attribute type 7 has an invalid length. [ 1189.671107][T25832] netlink: 'syz.2.4811': attribute type 8 has an invalid length. [ 1189.773186][T25836] netlink: 'syz.3.4813': attribute type 1 has an invalid length. [ 1189.787796][T25836] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1189.829167][T25836] bond20: (slave veth5): Enslaving as an active interface with a down link [ 1189.872133][T25836] bond19: (slave veth0_to_bond): Releasing active interface [ 1189.880235][T25836] bond20: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1190.118804][ T5959] Bluetooth: hci3: command tx timeout [ 1190.400365][T25846] bond_slave_0: entered promiscuous mode [ 1190.402231][T25846] bond_slave_1: entered promiscuous mode [ 1190.404164][T25846] macsec1: entered promiscuous mode [ 1190.405811][T25846] bond0: entered promiscuous mode [ 1190.410324][T25846] bond0: left promiscuous mode [ 1190.412793][T25846] bond_slave_0: left promiscuous mode [ 1190.414821][T25846] bond_slave_1: left promiscuous mode [ 1190.973542][T25857] netlink: 'syz.1.4819': attribute type 11 has an invalid length. [ 1190.997924][T25857] fuse: Bad value for 'user_id' [ 1191.000632][T25857] fuse: Bad value for 'user_id' [ 1191.634796][T25865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4822'. [ 1191.927046][ T5968] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1191.933307][ T5968] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1191.940998][ T5968] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1191.947756][ T5968] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1191.951685][ T5968] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1191.977488][T25877] vxcan1 speed is unknown, defaulting to 1000 [ 1192.189980][T25877] chnl_net:caif_netlink_parms(): no params data found [ 1192.278319][ T5959] Bluetooth: hci3: command tx timeout [ 1192.283240][T25877] bridge0: port 1(bridge_slave_0) entered blocking state [ 1192.285783][T25877] bridge0: port 1(bridge_slave_0) entered disabled state [ 1192.288226][T25877] bridge_slave_0: entered allmulticast mode [ 1192.292079][T25877] bridge_slave_0: entered promiscuous mode [ 1192.299371][T25877] bridge0: port 2(bridge_slave_1) entered blocking state [ 1192.304229][T25877] bridge0: port 2(bridge_slave_1) entered disabled state [ 1192.306499][T25877] bridge_slave_1: entered allmulticast mode [ 1192.309133][T25877] bridge_slave_1: entered promiscuous mode [ 1192.380414][T25877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1192.388742][T25877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1192.749483][T15370] bond2 (unregistering): (slave macvlan2): Removing an active aggregator [ 1192.753056][T25895] netlink: 'syz.2.4828': attribute type 11 has an invalid length. [ 1192.753284][T15370] bond2 (unregistering): (slave macvlan2): Releasing backup interface [ 1192.768387][T15370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1192.774373][T15370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1192.777629][T15370] bond0 (unregistering): Released all slaves [ 1192.861686][T15370] bond1 (unregistering): Released all slaves [ 1192.929697][T25898] fuse: Bad value for 'user_id' [ 1192.931414][T25898] fuse: Bad value for 'user_id' [ 1192.947770][T15370] bond2 (unregistering): Released all slaves [ 1193.045841][T15370] bond3 (unregistering): Released all slaves [ 1193.124465][T15370] bond4 (unregistering): Released all slaves [ 1193.204930][T15370] bond5 (unregistering): Released all slaves [ 1193.282310][T15370] bond6 (unregistering): Released all slaves [ 1193.372084][T15370] bond7 (unregistering): Released all slaves [ 1193.458184][T15370] bond8 (unregistering): Released all slaves [ 1193.552986][T15370] bond9 (unregistering): Released all slaves [ 1193.635094][T15370] bond10 (unregistering): Released all slaves [ 1193.721221][T15370] bond11 (unregistering): Released all slaves [ 1193.798297][T15370] bond12 (unregistering): Released all slaves [ 1193.876907][T15370] bond13 (unregistering): Released all slaves [ 1193.954302][T15370] bond14 (unregistering): Released all slaves [ 1194.043415][T15370] bond15 (unregistering): Released all slaves [ 1194.122597][T15370] bond16 (unregistering): Released all slaves [ 1194.161364][ T5959] Bluetooth: hci2: command tx timeout [ 1194.206653][T15370] bond17 (unregistering): Released all slaves [ 1194.290974][T15370] bond18 (unregistering): Released all slaves [ 1194.386507][T15370] bond19 (unregistering): (slave veth3): Releasing active interface [ 1194.389935][T15370] bond19 (unregistering): Released all slaves [ 1194.468419][T15370] bond20 (unregistering): (slave veth5): Releasing active interface [ 1194.472388][T15370] bond20 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1194.476025][T15370] bond20 (unregistering): Released all slaves [ 1194.502332][ T5959] Bluetooth: hci3: command tx timeout [ 1194.593881][T25877] team0: Port device team_slave_0 added [ 1194.620090][T25877] team0: Port device team_slave_1 added [ 1194.638847][T25893] vxcan1 speed is unknown, defaulting to 1000 [ 1194.716523][T25901] FAULT_INJECTION: forcing a failure. [ 1194.716523][T25901] name failslab, interval 1, probability 0, space 0, times 0 [ 1194.720303][T25901] CPU: 0 UID: 0 PID: 25901 Comm: syz.1.4829 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(full) [ 1194.720318][T25901] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1194.720324][T25901] Call Trace: [ 1194.720328][T25901] [ 1194.720333][T25901] dump_stack_lvl+0x16c/0x1f0 [ 1194.720347][T25901] should_fail_ex+0x512/0x640 [ 1194.720358][T25901] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1194.720372][T25901] should_failslab+0xc2/0x120 [ 1194.720384][T25901] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1194.720395][T25901] ? __alloc_skb+0x2b2/0x380 [ 1194.720407][T25901] __alloc_skb+0x2b2/0x380 [ 1194.720417][T25901] ? __pfx___alloc_skb+0x10/0x10 [ 1194.720427][T25901] ? genl_rcv_msg+0x550/0x800 [ 1194.720440][T25901] ? genl_rcv_msg+0x4bb/0x800 [ 1194.720457][T25901] netlink_ack+0x15d/0xb80 [ 1194.720470][T25901] ? __lock_acquire+0x622/0x1c90 [ 1194.720487][T25901] netlink_rcv_skb+0x332/0x420 [ 1194.720499][T25901] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1194.720513][T25901] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1194.720531][T25901] ? netlink_deliver_tap+0x1ae/0xd30 [ 1194.720542][T25901] ? is_vmalloc_addr+0x86/0xa0 [ 1194.720554][T25901] genl_rcv+0x28/0x40 [ 1194.720566][T25901] netlink_unicast+0x58a/0x850 [ 1194.720581][T25901] ? __pfx_netlink_unicast+0x10/0x10 [ 1194.720597][T25901] netlink_sendmsg+0x8d1/0xdd0 [ 1194.720611][T25901] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1194.720625][T25901] ? __import_iovec+0x1dd/0x650 [ 1194.720640][T25901] ____sys_sendmsg+0xa95/0xc70 [ 1194.720655][T25901] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1194.720668][T25901] ? get_compat_msghdr+0x11a/0x170 [ 1194.720686][T25901] ___sys_sendmsg+0x134/0x1d0 [ 1194.720697][T25901] ? __pfx____sys_sendmsg+0x10/0x10 [ 1194.720719][T25901] ? find_held_lock+0x2b/0x80 [ 1194.720737][T25901] __sys_sendmsg+0x16d/0x220 [ 1194.720749][T25901] ? __pfx___sys_sendmsg+0x10/0x10 [ 1194.720765][T25901] ? rcu_is_watching+0x12/0xc0 [ 1194.720778][T25901] __do_fast_syscall_32+0x7c/0x3a0 [ 1194.720791][T25901] do_fast_syscall_32+0x32/0x80 [ 1194.720801][T25901] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1194.720814][T25901] RIP: 0023:0xf7f23579 [ 1194.720823][T25901] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1194.720837][T25901] RSP: 002b:00000000f504655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1194.720847][T25901] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800006c0 [ 1194.720853][T25901] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1194.720859][T25901] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1194.720865][T25901] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1194.720872][T25901] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1194.720885][T25901] [ 1194.832555][T25877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1194.836545][T25877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1194.847936][T25877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1194.852993][T25877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1194.855387][T25877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1194.857764][T25905] binder: 25904:25905 ioctl c0306201 800001c0 returned -14 [ 1194.863866][T25877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1194.877376][T25905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4831'. [ 1194.881228][T25905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4831'. [ 1194.884828][T25905] netlink: 50 bytes leftover after parsing attributes in process `syz.1.4831'. [ 1195.069614][T25877] hsr_slave_0: entered promiscuous mode [ 1195.073005][T25877] hsr_slave_1: entered promiscuous mode [ 1195.076221][T25877] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1195.083274][T25877] Cannot create hsr debugfs directory [ 1195.341609][T15370] hsr_slave_0: left promiscuous mode [ 1195.344709][T15370] hsr_slave_1: left promiscuous mode [ 1195.357667][T15370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1195.360670][T15370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1195.416175][T25918] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4832'. [ 1195.477608][T25919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4832'. [ 1195.480698][T25919] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4832'. [ 1196.253462][T15370] team0 (unregistering): Port device team_slave_1 removed [ 1196.381825][T15370] team0 (unregistering): Port device team_slave_0 removed [ 1196.383504][ T5959] Bluetooth: hci2: command tx timeout [ 1196.902909][ T46] smc: removing ib device syz1 [ 1197.107347][T25919] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.110151][T25919] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.113332][T25919] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.116161][T25919] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.119112][T25919] geneve2: entered promiscuous mode [ 1197.120802][T25919] geneve2: entered allmulticast mode [ 1197.174631][T25926] netlink: 'syz.2.4835': attribute type 10 has an invalid length. [ 1197.177897][T25926] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4835'. [ 1197.473901][T16013] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 1197.641989][T16013] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1197.646221][T16013] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1197.649591][T16013] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1197.652702][T16013] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1197.659199][T16013] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1197.662990][T16013] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.667680][T16013] usb 7-1: config 0 descriptor?? [ 1198.002449][T25877] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1198.006996][T25877] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1198.015483][T25877] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1198.019640][T25877] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1198.104115][T25877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1198.119452][T25877] 8021q: adding VLAN 0 to HW filter on device team0 [ 1198.172603][T25967] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1198.175922][T18666] bridge0: port 1(bridge_slave_0) entered blocking state [ 1198.179022][T18666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1198.210248][T18666] bridge0: port 2(bridge_slave_1) entered blocking state [ 1198.213315][T18666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1198.409516][T25877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1198.446507][T25877] veth0_vlan: entered promiscuous mode [ 1198.458798][T25877] veth1_vlan: entered promiscuous mode [ 1198.475492][T25978] vxcan1 speed is unknown, defaulting to 1000 [ 1198.479849][T25978] vxcan1 speed is unknown, defaulting to 1000 [ 1198.485140][T25978] vxcan1 speed is unknown, defaulting to 1000 [ 1198.492223][T25877] veth0_macvtap: entered promiscuous mode [ 1198.497741][T25877] veth1_macvtap: entered promiscuous mode [ 1198.512558][T25877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1198.516806][T25877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1198.520429][T25877] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.523494][T25877] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.526200][T25877] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.528868][T25877] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.660204][ T5959] Bluetooth: hci2: command tx timeout [ 1198.718736][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1198.721417][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1198.761645][T25978] infiniband syz1: set active [ 1198.763361][T25978] infiniband syz1: added vxcan1 [ 1198.802510][T25978] RDS/IB: syz1: added [ 1198.804192][T25978] smc: adding ib device syz1 with port count 1 [ 1198.806563][T25978] smc: ib device syz1 port 1 has pnetid [ 1198.813702][ T6025] vxcan1 speed is unknown, defaulting to 1000 [ 1198.825471][T25978] vxcan1 speed is unknown, defaulting to 1000 [ 1198.830313][ T61] vxcan1 speed is unknown, defaulting to 1000 [ 1198.952218][T25978] vxcan1 speed is unknown, defaulting to 1000 [ 1199.018057][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1199.023078][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1199.044733][T25978] vxcan1 speed is unknown, defaulting to 1000 [ 1199.168835][T16013] usbhid 7-1:0.0: can't add hid device: -71 [ 1199.173178][T16013] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1199.206893][T16013] usb 7-1: USB disconnect, device number 80 [ 1199.245268][T25978] vxcan1 speed is unknown, defaulting to 1000 [ 1199.452548][T25978] vxcan1 speed is unknown, defaulting to 1000 [ 1199.858886][T26003] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 1199.942697][T26013] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1199.952017][T26013] netlink: 'syz.4.4842': attribute type 29 has an invalid length. [ 1199.955544][T26013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4842'. [ 1199.978552][T26013] vxcan1 speed is unknown, defaulting to 1000 [ 1200.831177][ T5959] Bluetooth: hci2: command tx timeout [ 1200.950914][ T5968] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1200.955522][ T5968] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1200.959293][ T5968] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1200.963113][ T5968] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1200.970973][ T5968] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1201.032106][T26039] vxcan1 speed is unknown, defaulting to 1000 [ 1201.119842][T18666] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.238380][T18666] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.311610][T26039] chnl_net:caif_netlink_parms(): no params data found [ 1201.426379][T18666] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.438641][T26039] bridge0: port 1(bridge_slave_0) entered blocking state [ 1201.442208][T26039] bridge0: port 1(bridge_slave_0) entered disabled state [ 1201.444858][T26039] bridge_slave_0: entered allmulticast mode [ 1201.447581][T26039] bridge_slave_0: entered promiscuous mode [ 1201.451250][T26039] bridge0: port 2(bridge_slave_1) entered blocking state [ 1201.453771][T26039] bridge0: port 2(bridge_slave_1) entered disabled state [ 1201.456668][T26039] bridge_slave_1: entered allmulticast mode [ 1201.459300][T26039] bridge_slave_1: entered promiscuous mode [ 1201.505108][T18666] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.512940][T26039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1201.519003][T26039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1201.570432][T26039] team0: Port device team_slave_0 added [ 1201.574445][T26039] team0: Port device team_slave_1 added [ 1201.611667][T26039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1201.614399][T26039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1201.626490][T26039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1201.650609][T26039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1201.652952][T26039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1201.663222][T26039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1201.749823][T26039] hsr_slave_0: entered promiscuous mode [ 1201.756842][T26039] hsr_slave_1: entered promiscuous mode [ 1201.757082][T26061] Cannot find add_set index 0 as target [ 1201.758837][T26039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1201.765012][T26039] Cannot create hsr debugfs directory [ 1201.794820][T18666] bridge_slave_1: left allmulticast mode [ 1201.796700][T18666] bridge_slave_1: left promiscuous mode [ 1201.798532][T18666] bridge0: port 2(bridge_slave_1) entered disabled state [ 1201.803732][T18666] bridge_slave_0: left allmulticast mode [ 1201.806118][T18666] bridge_slave_0: left promiscuous mode [ 1201.814716][T18666] bridge0: port 1(bridge_slave_0) entered disabled state [ 1202.114435][ T5968] Bluetooth: hci0: command 0x0c1a tx timeout [ 1202.152204][T26075] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 1202.167535][ T5959] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1202.352514][T26077] netlink: 'syz.4.4858': attribute type 1 has an invalid length. [ 1202.718266][T18666] bond2 (unregistering): (slave macvlan2): Removing an active aggregator [ 1202.721890][T18666] bond2 (unregistering): (slave macvlan2): Releasing backup interface [ 1202.746881][T18666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1202.751462][T18666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1202.754914][T18666] bond0 (unregistering): Released all slaves [ 1202.868205][T18666] bond1 (unregistering): Released all slaves [ 1202.976137][T18666] bond2 (unregistering): Released all slaves [ 1203.069657][T18666] bond3 (unregistering): Released all slaves [ 1203.150718][ T5959] Bluetooth: hci4: command tx timeout [ 1203.165871][T18666] bond4 (unregistering): Released all slaves [ 1203.263549][T18666] bond5 (unregistering): Released all slaves [ 1203.372746][T18666] bond6 (unregistering): Released all slaves [ 1203.479383][T18666] bond7 (unregistering): Released all slaves [ 1203.587968][T18666] bond8 (unregistering): Released all slaves [ 1203.671741][T18666] bond9 (unregistering): Released all slaves [ 1203.762186][T18666] bond10 (unregistering): Released all slaves [ 1203.840376][T18666] bond11 (unregistering): Released all slaves [ 1203.922464][T18666] bond12 (unregistering): Released all slaves [ 1204.000162][T18666] bond13 (unregistering): Released all slaves [ 1204.087678][T18666] bond14 (unregistering): Released all slaves [ 1204.260154][T18666] tipc: Left network mode [ 1204.271527][T26090] pim6reg: entered allmulticast mode [ 1204.296892][T26090] pim6reg: left allmulticast mode [ 1204.337496][ T5959] Bluetooth: hci0: command 0x0c1a tx timeout [ 1204.346711][T26091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4861'. [ 1204.722070][ T24] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 1204.738963][T18666] hsr_slave_0: left promiscuous mode [ 1204.747162][T18666] hsr_slave_1: left promiscuous mode [ 1204.749867][T18666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1204.752619][T18666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1204.905852][ T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1204.911169][ T24] usb 9-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1204.915166][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.917759][ T24] usb 9-1: Product: syz [ 1204.919098][ T24] usb 9-1: Manufacturer: syz [ 1204.920580][ T24] usb 9-1: SerialNumber: syz [ 1204.923666][ T24] usb 9-1: config 0 descriptor?? [ 1204.927461][ T24] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1204.931106][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 1204.951778][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1204.961062][ T24] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1204.965010][ T24] usb 9-1: media controller created [ 1204.983155][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1205.057199][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 1205.069554][ T24] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1205.075592][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb9/9-1/input/input68 [ 1205.081911][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 1205.084946][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 1205.107144][ T24] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1205.251461][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 1205.253483][ T24] dvb-usb: error while querying for an remote control event. [ 1205.325113][T26106] netlink: 'syz.4.4861': attribute type 1 has an invalid length. [ 1205.328605][T26106] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4861'. [ 1205.374288][ T5968] Bluetooth: hci4: command tx timeout [ 1205.420098][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 1205.424963][ T24] dvb-usb: error while querying for an remote control event. [ 1205.601238][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 1205.604631][ T24] dvb-usb: error while querying for an remote control event. [ 1205.780522][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 1205.784291][ T24] dvb-usb: error while querying for an remote control event. [ 1205.951894][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 1205.954369][ T24] dvb-usb: error while querying for an remote control event. [ 1206.135522][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 1206.137533][ T24] dvb-usb: error while querying for an remote control event. [ 1206.342772][ T6625] dvb-usb: bulk message failed: -22 (1/0) [ 1206.344681][ T6625] dvb-usb: error while querying for an remote control event. [ 1206.458482][T18666] team0 (unregistering): Port device team_slave_1 removed [ 1206.539498][ T6625] dvb-usb: bulk message failed: -22 (1/0) [ 1206.551923][ T6625] dvb-usb: error while querying for an remote control event. [ 1206.600898][T18666] team0 (unregistering): Port device team_slave_0 removed [ 1206.818105][ T5968] Bluetooth: hci0: command 0x0c1a tx timeout [ 1206.820112][ T5959] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1206.941634][ T6625] dvb-usb: bulk message failed: -22 (1/0) [ 1206.944032][ T6625] dvb-usb: error while querying for an remote control event. [ 1207.120359][ T6625] dvb-usb: bulk message failed: -22 (1/0) [ 1207.122502][ T6625] dvb-usb: error while querying for an remote control event. [ 1207.287992][ T6625] dvb-usb: bulk message failed: -22 (1/0) [ 1207.290444][ T6625] dvb-usb: error while querying for an remote control event. [ 1207.471967][ T6625] dvb-usb: bulk message failed: -22 (1/0) [ 1207.473722][ T6625] dvb-usb: error while querying for an remote control event. [ 1207.587260][ T5959] Bluetooth: hci4: command tx timeout [ 1207.644284][ T6625] dvb-usb: bulk message failed: -22 (1/0) [ 1207.646761][ T6625] dvb-usb: error while querying for an remote control event. [ 1207.753718][T26123] netlink: 'syz.3.4868': attribute type 1 has an invalid length. [ 1207.822404][ T6625] dvb-usb: bulk message failed: -22 (1/0) [ 1207.824941][ T6625] dvb-usb: error while querying for an remote control event. [ 1207.993486][ T6625] dvb-usb: bulk message failed: -22 (1/0) [ 1207.996018][ T6625] dvb-usb: error while querying for an remote control event. [ 1208.164503][ T6625] dvb-usb: bulk message failed: -22 (1/0) [ 1208.175230][ T6625] dvb-usb: error while querying for an remote control event. [ 1208.204428][T26090] Set syz1 is full, maxelem 65536 reached [ 1208.230860][ T6625] usb 9-1: USB disconnect, device number 2 [ 1208.298309][T26139] tipc: Started in network mode [ 1208.300418][T26139] tipc: Node identity 7f000001, cluster identity 4711 [ 1208.304991][T26139] tipc: Enabled bearer , priority 10 [ 1208.342618][ T6625] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1208.359689][T26139] tipc: Enabled bearer , priority 0 [ 1208.392619][T26039] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1208.401271][T26039] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1208.408786][T26039] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1208.421116][T26039] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1208.713540][T26144] vxcan1 speed is unknown, defaulting to 1000 [ 1208.736003][T26039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1208.756464][T26039] 8021q: adding VLAN 0 to HW filter on device team0 [ 1208.789609][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 1208.792634][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1208.857336][T16113] bridge0: port 2(bridge_slave_1) entered blocking state [ 1208.860300][T16113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1209.423886][T26165] Process accounting resumed [ 1209.427965][ T61] tipc: Node number set to 2130706433 [ 1209.580051][T18666] bond0 (unregistering): Released all slaves [ 1209.677583][T18666] bond1 (unregistering): Released all slaves [ 1209.779346][T18666] bond2 (unregistering): Released all slaves [ 1209.810952][ T5959] Bluetooth: hci4: command tx timeout [ 1209.915099][T18666] bond3 (unregistering): Released all slaves [ 1210.002185][T18666] bond4 (unregistering): Released all slaves [ 1210.088863][T18666] bond5 (unregistering): Released all slaves [ 1210.177139][T18666] bond6 (unregistering): Released all slaves [ 1210.275156][T18666] bond7 (unregistering): Released all slaves [ 1210.358221][T18666] bond8 (unregistering): Released all slaves [ 1210.442631][T18666] bond9 (unregistering): Released all slaves [ 1210.626414][T18666] bond10 (unregistering): Released all slaves [ 1210.705205][T18666] bond11 (unregistering): Released all slaves [ 1210.783998][T18666] bond12 (unregistering): Released all slaves [ 1210.869780][T18666] bond13 (unregistering): Released all slaves [ 1210.948379][T18666] bond14 (unregistering): Released all slaves [ 1211.041788][T18666] bond15 (unregistering): Released all slaves [ 1211.197881][T18666] bond16 (unregistering): Released all slaves [ 1211.364969][T18666] tipc: Left network mode [ 1211.390854][T26039] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1211.601404][T26039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1211.654285][T26039] veth0_vlan: entered promiscuous mode [ 1211.669186][T26039] veth1_vlan: entered promiscuous mode [ 1211.689917][T26039] veth0_macvtap: entered promiscuous mode [ 1211.699765][T26039] veth1_macvtap: entered promiscuous mode [ 1211.710104][T26039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1211.718050][T26039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1211.722429][T26039] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.726157][T26039] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.728807][T26039] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.731466][T26039] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.952656][T15953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1211.955191][T15953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1211.974476][T15953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1211.977767][T15953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1212.076654][T26219] netlink: 'syz.1.4851': attribute type 11 has an invalid length. [ 1212.114746][T26219] fuse: Bad value for 'user_id' [ 1212.116395][T26219] fuse: Bad value for 'user_id' [ 1212.220973][T18666] hsr_slave_0: left promiscuous mode [ 1212.223235][T18666] hsr_slave_1: left promiscuous mode [ 1214.042115][T26226] veth3: entered promiscuous mode [ 1214.045296][T26226] veth3: entered allmulticast mode [ 1214.178032][T26241] netlink: 'syz.2.4892': attribute type 1 has an invalid length. [ 1214.181229][T26241] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4892'. [ 1214.231814][T26243] netlink: 'syz.2.4893': attribute type 11 has an invalid length. [ 1214.251067][T26243] fuse: Bad value for 'user_id' [ 1214.253347][T26243] fuse: Bad value for 'user_id' [ 1214.366785][ T1119] sr 2:0:0:0: [sr0] tag#16 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1214.370418][ T1119] sr 2:0:0:0: [sr0] tag#16 Sense Key : Illegal Request [current] [ 1214.372811][ T1119] sr 2:0:0:0: [sr0] tag#16 Add. Sense: Invalid command operation code [ 1214.375449][ T1119] sr 2:0:0:0: [sr0] tag#16 CDB: Write(10) 2a 00 00 00 00 00 00 00 04 00 [ 1214.378869][ T1119] blk_print_req_error: 11 callbacks suppressed [ 1214.378877][ T1119] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 2 prio class 0 [ 1214.384188][ T1119] buffer_io_error: 10 callbacks suppressed [ 1214.384195][ T1119] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1214.394108][ T1119] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1214.415454][T26245] netlink: 'syz.2.4894': attribute type 21 has an invalid length. [ 1214.418709][T26245] IPv6: NLM_F_CREATE should be specified when creating new route [ 1214.590880][T26255] netlink: 'syz.3.4895': attribute type 1 has an invalid length. [ 1214.602215][T26255] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1214.883414][T26260] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 1216.102722][T26276] netlink: 'syz.4.4902': attribute type 11 has an invalid length. [ 1216.117690][T26276] fuse: Bad value for 'user_id' [ 1216.124346][T26276] fuse: Bad value for 'user_id' [ 1216.199660][T26274] bridge0: port 2(bridge_slave_1) entered disabled state [ 1216.202328][T26274] bridge0: port 1(bridge_slave_0) entered disabled state [ 1216.218316][T26274] tipc: Resetting bearer [ 1216.225561][ T5959] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1216.225936][ T5968] Bluetooth: hci0: command 0x0c1a tx timeout [ 1216.328882][T26274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1216.336025][T26274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1216.384307][T26274] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.388114][T26274] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.390967][T26274] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.393841][T26274] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.555738][T26297] binder: 26296:26297 ioctl c0306201 80000180 returned -14 [ 1218.067911][ T61] vxcan1 speed is unknown, defaulting to 1000 [ 1218.146257][T26305] pim6reg: entered allmulticast mode [ 1218.149061][T26305] pim6reg: left allmulticast mode [ 1218.762351][T26313] netlink: 136 bytes leftover after parsing attributes in process `syz.3.4910'. [ 1218.765676][T26313] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 1221.271176][ T6025] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 1221.445182][ T6025] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1221.447786][ T6025] usb 9-1: config 0 has no interface number 0 [ 1221.449703][ T6025] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1221.453376][ T6025] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1221.456370][ T6025] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1221.459080][ T6025] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.470335][ T6025] usb 9-1: config 0 descriptor?? [ 1221.480067][ T6025] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1221.552554][T26357] FAULT_INJECTION: forcing a failure. [ 1221.552554][T26357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1221.557468][T26357] CPU: 2 UID: 0 PID: 26357 Comm: syz.2.4921 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(full) [ 1221.557490][T26357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1221.557500][T26357] Call Trace: [ 1221.557506][T26357] [ 1221.557513][T26357] dump_stack_lvl+0x16c/0x1f0 [ 1221.557533][T26357] should_fail_ex+0x512/0x640 [ 1221.557550][T26357] _copy_to_user+0x32/0xd0 [ 1221.557571][T26357] simple_read_from_buffer+0xcb/0x170 [ 1221.557597][T26357] proc_fail_nth_read+0x197/0x270 [ 1221.557620][T26357] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1221.557643][T26357] ? rw_verify_area+0xcf/0x680 [ 1221.557664][T26357] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1221.557684][T26357] vfs_read+0x1e4/0xc60 [ 1221.557699][T26357] ? fdget_pos+0x2a2/0x370 [ 1221.557717][T26357] ? __pfx_vfs_read+0x10/0x10 [ 1221.557729][T26357] ? find_held_lock+0x2b/0x80 [ 1221.557753][T26357] ? __fget_files+0x20e/0x3c0 [ 1221.557775][T26357] ? handle_mm_fault+0x250/0xd10 [ 1221.557799][T26357] ksys_read+0x12a/0x250 [ 1221.557813][T26357] ? __pfx_ksys_read+0x10/0x10 [ 1221.557829][T26357] ? rcu_is_watching+0x12/0xc0 [ 1221.557850][T26357] __do_fast_syscall_32+0x7c/0x3a0 [ 1221.557870][T26357] do_fast_syscall_32+0x32/0x80 [ 1221.557886][T26357] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1221.557901][T26357] RIP: 0023:0xf708e579 [ 1221.557914][T26357] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1221.557929][T26357] RSP: 002b:00000000f505d590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1221.557944][T26357] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f505d620 [ 1221.557954][T26357] RDX: 000000000000000f RSI: 00000000f73f4ff4 RDI: 0000000000000000 [ 1221.557963][T26357] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1221.557972][T26357] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1221.557982][T26357] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1221.558003][T26357] [ 1221.724442][T26349] iowarrior 9-1:0.1: Error -90 while submitting URB [ 1221.730858][ T34] usb 9-1: USB disconnect, device number 3 [ 1222.992388][ T5968] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1222.993057][ T5959] Bluetooth: hci1: command 0x1003 tx timeout [ 1223.708161][T26386] veth0_to_hsr: entered promiscuous mode [ 1223.712921][T26385] veth0_to_hsr: left promiscuous mode [ 1223.790751][T26390] FAULT_INJECTION: forcing a failure. [ 1223.790751][T26390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1223.795096][T26390] CPU: 1 UID: 0 PID: 26390 Comm: syz.4.4931 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(full) [ 1223.795111][T26390] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1223.795118][T26390] Call Trace: [ 1223.795122][T26390] [ 1223.795126][T26390] dump_stack_lvl+0x16c/0x1f0 [ 1223.795141][T26390] should_fail_ex+0x512/0x640 [ 1223.795155][T26390] _copy_from_user+0x2e/0xd0 [ 1223.795194][T26390] copy_from_sockptr_offset.constprop.0+0x153/0x1a0 [ 1223.795213][T26390] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 1223.795232][T26390] packet_setsockopt+0x861/0x33c0 [ 1223.795250][T26390] ? __pfx_packet_setsockopt+0x10/0x10 [ 1223.795268][T26390] ? aa_sk_perm+0x2f4/0xb10 [ 1223.795285][T26390] ? __fget_files+0x204/0x3c0 [ 1223.795304][T26390] ? __pfx_packet_setsockopt+0x10/0x10 [ 1223.795320][T26390] do_sock_setsockopt+0xf0/0x1d0 [ 1223.795336][T26390] __sys_setsockopt+0x120/0x1a0 [ 1223.795348][T26390] __ia32_sys_setsockopt+0xbc/0x160 [ 1223.795365][T26390] ? lockdep_hardirqs_on+0x7c/0x110 [ 1223.795376][T26390] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 1223.795387][T26390] __do_fast_syscall_32+0x7c/0x3a0 [ 1223.795399][T26390] do_fast_syscall_32+0x32/0x80 [ 1223.795410][T26390] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1223.795423][T26390] RIP: 0023:0xf703e579 [ 1223.795432][T26390] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1223.795442][T26390] RSP: 002b:00000000f502e55c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 1223.795455][T26390] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000107 [ 1223.795462][T26390] RDX: 0000000000000001 RSI: 0000000080000080 RDI: 0000000000000010 [ 1223.795468][T26390] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1223.795474][T26390] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1223.795480][T26390] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1223.795493][T26390] [ 1224.097545][T26392] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 1224.099590][T26392] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1224.102474][T26392] vhci_hcd vhci_hcd.0: Device attached [ 1224.112202][T26392] netdevsim netdevsim4: Direct firmware load for @ failed with error -2 [ 1224.115624][T26392] netdevsim netdevsim4: Falling back to sysfs fallback for: @ [ 1224.392871][ T6025] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 1224.898365][T26394] vhci_hcd: connection reset by peer [ 1224.900774][ T1150] vhci_hcd: stop threads [ 1224.902234][ T1150] vhci_hcd: release socket [ 1224.902268][ T1150] vhci_hcd: disconnect device [ 1224.918892][T26410] wlan0 speed is unknown, defaulting to 1000 [ 1224.921221][T26410] wlan0 speed is unknown, defaulting to 1000 [ 1224.924127][T26410] wlan0 speed is unknown, defaulting to 1000 [ 1224.931088][T26410] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1224.951082][T26410] wlan0 speed is unknown, defaulting to 1000 [ 1224.954826][T26410] wlan0 speed is unknown, defaulting to 1000 [ 1224.958872][T26410] wlan0 speed is unknown, defaulting to 1000 [ 1224.962018][T26410] wlan0 speed is unknown, defaulting to 1000 [ 1225.006307][T26411] FAULT_INJECTION: forcing a failure. [ 1225.006307][T26411] name failslab, interval 1, probability 0, space 0, times 0 [ 1225.010244][T26411] CPU: 1 UID: 0 PID: 26411 Comm: syz.3.4935 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(full) [ 1225.010270][T26411] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1225.010277][T26411] Call Trace: [ 1225.010281][T26411] [ 1225.010286][T26411] dump_stack_lvl+0x16c/0x1f0 [ 1225.010300][T26411] should_fail_ex+0x512/0x640 [ 1225.010311][T26411] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1225.010329][T26411] should_failslab+0xc2/0x120 [ 1225.010341][T26411] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1225.010356][T26411] ? strncpy_from_user+0xa6/0x2e0 [ 1225.010371][T26411] ? alloc_bprm+0x86/0x6f0 [ 1225.010389][T26411] alloc_bprm+0x86/0x6f0 [ 1225.010405][T26411] do_execveat_common.isra.0+0x1ce/0x610 [ 1225.010423][T26411] __ia32_compat_sys_execveat+0xe0/0x120 [ 1225.010435][T26411] __do_fast_syscall_32+0x7c/0x3a0 [ 1225.010447][T26411] do_fast_syscall_32+0x32/0x80 [ 1225.010458][T26411] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1225.010471][T26411] RIP: 0023:0xf7f57579 [ 1225.010479][T26411] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1225.010490][T26411] RSP: 002b:00000000f503455c EFLAGS: 00000296 ORIG_RAX: 0000000000000166 [ 1225.010500][T26411] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000000 [ 1225.010507][T26411] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 1225.010513][T26411] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1225.010519][T26411] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1225.010525][T26411] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1225.010538][T26411] [ 1225.146428][T26415] netlink: 'syz.1.4937': attribute type 11 has an invalid length. [ 1225.161080][T26415] fuse: Bad value for 'user_id' [ 1225.162943][T26415] fuse: Bad value for 'user_id' [ 1225.803997][ T5968] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1225.806689][ T5968] Bluetooth: hci0: command 0x0c1a tx timeout [ 1226.135484][ T29] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1226.301307][ T29] usb 9-1: Using ep0 maxpacket: 32 [ 1226.323992][ T29] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1226.332748][ T29] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1226.335557][ T29] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1226.338099][ T29] usb 9-1: Product: syz [ 1226.340012][ T29] usb 9-1: Manufacturer: syz [ 1226.341484][ T29] usb 9-1: SerialNumber: syz [ 1226.344267][ T29] usb 9-1: config 0 descriptor?? [ 1226.428498][T26427] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1226.542124][T26436] FAULT_INJECTION: forcing a failure. [ 1226.542124][T26436] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1226.546663][T26436] CPU: 1 UID: 0 PID: 26436 Comm: syz.1.4942 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(full) [ 1226.546682][T26436] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1226.546689][T26436] Call Trace: [ 1226.546693][T26436] [ 1226.546698][T26436] dump_stack_lvl+0x16c/0x1f0 [ 1226.546723][T26436] should_fail_ex+0x512/0x640 [ 1226.546740][T26436] should_fail_alloc_page+0xe7/0x130 [ 1226.546753][T26436] prepare_alloc_pages+0x3c2/0x610 [ 1226.546771][T26436] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1226.546788][T26436] ? __lock_acquire+0x622/0x1c90 [ 1226.546803][T26436] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1226.546815][T26436] ? xa_load+0x153/0x2c0 [ 1226.546830][T26436] ? sd_revalidate_disk.isra.0+0x2a78/0xa850 [ 1226.546848][T26436] ? filemap_get_entry+0x1a7/0x3b0 [ 1226.546861][T26436] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1226.546878][T26436] ? policy_nodemask+0xea/0x4e0 [ 1226.546891][T26436] alloc_pages_mpol+0x1fb/0x550 [ 1226.546903][T26436] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1226.546915][T26436] ? _raw_spin_unlock+0x28/0x50 [ 1226.546930][T26436] ? swap_entry_swapped+0x122/0x190 [ 1226.546942][T26436] ? __pfx_swap_entry_swapped+0x10/0x10 [ 1226.546954][T26436] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1226.546969][T26436] __read_swap_cache_async+0x3b6/0x5a0 [ 1226.546987][T26436] ? __pfx___read_swap_cache_async+0x10/0x10 [ 1226.547003][T26436] ? swp_swap_info+0x10/0x130 [ 1226.547015][T26436] ? __pfx_swp_swap_info+0x10/0x10 [ 1226.547030][T26436] swap_cluster_readahead+0x3eb/0x710 [ 1226.547049][T26436] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1226.547066][T26436] ? __pfx_shmem_split_large_entry.isra.0+0x10/0x10 [ 1226.547082][T26436] ? css_rstat_updated+0x9d/0xd30 [ 1226.547095][T26436] ? find_held_lock+0x2b/0x80 [ 1226.547106][T26436] ? shmem_swapin_folio+0x600/0x2370 [ 1226.547124][T26436] shmem_swapin_folio+0x1a45/0x2370 [ 1226.547173][T26436] ? __pfx_shmem_swapin_folio+0x10/0x10 [ 1226.547189][T26436] ? __pfx_filemap_get_entry+0x10/0x10 [ 1226.547203][T26436] ? arch_stack_walk+0xa6/0x100 [ 1226.547216][T26436] shmem_get_folio_gfp+0x2c5/0x1600 [ 1226.547230][T26436] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1226.547241][T26436] ? __lock_acquire+0x622/0x1c90 [ 1226.547256][T26436] shmem_fault+0x1fe/0xa30 [ 1226.547267][T26436] ? __pfx_shmem_fault+0x10/0x10 [ 1226.547280][T26436] ? __lock_acquire+0xb8a/0x1c90 [ 1226.547297][T26436] __do_fault+0x10a/0x490 [ 1226.547308][T26436] ? __pfx_filemap_map_pages+0x10/0x10 [ 1226.547319][T26436] __handle_mm_fault+0x374c/0x5490 [ 1226.547338][T26436] ? __pfx___handle_mm_fault+0x10/0x10 [ 1226.547354][T26436] ? __pte_offset_map_lock+0x174/0x310 [ 1226.547367][T26436] ? find_held_lock+0x2b/0x80 [ 1226.547376][T26436] ? find_held_lock+0x2b/0x80 [ 1226.547390][T26436] ? follow_page_pte+0x3af/0x14c0 [ 1226.547407][T26436] handle_mm_fault+0x589/0xd10 [ 1226.547439][T26436] __get_user_pages+0x589/0x3b80 [ 1226.547457][T26436] ? kasan_save_stack+0x33/0x60 [ 1226.547467][T26436] ? kasan_save_track+0x14/0x30 [ 1226.547476][T26436] ? __kasan_kmalloc+0xaa/0xb0 [ 1226.547485][T26436] ? __kvmalloc_node_noprof+0x27b/0x620 [ 1226.547500][T26436] ? xdp_umem_create+0x652/0x1270 [ 1226.547515][T26436] ? __pfx___get_user_pages+0x10/0x10 [ 1226.547528][T26436] ? __ia32_sys_setsockopt+0xbc/0x160 [ 1226.547538][T26436] ? do_fast_syscall_32+0x32/0x80 [ 1226.547549][T26436] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1226.547566][T26436] __gup_longterm_locked+0x5e7/0x1840 [ 1226.547584][T26436] ? __pfx___gup_longterm_locked+0x10/0x10 [ 1226.547605][T26436] pin_user_pages+0x13c/0x160 [ 1226.547619][T26436] ? __pfx_pin_user_pages+0x10/0x10 [ 1226.547632][T26436] ? trace_kmalloc+0x2b/0xd0 [ 1226.547646][T26436] ? xdp_umem_create+0x652/0x1270 [ 1226.547663][T26436] xdp_umem_create+0x73c/0x1270 [ 1226.547686][T26436] xsk_setsockopt+0x5b2/0x840 [ 1226.547701][T26436] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1226.547714][T26436] ? __pfx_aa_sk_perm+0x10/0x10 [ 1226.547733][T26436] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1226.547747][T26436] do_sock_setsockopt+0xf0/0x1d0 [ 1226.547764][T26436] __sys_setsockopt+0x120/0x1a0 [ 1226.547777][T26436] __ia32_sys_setsockopt+0xbc/0x160 [ 1226.547787][T26436] ? lockdep_hardirqs_on+0x7c/0x110 [ 1226.547796][T26436] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 1226.547807][T26436] __do_fast_syscall_32+0x7c/0x3a0 [ 1226.547819][T26436] do_fast_syscall_32+0x32/0x80 [ 1226.547830][T26436] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1226.547842][T26436] RIP: 0023:0xf710e579 [ 1226.547851][T26436] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1226.547861][T26436] RSP: 002b:00000000f50bc55c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 1226.547871][T26436] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000011b [ 1226.547878][T26436] RDX: 0000000000000004 RSI: 00000000800000c0 RDI: 000000000000001c [ 1226.547884][T26436] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1226.547890][T26436] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1226.547896][T26436] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1226.547909][T26436] [ 1226.725871][ T29] usb 9-1: USB disconnect, device number 4 [ 1226.810408][T26437] FAULT_INJECTION: forcing a failure. [ 1226.810408][T26437] name failslab, interval 1, probability 0, space 0, times 0 [ 1226.814311][T26437] CPU: 2 UID: 0 PID: 26437 Comm: syz.2.4943 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(full) [ 1226.814325][T26437] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1226.814332][T26437] Call Trace: [ 1226.814337][T26437] [ 1226.814341][T26437] dump_stack_lvl+0x16c/0x1f0 [ 1226.814356][T26437] should_fail_ex+0x512/0x640 [ 1226.814367][T26437] ? __kmalloc_noprof+0xbf/0x510 [ 1226.814380][T26437] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1226.814397][T26437] should_failslab+0xc2/0x120 [ 1226.814409][T26437] __kmalloc_noprof+0xd2/0x510 [ 1226.814418][T26437] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1226.814437][T26437] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1226.814455][T26437] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 1226.814471][T26437] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1226.814485][T26437] ? trace_cap_capable+0x18d/0x200 [ 1226.814502][T26437] ? bpf_lsm_capable+0x9/0x10 [ 1226.814516][T26437] ? security_capable+0x7e/0x260 [ 1226.814529][T26437] ? ns_capable+0xd7/0x110 [ 1226.814542][T26437] genl_rcv_msg+0x55c/0x800 [ 1226.814558][T26437] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1226.814572][T26437] ? __pfx_wg_set_device+0x10/0x10 [ 1226.814586][T26437] ? __lock_acquire+0x622/0x1c90 [ 1226.814606][T26437] netlink_rcv_skb+0x158/0x420 [ 1226.814618][T26437] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1226.814633][T26437] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1226.814651][T26437] ? netlink_deliver_tap+0x1ae/0xd30 [ 1226.814662][T26437] ? is_vmalloc_addr+0x86/0xa0 [ 1226.814674][T26437] genl_rcv+0x28/0x40 [ 1226.814687][T26437] netlink_unicast+0x58a/0x850 [ 1226.814701][T26437] ? __pfx_netlink_unicast+0x10/0x10 [ 1226.814717][T26437] netlink_sendmsg+0x8d1/0xdd0 [ 1226.814732][T26437] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1226.814746][T26437] ? __import_iovec+0x1dd/0x650 [ 1226.814761][T26437] ____sys_sendmsg+0xa95/0xc70 [ 1226.814776][T26437] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1226.814789][T26437] ? get_compat_msghdr+0x11a/0x170 [ 1226.814808][T26437] ___sys_sendmsg+0x134/0x1d0 [ 1226.814819][T26437] ? __pfx____sys_sendmsg+0x10/0x10 [ 1226.814836][T26437] ? find_held_lock+0x2b/0x80 [ 1226.814867][T26437] __sys_sendmsg+0x16d/0x220 [ 1226.814880][T26437] ? __pfx___sys_sendmsg+0x10/0x10 [ 1226.814897][T26437] ? rcu_is_watching+0x12/0xc0 [ 1226.814910][T26437] __do_fast_syscall_32+0x7c/0x3a0 [ 1226.814923][T26437] do_fast_syscall_32+0x32/0x80 [ 1226.814933][T26437] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1226.814947][T26437] RIP: 0023:0xf708e579 [ 1226.814956][T26437] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1226.814966][T26437] RSP: 002b:00000000f503c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1226.814977][T26437] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000200 [ 1226.814983][T26437] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1226.814990][T26437] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1226.814996][T26437] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1226.815002][T26437] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1226.815015][T26437] [ 1227.435080][T26447] netlink: 136 bytes leftover after parsing attributes in process `syz.3.4947'. [ 1227.438801][T26447] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 1228.881043][T26470] netlink: 136 bytes leftover after parsing attributes in process `syz.3.4952'. [ 1228.884151][T26470] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 1229.911652][ T6025] vhci_hcd: vhci_device speed not set [ 1230.323798][T26487] netlink: 'syz.4.4956': attribute type 1 has an invalid length. [ 1230.338291][T26487] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1230.357886][T26487] bond1: (slave veth0_to_bond): making interface the new active one [ 1230.363565][T26487] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1230.516298][T26496] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 1230.824835][T26503] netlink: 'syz.3.4961': attribute type 1 has an invalid length. [ 1230.846453][T26503] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1232.346633][ T6025] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 1232.809745][ T6025] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1232.812426][ T6025] usb 9-1: config 0 has no interface number 0 [ 1232.814541][ T6025] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1232.818315][ T6025] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1232.821648][ T6025] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1232.824464][ T6025] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.828624][ T6025] usb 9-1: config 0 descriptor?? [ 1232.830717][T26511] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1232.835334][ T6025] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1233.056964][ T10] usb 9-1: USB disconnect, device number 5 [ 1233.077217][T26534] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 1233.664763][T26539] smc: net device bond0 applied user defined pnetid SYZ2 [ 1233.848580][T26551] netlink: 136 bytes leftover after parsing attributes in process `syz.2.4974'. [ 1233.851387][T26551] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 1235.954375][T26583] netlink: 'syz.2.4982': attribute type 1 has an invalid length. [ 1235.993945][T26583] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1237.300419][T26608] FAULT_INJECTION: forcing a failure. [ 1237.300419][T26608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1237.304394][T26608] CPU: 1 UID: 0 PID: 26608 Comm: syz.4.4986 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(full) [ 1237.304414][T26608] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1237.304423][T26608] Call Trace: [ 1237.304430][T26608] [ 1237.304436][T26608] dump_stack_lvl+0x16c/0x1f0 [ 1237.304453][T26608] should_fail_ex+0x512/0x640 [ 1237.304466][T26608] _copy_from_user+0x2e/0xd0 [ 1237.304479][T26608] video_usercopy+0x723/0x1440 [ 1237.304491][T26608] ? __pfx___video_do_ioctl+0x10/0x10 [ 1237.304502][T26608] ? __pfx_video_usercopy+0x10/0x10 [ 1237.304518][T26608] ? hook_file_ioctl_common+0x145/0x410 [ 1237.304539][T26608] v4l2_ioctl+0x1bd/0x250 [ 1237.304548][T26608] ? __pfx_fput+0x1/0x10 [ 1237.304562][T26608] v4l2_compat_ioctl32+0x214/0x2c0 [ 1237.304577][T26608] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 1237.304593][T26608] __ia32_compat_sys_ioctl+0x23f/0x370 [ 1237.304609][T26608] __do_fast_syscall_32+0x7c/0x3a0 [ 1237.304621][T26608] do_fast_syscall_32+0x32/0x80 [ 1237.304632][T26608] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1237.304645][T26608] RIP: 0023:0xf703e579 [ 1237.304654][T26608] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1237.304664][T26608] RSP: 002b:00000000f502e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1237.304674][T26608] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c008561c [ 1237.304681][T26608] RDX: 0000000080000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 1237.304687][T26608] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1237.304693][T26608] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1237.304700][T26608] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1237.304712][T26608] [ 1237.725810][T26625] trusted_key: encrypted_key: insufficient parameters specified [ 1237.745669][ T5780] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1237.917437][ T5780] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 1237.929646][ T5780] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1237.932594][ T5780] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1237.948908][ T5780] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1237.952394][ T5780] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1237.955423][ T5780] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1237.958901][ T5780] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1237.962206][ T5780] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1237.965377][ T5780] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1237.968856][ T5780] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1237.972286][ T5780] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1237.975450][ T5780] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1237.979012][ T5780] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1237.982451][ T5780] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1237.985615][ T5780] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1237.989145][ T5780] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1237.992508][ T5780] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1237.995775][ T5780] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1237.999360][ T5780] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1238.002776][ T5780] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1238.005584][ T5780] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1238.009893][ T5780] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1238.013394][ T5780] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1238.016449][ T5780] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1238.020131][ T5780] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1238.024627][ T5780] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1238.027561][ T5780] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1238.030404][ T5780] usb 6-1: Product: syz [ 1238.032054][ T5780] usb 6-1: Manufacturer: syz [ 1238.033659][ T5780] usb 6-1: SerialNumber: syz [ 1238.037766][ T5780] usb 6-1: config 0 descriptor?? [ 1238.044612][ T5780] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 1238.058412][T26627] FAULT_INJECTION: forcing a failure. [ 1238.058412][T26627] name failslab, interval 1, probability 0, space 0, times 0 [ 1238.062797][T26627] CPU: 1 UID: 0 PID: 26627 Comm: syz.4.4993 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(full) [ 1238.062813][T26627] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1238.062819][T26627] Call Trace: [ 1238.062823][T26627] [ 1238.062828][T26627] dump_stack_lvl+0x16c/0x1f0 [ 1238.062843][T26627] should_fail_ex+0x512/0x640 [ 1238.062854][T26627] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1238.062867][T26627] should_failslab+0xc2/0x120 [ 1238.062879][T26627] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1238.062889][T26627] ? __lock_acquire+0xb8a/0x1c90 [ 1238.062903][T26627] ? alloc_vfsmnt+0x23/0x730 [ 1238.062917][T26627] alloc_vfsmnt+0x23/0x730 [ 1238.062930][T26627] clone_mnt+0x6d/0xff0 [ 1238.062947][T26627] copy_tree+0xf0/0xa20 [ 1238.062958][T26627] ? down_write+0x14d/0x200 [ 1238.062972][T26627] __do_loopback+0x44b/0x5a0 [ 1238.062983][T26627] vfs_open_tree+0x4a6/0x910 [ 1238.062995][T26627] ? __pfx_vfs_open_tree+0x10/0x10 [ 1238.063006][T26627] ? __pfx_ksys_write+0x10/0x10 [ 1238.063018][T26627] __ia32_sys_open_tree+0x83/0x150 [ 1238.063047][T26627] ? lockdep_hardirqs_on+0x7c/0x110 [ 1238.063059][T26627] __do_fast_syscall_32+0x7c/0x3a0 [ 1238.063071][T26627] do_fast_syscall_32+0x32/0x80 [ 1238.063082][T26627] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1238.063095][T26627] RIP: 0023:0xf703e579 [ 1238.063104][T26627] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1238.063114][T26627] RSP: 002b:00000000f502e55c EFLAGS: 00000296 ORIG_RAX: 00000000000001ac [ 1238.063124][T26627] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000640 [ 1238.063131][T26627] RDX: 0000000000089901 RSI: 0000000000000000 RDI: 0000000000000000 [ 1238.063137][T26627] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1238.063143][T26627] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1238.063149][T26627] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1238.063162][T26627] [ 1238.333033][T26631] input: syz1 as /devices/virtual/input/input73 [ 1238.441079][T26637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1238.444114][T26637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1238.834007][T26650] netlink: 'syz.3.5000': attribute type 1 has an invalid length. [ 1238.852723][T26650] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1238.922774][T26653] FAULT_INJECTION: forcing a failure. [ 1238.922774][T26653] name failslab, interval 1, probability 0, space 0, times 0 [ 1238.926721][T26653] CPU: 2 UID: 0 PID: 26653 Comm: syz.3.5001 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(full) [ 1238.926735][T26653] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1238.926742][T26653] Call Trace: [ 1238.926746][T26653] [ 1238.926750][T26653] dump_stack_lvl+0x16c/0x1f0 [ 1238.926765][T26653] should_fail_ex+0x512/0x640 [ 1238.926776][T26653] ? fs_reclaim_acquire+0xae/0x150 [ 1238.926791][T26653] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1238.926802][T26653] should_failslab+0xc2/0x120 [ 1238.926814][T26653] __kmalloc_noprof+0xd2/0x510 [ 1238.926827][T26653] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1238.926839][T26653] ? tomoyo_profile+0x47/0x60 [ 1238.926851][T26653] tomoyo_path_number_perm+0x245/0x580 [ 1238.926865][T26653] ? tomoyo_path_number_perm+0x237/0x580 [ 1238.926879][T26653] ? irq_work_sync+0x274/0x310 [ 1238.926895][T26653] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1238.926924][T26653] ? find_held_lock+0x2b/0x80 [ 1238.926934][T26653] ? hook_file_ioctl_common+0x145/0x410 [ 1238.926951][T26653] ? __fget_files+0x20e/0x3c0 [ 1238.926969][T26653] security_file_ioctl_compat+0x9b/0x240 [ 1238.926986][T26653] __ia32_compat_sys_ioctl+0xc3/0x370 [ 1238.927002][T26653] __do_fast_syscall_32+0x7c/0x3a0 [ 1238.927015][T26653] do_fast_syscall_32+0x32/0x80 [ 1238.927045][T26653] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1238.927058][T26653] RIP: 0023:0xf7f57579 [ 1238.927066][T26653] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1238.927077][T26653] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1238.927087][T26653] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c0045543 [ 1238.927094][T26653] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1238.927100][T26653] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1238.927106][T26653] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1238.927112][T26653] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1238.927125][T26653] [ 1238.927130][T26653] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1239.755087][T26661] 9pnet_virtio: no channels available for device syz [ 1240.719596][ T24] usb 6-1: USB disconnect, device number 65 [ 1240.725846][ T24] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 1241.125030][T26687] FAULT_INJECTION: forcing a failure. [ 1241.125030][T26687] name failslab, interval 1, probability 0, space 0, times 0 [ 1241.130119][T26687] CPU: 2 UID: 0 PID: 26687 Comm: syz.3.5012 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(full) [ 1241.130144][T26687] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1241.130155][T26687] Call Trace: [ 1241.130162][T26687] [ 1241.130170][T26687] dump_stack_lvl+0x16c/0x1f0 [ 1241.130191][T26687] should_fail_ex+0x512/0x640 [ 1241.130209][T26687] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1241.130242][T26687] should_failslab+0xc2/0x120 [ 1241.130264][T26687] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1241.130289][T26687] ? __pfx___mutex_lock+0x10/0x10 [ 1241.130306][T26687] ? __request_region+0x5c/0xf0 [ 1241.130333][T26687] __request_region+0x5c/0xf0 [ 1241.130358][T26687] comedi_request_region+0x6d/0x1c0 [ 1241.130378][T26687] c6xdigio_attach+0x52/0x4b0 [ 1241.130400][T26687] comedi_device_attach+0x3b0/0x900 [ 1241.130423][T26687] do_devconfig_ioctl+0x1a7/0x580 [ 1241.130447][T26687] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 1241.130479][T26687] ? kasan_save_stack+0x42/0x60 [ 1241.130494][T26687] ? kasan_save_stack+0x33/0x60 [ 1241.130509][T26687] ? kasan_save_track+0x14/0x30 [ 1241.130523][T26687] ? kasan_save_free_info+0x3b/0x60 [ 1241.130545][T26687] ? __kasan_slab_free+0x51/0x70 [ 1241.130560][T26687] ? kfree+0x2b4/0x4d0 [ 1241.130581][T26687] ? tomoyo_path_number_perm+0x470/0x580 [ 1241.130607][T26687] comedi_unlocked_ioctl+0x165d/0x2f00 [ 1241.130634][T26687] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1241.130658][T26687] ? kasan_quarantine_put+0x10a/0x240 [ 1241.130668][T26687] ? lockdep_hardirqs_on+0x7c/0x110 [ 1241.130680][T26687] ? find_held_lock+0x2b/0x80 [ 1241.130691][T26687] ? tomoyo_path_number_perm+0x295/0x580 [ 1241.130708][T26687] ? tomoyo_path_number_perm+0x18d/0x580 [ 1241.130723][T26687] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1241.130743][T26687] comedi_compat_ioctl+0x1d0/0x990 [ 1241.130758][T26687] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 1241.130782][T26687] ? find_held_lock+0x2b/0x80 [ 1241.130792][T26687] ? hook_file_ioctl_common+0x145/0x410 [ 1241.130810][T26687] ? __fget_files+0x20e/0x3c0 [ 1241.130825][T26687] ? __fput_deferred+0x480/0x480 [ 1241.130839][T26687] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 1241.130854][T26687] __ia32_compat_sys_ioctl+0x23f/0x370 [ 1241.130871][T26687] __do_fast_syscall_32+0x7c/0x3a0 [ 1241.130884][T26687] do_fast_syscall_32+0x32/0x80 [ 1241.130895][T26687] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1241.130908][T26687] RIP: 0023:0xf7f57579 [ 1241.130918][T26687] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1241.130928][T26687] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1241.130939][T26687] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040946400 [ 1241.130945][T26687] RDX: 0000000080000540 RSI: 0000000000000000 RDI: 0000000000000000 [ 1241.130951][T26687] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1241.130957][T26687] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1241.130964][T26687] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1241.130977][T26687] [ 1241.130984][T26687] comedi comedi0: c6xdigio: I/O port conflict (0x109,3) [ 1241.251692][T26687] ================================================================== [ 1241.254288][T26687] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x63/0x70 [ 1241.256913][T26687] Read of size 8 at addr ffff8880509ca830 by task syz.3.5012/26687 [ 1241.261435][T26687] [ 1241.262465][T26687] CPU: 2 UID: 0 PID: 26687 Comm: syz.3.5012 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(full) [ 1241.262488][T26687] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1241.262500][T26687] Call Trace: [ 1241.262507][T26687] [ 1241.262515][T26687] dump_stack_lvl+0x116/0x1f0 [ 1241.262537][T26687] print_report+0xcd/0x610 [ 1241.262557][T26687] ? __virt_addr_valid+0x81/0x610 [ 1241.262575][T26687] ? __phys_addr+0xe8/0x180 [ 1241.262595][T26687] ? sysfs_remove_file_ns+0x63/0x70 [ 1241.262617][T26687] kasan_report+0xe0/0x110 [ 1241.262636][T26687] ? sysfs_remove_file_ns+0x63/0x70 [ 1241.262660][T26687] sysfs_remove_file_ns+0x63/0x70 [ 1241.262682][T26687] driver_remove_file+0x4a/0x60 [ 1241.262704][T26687] bus_remove_driver+0x224/0x2c0 [ 1241.262721][T26687] driver_unregister+0x76/0xb0 [ 1241.262741][T26687] comedi_device_detach+0x140/0x9e0 [ 1241.262758][T26687] ? comedi_request_region+0xd4/0x1c0 [ 1241.262775][T26687] comedi_device_attach+0x43d/0x900 [ 1241.262794][T26687] do_devconfig_ioctl+0x1a7/0x580 [ 1241.262816][T26687] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 1241.262842][T26687] ? kasan_save_stack+0x42/0x60 [ 1241.262857][T26687] ? kasan_save_stack+0x33/0x60 [ 1241.262872][T26687] ? kasan_save_track+0x14/0x30 [ 1241.262887][T26687] ? kasan_save_free_info+0x3b/0x60 [ 1241.262908][T26687] ? __kasan_slab_free+0x51/0x70 [ 1241.262924][T26687] ? kfree+0x2b4/0x4d0 [ 1241.262945][T26687] ? tomoyo_path_number_perm+0x470/0x580 [ 1241.262971][T26687] comedi_unlocked_ioctl+0x165d/0x2f00 [ 1241.263021][T26687] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1241.263054][T26687] ? kasan_quarantine_put+0x10a/0x240 [ 1241.263069][T26687] ? lockdep_hardirqs_on+0x7c/0x110 [ 1241.263086][T26687] ? find_held_lock+0x2b/0x80 [ 1241.263103][T26687] ? tomoyo_path_number_perm+0x295/0x580 [ 1241.263127][T26687] ? tomoyo_path_number_perm+0x18d/0x580 [ 1241.263151][T26687] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1241.263176][T26687] comedi_compat_ioctl+0x1d0/0x990 [ 1241.263201][T26687] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 1241.263238][T26687] ? find_held_lock+0x2b/0x80 [ 1241.263256][T26687] ? hook_file_ioctl_common+0x145/0x410 [ 1241.263280][T26687] ? __fget_files+0x20e/0x3c0 [ 1241.263305][T26687] ? __fput_deferred+0x480/0x480 [ 1241.263326][T26687] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 1241.263350][T26687] __ia32_compat_sys_ioctl+0x23f/0x370 [ 1241.263375][T26687] __do_fast_syscall_32+0x7c/0x3a0 [ 1241.263395][T26687] do_fast_syscall_32+0x32/0x80 [ 1241.263411][T26687] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1241.263431][T26687] RIP: 0023:0xf7f57579 [ 1241.263445][T26687] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1241.263460][T26687] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1241.263476][T26687] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040946400 [ 1241.263486][T26687] RDX: 0000000080000540 RSI: 0000000000000000 RDI: 0000000000000000 [ 1241.263495][T26687] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1241.263504][T26687] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1241.263514][T26687] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1241.263530][T26687] [ 1241.263536][T26687] [ 1241.380393][T26687] Allocated by task 25991: [ 1241.382265][T26687] kasan_save_stack+0x33/0x60 [ 1241.383944][T26687] kasan_save_track+0x14/0x30 [ 1241.385729][T26687] __kasan_kmalloc+0xaa/0xb0 [ 1241.387650][T26687] __kmalloc_node_noprof+0x21e/0x500 [ 1241.389797][T26687] alloc_slab_obj_exts+0x41/0xa0 [ 1241.391869][T26687] new_slab+0x283/0x330 [ 1241.393623][T26687] ___slab_alloc+0xd9c/0x1940 [ 1241.395576][T26687] __slab_alloc.constprop.0+0x56/0xb0 [ 1241.397813][T26687] kmem_cache_alloc_noprof+0xef/0x3b0 [ 1241.400063][T26687] vm_area_dup+0x27/0x8d0 [ 1241.401883][T26687] __split_vma+0x18e/0x1070 [ 1241.403846][T26687] vms_gather_munmap_vmas+0x1c2/0x1310 [ 1241.406118][T26687] __mmap_region+0x3c7/0x25e0 [ 1241.408062][T26687] mmap_region+0x1ab/0x3f0 [ 1241.409930][T26687] do_mmap+0xa3e/0x1210 [ 1241.411701][T26687] vm_mmap_pgoff+0x281/0x450 [ 1241.413654][T26687] ksys_mmap_pgoff+0x32c/0x5c0 [ 1241.415690][T26687] __x64_sys_mmap+0x125/0x190 [ 1241.417703][T26687] do_syscall_64+0xcd/0x490 [ 1241.419635][T26687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1241.422109][T26687] [ 1241.423154][T26687] Freed by task 16406: [ 1241.424875][T26687] kasan_save_stack+0x33/0x60 [ 1241.426797][T26687] kasan_save_track+0x14/0x30 [ 1241.428691][T26687] kasan_save_free_info+0x3b/0x60 [ 1241.430729][T26687] __kasan_slab_free+0x51/0x70 [ 1241.432684][T26687] kfree+0x2b4/0x4d0 [ 1241.434088][T26687] __free_slab+0x117/0x170 [ 1241.435736][T26687] rcu_core+0x79c/0x14e0 [ 1241.437042][T26687] handle_softirqs+0x219/0x8e0 [ 1241.438615][T26687] __irq_exit_rcu+0x109/0x170 [ 1241.440113][T26687] irq_exit_rcu+0x9/0x30 [ 1241.441505][T26687] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1241.443227][T26687] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1241.445071][T26687] [ 1241.445992][T26687] The buggy address belongs to the object at ffff8880509ca800 [ 1241.445992][T26687] which belongs to the cache kmalloc-256 of size 256 [ 1241.450206][T26687] The buggy address is located 48 bytes inside of [ 1241.450206][T26687] freed 256-byte region [ffff8880509ca800, ffff8880509ca900) [ 1241.455399][T26687] [ 1241.456173][T26687] The buggy address belongs to the physical page: [ 1241.458125][T26687] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880509caa00 pfn:0x509ca [ 1241.461394][T26687] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1241.464803][T26687] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 1241.468390][T26687] page_type: f5(slab) [ 1241.470071][T26687] raw: 04fff00000000240 ffff88801b842b40 ffffea0001816010 ffffea0001418410 [ 1241.473612][T26687] raw: ffff8880509caa00 000000000010000a 00000000f5000000 0000000000000000 [ 1241.477204][T26687] head: 04fff00000000240 ffff88801b842b40 ffffea0001816010 ffffea0001418410 [ 1241.480778][T26687] head: ffff8880509caa00 000000000010000a 00000000f5000000 0000000000000000 [ 1241.484314][T26687] head: 04fff00000000001 ffffea0001427281 00000000ffffffff 00000000ffffffff [ 1241.487281][T26687] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1241.490428][T26687] page dumped because: kasan: bad access detected [ 1241.492696][T26687] page_owner tracks the page as allocated [ 1241.494465][T26687] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5955, tgid 5955 (syz-executor), ts 47162716340, free_ts 45954236854 [ 1241.502702][T26687] post_alloc_hook+0x1c0/0x230 [ 1241.504754][T26687] get_page_from_freelist+0x1321/0x3890 [ 1241.507080][T26687] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1241.509562][T26687] alloc_pages_mpol+0x1fb/0x550 [ 1241.511599][T26687] new_slab+0x23b/0x330 [ 1241.513391][T26687] ___slab_alloc+0xd9c/0x1940 [ 1241.515394][T26687] __slab_alloc.constprop.0+0x56/0xb0 [ 1241.517637][T26687] __kmalloc_noprof+0x2f2/0x510 [ 1241.519413][T26687] fib_create_info+0x53f/0x46b0 [ 1241.521044][T26687] fib_table_insert+0x177/0x1c40 [ 1241.522571][T26687] fib_magic+0x4d4/0x5c0 [ 1241.523903][T26687] fib_add_ifaddr+0x16d/0x580 [ 1241.525364][T26687] fib_inetaddr_event+0x147/0x270 [ 1241.526983][T26687] notifier_call_chain+0xbc/0x410 [ 1241.528578][T26687] blocking_notifier_call_chain+0x69/0xa0 [ 1241.530344][T26687] __inet_insert_ifa+0x925/0xcd0 [ 1241.531931][T26687] page last free pid 0 tgid 0 stack trace: [ 1241.534071][T26687] __free_frozen_pages+0x7fe/0x1180 [ 1241.535714][T26687] rcu_core+0x79c/0x14e0 [ 1241.537103][T26687] handle_softirqs+0x219/0x8e0 [ 1241.538586][T26687] __irq_exit_rcu+0x109/0x170 [ 1241.540065][T26687] irq_exit_rcu+0x9/0x30 [ 1241.541661][T26687] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1241.543926][T26687] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1241.545775][T26687] [ 1241.546540][T26687] Memory state around the buggy address: [ 1241.548319][T26687] ffff8880509ca700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1241.550837][T26687] ffff8880509ca780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1241.554126][T26687] >ffff8880509ca800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1241.557424][T26687] ^ [ 1241.559732][T26687] ffff8880509ca880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1241.562975][T26687] ffff8880509ca900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1241.565856][T26687] ================================================================== [ 1241.572834][T26687] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1241.575193][T26687] CPU: 3 UID: 0 PID: 26687 Comm: syz.3.5012 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(full) [ 1241.579048][T26687] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1241.582621][T26687] Call Trace: [ 1241.583887][T26687] [ 1241.584837][T26687] dump_stack_lvl+0x3d/0x1f0 [ 1241.586357][T26687] panic+0x71c/0x800 [ 1241.587652][T26687] ? __pfx_panic+0x10/0x10 [ 1241.589123][T26687] ? mark_held_locks+0x49/0x80 [ 1241.590719][T26687] ? preempt_schedule_thunk+0x16/0x30 [ 1241.592460][T26687] ? sysfs_remove_file_ns+0x63/0x70 [ 1241.594151][T26687] ? preempt_schedule_common+0x44/0xc0 [ 1241.595934][T26687] ? check_panic_on_warn+0x1f/0xb0 [ 1241.597607][T26687] ? sysfs_remove_file_ns+0x63/0x70 [ 1241.599441][T26687] check_panic_on_warn+0xab/0xb0 [ 1241.601152][T26687] end_report+0x107/0x170 [ 1241.602546][T26687] kasan_report+0xee/0x110 [ 1241.603991][T26687] ? sysfs_remove_file_ns+0x63/0x70 [ 1241.605702][T26687] sysfs_remove_file_ns+0x63/0x70 [ 1241.607352][T26687] driver_remove_file+0x4a/0x60 [ 1241.608938][T26687] bus_remove_driver+0x224/0x2c0 [ 1241.610554][T26687] driver_unregister+0x76/0xb0 [ 1241.612496][T26687] comedi_device_detach+0x140/0x9e0 [ 1241.614671][T26687] ? comedi_request_region+0xd4/0x1c0 [ 1241.616708][T26687] comedi_device_attach+0x43d/0x900 [ 1241.618371][T26687] do_devconfig_ioctl+0x1a7/0x580 [ 1241.620294][T26687] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 1241.622126][T26687] ? kasan_save_stack+0x42/0x60 [ 1241.623727][T26687] ? kasan_save_stack+0x33/0x60 [ 1241.625273][T26687] ? kasan_save_track+0x14/0x30 [ 1241.626873][T26687] ? kasan_save_free_info+0x3b/0x60 [ 1241.628555][T26687] ? __kasan_slab_free+0x51/0x70 [ 1241.630221][T26687] ? kfree+0x2b4/0x4d0 [ 1241.631661][T26687] ? tomoyo_path_number_perm+0x470/0x580 [ 1241.633512][T26687] comedi_unlocked_ioctl+0x165d/0x2f00 [ 1241.635349][T26687] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1241.637236][T26687] ? kasan_quarantine_put+0x10a/0x240 [ 1241.638974][T26687] ? lockdep_hardirqs_on+0x7c/0x110 [ 1241.640613][T26687] ? find_held_lock+0x2b/0x80 [ 1241.642107][T26687] ? tomoyo_path_number_perm+0x295/0x580 [ 1241.644193][T26687] ? tomoyo_path_number_perm+0x18d/0x580 [ 1241.646550][T26687] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1241.648712][T26687] comedi_compat_ioctl+0x1d0/0x990 [ 1241.650315][T26687] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 1241.652095][T26687] ? find_held_lock+0x2b/0x80 [ 1241.653626][T26687] ? hook_file_ioctl_common+0x145/0x410 [ 1241.655434][T26687] ? __fget_files+0x20e/0x3c0 [ 1241.656965][T26687] ? __fput_deferred+0x480/0x480 [ 1241.658524][T26687] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 1241.660250][T26687] __ia32_compat_sys_ioctl+0x23f/0x370 [ 1241.662110][T26687] __do_fast_syscall_32+0x7c/0x3a0 [ 1241.663766][T26687] do_fast_syscall_32+0x32/0x80 [ 1241.665647][T26687] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1241.668272][T26687] RIP: 0023:0xf7f57579 [ 1241.669573][T26687] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1241.675765][T26687] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1241.679246][T26687] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040946400 [ 1241.681780][T26687] RDX: 0000000080000540 RSI: 0000000000000000 RDI: 0000000000000000 [ 1241.684222][T26687] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1241.687047][T26687] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1241.690141][T26687] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1241.693186][T26687] [ 1241.695247][T26687] Kernel Offset: disabled [ 1241.697081][T26687] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:38:18 Registers: info registers vcpu 0 CPU#0 RAX=00000000023c5bdb RBX=0000000000000000 RCX=ffffffff8b82bc69 RDX=0000000000000000 RSI=ffffffff8de29cd3 RDI=ffffffff8c155e60 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed1005646645 R10=ffff88802b23322b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a95c50 R15=0000000000000000 RIP=ffffffff8b82a7cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809752d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002c911ffc CR3=0000000051ef5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 EAX=f6a96368 EBX=ffffffff ECX=00000000 EDX=81f0d8cb ESI=81f0d075 EDI=ffffffff EBP=f68fd578 ESP=ffcda110 EIP=f7077b12 EFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 56ae0440 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 0004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2a3953 CR3=000000006a824000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000002f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8556cf05 RDI=ffffffff9b09f540 RBP=ffffffff9b09f500 RSP=ffffc90004fbf1a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3530383838666666 R12=0000000000000000 R13=000000000000002f R14=ffffffff9b09f500 R15=ffffffff8556cea0 RIP=ffffffff8556cf2f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809772d000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5075fac CR3=0000000051ef5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080010001 RBX=0000011f0cc74580 RCX=ffffffff81a86d84 RDX=ffff8880235c4880 RSI=ffffffff81a86df2 RDI=0000000000000001 RBP=ffff88802b5285f8 RSP=ffffc900005e8e98 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=ffff88802b527c80 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff81bb54d8 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809782d000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5076b04 CR3=000000006ae79000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000