last executing test programs: 7.251195774s ago: executing program 4 (id=65): r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x400) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0xfffffffe, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x0, 0xc8, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x5c1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 6.854298282s ago: executing program 4 (id=67): r0 = epoll_create(0x7) epoll_wait(r0, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x80000000) ftruncate(r0, 0x6) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) io_uring_enter(0xffffffffffffffff, 0x39ce, 0x57b7, 0x16, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002140)='$|', 0x2}, {&(0x7f0000000180)="e8f2531db6825747c047546f7d963bd72ca369f91531c84f1f03dd9b967b06000ebb6e5f912235c8e3ff19415197de4124071704f3f4baf37d83b5391763f78b925dd4410c6b742894148238ecbac2a6eee351"}, {&(0x7f0000000200)="8c6c"}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="15", 0x1}], 0x1}}], 0x4000000000001ac, 0x4000801) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000002100)=0x40) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd000000100001000b0808004149224e06040800", 0x58}], 0x1) sendfile(r1, r2, 0x0, 0x10ffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1f4}, 0x94) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0xc55, &(0x7f00000006c0)=ANY=[@ANYBLOB='flush,shortname=win95,nonumtail=0,rodir,utf8=1,rodir,rodir,nonumtail=0,iocharset=cp865,iocharset=ascii,uni_xlate=0,utf8=1,uni_xlate=1,nonumtail=0,dos1xfloppy,rodir,uni_xlate=1,errors=continue,shortname=winnt,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c00a6b857f195f3e882e425ee1921846f87e10cb475e4736d59bd59e0b2ba1aa6b3e05ddca581132451d465d9533958202089bf2745d2cae617ce84c9dd5703f5c8bd2a4b71425f7f7a42f2a7b220387c95b934438f68ce68e1ca67114abb588270679537bad0a40fd354eb239859f3d3b9471603a631f131fdfe136d3225e54743a2989f10d7c8c3ac54b07afd429649793aacaa09851c4fd1a42ffa42329f7dcd518237f9df71"], 0xf5, 0x301, &(0x7f0000000300)="$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") syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./sys\x00', 0x0, &(0x7f0000000100)={[{@nodiscard}, {@nodelalloc}, {@user_xattr}, {@oldalloc}]}, 0xa, 0x4e4, &(0x7f00000014c0)="$eJzs3E1oXNUeAPD/nSRNXr+S19f30b6+9/KsYvEjadNquxBEQXChIripO8ckLbXTRpoIpgQTRepG0IK4FcWN6NqFK1eirgQ3XeheCkWyaS0oI3fm3mRmkplJ2mmSJr8fTOec+5Fz/nPvmXvOPZ0bwJY1mP6TROyMiJ8ioj8iCo0bDFbfbszPjP42PzOaRLn8wq9Jultcn58ZzTdNsvcd1Ux3/R+qNzl98WyxVBq/kOWHp869Ojw5ffHhM+eKp8dPj58fOXHi2NEjxx8deaQjcf41rev+NyYO7Hv6xcvPjp68/PJ3XyQ1la6NI1pVfMV6Yq7mM2l0XwdK2Eh21aST7sa1fbWZTny4dEhvRHRXzta0/fdH19u7F9b1x1NvrWvlgDuqXC6XR5qvnisDm1gS610DYH3kF/rr8x+OpmPg+nHw5nftieoAKI37RvaqDnoWb1/0NIxvO2kmIk7O3fwofcWS+xAAAJ33ddr/eaja76jv/xXiHzXb7c7mhgayuZQ9EfG3iNgbEX+PqGz7z4j41yrLH2zIL+3/FK7mqZdWG9wKpP2/x7K5rfyVlZtFvZjbVYm/Jzl1pjR+OFt7KHp60/yRZf96EpVJoPjxvWblD9b0/9JXWn7eF8xKvtrdW7/PWHGqeLtx5669GbG/e7n4k+hejCL2RcT+WyzjzAOfHahf0rWQah9/C0vmmVav/HHE/dXjPxcN8eeS1vOTw31RGj88nJ8VS33/w6Xnm5V/W/F3QHr8ty97/i/EP5DUztdO5osXZvm2tSvj0s/vNB3TDEY8Hqs+/8vl8mx94a8Xp6ZuliO2Jc8sWX6h5gZ3nq+8H6nGf+jg8u1/Tyx+Ev+OiPQk/k9E/Dci/pcdu/9HxD0RcbBF/N8+ee8rLeJf1+Mfn6ffUPlIt83xz49D9USonhHpsvzUmF4+0XX2m6+aFd8Yf5LlI36PK5Ut0uN/rJI6lO0zVpzqaxdWVnhftKhX7dkMAAAAm1k68t8ZSWFoIV0oDA1V/w//3theKE1MTj14auK182PV3wgMRE8hv9PVn+Uju/85UM1XRt8jlfeI2ex+6dHsvvEHXX+p5IdGJ0pj6x08bHE7Ftt/dsOv2v5Tv3Sta9WAtdCBeTTgLtWq/X9yfA0rAqy5W7/+6znA3a5NK/bABtjEXMVh61qu/c+uYL+eO1AXYG01v/6P6xrAJrfQyN9fwcY1P/dq/PEmcPdxkYetq337f+5OPf8KWD+tfhu/gsS2hqcBrEEiSeqWxKcRrfdK1qhinU28u4Zl/dGwpGvxAQrN94pCk1W96d4b4jNsmShujGq0S+QNdfri2e72ByVPlGeLpdKVL2+n9CZfGG2f9gIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALCx/BkAAP//lYrWdA==") setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000140)=0x10000, 0x4) socket$nl_route(0x10, 0x3, 0x0) 3.571258737s ago: executing program 4 (id=88): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000969e574b2d07b3a800000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="e1ea89dcfdaa0055f0372a8f4971c62bc8c7150f416bf64d7d7aebd070e2a3becf431e7fff1879d6d9f9d4cc97c73ded91aa0e0fcbed34d3983fb2f85935392fa3a1e73850134a40a875631cecea77bf40c74cf39f16c28dfcecef595f87d0462b25e5f4abd69d85f99337ffb30d6267f9ca1e1c781f95bc0fa6bb141cc75deee5e7442626fdca997c1199682c72d6a3189b840799d4c00620d326c058bec83871afbb1a929f3b88e5"], 0x6) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6(0xa, 0x5, 0x0) (async) socket$netlink(0x10, 0x3, 0x4) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r5, &(0x7f0000000340)="4700000001003f", 0x7) (async) mount(0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x52001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_AF_SPEC={0x4}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x44}}, 0x440088c4) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}, 0x1, 0x0, 0x0, 0x4000811}, 0x8000) 3.253881784s ago: executing program 0 (id=90): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="020000000000000002004e1fe0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002"], 0x110) setsockopt$inet_group_source_req(r0, 0xa4ffffff, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108) 3.253259414s ago: executing program 0 (id=92): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="020000000000000002004e1fe0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002"], 0x110) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0xa, 0x3, 0x3a) r4 = socket$netlink(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x1, r5, 0xfffffffd}, 0xc) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r6, &(0x7f0000000300)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@broadcast, @rand_addr, 0x0}, &(0x7f00000000c0)=0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, 0x1ee86, 0x409}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r12}]}]}, 0x2c}}, 0x24008844) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r11, 0xc0a742c700a80d57, 0x25aa6}}, 0x20}}, 0x8000) r13 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r13, &(0x7f00000000c0), 0x10) r14 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r16, &(0x7f0000001b40)=ANY=[], 0xfffffe3e) recvfrom$unix(r15, 0x0, 0x0, 0x40010020, &(0x7f0000002b00)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$ifreq_SIOCGIFINDEX_vcan(r14, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r13, &(0x7f0000000500)={&(0x7f00000003c0)={0x1d, r17}, 0x10, &(0x7f00000004c0)={&(0x7f0000000440)={0x4, 0x0, 0x0, {0x77359400}, {0x77359400}}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_STATS_GET(r1, &(0x7f0000000a40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000600)={0x3e8, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_STATS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}, @ETHTOOL_A_STATS_GROUPS={0x214, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_VALUE={0x89, 0x4, "f8b64d7b477164a8b876dd6da72b55ad30ac8225666e189790858eef2e6f4ab0033b1b5d21c4f8f3e44135e106f3749ec1d88bdc9e8277801f955c7eade8a7c4e341964150b84f57c2375ec0bd104a80456f8d5856b0748b358c60733808097c8ae17bfca416119203011bf70881611effe00a0873a5cc99f7e627928ec4e743e9e07544d2"}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x66, 0x5, "bf6fa6f01ec2f44c35f3638ade569e8cc3cf32ac7cbc12500c1e1196082a7c12d6a79c0dd6036fb09f25e7081060ce7539ff2a0798392671f2867d106f1d99fc33eaf190a9e6f0159c8ecb978b66fe27f7ecfb2cf38f829e494a1d698559128c63dc"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x75}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_BITS={0xf0, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffa101}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x2d, 0x2, '\n\xbb\xe47\xb6\xe6;\x9a_MN|\xea\xa7b\x8b\xd1rWi\xf0\xa4\a\xecl\x7f\xe8\x00\x1a\"\x05\x92O\xf7\xe2\xd2y&\xfc\x01\xda'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '*#!,@{+.\f.%-\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '+&^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb59}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5cb6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_STATS_SRC={0x8, 0x3, 0x2}, @ETHTOOL_A_STATS_GROUPS={0x120, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x11c, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x45e}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\x14/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '\\+[U.[\x92/\xec%%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '@(#!:&.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',\xe1\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}]}]}]}, @ETHTOOL_A_STATS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @ETHTOOL_A_STATS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x3e8}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000004c0)={0x4, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 3.239626057s ago: executing program 3 (id=93): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)=ANY=[@ANYBLOB="020706000500000029bd700003dcdf25030006003280000002004e23ffffffff000000000000000011119be744d767d2d2ce379129c60e4d4a33bbcb1f6c6081fe889426340d9b305ed37e062882db6e0e6829c2852fc11a218f557ad46e81fb16b2863825a713b944b2d99693543eaff2cf7b9032e989473cb8dad00b33974f02e1249924bb5b8f1032b3c8f23c7357c8514c9e2616801382d232c1b1d245149aa9029bf8de26b868186907c5781acf37413efcf1b8b0208f884df6"], 0x28}}, 0x4c004) 3.073669213s ago: executing program 3 (id=94): r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0xfffffffe, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x0, 0xc8, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x5c1}]}, 0x34}, 0x308, 0x0, 0x0, 0x4000}, 0x0) 3.038714392s ago: executing program 3 (id=96): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x20010, r0, 0x3000) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x118, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x1) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) ioctl$KDENABIO(r1, 0x4b36) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0xc, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24044010}, 0x4000000) getpid() pread64(r1, &(0x7f0000000240)=""/246, 0xf6, 0x8000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x2}) setsockopt$inet6_int(r1, 0x29, 0x4c, &(0x7f0000000380)=0x10, 0x4) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f00000003c0)) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x4000)=nil) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000400)={0x7, 0x3}) sched_setscheduler(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x19) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000004c0)=@o_path={&(0x7f0000000480)='./file0\x00', r1, 0x4000, r1}, 0x18) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r0}, 0x8) fstatfs(r3, &(0x7f0000000540)=""/113) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000005c0), 0x4) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000600)={0x200c}) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000640)=@gcm_128={{0x303}, "3014f08ab216bc4a", "e4ab090b11d2ddedb31fb17aa11c8f6c", "7325053a", "afd2340e4221dc0f"}, 0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, r6, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0xd1}, 0x4000000) accept$inet6(r1, &(0x7f00000007c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000800)=0x1c) unshare(0x780) 2.968449861s ago: executing program 4 (id=97): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() chdir(0x0) r1 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9a\b\x00\x00\x00\b\x84\xa2{\x00\v\x18\x004\x03\x96\x00\x00\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xc83\x12\xd7\xdb\x93\xcc]x\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x81\x01\xe5\x98\r\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9\xf0I{\xf0:\xd7\x802\xf3\r|\x86\x82\xf1\xb2\x06\xb0\x06\xbe\xb1\x0f\xa2\xa6\xedA\xb7\x0f\xda\x9d<\xd6l\xbcF\xcb\xec\x83#?\xf4\x81\x16+\x14\xd0\xb8\x88`W\xa9\xef\'\xe1\xd9[\xac^', 0x1) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) copy_file_range(r1, 0x0, r2, 0x0, 0x6ac, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) bind$packet(r5, &(0x7f0000000300)={0x11, 0x3, r7, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, 0x58) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x1}}}}}}, 0x0) userfaultfd(0x80001) sigaltstack(&(0x7f0000000080)={0x0, 0x80000002}, 0x0) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r8, 0x1, &(0x7f0000000040), 0x0) gettid() 2.967223572s ago: executing program 2 (id=98): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) (async) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x101880, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async, rerun: 64) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (rerun: 64) 2.966812952s ago: executing program 3 (id=99): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000300)=0x14, 0x800) getsockname$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0f00000004000000040000000600000002", @ANYRES32, @ANYRES32], 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x400, 0x51}, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) syz_usb_connect$uac3(0x5, 0x80, &(0x7f00000002c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7, 0x50, 0x6, {0x8, 0xb, 0x0, 0x1, 0x1, 0x26, 0x30, 0xff}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xc, 0xa, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x6, 0x5, {0xa, 0x25, 0x25, 0xffff0001, 0x7, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x8, 0x9, 0x1, {0xa, 0x25, 0x25, 0xff, 0x6, 0x8651}}}}}}}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='hist:keys=next_pid', 0x12) 2.932933441s ago: executing program 1 (id=101): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, 0x0, 0x0) 2.706078083s ago: executing program 1 (id=102): r0 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) eventfd2(0x0, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r1, 0x0, r1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)={0x2012}) io_setup(0x5, &(0x7f0000001380)=0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @random="8f064ab6bf7c", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x18, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[@hopopts={0x0, 0x2, '\x00', [@ra, @calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x90}}, @generic={0x3}]}]}}}}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) io_submit(r4, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xfd}}, 0x14) syz_emit_ethernet(0x56, &(0x7f0000000240)={@local, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, "76cd8a", 0x18, 0x0, 0x0, @rand_addr=' \x01\x00', @dev, {[@hopopts={0x0, 0x2, '\x00', [@calipso={0x7, 0x8}, @jumbo={0xc2, 0x4, 0xfffffff7}]}]}}}}}, 0x0) syz_clone3(&(0x7f0000000540)={0x1630ca00, 0x0, 0x0, 0x0, {}, &(0x7f00000003c0), 0xfffffffffffffe1f, 0x0, 0x0}, 0x58) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x10000014}) writev(r1, 0x0, 0xfffffffffffffeea) bpf$MAP_CREATE(0x0, 0x0, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_emit_ethernet(0x66, &(0x7f0000000b80)=ANY=[@ANYBLOB="ffffffffffff6487a2bed3d608004500001403000000006c907800000000000000000420000b0000000000000800000086dd080088be00000000100000000100000000000000080022eb00000000200082000200000000000000000000000800655800000000"], 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="6400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="3c0012800b000100697036746e6c00002c00028004001300"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.79927878s ago: executing program 4 (id=103): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) openat$kvm(0xffffffffffffff9c, 0x0, 0x2002, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r2, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x400, 0x0) clock_gettime(0x3, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710033000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x21) recvfrom$inet(r0, 0x0, 0x319c, 0x10002, 0x0, 0x0) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r2, 0x8004af79, &(0x7f0000000000)) 1.79876854s ago: executing program 0 (id=104): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x700, 0x25dfdbfc, [@sadb_key={0x4, 0x9, 0xa0, 0x0, "5370b9f283d76027f999713125a9df01e8152260"}, @sadb_address={0x3, 0x6, 0xff, 0x0, 0x0, @in={0x2, 0x4e24, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xd}, @sadb_address={0x5, 0x17, 0x0, 0x20, 0x0, @in6={0xa, 0x4e21, 0xd2ef, @private1, 0x9}}]}, 0x80}, 0x1, 0x7}, 0x800) 1.790858492s ago: executing program 0 (id=105): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)=ANY=[@ANYBLOB="020706000500000029bd700003dcdf25030006003280000002004e23ffffffff000000000000000011119be744d767d2d2ce379129c60e4d4a33bbcb1f6c6081fe889426340d9b305ed37e062882db6e0e6829c2852fc11a218f557ad46e"], 0x28}}, 0x4c004) 1.769269369s ago: executing program 0 (id=106): r0 = socket(0xa, 0x3, 0xff) sendmmsg$unix(r0, &(0x7f0000004440)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x91}}], 0x1, 0x240088e0) 1.768865369s ago: executing program 2 (id=107): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040)='fusectl\x00', 0x800000, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) lseek(r1, 0x26f, 0x4) (async) lseek(r1, 0x26f, 0x4) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioprio_set$pid(0x2, 0xffffffffffffffff, 0x2004) (async) ioprio_set$pid(0x2, 0xffffffffffffffff, 0x2004) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x16, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000f9ffffff00000000fdffffff18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000040000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000408500000082000000850000009e00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000040)="e06921e8682d85ff9782762f86dd", 0x0, 0xc7d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000040)="e06921e8682d85ff9782762f86dd", 0x0, 0xc7d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES32=r9], 0x20}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xf8, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xe4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x0, 0x4, {0xfc}, {0x0, 0x0, 0x0, 0x6}, 0x4}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_bpf={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000a40)="2e9b3d0007e03dd651930100c575963f886411", 0x13}, {&(0x7f00000001c0)="110000831e196d", 0x7}], 0x2) syz_read_part_table(0x408b, &(0x7f00000040c0)="$eJzszz9Kw3AYBuC3TTSxSEFXB3Fzkrp5BC/QC3QTHBw8QNXbFA/g5AE8iCB4ApdKYmyV4KYo8jxDePP9+cEXft3TKo3Wxaskm8njFzt3s9udlE26GU+SOkl5MW5by1aG+0kmx9kY1cNsJ7nsvzJdfPctAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAX3VSdOF5Xaubz0PStopP40UySOZJZnvLKsn9ede5Ll7OunhwlOR0t/ubNxsr73m6+IlrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB/q/yQBzlM9RbrZKs/XL2yO4c2AAJRDED7BeQrRiAh7MFybMOUBIG/5Ox7pqKizVJfnrmvvaqTY/u7TrKObT6zpwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICXHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHcFAAD//7xFGSI=") (async) syz_read_part_table(0x408b, &(0x7f00000040c0)="$eJzszz9Kw3AYBuC3TTSxSEFXB3Fzkrp5BC/QC3QTHBw8QNXbFA/g5AE8iCB4ApdKYmyV4KYo8jxDePP9+cEXft3TKo3Wxaskm8njFzt3s9udlE26GU+SOkl5MW5by1aG+0kmx9kY1cNsJ7nsvzJdfPctAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAX3VSdOF5Xaubz0PStopP40UySOZJZnvLKsn9ede5Ll7OunhwlOR0t/ubNxsr73m6+IlrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB/q/yQBzlM9RbrZKs/XL2yO4c2AAJRDED7BeQrRiAh7MFybMOUBIG/5Ox7pqKizVJfnrmvvaqTY/u7TrKObT6zpwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICXHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHcFAAD//7xFGSI=") timer_create(0x7, &(0x7f0000000180)={0x0, 0x34, 0x2, @thr={&(0x7f0000000000)="59cf5ae7a8aa2d8a87f0ac3b611cef8bb66b20cb376ed74f5cda9a21472db00294b423882669fd094978ede024500c92f05bbe963528d001751d91a2", &(0x7f0000000100)="51af21c8506d7c28dffdbf4fd5070524d717e892f71a612092e9f95eb517a0d2ed37f7b871988f423a98d472a07810873bc82a943975a837a83e69fa1079e88e41d1ffa395d2111a3a"}}, &(0x7f00000001c0)=0x0) timer_gettime(r10, &(0x7f0000000200)) r11 = syz_open_procfs(r2, &(0x7f0000000280)='net/ip_tables_matches\x00') pwrite64(r11, &(0x7f00000002c0), 0x0, 0x2) (async) pwrite64(r11, &(0x7f00000002c0), 0x0, 0x2) 1.715743163s ago: executing program 0 (id=108): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000f6ffffff000000000000000000000000008f9c3c24819bcebdfe7873f8a24c0cde3acb3fcff5bd1f37fe052019cb3f7810f25723238e1278", @ANYRES32=0x0, @ANYRES32, @ANYRES8=r0], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x10}}], 0x50}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9a) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="b275da5afb7a58e21211cfcf8a806943babe9ee19e04b8d2c7017fcb4d37da0df5bdbd39d15fb8ad075905a0c9cbc8f2ddadceb2f7e5eaed5fb1f8a02fe5aea70b5488909d422dfccd24bdd76c8d9f29aa58edd4b4f7d7b9d703e6fe170296e4e25e1c03bdfca44876c7770e9a03c908da3b9eb2a77492bca9c5fe9e89b6fc95319e23c81f1d2b6276845950367df628f049cbcd694742cdafa15b909656df91affc58cbe4ee1c6d78fa", @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="96a1470bebc6af6aa8e3c89a177cfc2c67030075705f69643dd5cc97875288cd094ad300d19baead8dafb26e29c167961d86d929a01150c2616261bcd74d925254e5b97c431463d284f7de0d304ec2162cde872e2f97ea5740c0095b004023faebe2bf0185ec5c406cd7525ee5aabfc26b576a7e4fdcd412d626247bd6085a", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_DIRENTPLUS(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES64=r4], 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r6}, 0xc) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) setreuid(0xffffffffffffffff, 0xee01) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3800003) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_tx_ring(r9, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[], 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file2\x00', 0x20005e, &(0x7f00000004c0)={[{@abort}, {@errors_continue}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@resgid}, {@nolazytime}, {@data_ordered}, {@noacl}, {@data_journal}, {@lazytime}], [{@smackfsroot}, {@permit_directio}, {@subj_user={'subj_user', 0x3d, '[(\'{'}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@fsname={'fsname', 0x3d, '^({!'}}, {@obj_role={'obj_role', 0x3d, 'subj_user'}}]}, 0x1, 0x476, &(0x7f0000000700)="$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") r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r10, 0x4b4b, &(0x7f0000000040)) setrlimit(0x40000000000008, &(0x7f0000000040)={0x4848, 0xfffffffffffff006}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x2010, r8, 0xdbea2000) syz_usb_connect(0x0, 0x39, &(0x7f0000000040)=ANY=[], 0x0) 1.659310408s ago: executing program 1 (id=109): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) mount$9p_fd(0xfe00, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 1.659111918s ago: executing program 1 (id=110): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (async) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xb0}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x7) close_range(r3, 0xffffffffffffffff, 0x0) 1.592886016s ago: executing program 1 (id=111): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x6, &(0x7f0000000600)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xb7, 0x2}, @generic={0xb7, 0x3}, @generic={0x85, 0x0, 0x0, 0x0, 0x33}, @generic={0x95}], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000800)={r1, 0x0, 0xf, 0x0, &(0x7f0000000900)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) 1.518154427s ago: executing program 1 (id=112): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) unshare(0x20000400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f00000038c0)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000200), 0x9, 0x0, 0xc2}, 0x40000061) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_usb_connect$midi(0x2, 0x41, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x582, 0x3b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x1, 0x18, 0x10, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0x6, [], [{{0x9, 0x5, 0x7, 0xb, 0x10, 0xf, 0xd8, 0x2, {0x14, 0x25, 0x1, 0x10, "b5b3800000000002000056207555ec1f"}}}]}}}}}]}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) unshare(0x40000000) syz_open_procfs(r0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000200000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r6 = socket$packet(0x11, 0x3, 0x300) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f00000003c0)={[{@nouid32}, {@bsdgroups}, {@noinit_itable}, {@errors_remount}]}, 0xff, 0x4c2, &(0x7f0000000d80)="$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") ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r5, r7, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20) syz_emit_ethernet(0x110, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f0000000280)={r2, &(0x7f0000000000)='/dev/snapshot\x00', 0x26000, &(0x7f0000000040)={@_ha_fsid={[0x1, 0x9]}, {0x6, 0x7, 0x2, 0x1}}, 0xd3b, &(0x7f00000000c0), &(0x7f0000000100)=0x4f6}) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0x42101, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x4e23, 0x5, 0x4e23, 0x2, 0x0, 0x20, 0x60, 0x87, 0x0, 0xee00}, {0xff, 0x47a, 0x34, 0x10000, 0x3, 0x2, 0x5, 0xf}, {0x3, 0x80000001, 0x81, 0x7fffffffffffffff}, 0x2, 0x0, 0x1, 0x1, 0x0, 0x3}, {{@in6=@loopback, 0x4d2, 0x2b}, 0x2, @in=@remote, 0x3500, 0x4, 0x1, 0x7f, 0x3, 0xd, 0x8}}, 0xe8) ioctl$SNAPSHOT_FREE(r8, 0x3305) sched_setaffinity(0x0, 0x0, 0x0) 1.35913037s ago: executing program 3 (id=113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() chdir(0x0) r1 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9a\b\x00\x00\x00\b\x84\xa2{\x00\v\x18\x004\x03\x96\x00\x00\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xc83\x12\xd7\xdb\x93\xcc]x\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x81\x01\xe5\x98\r\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9\xf0I{\xf0:\xd7\x802\xf3\r|\x86\x82\xf1\xb2\x06\xb0\x06\xbe\xb1\x0f\xa2\xa6\xedA\xb7\x0f\xda\x9d<\xd6l\xbcF\xcb\xec\x83#?\xf4\x81\x16+\x14\xd0\xb8\x88`W\xa9\xef\'\xe1\xd9[\xac^', 0x1) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) copy_file_range(r1, 0x0, r2, 0x0, 0x6ac, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) bind$packet(r5, &(0x7f0000000300)={0x11, 0x3, r7, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, 0x58) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x1}}}}}}, 0x0) userfaultfd(0x80001) sigaltstack(&(0x7f0000000080)={0x0, 0x80000002}, 0x0) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r8, 0x1, &(0x7f0000000040), 0x0) gettid() 1.184140808s ago: executing program 2 (id=114): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)={0x17}) (async, rerun: 64) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008001}, 0x20000000) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@enum={0x9, 0x0, 0x0, 0xf}, @ptr={0x5, 0x0, 0x0, 0x2, 0x1}]}}, &(0x7f0000001fc0)=""/4113, 0x32, 0x1011, 0x1}, 0x28) (rerun: 32) 417.159617ms ago: executing program 2 (id=115): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x700, 0x25dfdbfc, [@sadb_key={0x4, 0x9, 0xa0, 0x0, "5370b9f283d76027f999713125a9df01e8152260"}, @sadb_address={0x3, 0x6, 0xff, 0x0, 0x0, @in={0x2, 0x4e24, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xd}, @sadb_address={0x5, 0x17, 0x0, 0x20, 0x0, @in6={0xa, 0x4e21, 0xd2ef, @private1, 0x9}}]}, 0x80}, 0x1, 0x7}, 0x800) 311.592095ms ago: executing program 2 (id=116): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)=ANY=[@ANYBLOB="020706000500000029bd700003dcdf25030006003280000002004e23ffffffff000000000000000011119be744d767"], 0x28}}, 0x4c004) 310.722246ms ago: executing program 2 (id=117): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r0) (fail_nth: 4) 105.855202ms ago: executing program 3 (id=118): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) ftruncate(r3, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x2, 0x12, r3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1a, 0x4, &(0x7f00000006c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0xb8, 0x0, 'pptp\x00'}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248) 0s ago: executing program 4 (id=119): r0 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000c40)=@ethtool_per_queue_op={0x16, 0xe, [0x8, 0x7, 0x9, 0x70, 0x1, 0xffffffff, 0x5, 0xa, 0x5, 0x9, 0x5, 0x2, 0x3, 0xeac5, 0xea9f, 0xfff, 0x1, 0x70, 0xb58f41d, 0x7ff, 0x7, 0x7fffffff, 0x14, 0x24e, 0x10001, 0xf, 0x9, 0x6, 0xc4, 0x9, 0x61cb, 0x1f34d744, 0x7, 0x9, 0xc6, 0xfffffffe, 0x0, 0x1, 0x3, 0x270, 0xb5fd, 0x8001, 0xa0, 0x1, 0x8, 0x2008000, 0xfff, 0x7, 0x0, 0x3, 0x7fffffff, 0x2, 0xfffffffe, 0x3, 0xfffffffe, 0x2, 0x800, 0x8, 0x3ff, 0x4, 0x8, 0x100, 0xd, 0x8000, 0x3, 0x2, 0x1, 0x800, 0x3, 0x5, 0xfffffffe, 0x7a, 0xc, 0x0, 0x1000, 0xffff, 0x4, 0x10000, 0x100, 0x2, 0x5, 0x2, 0xb86, 0x8, 0x5fb0, 0x4, 0x40, 0x0, 0xe, 0x3, 0x5, 0xffffe8bb, 0x1, 0x7fff, 0x7, 0x8c81, 0x6, 0x1, 0x8, 0x2, 0x4, 0x10001, 0xff, 0x80000000, 0xfffffc00, 0x9, 0x10000, 0x40, 0x9, 0x9, 0xa3c, 0x8, 0x10, 0xa, 0x10, 0xec, 0x4, 0x8fe7, 0x0, 0xe, 0xfffffffc, 0x5, 0x3, 0x81, 0x36, 0x6, 0xae5, 0xe]}}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0xd) fchdir(r2) openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x2d80, 0x82) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 22.447611][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 22.447623][ T28] audit: type=1400 audit(1790780954.523:59): avc: denied { transition } for pid=267 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 22.452008][ T28] audit: type=1400 audit(1790780954.533:60): avc: denied { noatsecure } for pid=267 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 22.456600][ T28] audit: type=1400 audit(1790780954.533:61): avc: denied { write } for pid=267 comm="sh" path="pipe:[14412]" dev="pipefs" ino=14412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 22.460260][ T28] audit: type=1400 audit(1790780954.533:62): avc: denied { rlimitinh } for pid=267 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 22.463091][ T28] audit: type=1400 audit(1790780954.533:63): avc: denied { siginh } for pid=267 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 23.734981][ T274] sshd-session (274) used greatest stack depth: 20896 bytes left Warning: Permanently added '10.128.1.138' (ED25519) to the list of known hosts. [ 30.482953][ T28] audit: type=1400 audit(1790780962.563:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.487152][ T279] cgroup: Unknown subsys name 'net' [ 30.505864][ T28] audit: type=1400 audit(1790780962.563:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.533229][ T28] audit: type=1400 audit(1790780962.603:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.533645][ T279] cgroup: Unknown subsys name 'devices' [ 30.649805][ T279] cgroup: Unknown subsys name 'hugetlb' [ 30.655470][ T279] cgroup: Unknown subsys name 'rlimit' [ 30.791064][ T28] audit: type=1400 audit(1790780962.873:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.814389][ T28] audit: type=1400 audit(1790780962.873:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.839191][ T28] audit: type=1400 audit(1790780962.873:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.863896][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 30.872749][ T28] audit: type=1400 audit(1790780962.953:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.898286][ T28] audit: type=1400 audit(1790780962.953:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.905663][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.925376][ T28] audit: type=1400 audit(1790780962.983:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.958739][ T28] audit: type=1400 audit(1790780962.983:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.832581][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.839922][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.847809][ T289] device bridge_slave_0 entered promiscuous mode [ 31.865363][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.872645][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.880136][ T287] device bridge_slave_0 entered promiscuous mode [ 31.888523][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.895596][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.903158][ T287] device bridge_slave_1 entered promiscuous mode [ 31.911933][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.919282][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.926721][ T289] device bridge_slave_1 entered promiscuous mode [ 31.993952][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.001095][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.008700][ T291] device bridge_slave_0 entered promiscuous mode [ 32.037485][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.044619][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.052244][ T291] device bridge_slave_1 entered promiscuous mode [ 32.079725][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.086823][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.094673][ T288] device bridge_slave_0 entered promiscuous mode [ 32.104793][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.111906][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.119553][ T288] device bridge_slave_1 entered promiscuous mode [ 32.160754][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.168011][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.175509][ T290] device bridge_slave_0 entered promiscuous mode [ 32.182699][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.189826][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.197226][ T290] device bridge_slave_1 entered promiscuous mode [ 32.369237][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.376492][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.383854][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.390935][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.399939][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.407012][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.414357][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.421625][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.448188][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.455289][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.462635][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.469709][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.479252][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.486331][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.493707][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.500768][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.515275][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.522413][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.529741][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.536789][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.587841][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.595291][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.602818][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.610340][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.618234][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.625822][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.634403][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.641837][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.649145][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.656323][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.663663][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.684279][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.692051][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.700574][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.707698][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.715861][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.723531][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.748957][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.759200][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.767459][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.774600][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.782375][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.791058][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.798252][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.805639][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.814065][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.821298][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.828781][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.836972][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.844053][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.851540][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.859845][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.866876][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.904776][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.913601][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.922398][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.929520][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.937978][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.946066][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.954280][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.962795][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.971065][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.979290][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.987267][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.995664][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.003840][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.012097][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.020287][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.027916][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.035383][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.043750][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.051896][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.060456][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.068888][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.075983][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.083602][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.091868][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.099991][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.108398][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.116641][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.123717][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.131439][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.140069][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.166230][ T288] device veth0_vlan entered promiscuous mode [ 33.173497][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.181973][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.189875][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.198277][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.206653][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.215118][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.223762][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.232286][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.240751][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.252412][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.260901][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.275992][ T291] device veth0_vlan entered promiscuous mode [ 33.282930][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.291105][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.299438][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.308081][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.317964][ T287] device veth0_vlan entered promiscuous mode [ 33.335756][ T291] device veth1_macvtap entered promiscuous mode [ 33.342627][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.350551][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.358339][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.365857][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.373613][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.381914][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.390066][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.398623][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.406606][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.415091][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.423482][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.431465][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.440331][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.452659][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.465023][ T289] device veth0_vlan entered promiscuous mode [ 33.479346][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.487710][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.495500][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.503993][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.512211][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.520746][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.528338][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.538908][ T287] device veth1_macvtap entered promiscuous mode [ 33.547944][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.556386][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.564852][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.572717][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.581282][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.589930][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.598453][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.607710][ T288] device veth1_macvtap entered promiscuous mode [ 33.617231][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.625697][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.642106][ T289] device veth1_macvtap entered promiscuous mode [ 33.656440][ T290] device veth0_vlan entered promiscuous mode [ 33.663089][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.671904][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.680774][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.700925][ T291] request_module fs-gadgetfs succeeded, but still no fs? [ 33.709425][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.718451][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.726936][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.735849][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.753474][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.762051][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.771303][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.779917][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.790023][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.805829][ T290] device veth1_macvtap entered promiscuous mode [ 33.839209][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.848065][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.858023][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.866516][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.924733][ T314] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 33.965002][ T322] loop3: detected capacity change from 0 to 4096 [ 34.071193][ T321] loop1: detected capacity change from 0 to 256 [ 34.097326][ T321] exFAT-fs (loop1): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x11992bd0) [ 34.115693][ T324] udevd[324]: incorrect exfat checksum on /dev/loop1 [ 34.123624][ T322] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 34.133004][ T321] exFAT-fs (loop1): invalid boot region [ 34.140142][ T322] EXT4-fs (loop3): Test dummy encryption mode enabled [ 34.147023][ T321] exFAT-fs (loop1): failed to recognize exfat type [ 34.154425][ T322] EXT4-fs (loop3): can't mount with commit=1023, fs mounted w/o journal [ 34.257654][ T60] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 34.468035][ T60] usb 1-1: Using ep0 maxpacket: 8 [ 34.481231][ T60] usb 1-1: unable to get BOS descriptor or descriptor too short [ 34.496271][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 34.519197][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 34.538860][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 34.550276][ T60] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 34.560515][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 34.570565][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 32768, setting to 1024 [ 34.582001][ T60] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 34.600644][ T60] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 34.618267][ T337] loop1: detected capacity change from 0 to 1024 [ 34.629135][ T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.658370][ T337] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 34.665891][ T60] usb 1-1: Product: syz [ 34.672711][ T60] usb 1-1: Manufacturer: syz [ 34.677412][ T60] usb 1-1: SerialNumber: syz [ 34.677677][ T337] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 34.693231][ T337] EXT4-fs error (device loop1): ext4_get_journal_inode:5749: inode #5: comm syz.1.8: unexpected bad inode w/o EXT4_IGET_BAD [ 34.703661][ T60] usb 1-1: config 0 descriptor?? [ 34.707159][ T337] EXT4-fs (loop1): no journal found [ 34.719333][ T337] EXT4-fs (loop1): can't get journal size [ 34.726683][ T337] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 34.728415][ T314] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 34.765085][ T290] EXT4-fs (loop1): unmounting filesystem. [ 34.777638][ T19] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 34.847651][ T347] loop2: detected capacity change from 0 to 1024 [ 34.866577][ T349] loop4: detected capacity change from 0 to 128 [ 34.892616][ T347] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 34.941315][ T354] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 34.965865][ T314] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 34.966377][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 35.084434][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.097380][ T19] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 35.110375][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.125173][ T19] usb 4-1: config 0 descriptor?? [ 35.181899][ T6] usb 1-1: USB disconnect, device number 2 [ 35.267663][ T60] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 35.340740][ T335] loop3: detected capacity change from 0 to 512 [ 35.352398][ T335] EXT4-fs (loop3): Test dummy encryption mode enabled [ 35.359603][ T335] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.373169][ T335] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 35.384994][ T335] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.7: bad orphan inode 131083 [ 35.395724][ T335] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 35.407371][ T335] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 35.457597][ T60] usb 2-1: Using ep0 maxpacket: 8 [ 35.464468][ T60] usb 2-1: unable to get BOS descriptor or descriptor too short [ 35.473031][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 35.484171][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 35.493938][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 35.505140][ T60] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 35.515199][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 35.525722][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 32768, setting to 1024 [ 35.537094][ T60] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 35.549387][ T60] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 35.558530][ T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.566651][ T60] usb 2-1: Product: syz [ 35.570906][ T60] usb 2-1: Manufacturer: syz [ 35.575603][ T60] usb 2-1: SerialNumber: syz [ 35.581325][ T60] usb 2-1: config 0 descriptor?? [ 35.586720][ T354] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 35.618934][ T19] hid-generic 0003:0C70:F0B6.0001: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.3-1/input0 [ 35.676796][ T291] EXT4-fs (loop2): unmounting filesystem. [ 35.697397][ T28] kauditd_printk_skb: 79 callbacks suppressed [ 35.697414][ T28] audit: type=1400 audit(1790780967.773:153): avc: denied { create } for pid=368 comm="syz.2.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 35.724189][ T28] audit: type=1400 audit(1790780967.773:154): avc: denied { write } for pid=368 comm="syz.2.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 35.770889][ T28] audit: type=1400 audit(1790780967.853:155): avc: denied { mmap_zero } for pid=374 comm="syz.4.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 35.775753][ T375] futex_wake_op: syz.4.17 tries to shift op by 144; fix this program [ 35.811781][ T375] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=375 comm=syz.4.17 [ 35.841592][ T28] audit: type=1400 audit(1790780967.923:156): avc: denied { map } for pid=374 comm="syz.4.17" path="socket:[15268]" dev="sockfs" ino=15268 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 35.882144][ T28] audit: type=1400 audit(1790780967.963:157): avc: denied { ioctl } for pid=378 comm="syz.0.18" path="socket:[15281]" dev="sockfs" ino=15281 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 35.908456][ T379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18'. [ 35.921082][ T39] usb 4-1: USB disconnect, device number 2 [ 35.931901][ T28] audit: type=1400 audit(1790780967.993:158): avc: denied { write } for pid=334 comm="syz.3.7" name="hidraw0" dev="devtmpfs" ino=605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 35.954679][ T28] audit: type=1400 audit(1790780967.993:159): avc: denied { bind } for pid=378 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 35.973909][ T28] audit: type=1400 audit(1790780967.993:160): avc: denied { connect } for pid=378 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 35.995532][ T28] audit: type=1400 audit(1790780967.993:161): avc: denied { write } for pid=378 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.004159][ T385] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19'. [ 36.024594][ T385] device vlan0 entered promiscuous mode [ 36.035861][ T28] audit: type=1400 audit(1790780968.113:162): avc: denied { create } for pid=384 comm="syz.4.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 36.071231][ T60] usb 2-1: USB disconnect, device number 2 [ 36.092198][ T385] 9pnet_fd: Insufficient options for proto=fd [ 36.431949][ T287] EXT4-fs (loop3): unmounting filesystem. [ 36.616635][ T397] loop3: detected capacity change from 0 to 128 [ 36.679003][ T397] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 37.385235][ T404] loop0: detected capacity change from 0 to 512 [ 37.425184][ T404] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #2: comm syz.0.23: corrupted xattr block 255 [ 37.452568][ T396] x86/PAT: syz.2.22:396 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 37.471782][ T404] EXT4-fs (loop0): Remounting filesystem read-only [ 37.481693][ T404] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 37.500716][ T404] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 37.520053][ T404] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #2: comm syz.0.23: corrupted xattr block 255 [ 37.549922][ T404] EXT4-fs (loop0): Remounting filesystem read-only [ 37.556609][ T404] SELinux: (dev loop0, type ext4) getxattr errno 117 [ 37.564563][ T404] EXT4-fs (loop0): unmounting filesystem. [ 37.694598][ T423] loop3: detected capacity change from 0 to 1024 [ 37.711062][ T400] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 37.724718][ T423] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 37.819170][ T434] Driver unsupported XDP return value 0 on prog (id 10) dev N/A, expect packet loss! [ 37.829273][ T431] EXT4-fs (sda1): shut down requested (2) [ 37.835236][ T431] Aborting journal on device sda1-8. [ 37.928658][ T400] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 37.947620][ T400] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 37.958916][ T400] usb 2-1: config 0 interface 0 has no altsetting 0 [ 37.965563][ T400] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 37.980171][ T400] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.993573][ T400] usb 2-1: config 0 descriptor?? [ 37.999034][ T410] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 38.011414][ T443] loop0: detected capacity change from 0 to 256 [ 38.030602][ T443] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 38.049007][ T443] netlink: 51 bytes leftover after parsing attributes in process `syz.0.34'. [ 38.085278][ T440] ======================================================= [ 38.085278][ T440] WARNING: The mand mount option has been deprecated and [ 38.085278][ T440] and is ignored by this kernel. Remove the mand [ 38.085278][ T440] option from the mount to silence this warning. [ 38.085278][ T440] ======================================================= [ 38.122588][ T440] F2FS-fs (loop2): fault_injection options not supported [ 38.130933][ T440] F2FS-fs (loop2): invalid crc value [ 38.138504][ T440] F2FS-fs (loop2): Found nat_bits in checkpoint [ 38.195737][ T448] FAULT_INJECTION: forcing a failure. [ 38.195737][ T448] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 38.209364][ T448] CPU: 1 PID: 448 Comm: syz.4.35 Not tainted syzkaller #0 [ 38.216618][ T448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 38.226720][ T448] Call Trace: [ 38.230045][ T448] [ 38.233003][ T448] __dump_stack+0x21/0x24 [ 38.233710][ T440] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 38.237391][ T448] dump_stack_lvl+0x110/0x170 [ 38.249573][ T448] ? __cfi_dump_stack_lvl+0x8/0x8 [ 38.254645][ T448] dump_stack+0x15/0x24 [ 38.258928][ T448] should_fail_ex+0x3bf/0x510 [ 38.263720][ T448] should_fail+0xb/0x10 [ 38.267909][ T448] should_fail_usercopy+0x1a/0x20 [ 38.272966][ T448] _copy_from_user+0x1e/0xc0 [ 38.277571][ T448] iovec_from_user+0x1aa/0x2e0 [ 38.282347][ T448] __import_iovec+0x6d/0x460 [ 38.286938][ T448] ? kstrtoull+0x137/0x1d0 [ 38.291360][ T448] import_iovec+0x7c/0xb0 [ 38.295689][ T448] ___sys_sendmsg+0x252/0x360 [ 38.300379][ T448] ? __sys_sendmsg+0x290/0x290 [ 38.305163][ T448] ? __kasan_check_write+0x14/0x20 [ 38.310287][ T448] ? proc_fail_nth_write+0x180/0x200 [ 38.315593][ T448] ? vfs_write+0xa51/0xd00 [ 38.320054][ T448] ? __fdget+0x19c/0x220 [ 38.324320][ T448] __x64_sys_sendmsg+0x20d/0x2e0 [ 38.329308][ T448] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 38.334860][ T448] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 38.340971][ T448] x64_sys_call+0x171/0x9a0 [ 38.345535][ T448] do_syscall_64+0x4c/0xa0 [ 38.349995][ T448] ? clear_bhb_loop+0x30/0x80 [ 38.354707][ T448] ? clear_bhb_loop+0x30/0x80 [ 38.359418][ T448] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 38.365342][ T448] RIP: 0033:0x7f6b0039e159 [ 38.369806][ T448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.389440][ T448] RSP: 002b:00007f6b01255028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 38.397888][ T448] RAX: ffffffffffffffda RBX: 00007f6b00625fa0 RCX: 00007f6b0039e159 [ 38.406065][ T448] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 38.414074][ T448] RBP: 00007f6b01255090 R08: 0000000000000000 R09: 0000000000000000 [ 38.422078][ T448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.430078][ T448] R13: 00007f6b00626038 R14: 00007f6b00625fa0 R15: 00007ffe8e4e5208 [ 38.438111][ T448] [ 38.585729][ T400] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 38.593524][ T400] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 38.602106][ T400] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 38.610057][ T400] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 38.617925][ T400] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 38.625682][ T400] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 38.647940][ T400] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 38.658074][ T287] EXT4-fs (loop3): unmounting filesystem. [ 38.680910][ T400] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 38.701931][ T400] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 38.748616][ T400] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 38.781332][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 38.789196][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 38.838035][ T463] device vlan0 left promiscuous mode [ 39.058086][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 39.068971][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.100599][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 39.109086][ T400] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 39.117249][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.125302][ T400] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 39.133118][ T400] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 39.141414][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.149496][ T400] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x2 [ 39.157768][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.165868][ T400] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 39.177131][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.190161][ T400] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 39.200462][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.213685][ T400] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 39.224398][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.235893][ T400] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 39.250952][ T400] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 39.267009][ T400] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 39.276341][ T400] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 39.286104][ T400] hid-multitouch 0003:1FD2:6007.0002: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 39.313570][ T464] udevd[464]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 39.466699][ T466] FAULT_INJECTION: forcing a failure. [ 39.466699][ T466] name failslab, interval 1, probability 0, space 0, times 1 [ 39.496128][ T466] CPU: 0 PID: 466 Comm: syz.4.40 Not tainted syzkaller #0 [ 39.503335][ T466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 39.513438][ T466] Call Trace: [ 39.516762][ T466] [ 39.519739][ T466] __dump_stack+0x21/0x24 [ 39.520843][ T471] netlink: 'syz.0.42': attribute type 7 has an invalid length. [ 39.524123][ T466] dump_stack_lvl+0x110/0x170 [ 39.536363][ T466] ? __cfi_dump_stack_lvl+0x8/0x8 [ 39.541434][ T466] ? __cfi_handle_mm_fault+0x10/0x10 [ 39.546744][ T466] ? down_read_trylock+0x27f/0x660 [ 39.551908][ T466] dump_stack+0x15/0x24 [ 39.556111][ T466] should_fail_ex+0x3bf/0x510 [ 39.560823][ T466] ? io_submit_one+0x133/0x1910 [ 39.565705][ T466] __should_failslab+0xac/0xf0 [ 39.570593][ T466] should_failslab+0x9/0x20 [ 39.575123][ T466] kmem_cache_alloc+0x3b/0x320 [ 39.579927][ T466] ? __kasan_check_write+0x14/0x20 [ 39.585071][ T466] io_submit_one+0x133/0x1910 [ 39.589793][ T466] ? irqentry_exit+0x37/0x40 [ 39.594425][ T466] ? exc_page_fault+0x5e/0xb0 [ 39.599133][ T466] ? lookup_ioctx+0x2b0/0x2b0 [ 39.603844][ T466] ? asm_exc_page_fault+0x27/0x30 [ 39.608905][ T466] ? __get_user_4+0x1c/0x30 [ 39.613539][ T466] ? lookup_ioctx+0x1ab/0x2b0 [ 39.618274][ T466] __se_sys_io_submit+0x17b/0x3e0 [ 39.623328][ T466] ? __x64_sys_io_submit+0x90/0x90 [ 39.628464][ T466] ? ksys_write+0x1fa/0x260 [ 39.632995][ T466] ? __cfi_ksys_write+0x10/0x10 [ 39.637878][ T466] ? debug_smp_processor_id+0x17/0x20 [ 39.643285][ T466] __x64_sys_io_submit+0x7b/0x90 [ 39.648259][ T466] x64_sys_call+0x81d/0x9a0 [ 39.652808][ T466] do_syscall_64+0x4c/0xa0 [ 39.657269][ T466] ? clear_bhb_loop+0x30/0x80 [ 39.661980][ T466] ? clear_bhb_loop+0x30/0x80 [ 39.666690][ T466] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 39.672614][ T466] RIP: 0033:0x7f6b0039e159 [ 39.677061][ T466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.692806][ T462] set_capacity_and_notify: 1 callbacks suppressed [ 39.692849][ T462] loop3: detected capacity change from 0 to 40427 [ 39.696697][ T466] RSP: 002b:00007f6b01255028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 39.696722][ T466] RAX: ffffffffffffffda RBX: 00007f6b00625fa0 RCX: 00007f6b0039e159 [ 39.725974][ T466] RDX: 0000200000000780 RSI: 0000000000000002 RDI: 00007f6b0120b000 [ 39.732233][ T462] F2FS-fs (loop3): Corrupted extension count (327717 + 1 > 64) [ 39.733986][ T466] RBP: 00007f6b01255090 R08: 0000000000000000 R09: 0000000000000000 [ 39.749527][ T466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.753153][ T462] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 39.757522][ T466] R13: 00007f6b00626038 R14: 00007f6b00625fa0 R15: 00007ffe8e4e5208 [ 39.757544][ T466] [ 39.777230][ T462] F2FS-fs (loop3): fault_injection options not supported [ 39.782305][ T291] syz-executor: attempt to access beyond end of device [ 39.782305][ T291] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 39.807917][ T462] F2FS-fs (loop3): invalid crc value [ 39.826375][ T462] F2FS-fs (loop3): Found nat_bits in checkpoint [ 39.901361][ T480] 8021q: VLANs not supported on wg0 [ 39.911534][ T462] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 39.920438][ T462] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 39.992142][ T287] syz-executor: attempt to access beyond end of device [ 39.992142][ T287] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 40.205536][ T400] usb 2-1: USB disconnect, device number 3 [ 40.457547][ T6] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 40.617584][ T400] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 40.645815][ T486] loop4: detected capacity change from 0 to 131072 [ 40.659905][ T486] F2FS-fs (loop4): Zoned block device path is missing [ 40.666835][ T486] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 40.669488][ T6] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 40.685495][ T486] F2FS-fs (loop4): invalid crc value [ 40.691941][ T486] F2FS-fs (loop4): invalid crc value [ 40.697451][ T486] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 40.704420][ T6] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 40.716021][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 40.716036][ T28] audit: type=1400 audit(1790780972.803:215): avc: denied { write } for pid=485 comm="syz.4.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.767531][ T6] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 40.787894][ T28] audit: type=1400 audit(1790780972.813:216): avc: denied { read write } for pid=485 comm="syz.4.46" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 40.797668][ T6] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 40.823086][ T28] audit: type=1400 audit(1790780972.813:217): avc: denied { open } for pid=485 comm="syz.4.46" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 40.823381][ T400] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 40.858676][ T28] audit: type=1400 audit(1790780972.813:218): avc: denied { ioctl } for pid=485 comm="syz.4.46" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 40.864765][ T6] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 40.893737][ T400] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 40.916941][ T400] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 40.933595][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.943245][ T502] overlayfs: missing 'lowerdir' [ 40.948320][ T400] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.957036][ T494] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 40.970799][ T498] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 40.981565][ T494] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 40.998765][ T6] pl2303 3-1:1.0: pl2303 converter detected [ 41.021150][ T6] usb 3-1: pl2303 converter now attached to ttyUSB0 [ 41.077451][ T28] audit: type=1400 audit(1790780973.153:219): avc: denied { nlmsg_read } for pid=512 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 41.103703][ T28] audit: type=1400 audit(1790780973.183:220): avc: denied { read } for pid=512 comm="syz.3.54" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.172919][ T515] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 41.204837][ T19] usb 2-1: USB disconnect, device number 4 [ 41.298226][ T6] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 41.320048][ T494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.50'. [ 41.367575][ T60] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 41.414005][ T498] netlink: 20 bytes leftover after parsing attributes in process `syz.1.51'. [ 41.437768][ T494] pl2303 3-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 41.446135][ T494] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 41.453375][ T494] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 41.460672][ T494] pl2303 3-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 41.467720][ T400] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 41.468843][ T494] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 41.485401][ T6] usb 1-1: New USB device found, idVendor=2b73, idProduct=000d, bcdDevice= 0.40 [ 41.494510][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.502607][ T6] usb 1-1: Product: syz [ 41.506805][ T6] usb 1-1: Manufacturer: syz [ 41.511468][ T6] usb 1-1: SerialNumber: syz [ 41.522767][ T39] usb 3-1: USB disconnect, device number 2 [ 41.531284][ T39] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 41.541083][ T39] pl2303 3-1:1.0: device disconnected [ 41.547580][ T60] usb 5-1: Using ep0 maxpacket: 32 [ 41.554107][ T60] usb 5-1: config 92 has an invalid interface number: 83 but max is 0 [ 41.562408][ T60] usb 5-1: config 92 has no interface number 0 [ 41.568710][ T60] usb 5-1: config 92 interface 83 has no altsetting 0 [ 41.576969][ T60] usb 5-1: New USB device found, idVendor=1e2d, idProduct=0053, bcdDevice=b9.57 [ 41.586127][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.594190][ T60] usb 5-1: Product: syz [ 41.598451][ T60] usb 5-1: Manufacturer: syz [ 41.603079][ T60] usb 5-1: SerialNumber: syz [ 41.657552][ T400] usb 4-1: Using ep0 maxpacket: 8 [ 41.664201][ T400] usb 4-1: unable to get BOS descriptor or descriptor too short [ 41.672889][ T400] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 41.683891][ T400] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 41.693588][ T400] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 41.704789][ T400] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 41.714794][ T400] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 41.721878][ T502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.727883][ T400] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 32768, setting to 1024 [ 41.734508][ T502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.746027][ T400] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 41.764196][ T400] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 41.773532][ T400] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.781696][ T400] usb 4-1: Product: syz [ 41.785955][ T400] usb 4-1: Manufacturer: syz [ 41.790685][ T400] usb 4-1: SerialNumber: syz [ 41.796444][ T400] usb 4-1: config 0 descriptor?? [ 41.801805][ T515] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 41.809547][ T510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.820397][ T510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.948900][ T28] audit: type=1400 audit(1790780974.033:221): avc: denied { read } for pid=519 comm="syz.1.56" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 41.971721][ T28] audit: type=1400 audit(1790780974.033:222): avc: denied { open } for pid=519 comm="syz.1.56" path="/dev/ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 41.996102][ T28] audit: type=1400 audit(1790780974.033:223): avc: denied { ioctl } for pid=519 comm="syz.1.56" path="/dev/ptp0" dev="devtmpfs" ino=264 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 42.052796][ T28] audit: type=1400 audit(1790780974.133:224): avc: denied { bind } for pid=529 comm="syz.2.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 42.108809][ T533] futex_wake_op: syz.2.60 tries to shift op by 144; fix this program [ 42.144657][ T531] loop1: detected capacity change from 0 to 8192 [ 42.157286][ T531] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 42.169855][ T400] usb 4-1: USB disconnect, device number 3 [ 42.611116][ T6] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 42.623154][ T6] usb 1-1: found format II with max.bitrate = 44931, frame size=8 [ 42.631193][ T6] usb 1-1: found format II with max.bitrate = 44931, frame size=8 [ 42.665781][ T6] usb 1-1: USB disconnect, device number 3 [ 42.717619][ T541] loop3: detected capacity change from 0 to 128 [ 42.724696][ T541] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 42.759365][ T332] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 42.908773][ T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.421763][ T60] usb 5-1: bad CDC descriptors [ 44.438067][ T60] usb 5-1: USB disconnect, device number 2 [ 44.571650][ T555] syz.3.66 (555) used greatest stack depth: 20800 bytes left [ 44.673902][ T565] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 44.793012][ T583] netlink: 24 bytes leftover after parsing attributes in process `syz.3.74'. [ 44.816208][ T583] device vlan0 entered promiscuous mode [ 44.986460][ T583] 9pnet_fd: Insufficient options for proto=fd [ 45.036252][ T585] loop3: detected capacity change from 0 to 2048 [ 45.098267][ T585] loop3: p1 < > p4 < > [ 45.254536][ T588] FAULT_INJECTION: forcing a failure. [ 45.254536][ T588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.282026][ T588] CPU: 0 PID: 588 Comm: syz.0.73 Not tainted syzkaller #0 [ 45.289292][ T588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 45.299398][ T588] Call Trace: [ 45.302712][ T588] [ 45.305674][ T588] __dump_stack+0x21/0x24 [ 45.310047][ T588] dump_stack_lvl+0x110/0x170 [ 45.314797][ T588] ? __cfi_dump_stack_lvl+0x8/0x8 [ 45.319870][ T588] ? mutex_unlock+0x8f/0x230 [ 45.324499][ T588] dump_stack+0x15/0x24 [ 45.328783][ T588] should_fail_ex+0x3bf/0x510 [ 45.333494][ T588] should_fail+0xb/0x10 [ 45.337773][ T588] should_fail_usercopy+0x1a/0x20 [ 45.342830][ T588] strncpy_from_user+0x24/0x2c0 [ 45.347720][ T588] ? kmem_cache_alloc+0x166/0x320 [ 45.352787][ T588] ? getname_flags+0xba/0x510 [ 45.357499][ T588] getname_flags+0xf5/0x510 [ 45.362057][ T588] __x64_sys_mkdirat+0x7c/0xa0 [ 45.366862][ T588] x64_sys_call+0x73d/0x9a0 [ 45.371424][ T588] do_syscall_64+0x4c/0xa0 [ 45.375888][ T588] ? clear_bhb_loop+0x30/0x80 [ 45.380781][ T588] ? clear_bhb_loop+0x30/0x80 [ 45.385503][ T588] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 45.391432][ T588] RIP: 0033:0x7fd055d9e159 [ 45.395889][ T588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.415619][ T588] RSP: 002b:00007fd056c14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 45.424462][ T588] RAX: ffffffffffffffda RBX: 00007fd056026090 RCX: 00007fd055d9e159 [ 45.432474][ T588] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c [ 45.440496][ T588] RBP: 00007fd056c14090 R08: 0000000000000000 R09: 0000000000000000 [ 45.448504][ T588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.456602][ T588] R13: 00007fd056026128 R14: 00007fd056026090 R15: 00007ffd7ff38628 [ 45.464617][ T588] [ 45.490580][ T592] netlink: 24 bytes leftover after parsing attributes in process `syz.2.76'. [ 45.510524][ T592] device vlan0 entered promiscuous mode [ 45.551084][ T596] 9pnet_fd: Insufficient options for proto=fd [ 45.648512][ T601] capability: warning: `syz.2.80' uses 32-bit capabilities (legacy support in use) [ 46.415029][ T621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.85'. [ 46.831707][ T624] FAULT_INJECTION: forcing a failure. [ 46.831707][ T624] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 46.996101][ T624] CPU: 1 PID: 624 Comm: syz.0.86 Not tainted syzkaller #0 [ 47.003288][ T624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 47.013474][ T624] Call Trace: [ 47.016912][ T624] [ 47.019873][ T624] __dump_stack+0x21/0x24 [ 47.024252][ T624] dump_stack_lvl+0x110/0x170 [ 47.028977][ T624] ? __cfi_dump_stack_lvl+0x8/0x8 [ 47.034041][ T624] ? __update_load_avg_cfs_rq+0xb1/0x2e0 [ 47.039725][ T624] dump_stack+0x15/0x24 [ 47.043922][ T624] should_fail_ex+0x3bf/0x510 [ 47.048642][ T624] should_fail_alloc_page+0x61/0x90 [ 47.053899][ T624] prepare_alloc_pages+0x131/0x570 [ 47.059067][ T624] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 47.064345][ T624] ? _raw_spin_unlock+0x4c/0x70 [ 47.069247][ T624] __alloc_pages+0x15b/0x610 [ 47.073887][ T624] ? __cfi___alloc_pages+0x10/0x10 [ 47.079039][ T624] ? __cfi___perf_event_task_sched_in+0x10/0x10 [ 47.085322][ T624] pte_alloc_one+0x70/0x190 [ 47.089871][ T624] ? __cfi_pte_alloc_one+0x10/0x10 [ 47.095031][ T624] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 47.101148][ T624] __pte_alloc+0x75/0x2a0 [ 47.105530][ T624] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 47.111202][ T624] ? __cfi___pte_alloc+0x10/0x10 [ 47.116184][ T624] handle_mm_fault+0x2330/0x26b0 [ 47.117534][ C0] sched: RT throttling activated [ 47.126104][ T624] ? __cfi_handle_mm_fault+0x10/0x10 [ 47.131399][ T624] ? sysvec_reschedule_ipi+0x78/0x80 [ 47.136700][ T624] ? lock_mm_and_find_vma+0x9e/0x320 [ 47.141990][ T624] ? do_user_addr_fault+0x338/0x1030 [ 47.147290][ T624] do_user_addr_fault+0x61e/0x1030 [ 47.152434][ T624] exc_page_fault+0x51/0xb0 [ 47.156951][ T624] asm_exc_page_fault+0x27/0x30 [ 47.161811][ T624] RIP: 0033:0x7fd055d60082 [ 47.166233][ T624] Code: 8d 15 13 1a 0f 00 48 89 ee 48 89 df e8 87 f2 03 00 48 8b 05 38 2d 29 00 48 83 e8 01 48 39 e8 0f 82 b3 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41 [ 47.185846][ T624] RSP: 002b:00007fd056c33d20 EFLAGS: 00010286 [ 47.191920][ T624] RAX: ffffffffffffffff RBX: 00007fd050000000 RCX: 00007fd055d9df57 [ 47.200080][ T624] RDX: 00007fd055e51a71 RSI: 0000000000021000 RDI: 00007fd050000000 [ 47.208055][ T624] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 47.216030][ T624] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 47.224012][ T624] R13: 0000000000001000 R14: 00007fd054000000 R15: 0000000003808000 [ 47.231990][ T624] [ 47.714185][ T624] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 47.858591][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 47.858606][ T28] audit: type=1400 audit(1790780979.943:246): avc: denied { bind } for pid=631 comm="syz.4.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.966405][ T640] 9pnet_fd: Insufficient options for proto=fd [ 48.003918][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 48.049212][ T28] audit: type=1400 audit(1790780980.133:247): avc: denied { ioctl } for pid=646 comm="syz.0.92" path="socket:[20402]" dev="sockfs" ino=20402 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 48.284227][ T647] netlink: 'syz.0.92': attribute type 2 has an invalid length. [ 48.406838][ T28] audit: type=1400 audit(1790780980.483:248): avc: denied { setopt } for pid=670 comm="syz.1.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.677662][ T627] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 48.799048][ T28] audit: type=1400 audit(1790780980.883:249): avc: denied { connect } for pid=673 comm="syz.1.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.887623][ T627] usb 4-1: Using ep0 maxpacket: 32 [ 48.896087][ T627] usb 4-1: unable to get BOS descriptor or descriptor too short [ 48.910798][ T627] usb 4-1: string descriptor 0 read error: -22 [ 48.918328][ T627] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 48.929783][ T627] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.954424][ T627] usb 4-1: BAAD SPEAKERPHONE c_chmask mismatch [ 48.982430][ T627] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 49.082744][ T511] udevd[511]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 49.251071][ T28] audit: type=1400 audit(1790780981.333:250): avc: denied { mount } for pid=663 comm="syz.3.99" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 49.293445][ T28] audit: type=1400 audit(1790780981.363:251): avc: denied { search } for pid=663 comm="syz.3.99" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 49.327561][ T627] usb 4-1: USB disconnect, device number 4 [ 49.342363][ T28] audit: type=1400 audit(1790780981.363:252): avc: denied { read write } for pid=663 comm="syz.3.99" name="trigger" dev="tracefs" ino=1481 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 49.365610][ T28] audit: type=1400 audit(1790780981.363:253): avc: denied { open } for pid=663 comm="syz.3.99" path="/23/trace/events/sched/sched_switch/trigger" dev="tracefs" ino=1481 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 49.496552][ T676] netlink: 36 bytes leftover after parsing attributes in process `syz.1.102'. [ 49.571926][ T28] audit: type=1400 audit(1790780981.653:254): avc: denied { mounton } for pid=684 comm="syz.2.107" path="/proc/67/task" dev="proc" ino=21195 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 49.698195][ T702] fuse: Unknown parameter 'uZzXϊiCM79_Yݭβ_/宧 TB-$l)XԴ׹^Hvw;t1#+bvYP6}(IiGBͯ[VߑXmx0x0000000000000007' [ 49.757609][ T28] audit: type=1400 audit(1790780981.833:255): avc: denied { map } for pid=693 comm="syz.0.108" path="socket:[21531]" dev="sockfs" ino=21531 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.894073][ T690] loop2: detected capacity change from 0 to 32768 [ 49.985545][ T690] loop2: p1 p2 p3 < p5 > [ 49.990337][ T690] loop2: p1 size 242222080 extends beyond EOD, truncated [ 49.998231][ T690] loop2: p2 start 16777215 is beyond EOD, truncated [ 50.922396][ T323] udevd[323]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 50.935911][ T511] udevd[511]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 50.958985][ T324] udevd[324]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 51.037106][ T720] FAULT_INJECTION: forcing a failure. [ 51.037106][ T720] name failslab, interval 1, probability 0, space 0, times 0 [ 51.065683][ T720] CPU: 1 PID: 720 Comm: syz.2.117 Not tainted syzkaller #0 [ 51.072948][ T720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 51.083029][ T720] Call Trace: [ 51.086315][ T720] [ 51.089251][ T720] __dump_stack+0x21/0x24 [ 51.093631][ T720] dump_stack_lvl+0x110/0x170 [ 51.098354][ T720] ? __cfi_dump_stack_lvl+0x8/0x8 [ 51.103424][ T720] ? prep_new_page+0x1c/0x110 [ 51.108142][ T720] ? get_page_from_freelist+0x2ca9/0x2d20 [ 51.113913][ T720] dump_stack+0x15/0x24 [ 51.118116][ T720] should_fail_ex+0x3bf/0x510 [ 51.122826][ T720] ? mas_alloc_nodes+0x2d8/0x850 [ 51.127812][ T720] __should_failslab+0xac/0xf0 [ 51.132621][ T720] should_failslab+0x9/0x20 [ 51.137160][ T720] kmem_cache_alloc+0x3b/0x320 [ 51.142049][ T720] mas_alloc_nodes+0x2d8/0x850 [ 51.146855][ T720] mas_preallocate+0xe3d/0x1430 [ 51.147684][ T19] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 51.151743][ T720] ? __cfi_mas_preallocate+0x10/0x10 [ 51.164546][ T720] ? rwsem_write_trylock+0x136/0x300 [ 51.169875][ T720] vma_expand+0x437/0xad0 [ 51.174279][ T720] mmap_region+0xf04/0x2130 [ 51.178841][ T720] ? __cfi_mmap_region+0x10/0x10 [ 51.183830][ T720] ? cap_mmap_addr+0x165/0x2e0 [ 51.188650][ T720] ? get_unmapped_area+0x30c/0x370 [ 51.193834][ T720] do_mmap+0x858/0xdd0 [ 51.197946][ T720] ? __count_memcg_events+0x8f/0xe0 [ 51.203184][ T720] ? __cfi_do_mmap+0x10/0x10 [ 51.207829][ T720] vm_mmap_pgoff+0x206/0x3f0 [ 51.212492][ T720] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 51.217641][ T720] ? up_read+0x56/0x1d0 [ 51.221842][ T720] ksys_mmap_pgoff+0xf6/0x1d0 [ 51.226563][ T720] __x64_sys_mmap+0xfa/0x110 [ 51.231257][ T720] x64_sys_call+0x8fd/0x9a0 [ 51.235845][ T720] do_syscall_64+0x4c/0xa0 [ 51.240336][ T720] ? clear_bhb_loop+0x30/0x80 [ 51.245096][ T720] ? clear_bhb_loop+0x30/0x80 [ 51.249822][ T720] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 51.255748][ T720] RIP: 0033:0x7f2cf7f9dec2 [ 51.260206][ T720] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 51.279849][ T720] RSP: 002b:00007f2cf8ebcd08 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 51.288319][ T720] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2cf7f9dec2 [ 51.296329][ T720] RDX: 0000000000000000 RSI: 0000000008000000 RDI: 0000000000000000 [ 51.304338][ T720] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 51.312344][ T720] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000004000000 [ 51.320383][ T720] R13: 0000000000001000 R14: 0000000000000022 R15: 00007f2cf8052829 [ 51.328399][ T720] [ 51.339464][ T720] ------------[ cut here ]------------ [ 51.345008][ T720] kernel BUG at mm/mmap.c:2854! [ 51.350822][ T720] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 51.356949][ T720] CPU: 1 PID: 720 Comm: syz.2.117 Not tainted syzkaller #0 [ 51.364198][ T720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 51.374285][ T720] RIP: 0010:mmap_region+0x1fe8/0x2130 [ 51.379709][ T720] Code: 50 80 e1 07 80 c1 03 38 c1 0f 8c e1 f9 ff ff 48 8b 7c 24 50 e8 d9 45 09 00 e9 d2 f9 ff ff e8 ef b9 c3 ff 0f 0b e8 e8 b9 c3 ff <0f> 0b 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 66 e7 ff ff 48 89 df e8 [ 51.399346][ T720] RSP: 0018:ffffc900116f7a40 EFLAGS: 00010293 [ 51.405472][ T720] RAX: ffffffff81adb458 RBX: 00007f2cf69f8000 RCX: ffff88811fca5100 [ 51.413481][ T720] RDX: 0000000000000000 RSI: 00007f2cf69f7fff RDI: 00007f2cf69f8000 [ 51.421491][ T720] RBP: ffffc900116f7c30 R08: ffff88811fca5100 R09: 0000000000000003 [ 51.429501][ T720] R10: 0000000000000003 R11: 0000000000000000 R12: 00007f2cf69f7fff [ 51.437509][ T720] R13: 00007f2cf69f8000 R14: dffffc0000000000 R15: 00007f2cee9f8000 [ 51.445512][ T720] FS: 00007f2cf8ebe6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 51.454515][ T720] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.461134][ T720] CR2: 00007f6b01254ff8 CR3: 000000011ff17000 CR4: 00000000003506a0 [ 51.469138][ T720] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.477143][ T720] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.485146][ T720] Call Trace: [ 51.488481][ T720] [ 51.491448][ T720] ? __cfi_mmap_region+0x10/0x10 [ 51.496423][ T720] ? cap_mmap_addr+0x165/0x2e0 [ 51.501222][ T720] ? get_unmapped_area+0x30c/0x370 [ 51.506417][ T720] do_mmap+0x858/0xdd0 [ 51.510529][ T720] ? __count_memcg_events+0x8f/0xe0 [ 51.515762][ T720] ? __cfi_do_mmap+0x10/0x10 [ 51.520394][ T720] vm_mmap_pgoff+0x206/0x3f0 [ 51.525023][ T720] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 51.530177][ T720] ? up_read+0x56/0x1d0 [ 51.534384][ T720] ksys_mmap_pgoff+0xf6/0x1d0 [ 51.539131][ T720] __x64_sys_mmap+0xfa/0x110 [ 51.543757][ T720] x64_sys_call+0x8fd/0x9a0 [ 51.548309][ T720] do_syscall_64+0x4c/0xa0 [ 51.552770][ T720] ? clear_bhb_loop+0x30/0x80 [ 51.557492][ T720] ? clear_bhb_loop+0x30/0x80 [ 51.562191][ T720] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 51.568108][ T720] RIP: 0033:0x7f2cf7f9dec2 [ 51.572542][ T720] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 51.592283][ T720] RSP: 002b:00007f2cf8ebcd08 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 51.600757][ T720] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2cf7f9dec2 [ 51.608763][ T720] RDX: 0000000000000000 RSI: 0000000008000000 RDI: 0000000000000000 [ 51.616771][ T720] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 51.624783][ T720] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000004000000 [ 51.632808][ T720] R13: 0000000000001000 R14: 0000000000000022 R15: 00007f2cf8052829 [ 51.640835][ T720] [ 51.643963][ T720] Modules linked in: [ 51.648853][ T720] ---[ end trace 0000000000000000 ]--- [ 51.654482][ T720] RIP: 0010:mmap_region+0x1fe8/0x2130 [ 51.660110][ T720] Code: 50 80 e1 07 80 c1 03 38 c1 0f 8c e1 f9 ff ff 48 8b 7c 24 50 e8 d9 45 09 00 e9 d2 f9 ff ff e8 ef b9 c3 ff 0f 0b e8 e8 b9 c3 ff <0f> 0b 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 66 e7 ff ff 48 89 df e8 [ 51.663273][ T19] usb 2-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 51.680303][ T720] RSP: 0018:ffffc900116f7a40 EFLAGS: 00010293 [ 51.695503][ T720] RAX: ffffffff81adb458 RBX: 00007f2cf69f8000 RCX: ffff88811fca5100 [ 51.703684][ T720] RDX: 0000000000000000 RSI: 00007f2cf69f7fff RDI: 00007f2cf69f8000 [ 51.712094][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.719338][ T720] RBP: ffffc900116f7c30 R08: ffff88811fca5100 R09: 0000000000000003 [ 51.720943][ T19] usb 2-1: Product: syz [ 51.732605][ T720] R10: 0000000000000003 R11: 0000000000000000 R12: 00007f2cf69f7fff [ 51.738115][ T19] usb 2-1: Manufacturer: syz [ 51.741880][ T720] R13: 00007f2cf69f8000 R14: dffffc0000000000 R15: 00007f2cee9f8000 [ 51.746168][ T19] usb 2-1: SerialNumber: syz [ 51.753683][ T720] FS: 00007f2cf8ebe6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 51.767033][ T720] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.773761][ T720] CR2: 00007f6b01254ff8 CR3: 000000011ff17000 CR4: 00000000003506a0 [ 51.781985][ T720] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.790128][ T720] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.798249][ T720] Kernel panic - not syncing: Fatal exception [ 51.804925][ T720] Kernel Offset: disabled [ 51.809358][ T720] Rebooting in 86400 seconds..