last executing test programs: 6m44.503323063s ago: executing program 1 (id=657): pipe(&(0x7f0000000040)) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_setup(0x7ff, &(0x7f0000002080)=0x0) io_submit(r3, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, r2}]) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f00000000c0)={0x0, "63ff879118110cd2e1f7fbd15ec7918e806deb14c04b0d0000930700", 0x3, 0x1, 0x3, 0x1, 0x10, 0x4, 0x1, 0x1}) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) io_setup(0x2, &(0x7f00000011c0)) (async) io_setup(0x2, &(0x7f00000011c0)=0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000009c0)=[{{&(0x7f0000000440)=@qipcrtr, 0x80, 0x0}, 0x7}, {{&(0x7f00000005c0)=@hci, 0x80, 0x0}, 0xfff}, {{&(0x7f0000000140)=@nfc_llcp, 0x80, &(0x7f0000000880)=[{&(0x7f0000000200)=""/172, 0xac}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/37, 0x25}, {&(0x7f0000000340)=""/47, 0x2f}, {&(0x7f0000000380)=""/46, 0x2e}, {&(0x7f00000004c0)=""/202, 0xca}, {&(0x7f0000000640)=""/212, 0xd4}, {&(0x7f0000000740)=""/187, 0xbb}, {&(0x7f0000000800)=""/115, 0x73}], 0x9, &(0x7f0000000900)=""/136, 0x88}, 0x8}], 0x3, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r6, &(0x7f0000002440)=""/116, 0x74) (async) keyctl$read(0xb, r6, &(0x7f0000002440)=""/116, 0x74) sendmmsg$sock(r5, &(0x7f00000044c0), 0x4000000000001c0, 0x0) io_submit(r4, 0x2, &(0x7f0000000b00)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2, r0}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000300)='m', 0x1, 0x0, 0x0, 0x0, r2}]) (async) io_submit(r4, 0x2, &(0x7f0000000b00)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2, r0}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000300)='m', 0x1, 0x0, 0x0, 0x0, r2}]) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000b40)={0x8, 0x0, '\x00', {0x0, @bt={0x9, 0x8, 0x1, 0x3, 0x401, 0x1, 0xc0, 0x3a9, 0x7, 0xffbfffa4, 0x7, 0x200, 0x4, 0x6, 0x10, 0x20, {0xd00c, 0x1}, 0x0, 0x7}}}) (async) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000b40)={0x8, 0x0, '\x00', {0x0, @bt={0x9, 0x8, 0x1, 0x3, 0x401, 0x1, 0xc0, 0x3a9, 0x7, 0xffbfffa4, 0x7, 0x200, 0x4, 0x6, 0x10, 0x20, {0xd00c, 0x1}, 0x0, 0x7}}}) 6m44.364200088s ago: executing program 1 (id=661): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x6ea, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000015006b030231a6080c000af32c00009d31fc0000f800250f02000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000900)=ANY=[@ANYRES16=r1, @ANYBLOB="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"], 0x30}}, 0x40) set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x1, 0x5, 0x9}}, 0x28) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) recvmmsg(r3, &(0x7f00000034c0), 0x0, 0x10720, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socket$inet6(0xa, 0x3, 0x7) 6m43.494314728s ago: executing program 1 (id=665): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c034001000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c830750071000100020204000300f8"], 0x7a) 6m43.282913356s ago: executing program 1 (id=669): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000100), 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioprio_set$pid(0x2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x800008, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x3f46137792f68265) syz_clone(0x180, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r3, 0xc0049364, &(0x7f00000001c0)) r4 = socket(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r5, 0x0) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f00000000c0)) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x894) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x9, 0x0, {{0x4b, 0x4, 0x0, 0x0, 0x12c, 0x64, 0x0, 0x0, 0x29, 0x0, @local, @rand_addr=0x3, {[@ra={0x94, 0x4}, @end, @end, @cipso={0x86, 0x57, 0xffffffffffffffff, [{0x6, 0x4, "1ed1"}, {0x0, 0x10, "a58a20c1048c8632d6067e008203"}, {0x1, 0x4, "1c15"}, {0x1, 0x4, 'ma'}, {0x5, 0xf, "762bd46d6e6bd9a84f0a83ad23"}, {0x0, 0xb, "280c8c885976a053b1"}, {0x1, 0x3, "a9"}, {0x7, 0x10, "a9a0ba8ed1ec823ad16d967ee88a"}, {0x1, 0x8, "31f9a8ca7ee6"}]}, @lsrr={0x83, 0xf, 0xd1, [@remote, @private=0xa010101, @local]}, @lsrr={0x83, 0x1f, 0xbf, [@local, @broadcast, @multicast1, @local, @broadcast, @dev={0xac, 0x14, 0x14, 0xa}, @rand_addr=0x64010102]}, @generic={0x89, 0xd, "7988de684288d71b94893a"}, @cipso={0x86, 0x2d, 0x3, [{0x0, 0xf, "5b5d45e6e36d1c000000000000"}, {0x7, 0x4, "9117"}, {0xe, 0x7, "9e67368c03"}, {0x7, 0xd, "08f5448519f674bc51c821"}]}, @ssrr={0x89, 0x27, 0xe9, [@empty, @multicast2, @empty, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x1c}, @multicast2, @empty, @empty]}, @lsrr={0x83, 0x2b, 0xaf, [@local, @multicast2, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x39}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x34}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}]}}}}}) 6m43.224312019s ago: executing program 1 (id=670): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) (fail_nth: 6) 6m42.969595402s ago: executing program 1 (id=672): r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r0, &(0x7f0000000340)=[{{&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)="08000000fa9be7cf", 0x8}], 0x1}}, {{&(0x7f0000000240)={0x2, 0xe22, @multicast2}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000440)="08000000001f009e", 0x8}], 0x1}}], 0x2, 0x4000) (fail_nth: 5) 6m42.924834881s ago: executing program 32 (id=672): r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r0, &(0x7f0000000340)=[{{&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)="08000000fa9be7cf", 0x8}], 0x1}}, {{&(0x7f0000000240)={0x2, 0xe22, @multicast2}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000440)="08000000001f009e", 0x8}], 0x1}}], 0x2, 0x4000) (fail_nth: 5) 4m9.175896348s ago: executing program 0 (id=1927): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)=0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x3c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x3c}}, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r4, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x2, 0x4, 0x3, 0x5, 0x1000, 0xffffffffffffffff, 0x6}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r6}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) 4m9.164609493s ago: executing program 0 (id=1928): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) clock_adjtime(0x1, &(0x7f0000000100)={0xd4, 0x3, 0x9, 0x2e, 0xb, 0x9, 0x9, 0xfffffffe, 0x0, 0x9, 0xe, 0x80, 0xf, 0x5, 0x659, 0x8, 0x7, 0xe, 0x100000, 0x7, 0xffff, 0x8, 0x2, 0xb, 0x9, 0x17f7}) 4m9.096119552s ago: executing program 0 (id=1929): setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x13, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$inet6(0xa, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000180)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x85, &(0x7f0000005f40), &(0x7f0000005e80)=0xfc9e) close_range(r3, 0xffffffffffffffff, 0x0) 4m8.887162495s ago: executing program 0 (id=1932): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file2\x00'}) ioctl$CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000580)={0x0, 0x0, 0x0, @lost_msgs}) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="a1ab000000000000000005000000000003000a000000"], 0x1c}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, &(0x7f0000000000)={0x1}) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r3}, 0x90) signalfd(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f1400002004c00e72f750395ed08a56331dbf9ed7815e381ad6e747033a07000000dc6cc01e321b65192ba6ec00123d00014009200c00bdad446b9bbc7a46e39882a5dcdf78b312f21308f868fece01955fed0009d78f0a947ee2b49e33538a0000220047514f0500a20ff2", 0x89}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x200040c0) read(r5, &(0x7f0000000140)=""/119, 0x77) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, 0x0) setpgid(0x0, r7) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r9 = openat$hpet(0xffffff9c, &(0x7f00000009c0), 0x0, 0x0) preadv(r9, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/152, 0x98}], 0x1, 0x2, 0x4000002) chmod(&(0x7f00000001c0)='./file0\x00', 0x10b) ioctl$AUTOFS_IOC_CATATONIC(r8, 0x9362, 0x0) 4m8.735201171s ago: executing program 0 (id=1936): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket(0x11, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0xaee2, 0x8, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5100}}) io_uring_enter(r1, 0x75fa, 0xe478, 0x0, 0x0, 0x0) 4m8.505581175s ago: executing program 0 (id=1940): setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x13, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$inet6(0xa, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000180)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x85, &(0x7f0000005f40), &(0x7f0000005e80)=0xfc9e) close_range(r3, 0xffffffffffffffff, 0x0) 4m8.423619238s ago: executing program 33 (id=1940): setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x13, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$inet6(0xa, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000180)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x85, &(0x7f0000005f40), &(0x7f0000005e80)=0xfc9e) close_range(r3, 0xffffffffffffffff, 0x0) 1m25.711971806s ago: executing program 3 (id=3217): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_open_dev$sg(0x0, 0x0, 0x38dd80) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x80, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @vbi={0x503, 0x0, 0x0, 0x0, [0xa00, 0x3]}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004080) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=ANY=[], 0x0, 0x2}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x110) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000100)='./file0\x00') r2 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffff46) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000000, 0x3, 0xfffffffffffffffb, 0xfffffffffedfff83, 0x3, 0x1, {0xffffffffffffffff, 0x3ff, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7fffffff, 0x6, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x12}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f04) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000000000000030100c0000000000004000000000000e2517317cb89748b41ea1c8205a807167087b88f7f28ecfef7dc410c5d63470d5d3ee4a0baac814b95b194e0e0a44de5f3b0166e811b6e7ad71451189dad4d26a0b6022134dee56e6212119844a03862a5e97e5b87adc19a6837737e734b9af6092b099fd64e2f114758439aadd4c3bb297e24aae963c4c46d1a1f0589cdd88eeb7f79e201ca25d3fbbfde000000000000000000"]) 1m23.969179094s ago: executing program 3 (id=3229): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) fcntl$getown(r1, 0x9) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000380)={0x320, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x80, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) 1m23.825184293s ago: executing program 3 (id=3231): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e00000004008000040000000c000000689d591f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x34}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') fchdir(r5) write$cgroup_int(r4, &(0x7f00000000c0)=0x1c3, 0x12) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r7 = getpid() sched_setaffinity(r7, 0x8, &(0x7f0000000240)=0x2) sched_setaffinity(r7, 0x8, &(0x7f0000000000)=0x2) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000006a78440cb823d664747f2cd68e9af8ce3884f56e6dc201bae29c9759920b562d0cb47b4969673fc5292999e6d9776ddfc1036346e01a8c066ac922ade94505b59248f25ccb1852d4bae1f9b6fdc48cd2fa886f1de1fef2cbcdd02fc90da1b7ee80869c408dc7dd154897e36dc80c9d21730cdc7edf7e90cd49d880cf0d098bcaee565ea2270a3674c1b3112a81bf7833dc583ca78cd45da9955c18ad8bd94a706b0280b1effcecee605d482b6f28eb38a1ea8caefe4787320c642476b03cd98bce19494b1173b6b7273dc0e94ab0c55244cce9e1c85d8a5f573be116f9fcc556119af61035a197fe7f948510", @ANYRES16=r6, @ANYBLOB="99742bbd7000f7dbdf2515000000140001800d0001007564703a73797a3200000000"], 0x28}, 0x1, 0x0, 0x0, 0x40005}, 0x20000000) 1m23.824712051s ago: executing program 3 (id=3232): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dmm32at\x00', [0x4f27, 0x43, 0x10000, 0x2f, 0x68, 0xcc7, 0xe, 0x4e579d34, 0xa, 0x100, 0xfffffff8, 0x1, 0x1db, 0x5, 0x0, 0x80000101, 0x5, 0x1a449, 0x4006, 0x40020003, 0x208d, 0x2, 0xe3c, 0xae, 0x7fff, 0x8, 0x3c, 0x1, 0x6, 0x0, 0x1000000]}) mkdir(&(0x7f0000000140)='./file0\x00', 0x63) mount(&(0x7f0000000080)=@sr0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='ufs\x00', 0x8403, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x30, 0x3e, 0x107, 0xfffffffc, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x10, 0x136, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x7}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @fd}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0x0, r4, r5, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r6, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r6, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r9 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x2) r10 = open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x0) ftruncate(r10, 0x2007ffd) sendfile(r8, r9, 0x0, 0x1000a3) write$UHID_GET_REPORT_REPLY(r6, &(0x7f0000000000)={0xa, {0x6, 0x2, 0x10}}, 0xa) 1m22.968575062s ago: executing program 3 (id=3246): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="020025bd7000fcdbdf255900000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fcdbdf25170000000c000680080006"], 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) 1m22.558872793s ago: executing program 3 (id=3247): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d0000000"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@o_path={0x0, 0x0, 0x0, r1}, 0x18) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001940)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) openat$nvram(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close(0x3) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, 0x0) 1m22.516398465s ago: executing program 34 (id=3247): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d0000000"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@o_path={0x0, 0x0, 0x0, r1}, 0x18) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001940)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) openat$nvram(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close(0x3) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, 0x0) 4.600544735s ago: executing program 2 (id=3958): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x4008811) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x244) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x18d1, 0x5022, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x40, 0x6, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x0, 0x6, {0x9, 0x21, 0x5, 0x5, 0x1, {0x22, 0x173}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x6, 0x7, 0x7f}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x1, 0x9, 0x7}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x1, 0xfe, 0x5f, 0x8, 0x7f}, 0x19, &(0x7f0000000600)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "af9b25528de259fb2a4f6c6369851cdc"}]}, 0x2, [{0xd3, &(0x7f00000000c0)=ANY=[@ANYBLOB="d30354063aad63bcf9896a9a0dfd231eb7116d55fc52902443d978dd2445266a73c636dcab2c6e568270e63613b350b54fbe4813208b0f476255c2c4402a38c4d8d8dd126515c625cfda1abf596436d7ecb7f347848d2147edac4adaf42f5bb5b8e1556f8f4ce522bebbd97c6363ff8306660c91d881c8b5c081f4b2412cef4869795d35265017c21d779ce84dce90b613eb8e8ec00f7a40cbb277c00f2bfadd9d795d13bd324cc94e3493cb52478000000000000000ff7a5f1c1878972dc00a0c6b9e4725162ccc5ee1d2c9e58314eb8a526e"]}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1c01}}]}) syz_usb_disconnect(r4) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)) r5 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r6 = add_key$keyring(&(0x7f0000000a00), &(0x7f0000000a40)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r6, &(0x7f0000000a80)='rxrpc_s\x00', &(0x7f0000000ac0)='enc=') r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='bdi_dirty_ratelimit\x00', r8}, 0x10) r10 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r10, r9, 0x0, 0x1, 0xfffffffffffffffe}, 0x30) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000640)=[r12, r11], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000005c0)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0], 0xa, 0x4, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_GETENCODER(r7, 0xc01464a6, &(0x7f0000000180)={r14}) connect$unix(r13, &(0x7f0000000680)=@abs={0x0, 0x0, 0x4e24}, 0x6e) syz_usb_disconnect(r5) syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x12, &(0x7f00000002c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "05f45c62", {0x3, 0x1, 0x0, 0x7f, 0x40, 0x2, 0x3}}) r15 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r15, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) 2.980046035s ago: executing program 4 (id=3969): r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x403, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x4, 0x1, 0x2}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 2.905124207s ago: executing program 4 (id=3970): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x200) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0x15, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x3, 0x0, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = socket(0x200000000000011, 0x2, 0x1) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r8, 0x0, 0x0}) io_uring_enter(r5, 0xd00, 0x7e15, 0xfaff, 0x0, 0x30) openat$ppp(0xffffff9c, &(0x7f0000000100), 0x40c00, 0x0) read(r0, 0x0, 0x0) 2.465994757s ago: executing program 2 (id=3971): openat$sndseq(0xffffffffffffff9c, 0x0, 0x200) bpf$BPF_GET_MAP_INFO(0x15, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket(0x200000000000011, 0x2, 0x1) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x0, 0x0}) io_uring_enter(r2, 0xd00, 0x7e15, 0xfaff, 0x0, 0x30) 2.028739636s ago: executing program 4 (id=3974): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}]}, @NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}}, 0x0) syz_open_dev$loop(0x0, 0x47ffff8, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x1001, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, 0xe) openat$sndseq(0xffffffffffffff9c, 0x0, 0x200) bpf$BPF_GET_MAP_INFO(0x15, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r4 = timerfd_create(0x0, 0x80800) timerfd_gettime(r4, &(0x7f0000000000)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x20, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_open_dev$audion(&(0x7f0000000000), 0x9, 0x20000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) 1.552424583s ago: executing program 2 (id=3980): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20004080}, 0x2404c044) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000002c0), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r6) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@delsa={0x34, 0x11, 0x4b49a87d091fa3c9, 0x70bd2c, 0x25dfdbfe, {@in6=@remote, 0x4d6, 0xa, 0x33}, [@mark={0xc, 0x15, {0x35075d, 0x6e}}]}, 0x34}}, 0x8000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x2) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r9) sendmsg$L2TP_CMD_TUNNEL_DELETE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x14, r10, 0x901, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) write$UHID_INPUT(r8, &(0x7f00000025c0)={0x9, {"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", 0x1000}}, 0x1006) 1.1707643s ago: executing program 5 (id=3986): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x70bd22, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf0}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x15, 0x5, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r4 = gettid() setpriority(0x0, r4, 0x1ff) pselect6(0x40, &(0x7f0000000080)={0x5, 0x0, 0x120000000000, 0x2, 0x500, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.093799009s ago: executing program 5 (id=3987): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0xffc0, 0x4, 0x0, 0x6}, 'syz1\x00', 0x50}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0xaae, 0xa0100) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) tee(r2, r3, 0x6, 0x0) r6 = socket(0x10, 0x80002, 0x0) socketpair(0x1, 0x1, 0x5, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000200)=0x50, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r8 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x0, 0x6, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1}}) r9 = socket(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = getpid() ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_ext={0x1c, 0xb, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd5b, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @jmp={0x5, 0x0, 0x8, 0x1, 0x1, 0x8, 0xfffffffffffffffc}, @exit, @cb_func={0x18, 0xa, 0x4, 0x0, 0x1}]}, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x83, &(0x7f0000000500)=""/131, 0x40f00, 0x14, '\x00', r12, 0x0, r5, 0x8, &(0x7f00000002c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0x2, 0x10, 0x5}, 0x10, 0x2e058, r2, 0x1, &(0x7f0000000600)=[r5], &(0x7f0000000640)=[{0x1, 0x1, 0x6, 0xb}], 0x10, 0x9}, 0x94) r13 = syz_pidfd_open(r11, 0x0) process_madvise(r13, &(0x7f00000015c0)=[{0x0, 0xb3c9de750fa141ee}, {&(0x7f0000001600)="7fe370522d6af6625215f1793293827ec1fbafd2669ec71d6ec4f18aaa71edae948611d70900e80e4116a3c114041430f19bd4f37e3c7238ed6e6d46979c2220bde96ffe55c88d2e697fd133e5733e1bbb159ba81a1e8e2fb2e51596", 0x1}, {&(0x7f0000001300)="0454c96113b0da138a30557b0c206d7c7ba28c5cf82e468ed91537d279936ddcf06ef737e0943554457a28db61aea38a154bf19b456388daf4df61c9febcd9b8a2b14929c6f097f4ff11e686a8a37381b9321ae19dd77be474863e35633dec7003568e91eab8e870a93a73b6dea475547a826b25021aecd727c201c9cea0bfba0122b00573c286b821d43d0b4e38ec90b7d08565bf81862bdf5115e75886e742c51e058d0752982da309d53a7c0d320fdbd38bfaa998ff981d15928f783b2728ecc210898685dfc72398e665b7892024c0ab0dcfe9d3fc", 0xd7}, {&(0x7f0000001400)="3e519bc4eb7b0a55b33bdb22cc7ca76aba33506ebcf89e67b16583e68404bbca008b995a73322a4cc7a3c436e94da49121c4f225ccd342612b46beb2f569a7a0423c0cf79f2d94c015b7b47bc11d5fe599214dbe7f92c8a14b6d254a8daa074ece2708f10e912eb72cb22efc14a0d0cc7cea79311ead3200c7aca0e920d83c8d7b92db", 0x83}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000014c0)="6b553f4de4ed875c9fadc16852f54981bcd646a5262fc3900592194638585e3d2e79f074f796720749ddc1a2661dcb2471a47d963fb4d817dfdb5f52dc8ab642030c2c771646051d08609527b36368b80794b8cb63fe817c3379951a047c5026c2e99eae6dc05c6845529fb603666d78c0e1e5f7bca8f1d8584b7409ccaf0da598af64d7bdd2ae21ac4fb4e07dee96a92a8dddecee7ccbede2d0a7d4f2da90dc3eb4ae8895091f05db58a786519f6fc924a465cc46ae6a9b8705de0705b8bab4f10cddc7756c53eadf4aa6e2379fd85e9c5e7bfc", 0xd4}], 0x6, 0x9, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@can_newroute={0x1c, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x7}, [@CGW_DST_IF={0x8, 0xa, r14}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@mpls_getroute={0x138, 0x1a, 0x100, 0x70bd2c, 0x25dfdbfe, {0x1c, 0x10, 0x80, 0x4, 0x0, 0x4, 0x0, 0xb, 0x2100}, [@RTA_VIA={0x14, 0x12, {0x25, "81faa17dfa4af68a3f094087faf9"}}, @RTA_NEWDST={0x84, 0x13, [{0x7}, {0x800, 0x0, 0x1}, {0xe}, {0x5, 0x0, 0x1}, {}, {0xf, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x4}, {0x10, 0x0, 0x1}, {0x5d, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0xe6}, {0x6, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x6}, {0x7caf, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x100}, {0x2}, {0x4, 0x0, 0x1}, {0x6}, {0x7fff}, {0x2, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xa1}, {0x46}, {}, {0xfc}, {0x8, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x9}]}, @RTA_NEWDST={0x84, 0x13, [{0x8}, {0x578}, {0x8d}, {0x7}, {0x8000, 0x0, 0x1}, {0xb7ae}, {0xffffe}, {0xf7895}, {0x401}, {0x2, 0x0, 0x1}, {0x9}, {0x3}, {0x9, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x1, 0x0, 0x1}, {0x7}, {0xffff8}, {0x800, 0x0, 0x1}, {0x4}, {0x7, 0x0, 0x1}, {0x3}, {0x4}, {0x7, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x2}, {0x0, 0x0, 0x1}, {0x3}, {0x401, 0x0, 0x1}, {0x6}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r6, &(0x7f00000000c0), 0x1dcc0939ee2e3bf, 0x0) 1.009477235s ago: executing program 4 (id=3988): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r1 = syz_open_dev$vim2m(0x0, 0x403, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x4, 0x1, 0x2}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 968.276644ms ago: executing program 4 (id=3989): socket(0x1d, 0x2, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setxattr$trusted_overlay_upper(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040), 0x0, 0x0, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001800c00028005000100000000002c0001801400030000000000000000000000ffffac1414bb1400040000000000000000000000ffff000000003c0003800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aab5fb91a4fc73b36849c8a9be678e5df8b0291c0d"], 0xc8}}, 0x0) dup(0xffffffffffffffff) r4 = socket$inet_smc(0x2b, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3, {0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000000340)={0x50, 0x0, r6}, 0x50) r8 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$FIBMAP(r8, 0x401870cb, &(0x7f0000000040)) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f00000005c0)=@sr0, r7, &(0x7f0000000600)) unshare(0x40020000) 967.251136ms ago: executing program 5 (id=3990): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0xffc0, 0x4, 0x0, 0x6}, 'syz1\x00', 0x50}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0xaae, 0xa0100) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) tee(r2, r3, 0x6, 0x0) socket(0x10, 0x80002, 0x0) socketpair(0x1, 0x1, 0x5, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000200)=0x50, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r7 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x0, 0x6, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1}}) r8 = socket(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = getpid() ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x901, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$sock_SIOCINQ(r14, 0x541b, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_ext={0x1c, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="180000005b0d0000000000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7fe000000000000850000008600000085110800fcffffff9500e9a962a20644633e00000100000000000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x83, &(0x7f0000000500)=""/131, 0x40f00, 0x14, '\x00', r11, 0x0, r5, 0x8, &(0x7f00000002c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0x2, 0x10, 0x5}, 0x10, 0x2e058, r2, 0x1, &(0x7f0000000600)=[r5], &(0x7f0000000640)=[{0x1, 0x1, 0x6, 0xb}], 0x10, 0x9}, 0x94) r15 = syz_pidfd_open(r10, 0x0) process_madvise(r15, &(0x7f00000015c0)=[{0x0, 0xb3c9de750fa141ee}, {&(0x7f0000001600)="7fe370522d6af6625215f1793293827ec1fbafd2669ec71d6ec4f18aaa71edae948611d70900e80e4116a3c114041430f19bd4f37e3c7238ed6e6d46979c2220bde96ffe55c88d2e697fd133e5733e1bbb159ba81a1e8e2fb2e51596", 0x1}, {&(0x7f0000001300)="0454c96113b0da138a30557b0c026d7c7ba28c5cf82e468ed91537d279936ddcf06ef737e0943554457a28db61aea38a154bf19b456388daf4df61c9febcd9b8a2b14929c6f097f4ff11e686a8a37381b9321ae19dd77be474863e35633dec7003568e91eab8e870a93a73b6dea475547a826b25021aecd727c201c9cea0bfba0122b00573c286b821d43d0b4e38ec90b7d08565bf81862bdf5115e75886e742c51e058d0752982da309d53a7c0d320fdbd38bfaa998ff981d15928f783b2728ecc210898685dfc72398e665b7892024c0ab0dcfe9d3fc", 0xd7}, {&(0x7f0000001400)="3e519bc4eb7b0a55b33bdb22cc7ca76aba33506ebcf89e67b16583e68404bbca008b995a73322a4cc7a3c436e94da49121c4f225ccd342612b46beb2f569a7a0423c0cf79f2d94c015b7b47bc11d5fe599214dbe7f92c8a14b6d254a8daa074ece2708f10e912eb72cb22efc14a0d0cc7cea79311ead3200c7aca0e920d83c8d7b92db", 0x83}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000014c0)="6b553f4de4ed875c9fadc16852f54981bcd646a5262fc3900592194638585e3d2e79f074f796720749ddc1a2661dcb2471a47d963fb4d817dfdb5f52dc8ab642030c2c771646051d08609527b36368b80794b8cb63fe817c3379951a047c5026c2e99eae6dc05c6845529fb603666d78c0e1e5f7bca8f1d8584b7409ccaf0da598af64d7bdd2ae21ac4fb4e07dee96a92a8dddecee7ccbede2d0a7d4f2da90dc3eb4ae8895091f05db58a786519f6fc924a465cc46ae6a9b8705de0705b8bab4f10cddc7756c53eadf4aa6e2379fd85e9c5e7bfc", 0xd4}], 0x6, 0x9, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@can_newroute={0x1c, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x7}, [@CGW_DST_IF={0x8, 0xa, r16}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x10}, 0x0) 965.023437ms ago: executing program 5 (id=3991): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd74) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_open_dev$sg(0x0, 0x0, 0x38dd80) r3 = socket$inet6(0xa, 0xa, 0x400000) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmmsg$inet6(r3, 0x0, 0x0, 0xc8004) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ptrace$ARCH_SET_CPUID(0x1e, 0x0, 0x0, 0x1012) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004080) syz_open_procfs$pagemap(0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r7 = socket(0x18, 0x0, 0x1) sendfile(r7, r6, 0x0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 887.247953ms ago: executing program 5 (id=3992): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x30, r2, 0x5, 0x3ffd, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac0a, 0xfac0b]}]]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x12c}}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r5, 0x11c, 0x2, &(0x7f0000000000)=""/169, &(0x7f00000000c0)=0xa9) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x3a, 0x701, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20040015}, 0x4000000) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x4024000}, 0x80000) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x30, r2, 0x5, 0x3ffd, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac0a, 0xfac0b]}]]}, 0x30}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a05000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000007a00000000c0a01020000000000000000010000000900020073797a3200000000740003807000008008000340000000010400018060000b801c0001800a0001006c696d69740000000c0002800800054000000000140001800e000100636f6e6e6c696d69740000001c0001800b00010072656a65637400000c0002800500020004000000100001800b000100736f636b657400000900010073797a30"], 0x12c}}, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) getsockopt$inet_mptcp_buf(r5, 0x11c, 0x2, &(0x7f0000000000)=""/169, &(0x7f00000000c0)=0xa9) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x3a, 0x701, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20040015}, 0x4000000) (async) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x4024000}, 0x80000) (async) 808.061581ms ago: executing program 5 (id=3993): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10010000004e20, 0x0, @local, 0xe}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x9, @local, 0x8000}, 0x1c) syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x110428, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x2, 0x2}, 0x10) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 605.20107ms ago: executing program 6 (id=3996): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x40, 0x4) setsockopt$sock_int(r0, 0x1, 0x1e, &(0x7f0000b4bffc)=0x8a, 0x4) write(r0, &(0x7f0000000040)='\"', 0x1) recvmmsg(r0, &(0x7f0000003200)=[{{&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)=""/11, 0xb}, {&(0x7f0000000180)=""/165, 0xa5}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x3, &(0x7f0000000280)=""/152, 0x98}}, {{&(0x7f0000000340)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000001700)=[{&(0x7f00000003c0)=""/67, 0x43}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000480)}, {&(0x7f00000004c0)=""/44, 0x2c}, {&(0x7f0000000500)=""/153, 0x99}, {&(0x7f0000001600)=""/26, 0x1a}, {&(0x7f0000001640)=""/184, 0xb8}], 0x7, &(0x7f0000001740)=""/51, 0x33}, 0x4}, {{&(0x7f0000001780)=@generic, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001800)=""/1, 0x1}, {&(0x7f0000001840)=""/130, 0x82}, {&(0x7f0000001900)=""/180, 0xb4}], 0x3, &(0x7f0000001a00)=""/98, 0x62}, 0xba}, {{&(0x7f0000001a80)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, &(0x7f0000003140)=[{&(0x7f0000001b00)=""/178, 0xb2}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/35, 0x23}, {&(0x7f0000001d00)=""/217, 0xd9}, {&(0x7f0000001e00)=""/222, 0xde}, {&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000002f00)=""/55, 0x37}, {&(0x7f0000002f40)=""/193, 0xc1}, {&(0x7f0000003040)}, {&(0x7f0000003080)=""/131, 0x83}], 0xa, &(0x7f00000031c0)=""/9, 0x9}, 0xb620}], 0x4, 0x2, 0x0) 551.77633ms ago: executing program 6 (id=3997): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r1 = syz_open_dev$vim2m(0x0, 0x403, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x4, 0x1, 0x2}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 551.17547ms ago: executing program 6 (id=3998): fsopen(0x0, 0x1) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c93010000c000500174008002522d44b0491"], 0x15) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe3d}, [@call={0x85, 0x0, 0x0, 0x13}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="c300"}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x0}]}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000000200)={r3, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e06921e8682d85ff9782762f86dd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$nvram(0xffffff9c, &(0x7f0000000040), 0x400, 0x0) 493.727952ms ago: executing program 6 (id=3999): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000300)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 'rose0\x00'}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) timer_create(0x3, &(0x7f0000000140)={0x0, 0x1e, 0x2, @thr={&(0x7f0000000280)="f123e938cfbdc565d89aa5906ac71c7da1691a9aa3467107419559977e7bea0b8ef0ac96460366b027d732c4a7e684", 0x0}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000501c0007800c00"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) r4 = dup3(r2, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)='B'}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 492.786028ms ago: executing program 6 (id=4000): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000004009500000000000000033bd3dc5c4c0b818d225c9bff38cf06a2ea434acf4e441b6f20042cd3e7612122bf5fbe0907cc25cdd931b05b6dfc118ea65ffa4e889cf08711c63f9e4484640b58dc6110c7386cf19a561cd4068796c3b49439d56c227f440ae74eeddede3f58834bab9b6218b6528f1b00d1ad5e830721ab093942192f0f50d32d749a4eb01c33c43ecce1b146bef632fc2bfd366549a4d331f53488ccb78684a90000000000000042000000"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) (async, rerun: 32) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) (rerun: 32) lseek(r1, 0x9, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r2, 0x8, &(0x7f00000000c0)=0x6) sendmsg$key(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2, 0x16, 0xa, 0x7, 0x16, 0x0, 0x70bd26, 0x25dfdbff, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e21}, @sadb_x_sa2={0x2, 0x13, 0x6a, 0x0, 0x0, 0x70bd2b, 0x3502}, @sadb_lifetime={0x4, 0x1, 0x10001, 0x1, 0x5, 0x6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x6e6bb1, 0x80000000, {0x6, 0x33, 0x0, 0x0, 0x0, 0x5, 0x0, @in=@loopback, @in=@local}}, @sadb_x_filter={0x5, 0x1a, @in6=@empty, @in=@loopback, 0x1a, 0x1c, 0x10}]}, 0xb0}}, 0x4001) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)) 409.164359ms ago: executing program 6 (id=4001): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r0 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x20, 0x4, 0x44, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00'], 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r7, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000001240)={0x50, 0x0, r8, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0x8}}, 0x50) ioctl$FIBMAP(0xffffffffffffffff, 0x401070c9, 0x0) ioctl$HCIINQUIRY(r1, 0x800448d4, &(0x7f00000002c0)={0x0, 0x2, '\x00', 0x0, 0x59}) write$binfmt_misc(r0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000000)={0x1, [0x0]}) fcntl$addseals(r0, 0x409, 0x8) 408.658976ms ago: executing program 2 (id=4002): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, &(0x7f0000003500)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty=0xe0000000}}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x7f, @mcast1, 0x1000}, 0x1c, 0x0}}], 0x2, 0x4000800) 402.096395ms ago: executing program 2 (id=4003): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f0000000140)=0x4000000, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000), 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000010) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x44084) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 145.163µs ago: executing program 4 (id=4004): socket$inet(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') fchdir(r1) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r1) exit(0xffff) mknod$loop(0x0, 0x10, 0x0) socket$kcm(0x21, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x4, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) 0s ago: executing program 2 (id=4005): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x108000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'c6xdigio\x00', [0x4f2b, 0x5, 0x3, 0x4, 0x5, 0xcc7, 0xf, 0xb, 0xa, 0x100, 0x2, 0x1, 0xfffffffd, 0x40, 0x6, 0x101, 0x0, 0x1a449, 0x2, 0x40000003, 0x99, 0xcaa7, 0x0, 0x20001e58, 0xa, 0xe69, 0x3f, 0x8, 0x2, 0x0, 0xfffffff8]}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r1, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x8040, 0x3) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x2000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') write$sysctl(r3, &(0x7f0000000280)='5\x00', 0x2) openat$incfs(r3, &(0x7f0000000000)='.log\x00', 0x41, 0x10) kernel console output (not intermixed with test programs): kaller1: entered allmulticast mode [ 444.623209][ T5991] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 444.623231][ T5991] Bluetooth: hci3: Unknown advertising packet type: 0x5d [ 444.625745][ T5991] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 444.627998][ T5991] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 444.630207][ T5991] Bluetooth: hci3: Malformed LE Event: 0x0d [ 444.900811][T15736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2939'. [ 446.350822][T15754] netlink: 'syz.4.2943': attribute type 4 has an invalid length. [ 448.419927][T15759] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2955'. [ 449.447799][T15788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2952'. [ 449.958203][T15799] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2957'. [ 450.076716][T15805] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2962'. [ 450.083410][T15807] .: renamed from bond0 (while UP) [ 450.553616][T15829] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2967'. [ 450.588719][T15828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2970'. [ 450.664656][ T6043] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 450.797760][ T6043] usb 7-1: device descriptor read/64, error -71 [ 450.876984][T15829] batadv_slave_0: left promiscuous mode [ 450.885527][T15829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.948319][T15829] bridge2: left promiscuous mode [ 450.953053][T15829] bond1: left promiscuous mode [ 450.984412][ T95] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.987168][ T95] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.989933][ T95] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.992619][ T95] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.995301][ T95] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.999200][ T95] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.001883][ T95] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.004717][ T95] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.024842][ T6043] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 451.149114][ T6043] usb 7-1: device descriptor read/64, error -71 [ 451.309556][ T6043] usb usb7-port1: attempt power cycle [ 451.653503][ T6043] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 451.673138][ T6043] usb 7-1: device descriptor read/8, error -71 [ 451.720152][ T60] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 451.863011][ T60] usb 8-1: Using ep0 maxpacket: 32 [ 451.869283][ T60] usb 8-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 16 [ 451.873469][ T60] usb 8-1: config 1 interface 0 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0 [ 451.876628][ T60] usb 8-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 0 [ 451.880560][ T60] usb 8-1: config 1 interface 0 has no altsetting 0 [ 451.885968][ T60] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 451.889710][ T60] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.893162][ T60] usb 8-1: Product: syz [ 451.894957][ T60] usb 8-1: Manufacturer: 즃펣큣饠뾯휮᧺䔱걲Ʀ⃭뻏ᦒ鶕㳢鵱ᰦ悘格쎌﫡ῶ暙⓬ᶏ限棱偈퀾ﰱ㶙ꕞ痄槅팤ᡝㅣ陓䜿ꨰﲽꙔ㨰䯡븦禅ผ蹮ꗃ꥗苧灮庾䄐魜鍊⸓떳♨㳅恩䴾쟕튷붏뻁送㹢饇﯅뮜곩Ⲓ㞏짤ᴈ茦巶 [ 451.905871][ T6043] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 451.909011][ T60] usb 8-1: SerialNumber: syz [ 451.920222][T15849] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 451.921395][ T6043] usb 7-1: device descriptor read/8, error -71 [ 452.103893][ T6043] usb usb7-port1: unable to enumerate USB device [ 452.220143][ T60] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22 [ 452.225465][ T60] usb 8-1: USB disconnect, device number 24 [ 452.666477][T15866] netlink: 372 bytes leftover after parsing attributes in process `syz.5.2979'. [ 453.310489][T15878] 9pnet_fd: Insufficient options for proto=fd [ 453.701076][T15891] lo speed is unknown, defaulting to 1000 [ 454.377605][T15913] netlink: zone id is out of range [ 454.379586][T15913] netlink: zone id is out of range [ 454.381718][T15913] netlink: del zone limit has 4 unknown bytes [ 455.808261][T15946] fuse: Bad value for 'fd' [ 456.264869][T15963] netlink: 'syz.2.3007': attribute type 6 has an invalid length. [ 456.267999][T15963] netlink: 'syz.2.3007': attribute type 6 has an invalid length. [ 456.964003][T15975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3010'. [ 457.130577][T15980] netlink: 596 bytes leftover after parsing attributes in process `syz.5.3011'. [ 457.287149][T15975] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.289710][T15975] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.402139][T15975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.412873][T15975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.519065][ T74] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.524840][ T74] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.527450][ T74] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.530077][ T74] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.997914][T16004] batman_adv: batadv0: Removing interface: wlan1 [ 458.018151][T16008] team0: Mode changed to "loadbalance" [ 458.029432][T16010] overlayfs: failed to clone upperpath [ 458.100062][T16004] netlink: 'syz.4.3020': attribute type 10 has an invalid length. [ 458.120043][T16004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.122679][T16004] team0: Device bond0 failed to register rx_handler [ 458.179100][T16002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3020'. [ 458.570204][T16024] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3025'. [ 458.804085][T16030] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 458.870800][T16030] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 459.061926][T16040] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3031'. [ 459.067636][T16037] /dev/sr0: Can't open blockdev [ 459.971132][T16062] bridge_slave_0: left allmulticast mode [ 459.973003][T16062] bridge_slave_0: left promiscuous mode [ 459.975018][T16062] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.012488][T16062] bridge_slave_1: left allmulticast mode [ 460.014297][T16062] bridge_slave_1: left promiscuous mode [ 460.016148][T16062] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.034968][T16062] bond0: (slave bond_slave_0): Releasing backup interface [ 460.047612][T16062] bond0: (slave bond_slave_1): Releasing backup interface [ 460.059749][T16062] team0: Port device team_slave_0 removed [ 460.063133][T16066] netlink: 'syz.2.3037': attribute type 10 has an invalid length. [ 460.071024][T16062] team0: Port device team_slave_1 removed [ 460.074459][T16062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.078086][T16062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.082098][T16062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.084838][T16062] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.102529][T16063] team0: Mode changed to "loadbalance" [ 460.135032][T16065] syz_tun: left promiscuous mode [ 460.148507][T16065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.155512][T16065] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 460.164941][T16066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.167740][T16066] team0: Port device bond0 added [ 460.227340][T16065] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 460.228236][T16061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3037'. [ 460.274487][T16071] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3040'. [ 460.365495][T16061] team0 (unregistering): Port device bond0 removed [ 460.450829][T16079] overlayfs: failed to clone upperpath [ 461.022247][T16091] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 461.024785][T16091] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 461.028152][T16091] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 461.036368][T16091] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 461.039721][T16091] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 461.042176][T16091] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 461.045672][T16091] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 461.134553][T16098] kvm: Disabled LAPIC found during irq injection [ 461.137567][T16098] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3048'. [ 461.143567][T16098] dlm: plock device version mismatch: kernel (1.2.0), user (4207673345.1574799195.3139252685) [ 461.161917][T16098] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3048'. [ 461.196817][T16102] netlink: 'syz.4.3049': attribute type 1 has an invalid length. [ 461.208343][T16102] 8021q: adding VLAN 0 to HW filter on device bond2 [ 461.232099][T16102] bond2: (slave veth5): Enslaving as an active interface with a down link [ 461.245227][T16100] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 461.248773][T16100] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 461.250831][T16100] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 461.570049][T16109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.572962][T16109] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.578757][T16109] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 461.583755][ T24] lo speed is unknown, defaulting to 1000 [ 461.588359][ T24] sz1: Port: 1 Link ACTIVE [ 461.591274][ T24] lo speed is unknown, defaulting to 1000 [ 461.632179][T16109] overlayfs: failed to clone lowerpath [ 461.982664][T16116] overlayfs: failed to clone upperpath [ 462.080487][T16114] bridge_slave_0: left allmulticast mode [ 462.082464][T16114] bridge_slave_0: left promiscuous mode [ 462.086792][T16114] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.186263][T16114] bridge_slave_1: left allmulticast mode [ 462.188223][T16114] bridge_slave_1: left promiscuous mode [ 462.195148][T16114] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.215592][T16114] .: (slave bond_slave_0): Releasing backup interface [ 462.238189][T16114] .: (slave bond_slave_1): Releasing backup interface [ 462.389683][T16114] team0: Port device team_slave_0 removed [ 462.403888][T16134] netlink: 'syz.3.3054': attribute type 10 has an invalid length. [ 462.408389][T16114] team0: Port device team_slave_1 removed [ 462.411173][T16114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.415135][T16114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.437423][T16127] team0: Mode changed to "loadbalance" [ 462.446086][T16134] 8021q: adding VLAN 0 to HW filter on device . [ 462.450297][T16134] team0: Port device . added [ 462.520192][T16114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3054'. [ 462.654340][T16114] team0 (unregistering): Port device . removed [ 462.677940][T16141] tipc: Started in network mode [ 462.679570][T16141] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 462.690490][T16142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3058'. [ 462.703536][T16141] tipc: Enabled bearer , priority 10 [ 463.151317][ T5991] Bluetooth: hci3: command 0x0406 tx timeout [ 463.227554][ T5991] Bluetooth: hci4: command 0x0c1a tx timeout [ 463.227561][ T5992] Bluetooth: hci1: command 0x0c1a tx timeout [ 463.404148][T16142] batadv_slave_0: left promiscuous mode [ 463.474235][T16142] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 463.478130][T16142] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 463.505442][T16142] bond1: left promiscuous mode [ 463.513675][ T46] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.516486][ T46] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.520306][ T46] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.523651][ T46] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.560376][T16160] netlink: 'syz.5.3064': attribute type 1 has an invalid length. [ 463.593556][T16160] bond2: (slave veth3): Enslaving as an active interface with a down link [ 463.604003][T16160] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3064'. [ 463.609933][T16160] 8021q: adding VLAN 0 to HW filter on device bond2 [ 463.636814][T16165] overlayfs: failed to resolve './file1': -2 [ 463.664630][ T5992] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 463.747017][T16177] bridge_slave_0: left allmulticast mode [ 463.748897][T16177] bridge_slave_0: left promiscuous mode [ 463.750878][T16177] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.754391][T16177] bridge_slave_1: left allmulticast mode [ 463.756196][T16177] bridge_slave_1: left promiscuous mode [ 463.758069][T16177] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.763418][T16177] bond0: (slave bond_slave_0): Releasing backup interface [ 463.766897][T16177] bond0: (slave bond_slave_1): Releasing backup interface [ 463.772817][T16177] team0: Port device team_slave_0 removed [ 463.776453][T16177] team0: Port device team_slave_1 removed [ 463.778525][T16177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.779966][ T6043] tipc: Node number set to 4269801488 [ 463.782960][T16177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.785863][T16177] batman_adv: batadv0: Removing interface: wlan1 [ 463.790951][T16177] bond2: (slave veth3): Releasing active interface [ 463.803658][T16179] team0: Mode changed to "loadbalance" [ 463.839512][T16177] netlink: 'syz.5.3070': attribute type 10 has an invalid length. [ 463.844549][T16177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.847692][T16177] team0: Port device bond0 added [ 463.855695][T16177] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3070'. [ 463.943575][T16177] team0 (unregistering): Port device bond0 removed [ 464.078059][T16182] kvm: Disabled LAPIC found during irq injection [ 464.082178][T16182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3071'. [ 464.088893][T16182] dlm: plock device version mismatch: kernel (1.2.0), user (4207673345.1574799195.3139252685) [ 464.655599][T16205] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3079'. [ 464.695828][T16208] gtp0: entered promiscuous mode [ 464.697465][T16208] gtp0: entered allmulticast mode [ 464.855922][T16214] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3074'. [ 465.218078][ T5992] Bluetooth: hci1: command 0x0c1a tx timeout [ 465.219867][ T5991] Bluetooth: hci4: command 0x0c1a tx timeout [ 465.236089][ T6043] lo speed is unknown, defaulting to 1000 [ 465.238623][ T6043] sz1: Port: 1 Link DOWN [ 465.240699][ T6043] lo speed is unknown, defaulting to 1000 [ 465.561638][ T40] audit: type=1326 audit(477.399:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16235 comm="syz.2.3089" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 465.568088][ T40] audit: type=1326 audit(477.399:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16235 comm="syz.2.3089" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 465.574986][ T40] audit: type=1326 audit(477.399:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16235 comm="syz.2.3089" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 465.585228][ T40] audit: type=1326 audit(477.399:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16235 comm="syz.2.3089" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 465.592312][ T40] audit: type=1326 audit(477.399:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16235 comm="syz.2.3089" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 465.599023][ T40] audit: type=1326 audit(477.399:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16235 comm="syz.2.3089" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 465.605526][ T40] audit: type=1326 audit(477.399:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16235 comm="syz.2.3089" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 465.612170][ T40] audit: type=1326 audit(477.399:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16235 comm="syz.2.3089" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 465.618744][ T40] audit: type=1326 audit(477.399:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16235 comm="syz.2.3089" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 465.625257][ T40] audit: type=1326 audit(477.399:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16235 comm="syz.2.3089" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 466.867237][ T6064] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 467.019840][ T6064] usb 7-1: config 255 has an invalid interface number: 62 but max is 2 [ 467.022519][ T6064] usb 7-1: config 255 contains an unexpected descriptor of type 0x1, skipping [ 467.025280][ T6064] usb 7-1: config 255 has an invalid interface number: 150 but max is 2 [ 467.028172][ T6064] usb 7-1: config 255 contains an unexpected descriptor of type 0x2, skipping [ 467.031003][ T6064] usb 7-1: config 255 has an invalid interface number: 8 but max is 2 [ 467.033600][ T6064] usb 7-1: config 255 has no interface number 0 [ 467.035594][ T6064] usb 7-1: config 255 has no interface number 1 [ 467.037768][ T6064] usb 7-1: config 255 has no interface number 2 [ 467.039927][ T6064] usb 7-1: config 255 interface 62 altsetting 175 endpoint 0x3 has an invalid bInterval 83, changing to 4 [ 467.043534][ T6064] usb 7-1: config 255 interface 62 altsetting 175 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 467.047028][ T6064] usb 7-1: config 255 interface 62 altsetting 175 has an invalid descriptor for endpoint zero, skipping [ 467.050489][ T6064] usb 7-1: config 255 interface 62 altsetting 175 has a duplicate endpoint with address 0xE, skipping [ 467.053952][ T6064] usb 7-1: config 255 interface 62 altsetting 175 has a duplicate endpoint with address 0x3, skipping [ 467.057421][ T6064] usb 7-1: config 255 interface 62 altsetting 175 has a duplicate endpoint with address 0x5, skipping [ 467.060810][ T6064] usb 7-1: config 255 interface 62 altsetting 175 has an invalid descriptor for endpoint zero, skipping [ 467.064268][ T6064] usb 7-1: config 255 interface 62 altsetting 175 has an invalid descriptor for endpoint zero, skipping [ 467.067723][ T6064] usb 7-1: config 255 interface 62 altsetting 175 has a duplicate endpoint with address 0xE, skipping [ 467.071084][ T6064] usb 7-1: config 255 interface 150 altsetting 11 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 467.074540][ T6064] usb 7-1: config 255 interface 150 altsetting 11 has a duplicate endpoint with address 0xD, skipping [ 467.077990][ T6064] usb 7-1: config 255 interface 150 altsetting 11 has a duplicate endpoint with address 0x3, skipping [ 467.081331][ T6064] usb 7-1: config 255 interface 150 altsetting 11 has a duplicate endpoint with address 0x5, skipping [ 467.084744][ T6064] usb 7-1: config 255 interface 150 altsetting 11 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 467.088253][ T6064] usb 7-1: config 255 interface 150 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 467.091579][ T6064] usb 7-1: config 255 interface 150 altsetting 11 has a duplicate endpoint with address 0x5, skipping [ 467.095016][ T6064] usb 7-1: config 255 interface 150 altsetting 11 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 467.098422][ T6064] usb 7-1: config 255 interface 150 altsetting 11 has a duplicate endpoint with address 0xE, skipping [ 467.101773][ T6064] usb 7-1: config 255 interface 150 altsetting 11 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 467.105314][ T6064] usb 7-1: config 255 interface 150 altsetting 11 has a duplicate endpoint with address 0xD, skipping [ 467.108664][ T6064] usb 7-1: config 255 interface 150 altsetting 11 has a duplicate endpoint with address 0x7, skipping [ 467.112008][ T6064] usb 7-1: config 255 interface 150 altsetting 11 has a duplicate endpoint with address 0x1, skipping [ 467.115465][ T6064] usb 7-1: config 255 interface 8 altsetting 9 has a duplicate endpoint with address 0xD, skipping [ 467.118766][ T6064] usb 7-1: config 255 interface 8 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 467.122079][ T6064] usb 7-1: config 255 interface 8 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 467.125419][ T6064] usb 7-1: config 255 interface 8 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 467.128702][ T6064] usb 7-1: config 255 interface 8 altsetting 9 has a duplicate endpoint with address 0xD, skipping [ 467.131998][ T6064] usb 7-1: config 255 interface 8 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 467.135376][ T6064] usb 7-1: config 255 interface 8 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 467.138706][ T6064] usb 7-1: config 255 interface 8 altsetting 9 has a duplicate endpoint with address 0xE, skipping [ 467.141972][ T6064] usb 7-1: config 255 interface 8 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 467.145348][ T6064] usb 7-1: config 255 interface 8 altsetting 9 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 467.148678][ T6064] usb 7-1: config 255 interface 8 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 467.152061][ T6064] usb 7-1: config 255 interface 8 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 467.155397][ T6064] usb 7-1: config 255 interface 8 altsetting 9 has a duplicate endpoint with address 0xC, skipping [ 467.158687][ T6064] usb 7-1: config 255 interface 8 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 467.162013][ T6064] usb 7-1: config 255 interface 62 has no altsetting 0 [ 467.164140][ T6064] usb 7-1: config 255 interface 150 has no altsetting 0 [ 467.166273][ T6064] usb 7-1: config 255 interface 8 has no altsetting 0 [ 467.170130][ T6064] usb 7-1: New USB device found, idVendor=0bfd, idProduct=0010, bcdDevice=78.7d [ 467.173069][ T6064] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.175537][ T6064] usb 7-1: Product: ы [ 467.176844][ T6064] usb 7-1: Manufacturer: ⠁ [ 467.178307][ T6064] usb 7-1: SerialNumber: ㄍᎵ㻼暁⿊捄鋺퐩遘퇍ꖤ龱꩖룇珷䊶搆찗㮚悒넽姊悊瓘ۃ꟒吓쑠媹࢏㊕緂꿋钷㉳쯀ा⥁馥窪粂딩瑄昬ܱ蕦뮇餕樠ﮨ榸䗎돶렛劃뮰Ȅ簷੸ᑬ䲊蠨暽쒬䜢왲齨᪬ᆀ♮䫚囫붆်뀿乣뮏鉗繥༜洤妼ψ毉眄頬厐슰ﮗ棛எ놢復䆥紡ൣ삛ᘮﻨፙ鸵繷슧龏ꞎ㩊芥匾 [ 467.193275][T16254] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 467.200794][ T5991] Bluetooth: hci4: command 0x0c1a tx timeout [ 467.200845][ T5992] Bluetooth: hci1: command 0x0c1a tx timeout [ 467.393035][ T6064] kvaser_usb 7-1:255.62: error -ENODEV: Cannot get usb endpoint(s) [ 467.399992][ T6064] kvaser_usb 7-1:255.150: error -ENODEV: Cannot get usb endpoint(s) [ 467.406823][ T6064] kvaser_usb 7-1:255.8: error -ENODEV: Cannot get usb endpoint(s) [ 467.411778][ T6064] usb 7-1: USB disconnect, device number 31 [ 467.775491][T16278] FAULT_INJECTION: forcing a failure. [ 467.775491][T16278] name failslab, interval 1, probability 0, space 0, times 0 [ 467.779460][T16278] CPU: 3 UID: 0 PID: 16278 Comm: syz.4.3101 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 467.779477][T16278] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 467.779484][T16278] Call Trace: [ 467.779488][T16278] [ 467.779493][T16278] dump_stack_lvl+0x16c/0x1f0 [ 467.779510][T16278] should_fail_ex+0x512/0x640 [ 467.779525][T16278] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 467.779537][T16278] should_failslab+0xc2/0x120 [ 467.779552][T16278] __kmalloc_cache_noprof+0x6a/0x3e0 [ 467.779563][T16278] ? lockdep_init_map_type+0x5c/0x280 [ 467.779578][T16278] ? register_netdevice+0x4eb/0x2270 [ 467.779595][T16278] register_netdevice+0x4eb/0x2270 [ 467.779611][T16278] ? find_held_lock+0x2b/0x80 [ 467.779621][T16278] ? __pfx_register_netdevice+0x10/0x10 [ 467.779635][T16278] ? net_generic+0xea/0x2a0 [ 467.779654][T16278] vti6_tnl_create2+0x80/0x180 [ 467.779665][T16278] vti6_locate+0x5cc/0x6f0 [ 467.779676][T16278] ? __pfx_vti6_locate+0x10/0x10 [ 467.779689][T16278] vti6_siocdevprivate+0x2c0/0x660 [ 467.779700][T16278] ? __pfx_vti6_siocdevprivate+0x10/0x10 [ 467.779719][T16278] ? full_name_hash+0xbc/0x110 [ 467.779735][T16278] ? netdev_name_node_lookup+0x127/0x180 [ 467.779748][T16278] dev_ifsioc+0x8ee/0x1ee0 [ 467.779762][T16278] ? __pfx_dev_ifsioc+0x10/0x10 [ 467.779774][T16278] ? __pfx___mutex_lock+0x10/0x10 [ 467.779793][T16278] ? dev_load+0x8e/0x240 [ 467.779807][T16278] dev_ioctl+0x1b2/0x1060 [ 467.779820][T16278] sock_ioctl+0x5b3/0x6b0 [ 467.779830][T16278] ? __pfx_sock_ioctl+0x10/0x10 [ 467.779841][T16278] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 467.779876][T16278] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 467.779897][T16278] compat_sock_ioctl+0x58b/0x730 [ 467.779909][T16278] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 467.779918][T16278] ? hook_file_ioctl_common+0x145/0x410 [ 467.779935][T16278] ? __fget_files+0x20e/0x3c0 [ 467.779950][T16278] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 467.779959][T16278] __ia32_compat_sys_ioctl+0x23f/0x370 [ 467.779977][T16278] __do_fast_syscall_32+0x7c/0x3a0 [ 467.779992][T16278] do_fast_syscall_32+0x32/0x80 [ 467.780006][T16278] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 467.780019][T16278] RIP: 0023:0xf703e579 [ 467.780028][T16278] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 467.780039][T16278] RSP: 002b:00000000f542e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 467.780049][T16278] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089f1 [ 467.780111][T16278] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 467.780127][T16278] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 467.780133][T16278] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 467.780140][T16278] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 467.780154][T16278] [ 467.896368][T16282] mkiss: ax0: crc mode is auto. [ 467.918675][T16279] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3100'. [ 468.073104][T16296] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3099'. [ 468.236533][T16303] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3108'. [ 468.244104][T16305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3108'. [ 468.309854][T16309] fuse: Bad value for 'user_id' [ 468.311698][T16309] fuse: Bad value for 'user_id' [ 468.627161][T16322] FAULT_INJECTION: forcing a failure. [ 468.627161][T16322] name failslab, interval 1, probability 0, space 0, times 0 [ 468.638039][T16322] CPU: 3 UID: 0 PID: 16322 Comm: syz.2.3113 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 468.638056][T16322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 468.638068][T16322] Call Trace: [ 468.638073][T16322] [ 468.638077][T16322] dump_stack_lvl+0x16c/0x1f0 [ 468.638094][T16322] should_fail_ex+0x512/0x640 [ 468.638109][T16322] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 468.638122][T16322] should_failslab+0xc2/0x120 [ 468.638136][T16322] __kmalloc_cache_noprof+0x6a/0x3e0 [ 468.638148][T16322] ? cfg80211_sinfo_alloc_tid_stats+0xa6/0x170 [ 468.638162][T16322] cfg80211_sinfo_alloc_tid_stats+0xa6/0x170 [ 468.638174][T16322] sta_set_sinfo+0x307f/0x67e0 [ 468.638193][T16322] ? kasan_save_track+0x14/0x30 [ 468.638207][T16322] __sta_info_destroy_part2+0x2da/0x540 [ 468.638222][T16322] __sta_info_flush+0x521/0x740 [ 468.638237][T16322] ? __pfx___sta_info_flush+0x10/0x10 [ 468.638254][T16322] ieee80211_ibss_disconnect+0x165/0x8f0 [ 468.638274][T16322] ieee80211_ibss_leave+0x4a/0x160 [ 468.638290][T16322] cfg80211_leave_ibss+0x1af/0x480 [ 468.638308][T16322] cfg80211_ibss_wext_siwfreq+0x34d/0x450 [ 468.638325][T16322] cfg80211_wext_siwfreq+0x31c/0x360 [ 468.638339][T16322] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 468.638351][T16322] ? rcu_is_watching+0x12/0xc0 [ 468.638363][T16322] ? trace_contention_end+0xdd/0x130 [ 468.638380][T16322] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 468.638390][T16322] ioctl_standard_call+0xb5/0x1d0 [ 468.638404][T16322] compat_standard_call+0xf2/0x350 [ 468.638417][T16322] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 468.638428][T16322] ? __pfx_compat_standard_call+0x10/0x10 [ 468.638440][T16322] ? full_name_hash+0xbc/0x110 [ 468.638455][T16322] ? netdev_name_node_lookup+0x127/0x180 [ 468.638469][T16322] ? __pfx_compat_standard_call+0x10/0x10 [ 468.638481][T16322] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 468.638491][T16322] wireless_process_ioctl.constprop.0+0x28e/0x3d0 [ 468.638507][T16322] compat_wext_handle_ioctl+0x284/0x310 [ 468.638520][T16322] ? __pfx_compat_wext_handle_ioctl+0x10/0x10 [ 468.638532][T16322] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 468.638551][T16322] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 468.638570][T16322] compat_sock_ioctl+0x320/0x730 [ 468.638582][T16322] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 468.638591][T16322] ? hook_file_ioctl_common+0x145/0x410 [ 468.638608][T16322] ? __fget_files+0x20e/0x3c0 [ 468.638623][T16322] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 468.638633][T16322] __ia32_compat_sys_ioctl+0x23f/0x370 [ 468.638651][T16322] __do_fast_syscall_32+0x7c/0x3a0 [ 468.638666][T16322] do_fast_syscall_32+0x32/0x80 [ 468.638682][T16322] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 468.638695][T16322] RIP: 0023:0xf7fc8579 [ 468.638704][T16322] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 468.638714][T16322] RSP: 002b:00000000f54e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 468.638725][T16322] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008b04 [ 468.638731][T16322] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 468.638738][T16322] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 468.638744][T16322] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 468.638750][T16322] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 468.638763][T16322] [ 469.244113][T16351] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3121'. [ 469.472919][T16361] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3120'. [ 469.519805][T16359] overlayfs: failed to clone upperpath [ 470.364588][T16387] FAULT_INJECTION: forcing a failure. [ 470.364588][T16387] name failslab, interval 1, probability 0, space 0, times 0 [ 470.368573][T16387] CPU: 2 UID: 0 PID: 16387 Comm: syz.4.3132 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 470.368589][T16387] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 470.368595][T16387] Call Trace: [ 470.368599][T16387] [ 470.368604][T16387] dump_stack_lvl+0x16c/0x1f0 [ 470.368621][T16387] should_fail_ex+0x512/0x640 [ 470.368637][T16387] ? fs_reclaim_acquire+0xae/0x150 [ 470.368653][T16387] ? tomoyo_encode2+0x100/0x3e0 [ 470.368669][T16387] should_failslab+0xc2/0x120 [ 470.368683][T16387] __kmalloc_noprof+0xd2/0x510 [ 470.368699][T16387] tomoyo_encode2+0x100/0x3e0 [ 470.368715][T16387] tomoyo_encode+0x29/0x50 [ 470.368729][T16387] tomoyo_realpath_from_path+0x18f/0x6e0 [ 470.368745][T16387] ? tomoyo_profile+0x47/0x60 [ 470.368762][T16387] tomoyo_path_number_perm+0x245/0x580 [ 470.368775][T16387] ? tomoyo_path_number_perm+0x237/0x580 [ 470.368788][T16387] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 470.368814][T16387] ? find_held_lock+0x2b/0x80 [ 470.368826][T16387] ? hook_file_ioctl_common+0x145/0x410 [ 470.368843][T16387] ? __fget_files+0x20e/0x3c0 [ 470.368857][T16387] security_file_ioctl_compat+0x9b/0x240 [ 470.368871][T16387] __ia32_compat_sys_ioctl+0xc3/0x370 [ 470.368902][T16387] __do_fast_syscall_32+0x7c/0x3a0 [ 470.368917][T16387] do_fast_syscall_32+0x32/0x80 [ 470.368931][T16387] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 470.368944][T16387] RIP: 0023:0xf703e579 [ 470.368952][T16387] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 470.368963][T16387] RSP: 002b:00000000f542e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 470.368973][T16387] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c020aa07 [ 470.368980][T16387] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 470.368986][T16387] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 470.368992][T16387] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 470.368998][T16387] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 470.369011][T16387] [ 470.369022][T16387] ERROR: Out of memory at tomoyo_realpath_from_path. [ 470.588952][T16401] 9pnet_virtio: no channels available for device syz [ 470.673839][T16405] block device autoloading is deprecated and will be removed. [ 470.883454][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 470.883467][ T40] audit: type=1326 audit(482.974:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16420 comm="syz.5.3145" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 470.894537][ T40] audit: type=1326 audit(482.974:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16420 comm="syz.5.3145" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 470.902274][ T40] audit: type=1326 audit(482.974:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16420 comm="syz.5.3145" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 470.915001][ T40] audit: type=1326 audit(482.974:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16420 comm="syz.5.3145" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 470.925594][ T40] audit: type=1326 audit(482.974:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16420 comm="syz.5.3145" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 470.933079][ T40] audit: type=1326 audit(482.974:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16420 comm="syz.5.3145" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 470.948806][ T40] audit: type=1326 audit(482.984:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16420 comm="syz.5.3145" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 470.959626][ T40] audit: type=1326 audit(482.984:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16420 comm="syz.5.3145" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 470.968395][ T40] audit: type=1326 audit(482.984:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16420 comm="syz.5.3145" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 470.978307][ T40] audit: type=1326 audit(482.984:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16420 comm="syz.5.3145" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 471.000077][T12177] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 471.035414][T16428] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3140'. [ 471.143275][T12177] usb 8-1: Using ep0 maxpacket: 16 [ 471.149720][T12177] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 471.155170][T12177] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 471.159229][T12177] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.161781][T12177] usb 8-1: Product: syz [ 471.164389][T12177] usb 8-1: Manufacturer: syz [ 471.165944][T12177] usb 8-1: SerialNumber: syz [ 471.170455][T12177] usb 8-1: config 0 descriptor?? [ 471.177558][T12177] hub 8-1:0.0: bad descriptor, ignoring hub [ 471.179885][T12177] hub 8-1:0.0: probe with driver hub failed with error -5 [ 471.185198][T12177] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input27 [ 471.927766][T16446] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3152'. [ 471.957976][T16448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3154'. [ 473.092653][T16503] netlink: 'syz.5.3172': attribute type 10 has an invalid length. [ 473.259719][ T5373] usb 8-1: reset high-speed USB device number 25 using dummy_hcd [ 473.264081][ T5373] usb 8-1: device reset changed ep0 maxpacket size! [ 473.285018][T16512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3173'. [ 473.293563][T16512] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 473.293563][T16512] program syz.2.3173 not setting count and/or reply_len properly [ 473.432851][ T6064] usb 8-1: USB disconnect, device number 25 [ 473.562799][ T6064] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 473.699658][T16514] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.3175' resets device [ 473.705475][ T6064] usb 8-1: Using ep0 maxpacket: 8 [ 473.712994][ T6064] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 473.716863][ T6064] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 473.721178][ T6064] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 473.726083][ T6064] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 473.729660][ T6064] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 473.732489][ T6064] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.738635][ T6064] hub 8-1:1.0: bad descriptor, ignoring hub [ 473.740547][ T6064] hub 8-1:1.0: probe with driver hub failed with error -5 [ 473.742959][ T6064] cdc_wdm 8-1:1.0: skipping garbage [ 473.744809][ T6064] cdc_wdm 8-1:1.0: skipping garbage [ 473.747895][ T6064] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 473.749785][ T6064] cdc_wdm 8-1:1.0: Unknown control protocol [ 473.855167][T16525] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3179'. [ 474.061021][T16524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 474.135906][ T10] usb 8-1: USB disconnect, device number 26 [ 475.133831][T16556] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3187'. [ 475.280082][ T1220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.286008][ T1220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.521220][T16595] comedi comedi1: comedi_config --init_data is deprecated [ 475.938999][T16607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3209'. [ 475.942109][T16607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3209'. [ 476.510593][T16634] 9pnet_virtio: no channels available for device syz [ 476.781108][T16636] syzkaller0: entered promiscuous mode [ 476.783221][T16636] syzkaller0: entered allmulticast mode [ 476.963614][T16641] fuse: Unknown parameter '/dev/sg#' [ 477.406070][T16654] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3222'. [ 477.717153][ T5991] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 477.722236][ T5991] Bluetooth: hci3: Injecting HCI hardware error event [ 477.726338][ T5991] Bluetooth: hci3: hardware error 0x00 [ 477.946267][ T5992] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 477.965058][T16662] netlink: 'syz.5.3228': attribute type 39 has an invalid length. [ 478.291526][T16671] ufs: failed to set blocksize [ 478.320916][T16671] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 478.451526][T16680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3234'. [ 478.454436][T16680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3234'. [ 478.654920][T16692] 9pnet_virtio: no channels available for device syz [ 478.656635][T16691] fuse: Unknown parameter 'ukr_id' [ 478.697179][T16692] 9pnet_virtio: no channels available for device syz [ 478.802867][T16705] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3244'. [ 478.805873][T16705] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3244'. [ 478.863360][ T46] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 478.866043][ T46] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 478.874641][ T46] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 478.878939][ T46] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 479.687746][ T5991] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 479.699261][ T46] wlan1: Trigger new scan to find an IBSS to join [ 479.720690][ T5992] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 479.729157][ T5992] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 479.733484][ T5992] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 479.738398][ T5992] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 479.742611][ T5992] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 479.769714][T16721] lo speed is unknown, defaulting to 1000 [ 479.886907][T16731] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3255'. [ 479.935393][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 479.935405][ T40] audit: type=1804 audit(492.453:1166): pid=16732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3254" name="/newroot/598/bus/bus" dev="overlay" ino=3286 res=1 errno=0 [ 479.944071][ T40] audit: type=1804 audit(492.464:1167): pid=16732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3254" name="/newroot/598/bus/bus" dev="overlay" ino=3286 res=1 errno=0 [ 480.275408][ T74] . (unregistering): Released all slaves [ 480.283377][ T74] bond1 (unregistering): Released all slaves [ 480.321121][T16738] sp0: Synchronizing with TNC [ 480.376699][ T74] bridge: left promiscuous mode [ 480.396355][T16721] chnl_net:caif_netlink_parms(): no params data found [ 480.466801][T16721] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.469358][T16721] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.472623][T16721] bridge_slave_0: entered allmulticast mode [ 480.475399][T16721] bridge_slave_0: entered promiscuous mode [ 480.489159][T16721] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.491453][T16721] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.493725][T16721] bridge_slave_1: entered allmulticast mode [ 480.496367][T16721] bridge_slave_1: entered promiscuous mode [ 480.567174][T16721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.571873][T16721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.618074][T16721] team0: Port device team_slave_0 added [ 480.621724][T16721] team0: Port device team_slave_1 added [ 480.656448][T16747] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3257'. [ 480.687127][T16721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.689542][T16721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.697698][T16721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.704496][ T74] hsr_slave_0: left promiscuous mode [ 480.710003][ T74] hsr_slave_1: left promiscuous mode [ 481.671496][ T5991] Bluetooth: hci1: command tx timeout [ 482.065327][T16721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.067569][T16721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.075742][T16721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.161069][T16721] hsr_slave_0: entered promiscuous mode [ 482.163330][T16721] hsr_slave_1: entered promiscuous mode [ 482.167547][T16721] debugfs: 'hsr0' already exists in 'hsr' [ 482.169631][T16721] Cannot create hsr debugfs directory [ 482.427385][ T95] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.430201][ T95] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 482.433184][ T95] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.435881][ T95] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 482.444631][ T95] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.447605][ T95] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 482.450518][ T95] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.453140][ T95] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 482.539780][T16721] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 482.544991][T16721] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 482.551656][T16721] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 482.556210][T16721] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 482.562031][ T74] IPVS: stop unused estimator thread 0... [ 482.601546][T16721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.612581][T16721] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.617682][ T1238] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.619961][ T1238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.626020][ T95] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.628465][ T95] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.736885][T16721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.867025][T16721] veth0_vlan: entered promiscuous mode [ 482.873688][T16721] veth1_vlan: entered promiscuous mode [ 482.887543][T16721] veth0_macvtap: entered promiscuous mode [ 482.893594][T16721] veth1_macvtap: entered promiscuous mode [ 482.902730][T16721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.909248][T16721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.915121][ T1238] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.918139][ T1238] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.921237][ T1238] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.924056][ T1238] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.963948][ T95] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.967795][ T95] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.984883][ T8620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.987446][ T8620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.140907][T16796] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 483.146433][T16789] /dev/sr0: Can't open blockdev [ 483.316489][ T5992] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 483.324449][ T5992] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 483.329612][ T5992] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 483.334072][ T5992] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 483.338945][ T5992] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 483.387376][T16806] sp0: Synchronizing with TNC [ 483.412545][T16809] lo speed is unknown, defaulting to 1000 [ 483.650582][ T5992] Bluetooth: hci1: command tx timeout [ 483.658309][T16809] chnl_net:caif_netlink_parms(): no params data found [ 483.741754][T16809] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.744095][T16809] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.746518][T16809] bridge_slave_0: entered allmulticast mode [ 483.749171][T16809] bridge_slave_0: entered promiscuous mode [ 483.755556][T16809] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.757889][T16842] sp1: Synchronizing with TNC [ 483.760545][T16809] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.762803][T16809] bridge_slave_1: entered allmulticast mode [ 483.765571][T16809] bridge_slave_1: entered promiscuous mode [ 483.768062][T16841] [U] [ 483.806646][T16809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.811165][T16809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.854667][T16809] team0: Port device team_slave_0 added [ 483.864105][T16809] team0: Port device team_slave_1 added [ 483.916506][T16809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.919362][T16809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.929480][T16809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.938774][T16809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.941547][T16809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.952122][T16809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.145670][ T10] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 484.235967][ T1220] bond0 (unregistering): Released all slaves [ 484.243115][ T1220] bond1 (unregistering): Released all slaves [ 484.298206][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 484.301714][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 484.303807][ T10] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 484.306699][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.310516][ T10] usb 7-1: config 0 descriptor?? [ 484.346959][ T1220] bond2 (unregistering): (slave veth5): Releasing active interface [ 484.350011][ T1220] bond2 (unregistering): Released all slaves [ 484.439575][T16809] hsr_slave_0: entered promiscuous mode [ 484.441963][T16809] hsr_slave_1: entered promiscuous mode [ 484.444054][T16809] debugfs: 'hsr0' already exists in 'hsr' [ 484.445864][T16809] Cannot create hsr debugfs directory [ 484.485572][ T1220] tipc: Left network mode [ 484.502575][ T1220] IPVS: stopping master sync thread 14761 ... [ 484.886552][ T10] mcp2221 0003:04D8:00DD.000D: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 484.998830][ T1220] hsr_slave_0: left promiscuous mode [ 485.001961][ T1220] hsr_slave_1: left promiscuous mode [ 485.330428][ T5992] Bluetooth: hci2: command tx timeout [ 485.631753][ T5992] Bluetooth: hci1: command tx timeout [ 485.994750][T16893] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3302'. [ 486.806378][T12177] usb 7-1: USB disconnect, device number 32 [ 486.892290][T16809] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 486.904654][T16809] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 486.913487][T16809] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 486.917942][T16809] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 486.978907][T16809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.988301][T16809] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.995988][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.998326][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.004324][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.006656][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.075300][T16892] kexec: Could not allocate control_code_buffer [ 487.101159][T16892] Process accounting resumed [ 487.140734][T16809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.318032][ T5992] Bluetooth: hci2: command tx timeout [ 487.347501][T16809] veth0_vlan: entered promiscuous mode [ 487.357668][T16925] : entered promiscuous mode [ 487.367023][T16809] veth1_vlan: entered promiscuous mode [ 487.367230][ T1220] IPVS: stop unused estimator thread 0... [ 487.390626][T16809] veth0_macvtap: entered promiscuous mode [ 487.397495][T16809] veth1_macvtap: entered promiscuous mode [ 487.408797][T16809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.418083][T16809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.484692][ T8620] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.488991][ T8620] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.491805][ T8620] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.494523][ T8620] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.531540][ T1220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.535137][ T1220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.556239][ T1220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.558733][ T1220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.599310][T16935] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3266'. [ 487.622203][ T5992] Bluetooth: hci1: command tx timeout [ 487.929158][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 487.931224][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 488.013706][T16944] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 488.108238][T16951] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3309'. [ 488.176761][T16953] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3308'. [ 488.216923][T16951] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3309'. [ 488.222468][T16952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 488.787123][T16970] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3321'. [ 489.298729][ T5992] Bluetooth: hci2: command tx timeout [ 490.096412][T16999] FAULT_INJECTION: forcing a failure. [ 490.096412][T16999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.100586][T16999] CPU: 3 UID: 0 PID: 16999 Comm: syz.2.3323 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 490.100601][T16999] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 490.100608][T16999] Call Trace: [ 490.100612][T16999] [ 490.100617][T16999] dump_stack_lvl+0x16c/0x1f0 [ 490.100634][T16999] should_fail_ex+0x512/0x640 [ 490.100651][T16999] _copy_from_iter+0x29f/0x16f0 [ 490.100669][T16999] ? __alloc_skb+0x200/0x380 [ 490.100682][T16999] ? __pfx__copy_from_iter+0x10/0x10 [ 490.100700][T16999] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 490.100718][T16999] netlink_sendmsg+0x829/0xdd0 [ 490.100734][T16999] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.100750][T16999] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 490.100764][T16999] ____sys_sendmsg+0xa95/0xc70 [ 490.100779][T16999] ? tree_mod_log_rewind+0xa10/0xdc0 [ 490.100793][T16999] ? __pfx_____sys_sendmsg+0x10/0x10 [ 490.100808][T16999] ? get_compat_msghdr+0x11a/0x170 [ 490.100827][T16999] ___sys_sendmsg+0x134/0x1d0 [ 490.100841][T16999] ? __pfx____sys_sendmsg+0x10/0x10 [ 490.100860][T16999] ? find_held_lock+0x2b/0x80 [ 490.100884][T16999] __sys_sendmsg+0x16d/0x220 [ 490.100898][T16999] ? __pfx___sys_sendmsg+0x10/0x10 [ 490.100917][T16999] ? rcu_is_watching+0x12/0xc0 [ 490.100930][T16999] __do_fast_syscall_32+0x7c/0x3a0 [ 490.100945][T16999] do_fast_syscall_32+0x32/0x80 [ 490.100958][T16999] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 490.100972][T16999] RIP: 0023:0xf7fc8579 [ 490.100981][T16999] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 490.100992][T16999] RSP: 002b:00000000f54e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 490.101004][T16999] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000780 [ 490.101010][T16999] RDX: 0000000004000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 490.101016][T16999] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 490.101022][T16999] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 490.101028][T16999] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 490.101041][T16999] [ 490.238872][T17011] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3328'. [ 490.241767][T17011] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3328'. [ 490.727052][T17027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3331'. [ 491.184917][T17029] Invalid ELF header type: 3 != 1 [ 491.272856][ T5992] Bluetooth: hci2: command tx timeout [ 491.309006][T17026] syz.4.3331: page allocation failure: order:0, mode:0x10cc0(GFP_KERNEL|__GFP_NORETRY), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 491.313134][T17026] CPU: 2 UID: 0 PID: 17026 Comm: syz.4.3331 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 491.313150][T17026] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 491.313157][T17026] Call Trace: [ 491.313161][T17026] [ 491.313165][T17026] dump_stack_lvl+0x16c/0x1f0 [ 491.313183][T17026] warn_alloc+0x248/0x3a0 [ 491.313197][T17026] ? __pfx_warn_alloc+0x10/0x10 [ 491.313210][T17026] ? psi_memstall_leave+0x19f/0x2d0 [ 491.313223][T17026] ? __pfx___alloc_pages_direct_compact+0x10/0x10 [ 491.313236][T17026] ? psi_memstall_leave+0x1e1/0x2d0 [ 491.313248][T17026] ? psi_memstall_leave+0x1e6/0x2d0 [ 491.313262][T17026] __alloc_frozen_pages_noprof+0xea2/0x23f0 [ 491.313280][T17026] ? __schedule+0x11a3/0x5de0 [ 491.313292][T17026] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 491.313310][T17026] ? lockdep_hardirqs_on+0x7c/0x110 [ 491.313325][T17026] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 491.313342][T17026] ? policy_nodemask+0xea/0x4e0 [ 491.313357][T17026] alloc_pages_mpol+0x1fb/0x550 [ 491.313372][T17026] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 491.313386][T17026] ? alloc_pages_noprof+0x14/0x390 [ 491.313401][T17026] alloc_pages_noprof+0x131/0x390 [ 491.313415][T17026] kimage_alloc_pages+0x75/0x350 [ 491.313433][T17026] kimage_alloc_control_pages+0x153/0xa00 [ 491.313447][T17026] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 491.313468][T17026] do_kexec_load+0x478/0x8a0 [ 491.313480][T17026] ? __pfx_do_kexec_load+0x10/0x10 [ 491.313495][T17026] __ia32_compat_sys_kexec_load+0x37f/0x400 [ 491.313508][T17026] ? __pfx___ia32_compat_sys_kexec_load+0x10/0x10 [ 491.313522][T17026] ? rcu_is_watching+0x12/0xc0 [ 491.313535][T17026] __do_fast_syscall_32+0x7c/0x3a0 [ 491.313550][T17026] do_fast_syscall_32+0x32/0x80 [ 491.313564][T17026] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 491.313577][T17026] RIP: 0023:0xf7fa6579 [ 491.313586][T17026] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 491.313597][T17026] RSP: 002b:00000000f54a555c EFLAGS: 00000296 ORIG_RAX: 000000000000011b [ 491.313607][T17026] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000003 [ 491.313613][T17026] RDX: 0000000080001080 RSI: 00000000003e0000 RDI: 0000000000000000 [ 491.313619][T17026] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 491.313626][T17026] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 491.313632][T17026] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 491.313644][T17026] [ 491.313648][T17026] Mem-Info: [ 491.403188][T17026] active_anon:7424 inactive_anon:10446 isolated_anon:0 [ 491.403188][T17026] active_file:3727 inactive_file:12860 isolated_file:0 [ 491.403188][T17026] unevictable:1833 dirty:360 writeback:0 [ 491.403188][T17026] slab_reclaimable:6493 slab_unreclaimable:58523 [ 491.403188][T17026] mapped:27009 shmem:8829 pagetables:1264 [ 491.403188][T17026] sec_pagetables:324 bounce:0 [ 491.403188][T17026] kernel_misc_reclaimable:0 [ 491.403188][T17026] free:29576 free_pcp:165 free_cma:0 [ 491.417255][T17026] Node 0 active_anon:10124kB inactive_anon:1924kB active_file:344kB inactive_file:80kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:11884kB dirty:0kB writeback:0kB shmem:15024kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7492kB pagetables:1236kB sec_pagetables:1156kB all_unreclaimable? yes Balloon:0kB [ 491.427551][T17026] Node 1 active_anon:5016kB inactive_anon:54320kB active_file:11516kB inactive_file:48664kB unevictable:3796kB isolated(anon):0kB isolated(file):0kB mapped:96152kB dirty:1440kB writeback:0kB shmem:20292kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5164kB pagetables:3820kB sec_pagetables:140kB all_unreclaimable? no Balloon:0kB [ 491.440936][T17026] Node 0 DMA free:2948kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 491.450819][T17026] lowmem_reserve[]: 0 288 288 288 288 [ 491.452874][T17026] Node 0 DMA32 free:28164kB boost:26624kB min:39844kB low:43148kB high:46452kB reserved_highatomic:2048KB free_highatomic:240KB active_anon:10124kB inactive_anon:1924kB active_file:344kB inactive_file:80kB unevictable:3536kB writepending:0kB present:1032196kB managed:295156kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 491.682374][T17026] lowmem_reserve[]: 0 0 0 0 0 [ 491.684223][T17026] Node 1 DMA32 free:106896kB boost:36864kB min:84004kB low:95788kB high:107572kB reserved_highatomic:4096KB free_highatomic:792KB active_anon:1396kB inactive_anon:60736kB active_file:3848kB inactive_file:37576kB unevictable:3796kB writepending:1448kB present:1048432kB managed:948220kB mlocked:0kB bounce:0kB free_pcp:3540kB local_pcp:256kB free_cma:0kB [ 491.694543][T17026] lowmem_reserve[]: 0 0 0 0 0 [ 491.696104][T17026] Node 0 DMA: 69*4kB (U) 28*8kB (U) 7*16kB (U) 11*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 2948kB [ 491.700867][T17026] Node 0 DMA32: 23*4kB (UE) 206*8kB (UME) 224*16kB (UEH) 242*32kB (UEH) 127*64kB (UEH) 34*128kB (UE) 7*256kB (UME) 2*512kB (ME) 0*1024kB 0*2048kB 0*4096kB = 28364kB [ 491.706109][T17026] Node 1 DMA32: 46*4kB (UE) 1183*8kB (UMEH) 1081*16kB (UMEH) 688*32kB (UMEH) 261*64kB (UMEH) 105*128kB (MEH) 32*256kB (UM) 21*512kB (UMH) 6*1024kB (M) 0*2048kB 0*4096kB = 104192kB [ 491.714327][T17026] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 491.717360][T17026] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 491.720368][T17026] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 491.723316][T17026] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 491.726154][T17026] 21998 total pagecache pages [ 491.727980][T17026] 942 pages in swap cache [ 491.737682][T17026] Free swap = 37916kB [ 491.747340][T17026] Total swap = 124996kB [ 491.748747][T17026] 524155 pages RAM [ 491.749945][T17026] 0 pages HighMem/MovableOnly [ 491.751399][T17026] 209471 pages reserved [ 491.752714][T17026] 0 pages cma reserved [ 492.152555][T17026] kexec: Could not allocate control_code_buffer [ 492.165907][T17026] Process accounting resumed [ 492.674264][ T6043] IPVS: starting estimator thread 0... [ 492.756536][T17056] IPVS: using max 43 ests per chain, 103200 per kthread [ 493.089215][T17068] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3346'. [ 493.150667][T17072] sctp: [Deprecated]: syz.4.3348 (pid 17072) Use of struct sctp_assoc_value in delayed_ack socket option. [ 493.150667][T17072] Use struct sctp_sack_info instead [ 493.166910][T17074] overlayfs: missing 'lowerdir' [ 493.361536][T17087] overlayfs: failed to resolve './file1': -2 [ 493.610395][T17090] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3352'. [ 494.046499][T17088] block nbd4: shutting down sockets [ 494.719238][T17107] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3358'. [ 494.882773][T17118] Invalid ELF header type: 3 != 1 [ 495.054816][T17128] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3366'. [ 496.411024][T17159] lo speed is unknown, defaulting to 1000 [ 496.887393][T17169] netlink: 'syz.4.3379': attribute type 1 has an invalid length. [ 496.889866][T17169] netlink: 15190 bytes leftover after parsing attributes in process `syz.4.3379'. [ 496.893314][T17169] netlink: 'syz.4.3379': attribute type 1 has an invalid length. [ 496.895800][T17169] netlink: 15190 bytes leftover after parsing attributes in process `syz.4.3379'. [ 497.514985][T17174] Can't find ip_set type hash:ip,ort,net [ 501.006784][T17256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3403'. [ 501.843874][ T40] audit: type=1326 audit(515.465:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17279 comm="syz.6.3412" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f67579 code=0x0 [ 502.620454][T17302] lo speed is unknown, defaulting to 1000 [ 502.665784][T17305] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3422'. [ 503.778402][T17320] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3426'. [ 503.781675][T17321] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3426'. [ 503.844824][ T5992] Bluetooth: hci2: command tx timeout [ 504.145030][T17327] 9pnet_fd: p9_fd_create_tcp (17327): problem connecting socket to 127.0.0.1 [ 504.566052][T17305] Set syz1 is full, maxelem 65536 reached [ 505.449562][T17348] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3435'. [ 505.744259][T17361] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3440'. [ 505.755069][ T40] audit: type=1326 audit(519.580:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17360 comm="syz.2.3440" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc8579 code=0x0 [ 506.131580][T17381] fuse: Unknown parameter '0x0000000000000008' [ 506.682486][T17410] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (44 ns). Using initial count to start timer. [ 506.848319][ T34] IPVS: starting estimator thread 0... [ 506.940121][T17419] IPVS: using max 43 ests per chain, 103200 per kthread [ 507.354014][T17423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3463'. [ 507.714097][T17454] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 509.326237][ T40] audit: type=1326 audit(523.339:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17469 comm="syz.5.3473" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e598 code=0x7ffc0000 [ 509.335394][ T40] audit: type=1326 audit(523.339:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17469 comm="syz.5.3473" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e598 code=0x7ffc0000 [ 509.343669][ T40] audit: type=1326 audit(523.339:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17469 comm="syz.5.3473" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 509.352178][ T40] audit: type=1326 audit(523.339:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17469 comm="syz.5.3473" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e598 code=0x7ffc0000 [ 509.358574][ T40] audit: type=1326 audit(523.339:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17469 comm="syz.5.3473" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e598 code=0x7ffc0000 [ 509.358971][T17472] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3474'. [ 509.365029][ T40] audit: type=1326 audit(523.339:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17469 comm="syz.5.3473" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e598 code=0x7ffc0000 [ 509.365055][ T40] audit: type=1326 audit(523.339:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17469 comm="syz.5.3473" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e598 code=0x7ffc0000 [ 509.365075][ T40] audit: type=1326 audit(523.339:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17469 comm="syz.5.3473" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e598 code=0x7ffc0000 [ 509.365096][ T40] audit: type=1326 audit(523.339:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17469 comm="syz.5.3473" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 509.365116][ T40] audit: type=1326 audit(523.339:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17469 comm="syz.5.3473" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e598 code=0x7ffc0000 [ 512.648624][T17560] netlink: 'syz.6.3499': attribute type 4 has an invalid length. [ 514.425324][T17599] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3515'. [ 514.977783][T17614] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3520'. [ 515.885949][T17633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3533'. [ 517.137650][T17651] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3530'. [ 517.377155][T17650] netdevsim netdevsim6: Direct firmware load for @ failed with error -2 [ 517.391051][T17650] netdevsim netdevsim6: Falling back to sysfs fallback for: @ [ 517.975676][T17668] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3537'. [ 519.513582][T17690] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3549'. [ 519.774304][T17705] netlink: 'syz.5.3547': attribute type 1 has an invalid length. [ 519.776986][T17705] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3547'. [ 520.126030][T17712] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 520.128158][T17712] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 520.132390][T17712] vhci_hcd vhci_hcd.0: Device attached [ 520.509616][T17719] tmpfs: Bad value for 'mpol' [ 520.542714][T15629] usb 42-1: SetAddress Request (10) to port 0 [ 520.544770][T15629] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd [ 520.675375][T17713] vhci_hcd: connection reset by peer [ 520.680006][ T1238] vhci_hcd: stop threads [ 520.681400][ T1238] vhci_hcd: release socket [ 520.683612][ T1238] vhci_hcd: disconnect device [ 520.698847][T17736] overlayfs: failed to clone upperpath [ 521.229155][T17768] 9pnet_fd: Insufficient options for proto=fd [ 521.402264][T17784] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3570'. [ 522.382239][T17793] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3576'. [ 522.648889][T17830] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3586'. [ 523.067647][T17838] netlink: 'syz.6.3592': attribute type 13 has an invalid length. [ 523.070316][T17838] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3592'. [ 523.533797][ T53] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 523.667512][T17860] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3598'. [ 523.695709][ T53] usb 7-1: Using ep0 maxpacket: 8 [ 523.699238][ T53] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 523.702601][ T53] usb 7-1: config 0 has no interface number 0 [ 523.705297][ T53] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 523.712739][ T53] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 523.717257][ T53] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 523.720845][ T53] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 523.726148][ T53] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 523.729266][ T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.733262][ T53] usb 7-1: config 0 descriptor?? [ 523.742413][ T53] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 523.936423][T17845] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 523.945264][T17868] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3600'. [ 523.993519][ T61] usb 7-1: USB disconnect, device number 33 [ 524.000982][ T61] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 524.144111][T17878] FAULT_INJECTION: forcing a failure. [ 524.144111][T17878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 524.148232][T17878] CPU: 2 UID: 0 PID: 17878 Comm: syz.4.3604 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 524.148249][T17878] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 524.148255][T17878] Call Trace: [ 524.148260][T17878] [ 524.148265][T17878] dump_stack_lvl+0x16c/0x1f0 [ 524.148283][T17878] should_fail_ex+0x512/0x640 [ 524.148300][T17878] _copy_from_user+0x2e/0xd0 [ 524.148317][T17878] __sys_bpf+0x21d/0x4de0 [ 524.148335][T17878] ? __pfx___sys_bpf+0x10/0x10 [ 524.148350][T17878] ? ksys_write+0x190/0x250 [ 524.148365][T17878] ? __mutex_unlock_slowpath+0x163/0x800 [ 524.148386][T17878] ? fput+0x9b/0xd0 [ 524.148411][T17878] ? ksys_write+0x1ac/0x250 [ 524.148422][T17878] ? __pfx_ksys_write+0x10/0x10 [ 524.148437][T17878] __ia32_sys_bpf+0x76/0xe0 [ 524.148454][T17878] __do_fast_syscall_32+0x7c/0x3a0 [ 524.148469][T17878] do_fast_syscall_32+0x32/0x80 [ 524.148483][T17878] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 524.148496][T17878] RIP: 0023:0xf7fa6579 [ 524.148505][T17878] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 524.148515][T17878] RSP: 002b:00000000f54c655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 524.148526][T17878] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000000 [ 524.148532][T17878] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 524.148539][T17878] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 524.148545][T17878] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 524.148554][T17878] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 524.148567][T17878] [ 524.556569][T17895] fuse: Bad value for 'group_id' [ 524.558259][T17895] fuse: Bad value for 'group_id' [ 525.076454][T17916] overlayfs: failed to clone upperpath [ 525.083271][T17916] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3617'. [ 525.180223][T17924] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3620'. [ 525.226801][T17924] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.292603][T17927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3618'. [ 525.417691][T17924] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.524335][T17924] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.538459][T15629] usb 42-1: device descriptor read/8, error -110 [ 525.618261][T17935] fuse: root generation should be zero [ 525.637941][T17924] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.752711][ T1220] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.755436][ T1220] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.762044][ T1220] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.771379][ T95] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.966337][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 525.966348][ T40] audit: type=1326 audit(540.807:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17947 comm="syz.6.3629" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 525.981967][T15629] usb usb42-port1: attempt power cycle [ 525.984852][ T40] audit: type=1326 audit(540.807:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17947 comm="syz.6.3629" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 525.991676][ T40] audit: type=1326 audit(540.807:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17947 comm="syz.6.3629" exe="/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 525.998424][ T40] audit: type=1326 audit(540.807:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17947 comm="syz.6.3629" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 526.005346][ T40] audit: type=1326 audit(540.807:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17947 comm="syz.6.3629" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 526.012227][ T40] audit: type=1326 audit(540.807:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17947 comm="syz.6.3629" exe="/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 526.018807][ T40] audit: type=1326 audit(540.807:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17947 comm="syz.6.3629" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 526.025450][ T40] audit: type=1326 audit(540.807:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17947 comm="syz.6.3629" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 526.400210][T17961] sp0: Synchronizing with TNC [ 526.425846][T17961] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3633'. [ 526.437440][T17961] block nbd2: not configured, cannot reconfigure [ 526.450145][T17961] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 526.492188][T17962] sp0: Found TNC [ 526.511508][T17961] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 526.535785][T15629] usb usb42-port1: unable to enumerate USB device [ 526.568977][T17961] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 526.625214][T17961] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 526.706540][ T1220] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 526.717586][ T8620] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 526.725910][ T8620] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 526.732817][ T8620] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 527.142839][T17977] FAULT_INJECTION: forcing a failure. [ 527.142839][T17977] name failslab, interval 1, probability 0, space 0, times 0 [ 527.149357][T17977] CPU: 3 UID: 0 PID: 17977 Comm: syz.2.3637 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 527.149375][T17977] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 527.149381][T17977] Call Trace: [ 527.149386][T17977] [ 527.149390][T17977] dump_stack_lvl+0x16c/0x1f0 [ 527.149408][T17977] should_fail_ex+0x512/0x640 [ 527.149424][T17977] ? __kmalloc_noprof+0xbf/0x510 [ 527.149437][T17977] ? io_cache_alloc_new+0x45/0xf0 [ 527.149452][T17977] should_failslab+0xc2/0x120 [ 527.149465][T17977] __kmalloc_noprof+0xd2/0x510 [ 527.149481][T17977] io_cache_alloc_new+0x45/0xf0 [ 527.149496][T17977] __io_prep_rw+0x21d/0x1090 [ 527.149509][T17977] ? __pfx___io_prep_rw+0x10/0x10 [ 527.149522][T17977] ? mark_held_locks+0x49/0x80 [ 527.149542][T17977] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 527.149557][T17977] io_prep_rw+0x24/0x220 [ 527.149568][T17977] io_prep_writev+0x23/0xa0 [ 527.149580][T17977] io_submit_sqes+0x835/0x2590 [ 527.149600][T17977] __do_sys_io_uring_enter+0xd6a/0x1630 [ 527.149616][T17977] ? __fget_files+0x20e/0x3c0 [ 527.149627][T17977] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 527.149642][T17977] ? fput+0x9b/0xd0 [ 527.149657][T17977] ? ksys_write+0x1ac/0x250 [ 527.149668][T17977] ? __pfx_ksys_write+0x10/0x10 [ 527.149681][T17977] ? rcu_is_watching+0x12/0xc0 [ 527.149694][T17977] __do_fast_syscall_32+0x7c/0x3a0 [ 527.149710][T17977] do_fast_syscall_32+0x32/0x80 [ 527.149724][T17977] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 527.149737][T17977] RIP: 0023:0xf7fc8579 [ 527.149746][T17977] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 527.149757][T17977] RSP: 002b:00000000f54c555c EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 527.149767][T17977] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000003516 [ 527.149774][T17977] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 527.149780][T17977] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 527.149786][T17977] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 527.149792][T17977] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 527.149805][T17977] [ 527.150660][T17978] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3639'. [ 528.087502][T17996] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3650'. [ 528.806922][T18009] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3646'. [ 528.817229][T18009] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 528.872364][T18009] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 528.920753][T18009] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 528.990723][T18009] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 529.049354][ T8620] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 529.057380][ T46] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 529.064896][ T8620] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 529.071867][ T8620] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 529.543057][T18037] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3655'. [ 529.911039][T18042] sp0: Synchronizing with TNC [ 529.924308][T18042] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3658'. [ 529.931805][T18042] block nbd4: not configured, cannot reconfigure [ 529.986384][T18042] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.992495][T18044] sp0: Found TNC [ 530.062684][T18042] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.262249][T18042] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.332451][T18042] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.481359][ T95] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.496558][ T95] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.509086][ T95] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.528226][ T95] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.995895][T18059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3664'. [ 531.320132][T18061] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 531.322309][T18061] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 531.325138][T18061] vhci_hcd vhci_hcd.0: Device attached [ 531.646842][T15629] usb 46-1: SetAddress Request (2) to port 0 [ 531.649116][T15629] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 531.732219][T18063] vhci_hcd: connection reset by peer [ 531.734678][ T46] vhci_hcd: stop threads [ 531.736211][ T46] vhci_hcd: release socket [ 531.737793][ T46] vhci_hcd: disconnect device [ 533.240866][T18114] FAULT_INJECTION: forcing a failure. [ 533.240866][T18114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 533.245169][T18114] CPU: 1 UID: 0 PID: 18114 Comm: syz.4.3682 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 533.245186][T18114] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 533.245193][T18114] Call Trace: [ 533.245197][T18114] [ 533.245201][T18114] dump_stack_lvl+0x16c/0x1f0 [ 533.245220][T18114] should_fail_ex+0x512/0x640 [ 533.245237][T18114] _copy_from_iter+0x29f/0x16f0 [ 533.245255][T18114] ? __alloc_skb+0x200/0x380 [ 533.245268][T18114] ? __pfx__copy_from_iter+0x10/0x10 [ 533.245285][T18114] ? __pfx___might_resched+0x10/0x10 [ 533.245301][T18114] netlink_sendmsg+0x829/0xdd0 [ 533.245317][T18114] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.245332][T18114] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 533.245346][T18114] ____sys_sendmsg+0xa95/0xc70 [ 533.245363][T18114] ? __pfx_____sys_sendmsg+0x10/0x10 [ 533.245378][T18114] ? get_compat_msghdr+0x11a/0x170 [ 533.245397][T18114] ___sys_sendmsg+0x134/0x1d0 [ 533.245411][T18114] ? __pfx____sys_sendmsg+0x10/0x10 [ 533.245430][T18114] ? find_held_lock+0x2b/0x80 [ 533.245449][T18114] __sys_sendmsg+0x16d/0x220 [ 533.245462][T18114] ? __pfx___sys_sendmsg+0x10/0x10 [ 533.245481][T18114] ? rcu_is_watching+0x12/0xc0 [ 533.245494][T18114] __do_fast_syscall_32+0x7c/0x3a0 [ 533.245510][T18114] do_fast_syscall_32+0x32/0x80 [ 533.245523][T18114] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 533.245540][T18114] RIP: 0023:0xf7fa6579 [ 533.245549][T18114] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 533.245560][T18114] RSP: 002b:00000000f54c655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 533.245570][T18114] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001080 [ 533.245576][T18114] RDX: 0000000000004814 RSI: 0000000000000000 RDI: 0000000000000000 [ 533.245582][T18114] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 533.245588][T18114] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 533.245595][T18114] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 533.245608][T18114] [ 533.376130][T18125] 9pnet: Found fid 0 not clunked [ 533.410487][T18131] syzkaller0: entered promiscuous mode [ 533.412629][T18131] syzkaller0: entered allmulticast mode [ 533.414013][T18125] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3687'. [ 533.419067][T18131] FAULT_INJECTION: forcing a failure. [ 533.419067][T18131] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 533.424628][T18131] CPU: 3 UID: 0 PID: 18131 Comm: syz.4.3690 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 533.424651][T18131] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 533.424661][T18131] Call Trace: [ 533.424667][T18131] [ 533.424673][T18131] dump_stack_lvl+0x16c/0x1f0 [ 533.424699][T18131] should_fail_ex+0x512/0x640 [ 533.424725][T18131] should_fail_alloc_page+0xe7/0x130 [ 533.424747][T18131] prepare_alloc_pages+0x3c2/0x610 [ 533.424776][T18131] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 533.424797][T18131] ? __pfx_stack_trace_save+0x10/0x10 [ 533.424814][T18131] ? netlink_dump+0xa5f/0xd30 [ 533.424836][T18131] ? __lock_acquire+0x62e/0x1ce0 [ 533.424862][T18131] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 533.424890][T18131] ? __page_table_check_zero+0x33c/0x5d0 [ 533.424915][T18131] ? __page_table_check_zero+0x346/0x5d0 [ 533.424933][T18131] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 533.424959][T18131] ? policy_nodemask+0xea/0x4e0 [ 533.424982][T18131] alloc_pages_mpol+0x1fb/0x550 [ 533.425004][T18131] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 533.425027][T18131] ? __lock_acquire+0x62e/0x1ce0 [ 533.425050][T18131] folio_alloc_mpol_noprof+0x36/0x2f0 [ 533.425075][T18131] vma_alloc_folio_noprof+0xed/0x1e0 [ 533.425098][T18131] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 533.425128][T18131] do_pte_missing+0x2230/0x3ba0 [ 533.425146][T18131] ? find_held_lock+0x2b/0x80 [ 533.425168][T18131] __handle_mm_fault+0x152a/0x2a50 [ 533.425187][T18131] ? mt_find+0x3ef/0xa30 [ 533.425210][T18131] ? __pfx___handle_mm_fault+0x10/0x10 [ 533.425225][T18131] ? __pfx_mt_find+0x10/0x10 [ 533.425259][T18131] ? find_vma+0xbf/0x140 [ 533.425279][T18131] ? __pfx_find_vma+0x10/0x10 [ 533.425302][T18131] handle_mm_fault+0x589/0xd10 [ 533.425320][T18131] ? __bpf_trace_exceptions+0x1/0x40 [ 533.425346][T18131] do_user_addr_fault+0x7a6/0x1370 [ 533.425372][T18131] ? rcu_is_watching+0x12/0xc0 [ 533.425391][T18131] exc_page_fault+0x5c/0xb0 [ 533.425410][T18131] asm_exc_page_fault+0x26/0x30 [ 533.425425][T18131] RIP: 0010:_copy_to_iter+0x4e6/0x16f0 [ 533.425441][T18131] Code: 45 e8 6e 0d dc fc 48 8b 4c 24 18 48 8b 44 24 28 89 ee 4c 8d 34 01 4c 89 f7 e8 d6 72 41 fd 0f 01 cb 48 89 e9 4c 89 ff 4c 89 f6 a4 0f 1f 00 0f 01 ca 48 89 e8 48 29 eb 48 29 c8 48 01 44 24 28 [ 533.425456][T18131] RSP: 0018:ffffc9000406f680 EFLAGS: 00050246 [ 533.425470][T18131] RAX: 0000000000000001 RBX: 0000000000000e21 RCX: 00000000000008e1 [ 533.425480][T18131] RDX: ffffed1008751dcb RSI: ffff888043a8e577 RDI: 0000000080002000 [ 533.425496][T18131] RBP: 0000000000000e21 R08: 0000000000000000 R09: ffffed1008751dca [ 533.425506][T18131] R10: ffff888043a8ee57 R11: 0000000000000000 R12: 0000000000000000 [ 533.425516][T18131] R13: ffffc9000406fba0 R14: ffff888043a8e037 R15: 0000000080001ac0 [ 533.425546][T18131] ? __pfx__copy_to_iter+0x10/0x10 [ 533.425564][T18131] ? __skb_recv_datagram+0x1b2/0x220 [ 533.425585][T18131] ? __pfx___skb_recv_datagram+0x10/0x10 [ 533.425605][T18131] simple_copy_to_iter+0x46/0x90 [ 533.425622][T18131] __skb_datagram_iter+0x129/0x900 [ 533.425638][T18131] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 533.425655][T18131] ? skb_recv_datagram+0x88/0xc0 [ 533.425676][T18131] skb_copy_datagram_iter+0x40/0x50 [ 533.425692][T18131] netlink_recvmsg+0x27e/0xa90 [ 533.425716][T18131] ? __pfx_netlink_recvmsg+0x10/0x10 [ 533.425734][T18131] ? __lock_acquire+0xb97/0x1ce0 [ 533.425758][T18131] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 533.425776][T18131] sock_recvmsg+0x1f6/0x250 [ 533.425793][T18131] ____sys_recvmsg+0x218/0x6b0 [ 533.425811][T18131] ? __pfx_____sys_recvmsg+0x10/0x10 [ 533.425826][T18131] ? import_iovec+0x86/0xb0 [ 533.425840][T18131] ? __lock_acquire+0x62e/0x1ce0 [ 533.425856][T18131] ___sys_recvmsg+0x114/0x1a0 [ 533.425870][T18131] ? __pfx____sys_recvmsg+0x10/0x10 [ 533.425884][T18131] ? find_held_lock+0x2b/0x80 [ 533.425903][T18131] do_recvmmsg+0x55d/0x750 [ 533.425918][T18131] ? __pfx_do_recvmmsg+0x10/0x10 [ 533.425931][T18131] ? find_held_lock+0x2b/0x80 [ 533.425950][T18131] ? __fget_files+0x20e/0x3c0 [ 533.425961][T18131] ? handle_mm_fault+0x240/0xd10 [ 533.425972][T18131] __sys_recvmmsg+0x21c/0x280 [ 533.425986][T18131] ? __pfx___sys_recvmmsg+0x10/0x10 [ 533.426000][T18131] ? __pfx_ksys_write+0x10/0x10 [ 533.426015][T18131] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 533.426029][T18131] ? lockdep_hardirqs_on+0x7c/0x110 [ 533.426041][T18131] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 533.426055][T18131] __do_fast_syscall_32+0x7c/0x3a0 [ 533.426069][T18131] do_fast_syscall_32+0x32/0x80 [ 533.426083][T18131] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 533.426095][T18131] RIP: 0023:0xf7fa6579 [ 533.426103][T18131] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 533.426113][T18131] RSP: 002b:00000000f54c655c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 533.426123][T18131] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080001480 [ 533.426129][T18131] RDX: 0000000000000001 RSI: 0000000000010022 RDI: 0000000000000000 [ 533.426135][T18131] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 533.426141][T18131] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 533.426147][T18131] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 533.426160][T18131] [ 533.428569][T18134] FAULT_INJECTION: forcing a failure. [ 533.428569][T18134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 533.601910][T18134] CPU: 3 UID: 0 PID: 18134 Comm: syz.2.3691 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 533.601926][T18134] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 533.601933][T18134] Call Trace: [ 533.601938][T18134] [ 533.601943][T18134] dump_stack_lvl+0x16c/0x1f0 [ 533.601962][T18134] should_fail_ex+0x512/0x640 [ 533.601980][T18134] _copy_from_iter+0x29f/0x16f0 [ 533.601998][T18134] ? __alloc_skb+0x200/0x380 [ 533.602011][T18134] ? __pfx__copy_from_iter+0x10/0x10 [ 533.602029][T18134] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 533.602047][T18134] netlink_sendmsg+0x829/0xdd0 [ 533.602064][T18134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.602079][T18134] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 533.602093][T18134] ____sys_sendmsg+0xa95/0xc70 [ 533.602110][T18134] ? __pfx_____sys_sendmsg+0x10/0x10 [ 533.602126][T18134] ? get_compat_msghdr+0x11a/0x170 [ 533.602144][T18134] ___sys_sendmsg+0x134/0x1d0 [ 533.602158][T18134] ? __pfx____sys_sendmsg+0x10/0x10 [ 533.602177][T18134] ? find_held_lock+0x2b/0x80 [ 533.602197][T18134] __sys_sendmsg+0x16d/0x220 [ 533.602210][T18134] ? __pfx___sys_sendmsg+0x10/0x10 [ 533.602229][T18134] ? rcu_is_watching+0x12/0xc0 [ 533.602242][T18134] __do_fast_syscall_32+0x7c/0x3a0 [ 533.602257][T18134] do_fast_syscall_32+0x32/0x80 [ 533.602271][T18134] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 533.602284][T18134] RIP: 0023:0xf7fc8579 [ 533.602292][T18134] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 533.602303][T18134] RSP: 002b:00000000f54e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 533.602313][T18134] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800003c0 [ 533.602320][T18134] RDX: 0000000020008010 RSI: 0000000000000000 RDI: 0000000000000000 [ 533.602326][T18134] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 533.602332][T18134] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 533.602339][T18134] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 533.602352][T18134] [ 533.693744][T18149] FAULT_INJECTION: forcing a failure. [ 533.693744][T18149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 533.697846][T18149] CPU: 2 UID: 0 PID: 18149 Comm: syz.2.3696 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 533.697863][T18149] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 533.697869][T18149] Call Trace: [ 533.697874][T18149] [ 533.697878][T18149] dump_stack_lvl+0x16c/0x1f0 [ 533.697895][T18149] should_fail_ex+0x512/0x640 [ 533.697912][T18149] _copy_from_iter+0x29f/0x16f0 [ 533.697943][T18149] ? __alloc_skb+0x200/0x380 [ 533.697957][T18149] ? __pfx__copy_from_iter+0x10/0x10 [ 533.697974][T18149] ? __pfx___might_resched+0x10/0x10 [ 533.697990][T18149] netlink_sendmsg+0x829/0xdd0 [ 533.698007][T18149] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.698022][T18149] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 533.698036][T18149] ____sys_sendmsg+0xa95/0xc70 [ 533.698054][T18149] ? __pfx_____sys_sendmsg+0x10/0x10 [ 533.698070][T18149] ? get_compat_msghdr+0x11a/0x170 [ 533.698089][T18149] ___sys_sendmsg+0x134/0x1d0 [ 533.698103][T18149] ? __pfx____sys_sendmsg+0x10/0x10 [ 533.698123][T18149] ? find_held_lock+0x2b/0x80 [ 533.698143][T18149] __sys_sendmsg+0x16d/0x220 [ 533.698156][T18149] ? __pfx___sys_sendmsg+0x10/0x10 [ 533.698175][T18149] ? rcu_is_watching+0x12/0xc0 [ 533.698189][T18149] __do_fast_syscall_32+0x7c/0x3a0 [ 533.698204][T18149] do_fast_syscall_32+0x32/0x80 [ 533.698218][T18149] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 533.698232][T18149] RIP: 0023:0xf7fc8579 [ 533.698241][T18149] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 533.698251][T18149] RSP: 002b:00000000f54e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 533.698261][T18149] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 533.698268][T18149] RDX: 000000002000c810 RSI: 0000000000000000 RDI: 0000000000000000 [ 533.698274][T18149] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 533.698280][T18149] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 533.698286][T18149] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 533.698299][T18149] [ 533.722034][ T40] audit: type=1800 audit(548.943:1203): pid=18153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3698" name="nullb0" dev="tmpfs" ino=81 res=0 errno=0 [ 533.993001][T18162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3700'. [ 535.205004][T18159] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 535.241812][T18177] nfs: Unknown parameter 'ntext' [ 535.276293][T18181] 9pnet_fd: Insufficient options for proto=fd [ 535.310656][T18183] veth1_macvtap: left promiscuous mode [ 535.708062][ T34] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 535.764319][T18231] FAULT_INJECTION: forcing a failure. [ 535.764319][T18231] name failslab, interval 1, probability 0, space 0, times 0 [ 535.768544][T18231] CPU: 2 UID: 0 PID: 18231 Comm: syz.4.3726 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 535.768560][T18231] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 535.768567][T18231] Call Trace: [ 535.768571][T18231] [ 535.768576][T18231] dump_stack_lvl+0x16c/0x1f0 [ 535.768594][T18231] should_fail_ex+0x512/0x640 [ 535.768611][T18231] should_failslab+0xc2/0x120 [ 535.768626][T18231] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 535.768639][T18231] ? lock_acquire+0x179/0x350 [ 535.768653][T18231] ? dst_alloc+0x99/0x1a0 [ 535.768666][T18231] ? __pfx_ip6_dst_gc+0x10/0x10 [ 535.768680][T18231] dst_alloc+0x99/0x1a0 [ 535.768692][T18231] ip6_pol_route+0x96b/0x1230 [ 535.768706][T18231] ? __pfx_ip6_pol_route+0x10/0x10 [ 535.768719][T18231] ? __pfx_rt6_multipath_hash+0x10/0x10 [ 535.768742][T18231] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 535.768754][T18231] fib6_rule_lookup+0x536/0x720 [ 535.768767][T18231] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 535.768783][T18231] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 535.768802][T18231] ip6_route_input+0x662/0xc00 [ 535.768816][T18231] ? __pfx_ip6_route_input+0x10/0x10 [ 535.768828][T18231] ? lock_acquire+0x179/0x350 [ 535.768849][T18231] ? sock_wfree+0x11c/0x880 [ 535.768862][T18231] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 535.768877][T18231] ip6_rcv_finish_core.constprop.0+0x1a0/0x5d0 [ 535.768893][T18231] ipv6_rcv+0x1e8/0x650 [ 535.768906][T18231] ? __pfx_ipv6_rcv+0x10/0x10 [ 535.768917][T18231] __netif_receive_skb_one_core+0x12d/0x1e0 [ 535.768930][T18231] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 535.768942][T18231] ? lock_acquire+0x179/0x350 [ 535.768957][T18231] ? __phys_addr+0xe8/0x180 [ 535.768971][T18231] __netif_receive_skb+0x1d/0x160 [ 535.768982][T18231] netif_receive_skb+0x137/0x7b0 [ 535.768993][T18231] ? __pfx_netif_receive_skb+0x10/0x10 [ 535.769009][T18231] tun_rx_batched.isra.0+0x3ee/0x740 [ 535.769031][T18231] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 535.769053][T18231] ? tun_get_user+0x1d8a/0x3ce0 [ 535.769062][T18231] ? rcu_is_watching+0x12/0xc0 [ 535.769075][T18231] tun_get_user+0x28e4/0x3ce0 [ 535.769091][T18231] ? __pfx_tun_get_user+0x10/0x10 [ 535.769103][T18231] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 535.769122][T18231] ? find_held_lock+0x2b/0x80 [ 535.769133][T18231] ? tun_get+0x191/0x370 [ 535.769152][T18231] tun_chr_write_iter+0xdc/0x210 [ 535.769163][T18231] vfs_write+0x7d0/0x11d0 [ 535.769176][T18231] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 535.769188][T18231] ? __pfx_vfs_write+0x10/0x10 [ 535.769199][T18231] ? find_held_lock+0x2b/0x80 [ 535.769217][T18231] ksys_write+0x12a/0x250 [ 535.769229][T18231] ? __pfx_ksys_write+0x10/0x10 [ 535.769242][T18231] ? rcu_is_watching+0x12/0xc0 [ 535.769254][T18231] __do_fast_syscall_32+0x7c/0x3a0 [ 535.769269][T18231] do_fast_syscall_32+0x32/0x80 [ 535.769283][T18231] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 535.769296][T18231] RIP: 0023:0xf7fa6579 [ 535.769305][T18231] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 535.769315][T18231] RSP: 002b:00000000f54c6520 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 535.769326][T18231] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000080 [ 535.769332][T18231] RDX: 0000000000000066 RSI: 00000000f7434ff4 RDI: 0000000000000000 [ 535.769339][T18231] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 535.769345][T18231] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 535.769351][T18231] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 535.769363][T18231] [ 535.905434][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 535.925078][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 535.929154][ T34] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 535.929208][T18233] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3728'. [ 535.931972][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.947319][ T34] usb 7-1: config 0 descriptor?? [ 536.112818][T18248] tipc: Enabling of bearer rejected, failed to enable media [ 536.144334][ T34] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 536.499426][T15629] usb 46-1: device descriptor read/8, error -110 [ 536.579044][ T10] usb 7-1: USB disconnect, device number 34 [ 536.602517][T18272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3739'. [ 536.914295][T18280] veth0: entered allmulticast mode [ 536.999895][T18285] tipc: Enabling of bearer rejected, failed to enable media [ 537.100909][T15629] usb usb46-port1: attempt power cycle [ 537.632603][T15629] usb usb46-port1: unable to enumerate USB device [ 538.389825][T18336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3758'. [ 538.866880][T18340] lo speed is unknown, defaulting to 1000 [ 539.448493][T18363] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3767'. [ 539.746229][T18386] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3771'. [ 540.257141][T18399] FAULT_INJECTION: forcing a failure. [ 540.257141][T18399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.262059][T18399] CPU: 1 UID: 0 PID: 18399 Comm: syz.4.3778 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 540.262076][T18399] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 540.262083][T18399] Call Trace: [ 540.262086][T18399] [ 540.262091][T18399] dump_stack_lvl+0x16c/0x1f0 [ 540.262108][T18399] should_fail_ex+0x512/0x640 [ 540.262125][T18399] _copy_from_iter+0x29f/0x16f0 [ 540.262142][T18399] ? __alloc_skb+0x200/0x380 [ 540.262156][T18399] ? __pfx__copy_from_iter+0x10/0x10 [ 540.262174][T18399] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 540.262192][T18399] netlink_sendmsg+0x829/0xdd0 [ 540.262208][T18399] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.262223][T18399] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 540.262237][T18399] ____sys_sendmsg+0xa95/0xc70 [ 540.262254][T18399] ? __pfx_____sys_sendmsg+0x10/0x10 [ 540.262270][T18399] ? get_compat_msghdr+0x11a/0x170 [ 540.262288][T18399] ___sys_sendmsg+0x134/0x1d0 [ 540.262302][T18399] ? __pfx____sys_sendmsg+0x10/0x10 [ 540.262321][T18399] ? find_held_lock+0x2b/0x80 [ 540.262341][T18399] __sys_sendmsg+0x16d/0x220 [ 540.262355][T18399] ? __pfx___sys_sendmsg+0x10/0x10 [ 540.262373][T18399] ? rcu_is_watching+0x12/0xc0 [ 540.262386][T18399] __do_fast_syscall_32+0x7c/0x3a0 [ 540.262413][T18399] do_fast_syscall_32+0x32/0x80 [ 540.262429][T18399] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 540.262442][T18399] RIP: 0023:0xf7fa6579 [ 540.262451][T18399] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 540.262462][T18399] RSP: 002b:00000000f54c655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 540.262472][T18399] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000580 [ 540.262479][T18399] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 540.262485][T18399] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 540.262491][T18399] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 540.262497][T18399] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 540.262510][T18399] [ 540.691064][T18418] netlink: 'syz.5.3785': attribute type 4 has an invalid length. [ 540.693545][T18418] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3785'. [ 540.960539][T18436] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3788'. [ 541.319751][T18444] netlink: 'syz.6.3793': attribute type 5 has an invalid length. [ 541.468010][T18459] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3799'. [ 541.470976][T18459] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 541.473613][T18459] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 541.826067][T18461] netlink: 'syz.6.3800': attribute type 10 has an invalid length. [ 541.834685][T18461] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.837495][T18461] bridge_slave_1: left allmulticast mode [ 541.839646][T18461] bridge_slave_1: left promiscuous mode [ 541.841584][T18461] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.849232][T18461] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 541.949832][T18471] netlink: 'syz.5.3803': attribute type 39 has an invalid length. [ 541.962772][T18473] overlayfs: failed to clone upperpath [ 541.999693][ T40] audit: type=1326 audit(557.636:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18469 comm="syz.5.3803" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 542.006490][ T40] audit: type=1326 audit(557.636:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18469 comm="syz.5.3803" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 542.013089][ T40] audit: type=1326 audit(557.636:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18469 comm="syz.5.3803" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 542.020330][ T40] audit: type=1326 audit(557.636:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18469 comm="syz.5.3803" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 542.027753][ T40] audit: type=1326 audit(557.636:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18469 comm="syz.5.3803" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 542.034726][ T40] audit: type=1326 audit(557.636:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18469 comm="syz.5.3803" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 542.041421][ T40] audit: type=1326 audit(557.636:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18469 comm="syz.5.3803" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 542.048254][ T40] audit: type=1326 audit(557.636:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18469 comm="syz.5.3803" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 542.055090][ T40] audit: type=1326 audit(557.636:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18469 comm="syz.5.3803" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 542.061784][ T40] audit: type=1326 audit(557.636:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18469 comm="syz.5.3803" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 542.499002][T18497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3811'. [ 542.502091][T18497] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 542.504769][T18497] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 542.585663][T18501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3809'. [ 542.871005][T18503] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 542.873642][T18503] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 542.881445][T18503] vhci_hcd vhci_hcd.0: Device attached [ 542.889474][T18503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3813'. [ 542.899448][T18512] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3817'. [ 543.137574][ T53] usb 42-1: SetAddress Request (14) to port 0 [ 543.140059][ T53] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd [ 543.229440][T18530] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3823'. [ 543.286688][T18534] netlink: 'syz.4.3822': attribute type 10 has an invalid length. [ 543.293701][T18534] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.296666][T18534] bridge_slave_1: left allmulticast mode [ 543.298536][T18534] bridge_slave_1: left promiscuous mode [ 543.301086][T18534] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.306799][T18534] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 543.345419][T18508] vhci_hcd: connection reset by peer [ 543.350356][ T46] vhci_hcd: stop threads [ 543.351931][ T46] vhci_hcd: release socket [ 543.353410][ T46] vhci_hcd: disconnect device [ 544.435632][T18561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3832'. [ 545.379145][T18585] No control pipe specified [ 545.432795][T18589] netlink: 332 bytes leftover after parsing attributes in process `syz.6.3844'. [ 545.513403][T18592] FAULT_INJECTION: forcing a failure. [ 545.513403][T18592] name failslab, interval 1, probability 0, space 0, times 0 [ 545.517414][T18592] CPU: 3 UID: 0 PID: 18592 Comm: syz.4.3846 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 545.517430][T18592] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 545.517436][T18592] Call Trace: [ 545.517441][T18592] [ 545.517446][T18592] dump_stack_lvl+0x16c/0x1f0 [ 545.517463][T18592] should_fail_ex+0x512/0x640 [ 545.517480][T18592] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 545.517502][T18592] should_failslab+0xc2/0x120 [ 545.517526][T18592] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 545.517546][T18592] ? __kernfs_new_node+0xd2/0x8e0 [ 545.517574][T18592] __kernfs_new_node+0xd2/0x8e0 [ 545.517593][T18592] ? inet_rtm_newaddr+0x1034/0x1540 [ 545.517619][T18592] ? __pfx___kernfs_new_node+0x10/0x10 [ 545.517646][T18592] ? find_held_lock+0x2b/0x80 [ 545.517664][T18592] ? kernfs_root+0xee/0x2a0 [ 545.517689][T18592] kernfs_new_node+0x13c/0x1e0 [ 545.517713][T18592] ? __pfx_map_id_range_down+0x10/0x10 [ 545.517741][T18592] __kernfs_create_file+0x53/0x350 [ 545.517762][T18592] sysfs_add_file_mode_ns+0x207/0x3c0 [ 545.517790][T18592] internal_create_group+0x578/0xf30 [ 545.517817][T18592] ? kobject_init_and_add+0x123/0x190 [ 545.517840][T18592] ? __pfx_internal_create_group+0x10/0x10 [ 545.517859][T18592] ? __pfx_kobject_init_and_add+0x10/0x10 [ 545.517880][T18592] ? __do_fast_syscall_32+0x7c/0x3a0 [ 545.517925][T18592] internal_create_groups+0x9d/0x150 [ 545.517952][T18592] netdev_queue_update_kobjects+0x115/0x720 [ 545.517984][T18592] netif_set_real_num_tx_queues+0x151/0x870 [ 545.518016][T18592] tun_attach.isra.0+0x6af/0x17e0 [ 545.518048][T18592] ? find_held_lock+0x2b/0x80 [ 545.518075][T18592] __tun_chr_ioctl+0x14b3/0x48b0 [ 545.518099][T18592] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 545.518127][T18592] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 545.518156][T18592] ? hook_file_ioctl_common+0x145/0x410 [ 545.518184][T18592] ? __fget_files+0x20e/0x3c0 [ 545.518209][T18592] ? __pfx_tun_chr_compat_ioctl+0x10/0x10 [ 545.518232][T18592] __ia32_compat_sys_ioctl+0x23f/0x370 [ 545.518261][T18592] __do_fast_syscall_32+0x7c/0x3a0 [ 545.518283][T18592] do_fast_syscall_32+0x32/0x80 [ 545.518304][T18592] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 545.518323][T18592] RIP: 0023:0xf7fa6579 [ 545.518337][T18592] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 545.518357][T18592] RSP: 002b:00000000f54c655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 545.518374][T18592] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000400454ca [ 545.518383][T18592] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 545.518394][T18592] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 545.518402][T18592] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 545.518412][T18592] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 545.518433][T18592] [ 545.730167][T18594] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3847'. [ 545.795577][ T6043] libceph: connect (1)[c::]:6789 error -101 [ 545.797647][ T6043] libceph: mon0 (1)[c::]:6789 connect error [ 546.054800][ T6043] libceph: connect (1)[c::]:6789 error -101 [ 546.056796][ T6043] libceph: mon0 (1)[c::]:6789 connect error [ 546.452937][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 546.455728][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 546.549181][T15629] libceph: connect (1)[c::]:6789 error -101 [ 546.551183][T15629] libceph: mon0 (1)[c::]:6789 connect error [ 546.578510][T18601] ceph: No mds server is up or the cluster is laggy [ 547.967456][ T53] usb 42-1: device descriptor read/8, error -110 [ 548.020696][T18671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3869'. [ 548.026156][T18671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3869'. [ 548.349465][ T53] usb usb42-port1: attempt power cycle [ 548.883207][ T53] usb usb42-port1: unable to enumerate USB device [ 549.013955][T18718] No control pipe specified [ 549.067854][T18720] netlink: 332 bytes leftover after parsing attributes in process `syz.4.3886'. [ 549.143758][T18722] tipc: Enabled bearer , priority 0 [ 549.147456][T18722] syzkaller0: entered promiscuous mode [ 549.150588][T18722] syzkaller0: entered allmulticast mode [ 549.173820][T18722] tipc: Resetting bearer [ 549.176784][T18721] tipc: Resetting bearer [ 549.187901][T18721] tipc: Disabling bearer [ 549.267042][T18732] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3889'. [ 550.176239][T18753] FAULT_INJECTION: forcing a failure. [ 550.176239][T18753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.181798][T18753] CPU: 2 UID: 0 PID: 18753 Comm: syz.2.3897 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 550.181825][T18753] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 550.181832][T18753] Call Trace: [ 550.181837][T18753] [ 550.181842][T18753] dump_stack_lvl+0x16c/0x1f0 [ 550.181859][T18753] should_fail_ex+0x512/0x640 [ 550.181877][T18753] _copy_from_user+0x2e/0xd0 [ 550.181894][T18753] kstrtouint_from_user+0xd6/0x1d0 [ 550.181907][T18753] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 550.181919][T18753] ? __lock_acquire+0xb97/0x1ce0 [ 550.181942][T18753] proc_fail_nth_write+0x83/0x220 [ 550.181955][T18753] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 550.181970][T18753] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 550.181980][T18753] vfs_write+0x29d/0x11d0 [ 550.181995][T18753] ? __pfx_vfs_write+0x10/0x10 [ 550.182006][T18753] ? find_held_lock+0x2b/0x80 [ 550.182020][T18753] ? __fget_files+0x20e/0x3c0 [ 550.182036][T18753] ksys_write+0x12a/0x250 [ 550.182048][T18753] ? __pfx_ksys_write+0x10/0x10 [ 550.182061][T18753] ? rcu_is_watching+0x12/0xc0 [ 550.182074][T18753] __do_fast_syscall_32+0x7c/0x3a0 [ 550.182093][T18753] do_fast_syscall_32+0x32/0x80 [ 550.182107][T18753] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 550.182120][T18753] RIP: 0023:0xf7fc8579 [ 550.182129][T18753] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 550.182140][T18753] RSP: 002b:00000000f54e6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 550.182150][T18753] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54e6620 [ 550.182157][T18753] RDX: 0000000000000001 RSI: 00000000f7454ff4 RDI: 0000000000000000 [ 550.182163][T18753] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 550.182171][T18753] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 550.182178][T18753] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 550.182191][T18753] [ 551.006085][ T61] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 551.402295][ T61] usb 7-1: device descriptor read/64, error -71 [ 551.644198][ T61] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 551.646912][T18780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3906'. [ 551.664745][T18782] lo speed is unknown, defaulting to 1000 [ 551.764452][T18791] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3907'. [ 551.787023][ T61] usb 7-1: device descriptor read/64, error -71 [ 551.892912][ T61] usb usb7-port1: attempt power cycle [ 552.244388][ T61] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 552.272912][ T61] usb 7-1: device descriptor read/8, error -71 [ 552.511013][ T61] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 552.530499][ T61] usb 7-1: device descriptor read/8, error -71 [ 552.635838][ T61] usb usb7-port1: unable to enumerate USB device [ 553.878585][T18841] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3926'. [ 554.418958][T18858] mmap: syz.4.3931 (18858): VmData 37404672 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 557.048679][T18940] syzkaller0: entered promiscuous mode [ 557.050511][T18940] syzkaller0: entered allmulticast mode [ 557.693697][ T34] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 557.856369][ T34] usb 7-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 557.860606][ T34] usb 7-1: config 1 interface 0 has no altsetting 0 [ 557.864564][ T34] usb 7-1: New USB device found, idVendor=18d1, idProduct=5022, bcdDevice= 0.40 [ 557.867505][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.870069][ T34] usb 7-1: Product: syz [ 557.871476][ T34] usb 7-1: Manufacturer: ᰁ [ 557.873026][ T34] usb 7-1: SerialNumber: syz [ 558.089209][ T34] usbhid 7-1:1.0: can't add hid device: -71 [ 558.091155][ T34] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 558.103450][ T34] usb 7-1: USB disconnect, device number 39 [ 558.531791][ T10] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 558.675092][ T10] usb 7-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 558.679252][ T10] usb 7-1: config 1 interface 0 has no altsetting 0 [ 558.683171][ T10] usb 7-1: New USB device found, idVendor=18d1, idProduct=5022, bcdDevice= 0.40 [ 558.686224][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.688901][ T10] usb 7-1: Product: syz [ 558.690284][ T10] usb 7-1: Manufacturer: syz [ 558.691818][ T10] usb 7-1: SerialNumber: syz [ 558.896684][ T10] usbhid 7-1:1.0: can't add hid device: -71 [ 558.898977][ T10] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 558.903642][ T10] usb 7-1: USB disconnect, device number 40 [ 560.044348][T18998] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.113489][T18998] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.125635][T19011] lo speed is unknown, defaulting to 1000 [ 560.172469][T18998] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.242611][T18998] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.321437][ T8620] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.329399][ T8620] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.344975][ T8620] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.363707][ T46] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.514396][T19023] overlayfs: failed to clone upperpath [ 560.521084][T19023] overlayfs: failed to clone upperpath [ 561.411247][T19064] lo speed is unknown, defaulting to 1000 [ 561.581784][T19074] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 561.595532][ T5991] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 561.600209][ T5991] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 561.604720][ T5991] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 561.613167][ T5991] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 561.616754][ T5991] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 561.645272][T19075] lo speed is unknown, defaulting to 1000 [ 561.820284][T19075] chnl_net:caif_netlink_parms(): no params data found [ 561.852004][T19094] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4001'. [ 562.073960][T19075] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.077999][T19075] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.084324][T19075] bridge_slave_0: entered allmulticast mode [ 562.092656][T19075] bridge_slave_0: entered promiscuous mode [ 562.097981][T19099] comedi comedi0: c6xdigio: I/O port conflict (0x4f2b,3) [ 562.098318][T19075] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.100758][T19099] ------------[ cut here ]------------ [ 562.103476][T19075] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.104614][T19099] DEBUG_LOCKS_WARN_ON(1) [ 562.104678][T19099] WARNING: CPU: 3 PID: 19099 at kernel/locking/lockdep.c:238 hlock_class+0x64/0x70 [ 562.107541][T19075] bridge_slave_1: entered allmulticast mode [ 562.108217][T19099] Modules linked in: [ 562.108230][T19099] CPU: 3 UID: 0 PID: 19099 Comm: syz.2.4005 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 562.108245][T19099] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 562.113241][T19075] bridge_slave_1: entered promiscuous mode [ 562.113427][T19099] RIP: 0010:hlock_class+0x64/0x70 [ 562.113445][T19099] Code: cc 90 e8 cf 5d 46 03 85 c0 74 23 8b 05 75 b0 14 0f 85 c0 75 19 90 48 c7 c6 a1 69 e2 8d 48 c7 c7 a4 15 e1 8d e8 4d 11 e3 ff 90 <0f> 0b 90 90 90 eb c9 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 [ 562.132196][T19099] RSP: 0018:ffffc9000383f528 EFLAGS: 00010086 [ 562.134083][T19099] RAX: 0000000000000000 RBX: ffff88804ea3af30 RCX: ffffc9000c402000 [ 562.136534][T19099] RDX: 0000000000080000 RSI: ffffffff817a02d5 RDI: 0000000000000001 [ 562.138989][T19099] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 562.141442][T19099] R10: 0000000000000000 R11: 000000002d2d2d2d R12: ffff88804ea3afa8 [ 562.143892][T19099] R13: ffff88804ea3a440 R14: 0000000000000000 R15: ffffffff8b4cd2c8 [ 562.146336][T19099] FS: 0000000000000000(0000) GS:ffff8880977c6000(0063) knlGS:00000000f54e6b40 [ 562.149129][T19099] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 562.151192][T19099] CR2: 00000000f7f955c0 CR3: 0000000062ff2000 CR4: 0000000000352ef0 [ 562.153667][T19099] Call Trace: [ 562.154730][T19099] [ 562.155673][T19099] __lock_acquire+0x218/0x1ce0 [ 562.157200][T19099] ? dns_resolver_match_preparse+0x48/0x70 [ 562.159026][T19099] lock_acquire+0x179/0x350 [ 562.160455][T19099] ? kernfs_remove_by_name_ns+0x3d/0x110 [ 562.162208][T19099] ? __pfx___might_resched+0x10/0x10 [ 562.163864][T19099] ? net_ctl_permissions+0x118/0x130 [ 562.165743][T19099] down_write+0x92/0x200 [ 562.167460][T19099] ? kernfs_remove_by_name_ns+0x3d/0x110 [ 562.169622][T19099] ? __pfx_down_write+0x10/0x10 [ 562.171161][T19099] ? __pfx_net_ctl_permissions+0x10/0x10 [ 562.172913][T19099] ? net_ctl_permissions+0x118/0x130 [ 562.174565][T19099] kernfs_remove_by_name_ns+0x3d/0x110 [ 562.176273][T19099] driver_remove_file+0x4a/0x60 [ 562.177827][T19099] bus_remove_driver+0x224/0x2c0 [ 562.179399][T19099] driver_unregister+0x76/0xb0 [ 562.180918][T19099] comedi_device_detach_locked+0x12c/0xa50 [ 562.182744][T19099] comedi_device_detach+0x67/0xb0 [ 562.184334][T19099] comedi_device_attach+0x43d/0x900 [ 562.185961][T19099] do_devconfig_ioctl+0x1b1/0x710 [ 562.187582][T19099] ? __mutex_lock+0x1c4/0x10b0 [ 562.189218][T19099] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 562.190984][T19099] ? kasan_save_stack+0x42/0x60 [ 562.192539][T19099] ? kasan_save_stack+0x33/0x60 [ 562.194075][T19099] ? kasan_save_track+0x14/0x30 [ 562.195623][T19099] ? kasan_save_free_info+0x3b/0x60 [ 562.197283][T19099] ? __kasan_slab_free+0x60/0x70 [ 562.198845][T19099] ? kfree+0x2b4/0x4d0 [ 562.200138][T19099] ? tomoyo_path_number_perm+0x470/0x580 [ 562.201900][T19099] comedi_unlocked_ioctl+0x165d/0x2f00 [ 562.203612][T19099] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 562.205438][T19099] ? kasan_quarantine_put+0x10a/0x240 [ 562.207149][T19099] ? lockdep_hardirqs_on+0x7c/0x110 [ 562.208796][T19099] ? find_held_lock+0x2b/0x80 [ 562.210272][T19099] ? tomoyo_path_number_perm+0x295/0x580 [ 562.212032][T19099] ? tomoyo_path_number_perm+0x18d/0x580 [ 562.213778][T19099] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 562.215685][T19099] comedi_compat_ioctl+0x1d0/0x990 [ 562.217307][T19099] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 562.219077][T19099] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 562.220934][T19099] ? do_vfs_ioctl+0x128/0x14f0 [ 562.222449][T19099] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 562.224040][T19099] ? find_held_lock+0x2b/0x80 [ 562.225514][T19099] ? hook_file_ioctl_common+0x145/0x410 [ 562.227275][T19099] ? __fget_files+0x20e/0x3c0 [ 562.228761][T19099] ? __ia32_compat_sys_openat+0xf0/0x210 [ 562.230516][T19099] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 562.232281][T19099] __ia32_compat_sys_ioctl+0x23f/0x370 [ 562.233995][T19099] __do_fast_syscall_32+0x7c/0x3a0 [ 562.235608][T19099] do_fast_syscall_32+0x32/0x80 [ 562.237171][T19099] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 562.239139][T19099] RIP: 0023:0xf7fc8579 [ 562.240422][T19099] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 562.246331][T19099] RSP: 002b:00000000f54e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 562.248963][T19099] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040946400 [ 562.251439][T19099] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 562.253889][T19099] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 562.256344][T19099] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 562.258825][T19099] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 562.261321][T19099] [ 562.262316][T19099] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 562.264578][T19099] CPU: 3 UID: 0 PID: 19099 Comm: syz.2.4005 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 562.268280][T19099] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 562.271599][T19099] Call Trace: [ 562.272650][T19099] [ 562.273593][T19099] dump_stack_lvl+0x3d/0x1f0 [ 562.275056][T19099] vpanic+0x6e8/0x7a0 [ 562.276321][T19099] ? __pfx_vpanic+0x10/0x10 [ 562.277775][T19099] ? hlock_class+0x64/0x70 [ 562.279208][T19099] panic+0xca/0xd0 [ 562.280446][T19099] ? __pfx_panic+0x10/0x10 [ 562.281867][T19099] check_panic_on_warn+0xab/0xb0 [ 562.283556][T19099] __warn+0xf6/0x3c0 [ 562.284821][T19099] ? hlock_class+0x64/0x70 [ 562.286246][T19099] report_bug+0x3c3/0x580 [ 562.287635][T19099] ? hlock_class+0x64/0x70 [ 562.289079][T19099] handle_bug+0x184/0x210 [ 562.290466][T19099] exc_invalid_op+0x17/0x50 [ 562.291923][T19099] asm_exc_invalid_op+0x1a/0x20 [ 562.293471][T19099] RIP: 0010:hlock_class+0x64/0x70 [ 562.295088][T19099] Code: cc 90 e8 cf 5d 46 03 85 c0 74 23 8b 05 75 b0 14 0f 85 c0 75 19 90 48 c7 c6 a1 69 e2 8d 48 c7 c7 a4 15 e1 8d e8 4d 11 e3 ff 90 <0f> 0b 90 90 90 eb c9 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 [ 562.301070][T19099] RSP: 0018:ffffc9000383f528 EFLAGS: 00010086 [ 562.302980][T19099] RAX: 0000000000000000 RBX: ffff88804ea3af30 RCX: ffffc9000c402000 [ 562.305431][T19099] RDX: 0000000000080000 RSI: ffffffff817a02d5 RDI: 0000000000000001 [ 562.307937][T19099] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 562.310422][T19099] R10: 0000000000000000 R11: 000000002d2d2d2d R12: ffff88804ea3afa8 [ 562.313000][T19099] R13: ffff88804ea3a440 R14: 0000000000000000 R15: ffffffff8b4cd2c8 [ 562.315476][T19099] ? dns_resolver_match_preparse+0x48/0x70 [ 562.317334][T19099] ? __warn_printk+0x1a5/0x350 [ 562.318940][T19099] ? hlock_class+0x63/0x70 [ 562.320398][T19099] __lock_acquire+0x218/0x1ce0 [ 562.322001][T19099] ? dns_resolver_match_preparse+0x48/0x70 [ 562.323843][T19099] lock_acquire+0x179/0x350 [ 562.325281][T19099] ? kernfs_remove_by_name_ns+0x3d/0x110 [ 562.327062][T19099] ? __pfx___might_resched+0x10/0x10 [ 562.329025][T19099] ? net_ctl_permissions+0x118/0x130 [ 562.331118][T19099] down_write+0x92/0x200 [ 562.332467][T19099] ? kernfs_remove_by_name_ns+0x3d/0x110 [ 562.334227][T19099] ? __pfx_down_write+0x10/0x10 [ 562.335771][T19099] ? __pfx_net_ctl_permissions+0x10/0x10 [ 562.337549][T19099] ? net_ctl_permissions+0x118/0x130 [ 562.339216][T19099] kernfs_remove_by_name_ns+0x3d/0x110 [ 562.340927][T19099] driver_remove_file+0x4a/0x60 [ 562.342469][T19099] bus_remove_driver+0x224/0x2c0 [ 562.344039][T19099] driver_unregister+0x76/0xb0 [ 562.345559][T19099] comedi_device_detach_locked+0x12c/0xa50 [ 562.347431][T19099] comedi_device_detach+0x67/0xb0 [ 562.349149][T19099] comedi_device_attach+0x43d/0x900 [ 562.350807][T19099] do_devconfig_ioctl+0x1b1/0x710 [ 562.352446][T19099] ? __mutex_lock+0x1c4/0x10b0 [ 562.353969][T19099] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 562.355754][T19099] ? kasan_save_stack+0x42/0x60 [ 562.357307][T19099] ? kasan_save_stack+0x33/0x60 [ 562.358858][T19099] ? kasan_save_track+0x14/0x30 [ 562.360413][T19099] ? kasan_save_free_info+0x3b/0x60 [ 562.362055][T19099] ? __kasan_slab_free+0x60/0x70 [ 562.363629][T19099] ? kfree+0x2b4/0x4d0 [ 562.364923][T19099] ? tomoyo_path_number_perm+0x470/0x580 [ 562.366680][T19099] comedi_unlocked_ioctl+0x165d/0x2f00 [ 562.368412][T19099] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 562.370250][T19099] ? kasan_quarantine_put+0x10a/0x240 [ 562.371950][T19099] ? lockdep_hardirqs_on+0x7c/0x110 [ 562.373583][T19099] ? find_held_lock+0x2b/0x80 [ 562.375189][T19099] ? tomoyo_path_number_perm+0x295/0x580 [ 562.377121][T19099] ? tomoyo_path_number_perm+0x18d/0x580 [ 562.378935][T19099] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 562.380845][T19099] comedi_compat_ioctl+0x1d0/0x990 [ 562.382500][T19099] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 562.384279][T19099] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 562.386146][T19099] ? do_vfs_ioctl+0x128/0x14f0 [ 562.387684][T19099] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 562.389287][T19099] ? find_held_lock+0x2b/0x80 [ 562.390771][T19099] ? hook_file_ioctl_common+0x145/0x410 [ 562.392514][T19099] ? __fget_files+0x20e/0x3c0 [ 562.394006][T19099] ? __ia32_compat_sys_openat+0xf0/0x210 [ 562.395781][T19099] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 562.397560][T19099] __ia32_compat_sys_ioctl+0x23f/0x370 [ 562.399272][T19099] __do_fast_syscall_32+0x7c/0x3a0 [ 562.400885][T19099] do_fast_syscall_32+0x32/0x80 [ 562.402418][T19099] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 562.404400][T19099] RIP: 0023:0xf7fc8579 [ 562.405691][T19099] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 562.411679][T19099] RSP: 002b:00000000f54e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 562.414267][T19099] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040946400 [ 562.416738][T19099] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 562.419221][T19099] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 562.421680][T19099] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 562.424143][T19099] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 562.426603][T19099] [ 562.428137][T19099] Kernel Offset: disabled [ 562.429498][T19099] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:55:35 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff85614085 RDI=ffffffff9b0f6600 RBP=ffffffff9b0f65c0 RSP=ffffc9000366e998 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000003 R12=0000000000000000 R13=0000000000000000 R14=ffffffff9b0f65c0 R15=ffffffff9b0f6880 RIP=ffffffff856140af RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880974c6000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7fe6e40 CR3=000000006d02b000 CR4=00352ef0 DR0=0000000000000007 DR1=000000000000000b DR2=0000000000000002 DR3=0000000000000009 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000000001 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=00000000ffff7fff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe9d86ec3b 00007ffe9d86ec3b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe9d86f140 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe9d86f140 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3130203862203a65 646f43205d333537 3831545b5d393231 3238312e30353500 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3130203262203065 6465432057333537 3231545157333231 3232312430353500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65642d332e36312e 3120534f4942202c 2939303032202c39 484349202b203533 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20296c6c75662854 504d454552502030 2320393837656364 623565653764672d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 36313130302d7265 6c6c616b7a79732d 3163722d302e3731 2e36206465746e69 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 617420746f4e2035 3030342e322e7a79 73203a6d6d6f4320 3939303931203a44 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 49502030203a4449 552033203a555043 205d393930393154 5b5d303332383031 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e65736572702042 6b383434313a676e 69646e6570657469 727720426b363937 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff8217e75d RDX=ffff8880249e0000 RSI=ffffffff8217e76a RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc9000399f0f0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=000000000000001e R12=0000000000000000 R13=0000000000000000 R14=ffffc9000399f538 R15=0000000000000001 RIP=ffffffff81bb0ff0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880975c6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002efe8ff8 CR3=000000002a450000 CR4=00352ef0 DR0=000000005ffffffd DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000008f23ac RBX=0000000000000002 RCX=ffffffff8b905bf9 RDX=ffffed1005686656 RSI=ffffffff8c162900 RDI=ffffffff8190cd41 RBP=ffffed1003bdb910 RSP=ffffc9000047fdf8 R8 =0000000000000000 R9 =ffffed1005686655 R10=ffff88802b4332ab R11=0000000000000001 R12=0000000000000002 R13=ffff88801dedc880 R14=ffffffff90ab6e90 R15=0000000000000000 RIP=ffffffff8b90475f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976c6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000056402da30f40 CR3=000000004af20000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=97a60c6669705f1c c9a99d98e1a9d597 97a60c6669705f1c c9a99d98e1a9d597 97a60c6669705f1c c9a99d98e1a9d597 97a60c6669705f1c c9a99d98e1a9d597 ZMM18=f76360bb2edd2732 0ff39035ef747554 f76360bb2edd2732 0ff39035ef747554 f76360bb2edd2732 0ff39035ef747554 f76360bb2edd2732 0ff39035ef747554 ZMM19=621e000000000000 0000000000000004 621e000000000000 0000000000000003 621e000000000000 0000000000000002 621e000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff f90801a203000200 01a0030008000198 0304080001900302 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800018803080800 0180030408001086 08000fffffffff02 060275dc0408000e ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 08000002060075dc 00236f656469762f 7665642f01ffffff ffffffffffe70800 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 021881a2d8900800 0100000208060601 3da200000001ffff fffffffffffff908 ZMM25=0ff390350ff39035 0ff390350ff39035 0ff390350ff39035 0ff390350ff39035 0ff390350ff39035 0ff390350ff39035 0ff390350ff39035 0ff390350ff39035 ZMM26=2edd27322edd2732 2edd27322edd2732 2edd27322edd2732 2edd27322edd2732 2edd27322edd2732 2edd27322edd2732 2edd27322edd2732 2edd27322edd2732 ZMM27=f76360bbf76360bb f76360bbf76360bb f76360bbf76360bb f76360bbf76360bb f76360bbf76360bb f76360bbf76360bb f76360bbf76360bb f76360bbf76360bb ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=601e0000601e0000 601e0000601e0000 601e0000601e0000 601e0000601e0000 601e0000601e0000 601e0000601e0000 601e0000601e0000 601e0000601e0000 info registers vcpu 3 CPU#3 RAX=0000000000000002 RBX=00000000000000c7 RCX=ffffffff819a6882 RDX=ffff88804ea3a440 RSI=ffffffff819a6870 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc9000383f130 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=735f656764697262 R12=1ffff92000707e29 R13=0000000000000000 R14=ffff8880250a8000 R15=ffffc9000383f200 RIP=ffffffff81bb0ff0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880977c6000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f955c0 CR3=0000000062ff2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000