last executing test programs: 10m54.821119302s ago: executing program 32 (id=598): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x3e1}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth0_to_hsr\x00', &(0x7f00000000c0)=@ethtool_gstrings={0x1b, 0x4}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000280)=[{{0x2, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}}], 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x40000000, 0x61, 0x11, 0x68}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) socket$kcm(0x2d, 0x2, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 10m52.2674574s ago: executing program 33 (id=599): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000340)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, 0x0) 9m42.462042914s ago: executing program 5 (id=740): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000340)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r5, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) getsockopt$inet_int(r4, 0x0, 0x31, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100feffffff0000000001000000100007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c000500ff03bb32a8772efb0c0002"], 0x3c}}, 0x20000000) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000085000000070000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, r9, {0x506}}, './file0\x00'}) r13 = syz_open_procfs(0x0, &(0x7f0000000140)='net/softnet_stat\x00') sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x44, r1, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040001) 9m40.283231726s ago: executing program 5 (id=742): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001540)=[{{&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x80, &(0x7f0000000740)=[{&(0x7f00000004c0)="d2d442f58c592aa8b0c05e035495c868dd6642ba55366432d6b872c6f6e8e857d68747362cf2ba0a43144770fb5a8f8141bfc5ab6f49c782edb49825daeb75abd03294f9caa5344cc9396bbc3a9ef06cd7094433fa8553", 0x57}, {&(0x7f0000000540)="ee08d4b0faeea3005f121738daaaba00d62c96ad1474ba40ec543890f8f9aa25030ed3a2fb22eb79c497da9ebda0952e165a0600cded9271791ecafaeccf35154b03ddf9a04fee", 0x47}, {&(0x7f00000005c0)="297c73747812c698dfc70d85e32a715d4b5020d97724feb2c5fb87d5289e536fc131ca85e38b575d6868eae02f46e5fafd61a02ec2ea5912c028e9b3b66f9273504c0601d3b5fd78b186c53a13e005a05ae6abe867242c389c1e90dfb7b76c674e4ed2870d", 0x65}, {&(0x7f0000000640)="3536f806ec00119ed429217720544bcd4d0065aef853cd9def4d2dce9ee09a4f8628c5df06edd1ad714ace3c2c18b603fbd61c0d94c921d323841c4fd0155bb968605deb00b93c888b9384d50e5a049dad72990c22075eba13072944c294a3e20565075221de684621040c35", 0x6c}, {&(0x7f00000006c0)="c54ee86b93bfbe40f6d282471d628368022cc6fcf75df53d344ac4dd5dd7aeb5859c79cfaf05a6b31bf8405c4aefbd458c34114a7852", 0x36}, {&(0x7f0000000700)="8d5c59d33ea2a6f28cf6b930be44313a372a0b6831b1a00eeee07572f3a8690e397a341a203e96a4aab1cc", 0x2b}], 0x6, &(0x7f00000007c0)=[@mark={{0x14, 0x1, 0x24, 0x80000001}}], 0x18}}, {{&(0x7f0000000800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3, 0x4, {0xa, 0x4e23, 0x10001, @rand_addr=' \x01\x00'}}}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000880)="ad540e9f97ee17fdc01209e74361c2461f13f5a4f27c0292def15c269e22f6e5585bedfe52d9b75bf9c11709d7dc27e8ae3e930dbe348432958fff12b730c042aec8e2b63b35966c5e593376da767265c2b4f0783900fc345a9acaedbcddda69159539db0e504a17f43120dd6aad538469b040990534d2fba942eea171cc29f2ee07da7f11a796436bf0248ce6a7b949d9aea04cc16c91dec61a3d2fffed78b1bda664670713d414ce3c9fa16b7371aa9969ca3023b58d34c073b1ea0360ebb74044adf61bc94937999ca5789f5fba5677bb6359", 0xd4}, {&(0x7f0000000980)="4e514c87fa4399831b8f1e102cfb4cba8ceb2265a54faeb919b354775b70ed07e8dbe18b480ebf7723c992ca28940cbb9a4032ee206b322023cfaab6afce59d8700f803bf39afad054ba7060fca5c631ff0a90782160b102fb85b24198e7b9fee39395dfa7e98e94934ffd8c6594cbf66e9fcbc5f719a430d2e082f2032e5c8ae23aab5a9825d3ca4003b1021e47d8e19784e1c390ccc3caab1786df07173b69011bf0083ceaff7674588c345ce9d54a2eb512a34b8d7285657b7a9b5f551f029be11963bd9909af1703edb5c990830035c0cb7f448221cbe1f8deaa719dd7980ada1c250b352a32b1a1", 0xea}, {&(0x7f0000000a80)="4e8639f637ed39ade1605629ec8b088b53", 0x11}, {&(0x7f0000000ac0)}, {&(0x7f0000000b00)="7427a4056e7170fbbfa3ac5a30db865ed27296431246", 0x16}, {&(0x7f0000000b40)="0039ee617f77191ed60ef2eb53eb7e82c4a19ea7f7cac100ba0268e132020cfe43b54b513febe4bb69488b108b3c981d85d1a748fe6875e52d0323c5e973f633a46c1a749da35b42b108080a22c149b77cd1e3197454cf7680bae8642cae0bb594d7aec1f4d556c8d257", 0x6a}, {&(0x7f000001aa40)="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", 0x1000}, {&(0x7f0000000bc0)="d94e7d76063feec5320bdacaa4a284a6e06680f4f66088821358f7c9d42f2235bff9691141f3ed98d323b8", 0x2b}, {&(0x7f0000000c00)="91b40134349eda792eff30ea26407195bdce88672c17da2f83da911218c38d5956fed84d0628cfd179c12699d68291595cde816b18af231992eccc2f50695c", 0x3f}], 0x9, &(0x7f0000000d00)=[@txtime={{0x18, 0x1, 0x3d, 0xd}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0xcdfd}}, @timestamping={{0x14, 0x1, 0x25, 0xffffff01}}, @mark={{0x14, 0x1, 0x24, 0x698}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x90}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000dc0)="06c518e76b206c628e5164e0eae095ff9a2b0b80e5fcd8662199c1a39cbc8f357c58ef650a0a411b6393c5bea6de56f3954cd99771bc71f9fef7daa138a23b003857c7d0004182124c80a4f479ed3b9d34eca5fdd912bdd184ba1b81c36607b4f40d05b6bc8ae0914a0d32db79dd6fb9088b14c1970be181b89aafe36cfaba8c228a00a6", 0x84}], 0x1, &(0x7f0000000ec0)=[@txtime={{0x18, 0x1, 0x3d, 0x1ff}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x10}}, @txtime={{0x18, 0x1, 0x3d, 0x9db}}, @mark={{0x14, 0x1, 0x24, 0xc855}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x40}}], 0xa8}}, {{&(0x7f0000000f80)=@un=@abs={0x1, 0x0, 0x4e21}, 0x80, &(0x7f0000001100)=[{&(0x7f0000001000)="9aeea22874c3bd7ba0f79392f4e9e43d40635c32adc6bc5af9f29af15339b7107b40a5adfc1c39ac262c1efb6edc102df36060ba6775f25f12a71fb70288fbf3512a377654a1fe365f99da1bd32dc35ee028f07901ef4ee5345dea60db6586794c8541a8fd485b81af00345f54139a8b728017fe300efc81b4273396971daf6ecf0cecc15d80d16c39ba5de053b4ddf8fa77b1228566981970ee355f12d3e3d3450ef7edf7bd13065dd7e30fb459d9887be73f9e90902514120522e0fdfe97466c786c0456", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001140)="48ced7eaf121eae6b5a05de8a12554f21c8fdd81b52dd423726c52bf0a0c62863e8ff2f6972b56a4389455e36285f12c2cfabe4aea160381bec4494d0d26bda35b83dfff859357b46968b1564ec3af4ac0347a983f7498fa0c27f5bc", 0x5c}, {&(0x7f00000011c0)="db63e8f78699e36dbc882b9f143e3845e188c8330f05416688", 0x19}, {&(0x7f0000001200)="b385ac7ea2495be4d974bd42e7996e33eb038fe9437706ee22b109aea50e74d6b0e84f49866bc35a0cca5b6a02e443bd1e9b3d2ba8baa6151dad32f1e87c36e628678ab448a5bb18d1feb890f38776683d8ca61deb32b894c7d88f764c4e91e67e16485457f8d477808fd4437446e6231d109ef347a27a178067d2dbd5eb692797d184ff21d8d8a0cfe8a879a45b1e48b18b1ed136ddedc351d82cbe1ed25b9e36fb5ff7d8ad3711a1e8bce1c93078230f4aea9dac93706b6bd307e45e2f4d55ecef4406aac7dcdd2a44a5a3260cbf6b1bcda25634d6fefa137873a7f8bcc876ea9d60ae5c58f036b9212a33d19b", 0xee}, {&(0x7f0000001300)="1982c3f1b02ea6d35fc615", 0xb}, {&(0x7f0000001340)="5b1a2aa0c09d1b2cd2e392920acb4a5633bc796032d25f12217ec717e5b7aa57e9d4e29622dd2c5c442f850d3b5c6bcacecfa383409dc023d3d64d7009661e1eefe44bba389984cbd3097e0eec585d6f96f8cf8741b6d0a0ae6afc362ee59486adc8d667c1f018f51675efc808783b9c761bdc00a930bc7f4ec305d07d41bca168d31d45fd475a3d0589007fd00be3e7eadcbf041a973e87466fdcd46ad7252d8a816be8ff25", 0xa6}], 0x5, &(0x7f0000001480)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0xd}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0xc0}}], 0x5, 0x4000084) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$read(0xb, 0x0, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}, {{&(0x7f0000000200)=@isdn={0x22, 0x5, 0x40, 0xff, 0x3}, 0x80, 0x0}}], 0x2, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000001, 0x20031, 0xffffffffffffffff, 0xec785000) shmdt(0x0) r3 = socket(0x2a, 0x5, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_RADAR_DETECT(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00022dbd7000fddbdf255e0000000c0033f4fd560d99000000000057000013c269856b9700bb00050019010f0000000800a00009000000050018012a0000000800270000000000"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4004004) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10018}, [@FRA_DST={0x14, 0x1, @private1}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xffffffff}, @FRA_SRC={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x4c}}, 0x0) 9m30.555258113s ago: executing program 5 (id=754): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) r1 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000800)=@nfc_llcp={0xa, 0x0, 0x0, 0x1, 0x0, 0x0, "be467b1f4cfd8c642c13334c199f91732d13b884b4ad52d055d6d5ae3b991ffc48ca221108c4d3aa623010eab68d9504000034ea00000001f000"}, 0x80, &(0x7f0000000180)=[{0x0}, {&(0x7f00000000c0)="bb801d2b66e7", 0x6}], 0x2, 0x0, 0x0, 0x900}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r2, 0xc0245720, &(0x7f0000000040)) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000000)=0x4, 0x2, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, &(0x7f0000000080)={0x0, 0x1}) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xfffffffffffffcc5) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x20000000}, 0x1c) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 9m30.270349593s ago: executing program 5 (id=757): socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x8810) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001"], 0x18}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000b00)={0x2020}, 0x2020) timer_settime(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) tkill(r1, 0xb) 9m29.393344031s ago: executing program 5 (id=759): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x4d9, 0xa055, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x1, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xd, 0x3}}}}}]}}]}}, 0x0) r1 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000340)='/sys/fs/smackfs/mapped\x00', 0x2, 0x0) writev(r1, &(0x7f0000001d40)=[{&(0x7f0000001b40)="a5fe8d42e0c75a721d578612ae5484d7aa8df07ffb8d8edd1ba5bea369f6dcf7a2976c385cfdee44cf3d92ada4e57489f2c49159e8421a66c70934109bc7c24be29fb26dfaab969a1cebe62fc0bdce38", 0x50}], 0x1) syz_usb_control_io$hid(r0, 0x0, 0x0) write$smackfs_netlabel(0xffffffffffffffff, &(0x7f0000000100)=@l2={{0xdf40, 0x2e, 0x3, 0x2e, 0x6c2afc20, 0x2e, 0x8}, 0x2f, 0x4, 0x20, '/'}, 0x6c) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0xc) fcntl$notify(r2, 0x402, 0x8000002d) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x15) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x541b, 0xffffffffffffffff) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x8, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r6, &(0x7f0000000240), 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x62) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 9m23.603412512s ago: executing program 5 (id=763): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x23}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000000c0), 0x0, 0x0, 0x20000cc, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000000) socket(0x2, 0x2, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r4, 0x0, 0xffffffdb) clock_getres(0xfffffffffffffff5, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000100)="46095df809612e", &(0x7f0000000380)=""/32, 0x2}, 0x20) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) 9m15.564540479s ago: executing program 34 (id=752): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000340)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r5, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) getsockopt$inet_int(r4, 0x0, 0x31, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100feffffff0000000001000000100007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c000500ff03bb32a8772efb0c0002"], 0x3c}}, 0x20000000) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000085000000070000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, r9, {0x506}}, './file0\x00'}) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/130, 0x82}], 0x1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x44, r1, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040001) 9m7.738669465s ago: executing program 35 (id=763): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x23}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000000c0), 0x0, 0x0, 0x20000cc, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000000) socket(0x2, 0x2, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r4, 0x0, 0xffffffdb) clock_getres(0xfffffffffffffff5, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000100)="46095df809612e", &(0x7f0000000380)=""/32, 0x2}, 0x20) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) 5m12.990225462s ago: executing program 0 (id=1417): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000340)=0x5) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, 0x0) getsockopt$inet_int(r4, 0x0, 0x31, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100feffffff0000000001000000100007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c000500ff03bb32a8772efb0c0002"], 0x3c}}, 0x20000000) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000085000000070000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, r9, {0x506}}, './file0\x00'}) r12 = syz_open_procfs(0x0, &(0x7f0000000140)='net/softnet_stat\x00') readv(r12, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/130, 0x82}], 0x1) 5m9.645757116s ago: executing program 0 (id=1425): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x500) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000280)={{0x3, 0x5, 0x263f, 0x0, '\x00', 0x20000000}, 0x0, [0x0, 0x0, 0x0, 0xfffdffffffffbffd, 0x0, 0x0, 0x0, 0x3, 0x75, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x1, 0x0, 0x0, 0x7, 0xc19, 0xfffffffffffffffc, 0x60, 0x0, 0x0, 0x2, 0x1, 0x40, 0x0, 0x9, 0x100000000, 0x0, 0x0, 0x0, 0x10, 0x200000, 0xffffffffffffffff, 0x0, 0xd451, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x5, 0x3, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0xe411, 0x40000000000001, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffff8001, 0x0, 0xfffc, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff4, 0x0, 0x0, 0x8000, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) syz_usb_connect$lan78xx(0x5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000885) r6 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r6, 0x0) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4", 0x13) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)=0x80000003) syz_emit_ethernet(0x4f, &(0x7f0000001180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000200000086dd6c3709890019840120010000000000000000000000000000fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0) r7 = dup2(r3, r3) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) read$FUSE(r7, &(0x7f0000001300)={0x2020}, 0x2020) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="c52d8925", @ANYRES16=r1, @ANYBLOB="09022cbd7000ffdbdf25030000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x14) ioctl$VIDIOC_G_AUDIO(r7, 0x80345621, &(0x7f00000000c0)) 5m6.25207247s ago: executing program 0 (id=1438): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 5m5.917738023s ago: executing program 0 (id=1441): r0 = socket$alg(0x26, 0x5, 0x0) sendmmsg$sock(r0, &(0x7f0000001540)=[{{&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x80, &(0x7f0000000740)=[{&(0x7f00000004c0)="d2d442f58c592aa8b0c05e035495c868dd6642ba55366432d6b872c6f6e8e857d68747362cf2ba0a43144770fb5a8f8141bfc5ab6f49c782edb49825daeb75abd03294f9caa5344cc9396bbc3a9ef06cd7094433fa8553", 0x57}, {&(0x7f0000000540)="ee08d4b0faeea3005f121738daaaba00d62c96ad1474ba40ec543890f8f9aa25030ed3a2fb22eb79c497da9ebda0952e165a0600cded9271791ecafaeccf35154b03ddf9a04fee", 0x47}, {&(0x7f00000005c0)="297c73747812c698dfc70d85e32a715d4b5020d97724feb2c5fb87d5289e536fc131ca85e38b575d6868eae02f46e5fafd61a02ec2ea5912c028e9b3b66f9273504c0601d3b5fd78b186c53a13e005a05ae6abe867242c389c1e90dfb7b76c674e4ed2870d", 0x65}, {&(0x7f0000000640)="3536f806ec00119ed429217720544bcd4d0065aef853cd9def4d2dce9ee09a4f8628c5df06edd1ad714ace3c2c18b603fbd61c0d94c921d323841c4fd0155bb968605deb00b93c888b9384d50e5a049dad72990c22075eba13072944c294a3e20565075221de684621040c35", 0x6c}, {&(0x7f00000006c0)="c54ee86b93bfbe40f6d282471d628368022cc6fcf75df53d344ac4dd5dd7aeb5859c79cfaf05a6b31bf8405c4aefbd458c34114a7852", 0x36}, {&(0x7f0000000700)="8d5c59d33ea2a6f28cf6b930be44313a372a0b6831b1a00eeee07572f3a8690e397a341a203e96a4aab1cc", 0x2b}], 0x6, &(0x7f00000007c0)=[@mark={{0x14, 0x1, 0x24, 0x80000001}}], 0x18}}, {{&(0x7f0000000800)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x4, 0x2, 0x3, 0x4, {0xa, 0x4e23, 0x10001, @rand_addr=' \x01\x00'}}}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000880)="ad540e9f97ee17fdc01209e74361c2461f13f5a4f27c0292def15c269e22f6e5585bedfe52d9b75bf9c11709d7dc27e8ae3e930dbe348432958fff12b730c042aec8e2b63b35966c5e593376da767265c2b4f0783900fc345a9acaedbcddda69159539db0e504a17f43120dd6aad538469b040990534d2fba942eea171cc29f2ee07da7f11a796436bf0248ce6a7b949d9aea04cc16c91dec61a3d2fffed78b1bda664670713d414ce3c9fa16b7371aa9969ca3023b58d34c073b1ea0360ebb74044adf61bc94937999ca5789f5fba5677bb6359", 0xd4}, {&(0x7f0000000980)="4e514c87fa4399831b8f1e102cfb4cba8ceb2265a54faeb919b354775b70ed07e8dbe18b480ebf7723c992ca28940cbb9a4032ee206b322023cfaab6afce59d8700f803bf39afad054ba7060fca5c631ff0a90782160b102fb85b24198e7b9fee39395dfa7e98e94934ffd8c6594cbf66e9fcbc5f719a430d2e082f2032e5c8ae23aab5a9825d3ca4003b1021e47d8e19784e1c390ccc3caab1786df07173b69011bf0083ceaff7674588c345ce9d54a2eb512a34b8d7285657b7a9b5f551f029be11963bd9909af1703edb5c990830035c0cb7f448221cbe1f8deaa719dd7980ada1c250b352a32b1a1", 0xea}, {&(0x7f0000000a80)="4e8639f637ed39ade1605629ec8b088b53", 0x11}, {&(0x7f0000000ac0)}, {&(0x7f0000000b00)="7427a4056e7170fbbfa3ac5a30db865ed27296431246", 0x16}, {&(0x7f0000000b40)="0039ee617f77191ed60ef2eb53eb7e82c4a19ea7f7cac100ba0268e132020cfe43b54b513febe4bb69488b108b3c981d85d1a748fe6875e52d0323c5e973f633a46c1a749da35b42b108080a22c149b77cd1e3197454cf7680bae8642cae0bb594d7aec1f4d556c8d257", 0x6a}, {&(0x7f000001aa40)="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", 0x1000}, {&(0x7f0000000bc0)="d94e7d76063feec5320bdacaa4a284a6e06680f4f66088821358f7c9d42f2235bff9691141f3ed98d323b8", 0x2b}, {&(0x7f0000000c00)="91b40134349eda792eff30ea26407195bdce88672c17da2f83da911218c38d5956fed84d0628cfd179c12699d68291595cde816b18af231992eccc2f50695c", 0x3f}], 0x9, &(0x7f0000000d00)=[@txtime={{0x18, 0x1, 0x3d, 0xd}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0xcdfd}}, @timestamping={{0x14, 0x1, 0x25, 0xffffff01}}, @mark={{0x14, 0x1, 0x24, 0x698}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x90}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000dc0)="06c518e76b206c628e5164e0eae095ff9a2b0b80e5fcd8662199c1a39cbc8f357c58ef650a0a411b6393c5bea6de56f3954cd99771bc71f9fef7daa138a23b003857c7d0004182124c80a4f479ed3b9d34eca5fdd912bdd184ba1b81c36607b4f40d05b6bc8ae0914a0d32db79dd6fb9088b14c1970be181b89aafe36cfaba8c228a00a6", 0x84}], 0x1, &(0x7f0000000ec0)=[@txtime={{0x18, 0x1, 0x3d, 0x1ff}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x10}}, @txtime={{0x18, 0x1, 0x3d, 0x9db}}, @mark={{0x14, 0x1, 0x24, 0xc855}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x40}}], 0xa8}}, {{&(0x7f0000000f80)=@un=@abs={0x1, 0x0, 0x4e21}, 0x80, &(0x7f0000001100)=[{&(0x7f0000001000)="9aeea22874c3bd7ba0f79392f4e9e43d40635c32adc6bc5af9f29af15339b7107b40a5adfc1c39ac262c1efb6edc102df36060ba6775f25f12a71fb70288fbf3512a377654a1fe365f99da1bd32dc35ee028f07901ef4ee5345dea60db6586794c8541a8fd485b81af00345f54139a8b728017fe300efc81b4273396971daf6ecf0cecc15d80d16c39ba5de053b4ddf8fa77b1228566981970ee355f12d3e3d3450ef7edf7bd13065dd7e30fb459d9887be73f9e90902514120522e0fdfe97466c786c0456", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001140)="48ced7eaf121eae6b5a05de8a12554f21c8fdd81b52dd423726c52bf0a0c62863e8ff2f6972b56a4389455e36285f12c2cfabe4aea160381bec4494d0d26bda35b83dfff859357b46968b1564ec3af4ac0347a983f7498fa0c27f5bc", 0x5c}, {&(0x7f00000011c0)="db63e8f78699e36dbc882b9f143e3845e188c8330f05416688", 0x19}, {0x0}, {&(0x7f0000001340)}], 0x4, &(0x7f0000001480)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0xd}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0xc0}}], 0x5, 0x4000084) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$read(0xb, 0x0, 0x0, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}, {{&(0x7f0000000200)=@isdn={0x22, 0x5, 0x40, 0xff, 0x3}, 0x80, 0x0}}], 0x2, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000001, 0x20031, 0xffffffffffffffff, 0xec785000) shmdt(0x0) r4 = socket(0x2a, 0x5, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_RADAR_DETECT(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00022dbd7000fddbdf255e0000000c0033f4fd560d99000000000057000013c269856b9700bb00050019010f0000000800a00009000000050018012a0000000800270000000000"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4004004) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10018}, [@FRA_DST={0x14, 0x1, @private1}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xffffffff}, @FRA_SRC={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x4c}}, 0x0) 5m3.597133757s ago: executing program 0 (id=1445): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000540), 0x400000, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4008011) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/vmcoreinfo', 0x400001, 0x20) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xc, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) msgget$private(0x0, 0x69c) fcntl$setflags(r0, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x4e20, @broadcast}, 0x10) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r4, 0x0, 0x0, 0x800) 5m1.481967642s ago: executing program 0 (id=1447): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000340)=0x5) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, 0x0) getsockopt$inet_int(r4, 0x0, 0x31, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100feffffff0000000001000000100007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c000500ff03bb32a8772efb0c0002"], 0x3c}}, 0x20000000) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000085000000070000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, r9, {0x506}}, './file0\x00'}) r13 = syz_open_procfs(0x0, &(0x7f0000000140)='net/softnet_stat\x00') sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x44, r1, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040001) 4m45.506904057s ago: executing program 36 (id=1447): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000340)=0x5) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000160a011000000000000000000100000108000740000000020900020073797a300000000004000380140000001000010000000000000000000000000a3d7b4fb69a1897447405109b8829364df3dac83cede2146ab09eccbb858dc00b5f3599aed5c927e242d8da0f0edc29d4f280b610df5a921816e705d64838e3c893df31ad136041c68bd3a4ccddcfc9f7e010942cb67093d8e17ce68cff044684a36f15e3bfeae201e517f6e55117c81154a3a087fcfbd514d003d000bee9fe32c644c1adaca805de5573a247c399ef5a"], 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, 0x0) getsockopt$inet_int(r4, 0x0, 0x31, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100feffffff0000000001000000100007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c000500ff03bb32a8772efb0c0002"], 0x3c}}, 0x20000000) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000085000000070000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, r9, {0x506}}, './file0\x00'}) r13 = syz_open_procfs(0x0, &(0x7f0000000140)='net/softnet_stat\x00') sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x44, r1, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040001) 4m0.674579109s ago: executing program 7 (id=1618): syz_io_uring_setup(0x10f, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r0, 0x0, 0x0, 0x0) 3m58.605765469s ago: executing program 7 (id=1621): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000440)}, 0x3}], 0x1, 0x82, 0x0) 3m58.372866478s ago: executing program 7 (id=1623): socket(0x9, 0x800, 0x80000) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000500)={0xd69, 0x7, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x202, 0x1, 0xcccd2000, 0x1000, &(0x7f0000009000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x0, 0x5000, 0x2000, &(0x7f000002f000/0x2000)=nil}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(&(0x7f00000003c0)='./bus\x00', 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) r3 = open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) ftruncate(r3, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 3m57.662040365s ago: executing program 7 (id=1627): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920001000109021b1901000000d40904", @ANYRES64], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fedbdf251700000048000680210006"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4040800) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018200000", @ANYRES32=r4, @ANYBLOB="0000000000000000c3000000f100000095"], &(0x7f0000000180)='syzkaller\x00', 0x5, 0xdf, &(0x7f0000000000)=""/223, 0x0, 0x43}, 0x94) syz_usb_control_io$printer(r1, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x4a, 0x0, &(0x7f00000002c0)) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x1e) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x80, 0x4006}, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @sack_perm, @window], 0x6) 3m55.660573528s ago: executing program 7 (id=1637): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000540), 0x400000, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4008011) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/vmcoreinfo', 0x400001, 0x20) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xc, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x4e20, @broadcast}, 0x10) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="f4060000", @ANYRESDEC=r0, @ANYBLOB="010000000000e14f003b0000000800030000", @ANYRES32, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3m53.794969999s ago: executing program 7 (id=1639): setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000580)=[0x0]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0xfefffffe, 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x804) getpeername(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x44}}, 0x0) setsockopt$ax25_int(r1, 0x101, 0xc, &(0x7f0000000080)=0x10000, 0x4) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000070000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x5, 0x7, 0x6}}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x400, 0x0) setsockopt$ax25_int(r1, 0x101, 0x1, &(0x7f0000000140)=0x8, 0x4) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x13, r5, 0x1f795000) 3m38.653552194s ago: executing program 37 (id=1639): setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000580)=[0x0]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0xfefffffe, 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x804) getpeername(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x44}}, 0x0) setsockopt$ax25_int(r1, 0x101, 0xc, &(0x7f0000000080)=0x10000, 0x4) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000070000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x5, 0x7, 0x6}}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x400, 0x0) setsockopt$ax25_int(r1, 0x101, 0x1, &(0x7f0000000140)=0x8, 0x4) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x13, r5, 0x1f795000) 3m17.557709941s ago: executing program 1 (id=1727): openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x1100, 0x40}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) poll(&(0x7f0000000240)=[{r1, 0x2188}], 0x1, 0x8001) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (fail_nth: 1) 3m15.931024668s ago: executing program 1 (id=1733): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x84) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) lseek(r2, 0x1, 0x4) r3 = getpid() r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x9}, 0xc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000040)="42149d640c1ce2afaeac571a47bd52daaa7c013aa3a59e022e9ff86be409dd0780c7ea69b851e21bcf29467582a38e18f4", &(0x7f00000000c0)=@tcp=r5, 0x1}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r6, 0x6, 0x21, 0x0, &(0x7f0000000580)) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x17, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) 3m14.986414349s ago: executing program 1 (id=1738): r0 = socket$alg(0x26, 0x5, 0x0) sendmmsg$sock(r0, &(0x7f0000001540)=[{{&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x80, &(0x7f0000000740)=[{&(0x7f00000004c0)="d2d442f58c592aa8b0c05e035495c868dd6642ba55366432d6b872c6f6e8e857d68747362cf2ba0a43144770fb5a8f8141bfc5ab6f49c782edb49825daeb75abd03294f9caa5344cc9396bbc3a9ef06cd7094433fa8553", 0x57}, {&(0x7f0000000540)="ee08d4b0faeea3005f121738daaaba00d62c96ad1474ba40ec543890f8f9aa25030ed3a2fb22eb79c497da9ebda0952e165a0600cded9271791ecafaeccf35154b03ddf9a04fee", 0x47}, {&(0x7f00000005c0)="297c73747812c698dfc70d85e32a715d4b5020d97724feb2c5fb87d5289e536fc131ca85e38b575d6868eae02f46e5fafd61a02ec2ea5912c028e9b3b66f9273504c0601d3b5fd78b186c53a13e005a05ae6abe867242c389c1e90dfb7b76c674e4ed2870d", 0x65}, {&(0x7f0000000640)="3536f806ec00119ed429217720544bcd4d0065aef853cd9def4d2dce9ee09a4f8628c5df06edd1ad714ace3c2c18b603fbd61c0d94c921d323841c4fd0155bb968605deb00b93c888b9384d50e5a049dad72990c22075eba13072944c294a3e20565075221de684621040c35", 0x6c}, {&(0x7f00000006c0)="c54ee86b93bfbe40f6d282471d628368022cc6fcf75df53d344ac4dd5dd7aeb5859c79cfaf05a6b31bf8405c4aefbd458c34114a7852", 0x36}, {&(0x7f0000000700)="8d5c59d33ea2a6f28cf6b930be44313a372a0b6831b1a00eeee07572f3a8690e397a341a203e96a4aab1cc", 0x2b}], 0x6, &(0x7f00000007c0)=[@mark={{0x14, 0x1, 0x24, 0x80000001}}], 0x18}}, {{&(0x7f0000000800)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x4, 0x2, 0x3, 0x4, {0xa, 0x4e23, 0x10001, @rand_addr=' \x01\x00'}}}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000880)="ad540e9f97ee17fdc01209e74361c2461f13f5a4f27c0292def15c269e22f6e5585bedfe52d9b75bf9c11709d7dc27e8ae3e930dbe348432958fff12b730c042aec8e2b63b35966c5e593376da767265c2b4f0783900fc345a9acaedbcddda69159539db0e504a17f43120dd6aad538469b040990534d2fba942eea171cc29f2ee07da7f11a796436bf0248ce6a7b949d9aea04cc16c91dec61a3d2fffed78b1bda664670713d414ce3c9fa16b7371aa9969ca3023b58d34c073b1ea0360ebb74044adf61bc94937999ca5789f5fba5677bb6359", 0xd4}, {&(0x7f0000000980)="4e514c87fa4399831b8f1e102cfb4cba8ceb2265a54faeb919b354775b70ed07e8dbe18b480ebf7723c992ca28940cbb9a4032ee206b322023cfaab6afce59d8700f803bf39afad054ba7060fca5c631ff0a90782160b102fb85b24198e7b9fee39395dfa7e98e94934ffd8c6594cbf66e9fcbc5f719a430d2e082f2032e5c8ae23aab5a9825d3ca4003b1021e47d8e19784e1c390ccc3caab1786df07173b69011bf0083ceaff7674588c345ce9d54a2eb512a34b8d7285657b7a9b5f551f029be11963bd9909af1703edb5c990830035c0cb7f448221cbe1f8deaa719dd7980ada1c250b352a32b1a1", 0xea}, {&(0x7f0000000a80)="4e8639f637ed39ade1605629ec8b088b53", 0x11}, {&(0x7f0000000ac0)}, {&(0x7f0000000b00)="7427a4056e7170fbbfa3ac5a30db865ed27296431246", 0x16}, {&(0x7f0000000b40)="0039ee617f77191ed60ef2eb53eb7e82c4a19ea7f7cac100ba0268e132020cfe43b54b513febe4bb69488b108b3c981d85d1a748fe6875e52d0323c5e973f633a46c1a749da35b42b108080a22c149b77cd1e3197454cf7680bae8642cae0bb594d7aec1f4d556c8d257", 0x6a}, {&(0x7f000001aa40)="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", 0x1000}, {&(0x7f0000000bc0)="d94e7d76063feec5320bdacaa4a284a6e06680f4f66088821358f7c9d42f2235bff9691141f3ed98d323b8", 0x2b}, {&(0x7f0000000c00)="91b40134349eda792eff30ea26407195bdce88672c17da2f83da911218c38d5956fed84d0628cfd179c12699d68291595cde816b18af231992eccc2f50695c", 0x3f}], 0x9, &(0x7f0000000d00)=[@txtime={{0x18, 0x1, 0x3d, 0xd}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0xcdfd}}, @timestamping={{0x14, 0x1, 0x25, 0xffffff01}}, @mark={{0x14, 0x1, 0x24, 0x698}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x90}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000dc0)="06c518e76b206c628e5164e0eae095ff9a2b0b80e5fcd8662199c1a39cbc8f357c58ef650a0a411b6393c5bea6de56f3954cd99771bc71f9fef7daa138a23b003857c7d0004182124c80a4f479ed3b9d34eca5fdd912bdd184ba1b81c36607b4f40d05b6bc8ae0914a0d32db79dd6fb9088b14c1970be181b89aafe36cfaba8c228a00a6", 0x84}], 0x1, &(0x7f0000000ec0)=[@txtime={{0x18, 0x1, 0x3d, 0x1ff}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x10}}, @txtime={{0x18, 0x1, 0x3d, 0x9db}}, @mark={{0x14, 0x1, 0x24, 0xc855}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x40}}], 0xa8}}, {{&(0x7f0000000f80)=@un=@abs={0x1, 0x0, 0x4e21}, 0x80, &(0x7f0000001100)=[{&(0x7f0000001000)="9aeea22874c3bd7ba0f79392f4e9e43d40635c32adc6bc5af9f29af15339b7107b40a5adfc1c39ac262c1efb6edc102df36060ba6775f25f12a71fb70288fbf3512a377654a1fe365f99da1bd32dc35ee028f07901ef4ee5345dea60db6586794c8541a8fd485b81af00345f54139a8b728017fe300efc81b4273396971daf6ecf0cecc15d80d16c39ba5de053b4ddf8fa77b1228566981970ee355f12d3e3d3450ef7edf7bd13065dd7e30fb459d9887be73f9e90902514120522e0fdfe97466c786c0456", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001140)="48ced7eaf121eae6b5a05de8a12554f21c8fdd81b52dd423726c52bf0a0c62863e8ff2f6972b56a4389455e36285f12c2cfabe4aea160381bec4494d0d26bda35b83dfff859357b46968b1564ec3af4ac0347a983f7498fa0c27f5bc", 0x5c}, {&(0x7f00000011c0)="db63e8f78699e36dbc882b9f143e3845e188c8330f05416688", 0x19}, {&(0x7f0000001200)="b385ac7ea2495be4d974bd42e7996e33eb038fe9437706ee22b109aea50e74d6b0e84f49866bc35a0cca5b6a02e443bd1e9b3d2ba8baa6151dad32f1e87c36e628678ab448a5bb18d1feb890f38776683d8ca61deb32b894c7d88f764c4e91e67e16485457f8d477808fd4437446e6231d109ef347a27a178067d2dbd5eb692797d184ff21d8d8a0cfe8a879a45b1e48b18b1ed136ddedc351d82cbe1ed25b9e36fb5ff7d8ad3711a1e8bce1c93078230f4aea9dac93706b6bd307e45e2f4d55ecef4406aac7dcdd2a44a5a3260cbf6b1bcda25634d6fefa137873a7f8bcc876", 0xe0}, {&(0x7f0000001340)}], 0x4, &(0x7f0000001480)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0xd}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0xc0}}], 0x5, 0x4000084) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$read(0xb, 0x0, 0x0, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}, {{&(0x7f0000000200)=@isdn={0x22, 0x5, 0x40, 0xff, 0x3}, 0x80, 0x0}}], 0x2, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000001, 0x20031, 0xffffffffffffffff, 0xec785000) shmdt(0x0) r4 = socket(0x2a, 0x5, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_RADAR_DETECT(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00022dbd7000fddbdf255e0000000c0033f4fd560d99000000000057000013c269856b9700bb00050019010f0000000800a00009000000050018012a0000000800270000000000"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4004004) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10018}, [@FRA_DST={0x14, 0x1, @private1}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xffffffff}, @FRA_SRC={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x4c}}, 0x0) 3m10.417636496s ago: executing program 1 (id=1749): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount(0x0, 0x0, &(0x7f0000000000)='devpts\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_emit_ethernet(0x132, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000180)={r3, 0xcaf7, 0x1, 0x2}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r5, 0x0) ftruncate(r5, 0x51a9497) r6 = userfaultfd(0x80001) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x8000000000000001, &(0x7f0000000080)=""/107) ioctl$UFFDIO_API(r6, 0xc018aa3f, 0x0) readv(r6, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/224, 0x20}], 0x1000000000000108) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r7, &(0x7f0000002c00)={0x2020}, 0x2020) 3m5.75813318s ago: executing program 1 (id=1757): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) lstat(0x0, 0x0) fstat(0xffffffffffffffff, 0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f0000000080)='ecryptfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 3m3.897226062s ago: executing program 1 (id=1758): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000003c0)=0x6) lstat(0x0, 0x0) fstat(0xffffffffffffffff, 0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x7b7306c040510a6}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x60002008}) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x73ab) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000340)=[{{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000100)="ce2abd03087d9a0fdf0c892106201d8f71be3a6ef359c3833a3b5c852e8721be21b4242f0544ee78de9a2ed077dc3205c4c24cdeaf9effb34a027a5aae402d97c309621f9a43fb5d37de2099ff54b0837a9c7f0bd1ecf35d3ac285f1006d5b764d7f48dc8b420eeaedcbb302d07b9a011b62e209b50c8901", 0x78}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1c000100983c8b9a4793d3937f9c7cb3", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r6], 0x70, 0x4001}}], 0x1, 0x10) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0), 0x10044, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r10}}]}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x1, 0x0, r7, r10, r11, 0x20, 0xfff7}, 0x0, 0x0, 0x9000000000000000, 0x6, 0xf, 0x6, 0x5, 0xfffb, 0x824, 0x2, r4, r4}) r12 = fsopen(&(0x7f0000000080)='ecryptfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r12, 0x6, 0x0, 0x0, 0x0) 2m48.206564935s ago: executing program 38 (id=1758): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000003c0)=0x6) lstat(0x0, 0x0) fstat(0xffffffffffffffff, 0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x7b7306c040510a6}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x60002008}) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x73ab) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000340)=[{{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000100)="ce2abd03087d9a0fdf0c892106201d8f71be3a6ef359c3833a3b5c852e8721be21b4242f0544ee78de9a2ed077dc3205c4c24cdeaf9effb34a027a5aae402d97c309621f9a43fb5d37de2099ff54b0837a9c7f0bd1ecf35d3ac285f1006d5b764d7f48dc8b420eeaedcbb302d07b9a011b62e209b50c8901", 0x78}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1c000100983c8b9a4793d3937f9c7cb3", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r6], 0x70, 0x4001}}], 0x1, 0x10) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0), 0x10044, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r10}}]}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x1, 0x0, r7, r10, r11, 0x20, 0xfff7}, 0x0, 0x0, 0x9000000000000000, 0x6, 0xf, 0x6, 0x5, 0xfffb, 0x824, 0x2, r4, r4}) r12 = fsopen(&(0x7f0000000080)='ecryptfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r12, 0x6, 0x0, 0x0, 0x0) 2m19.401990079s ago: executing program 9 (id=1888): r0 = syz_io_uring_setup(0x4b7, &(0x7f0000010400)={0x0, 0xa48a, 0x1, 0x1, 0x203d4}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000940)=[{0x0}], 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], &(0x7f00000005c0), 0x1}, 0x20) (fail_nth: 1) 2m18.464753506s ago: executing program 9 (id=1891): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x84) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) lseek(r2, 0x1, 0x4) r3 = getpid() bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x9}, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r6, 0x6, 0x21, 0x0, &(0x7f0000000580)) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x17, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) 2m16.245848082s ago: executing program 9 (id=1894): r0 = socket$alg(0x26, 0x5, 0x0) sendmmsg$sock(r0, &(0x7f0000001540)=[{{&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x80, &(0x7f0000000740)=[{&(0x7f00000004c0)="d2d442f58c592aa8b0c05e035495c868dd6642ba55366432d6b872c6f6e8e857d68747362cf2ba0a43144770fb5a8f8141bfc5ab6f49c782edb49825daeb75abd03294f9caa5344cc9396bbc3a9ef06cd7094433fa8553", 0x57}, {&(0x7f0000000540)="ee08d4b0faeea3005f121738daaaba00d62c96ad1474ba40ec543890f8f9aa25030ed3a2fb22eb79c497da9ebda0952e165a0600cded9271791ecafaeccf35154b03ddf9a04fee", 0x47}, {&(0x7f00000005c0)="297c73747812c698dfc70d85e32a715d4b5020d97724feb2c5fb87d5289e536fc131ca85e38b575d6868eae02f46e5fafd61a02ec2ea5912c028e9b3b66f9273504c0601d3b5fd78b186c53a13e005a05ae6abe867242c389c1e90dfb7b76c674e4ed2870d", 0x65}, {&(0x7f0000000640)="3536f806ec00119ed429217720544bcd4d0065aef853cd9def4d2dce9ee09a4f8628c5df06edd1ad714ace3c2c18b603fbd61c0d94c921d323841c4fd0155bb968605deb00b93c888b9384d50e5a049dad72990c22075eba13072944c294a3e20565075221de684621040c35", 0x6c}, {&(0x7f00000006c0)="c54ee86b93bfbe40f6d282471d628368022cc6fcf75df53d344ac4dd5dd7aeb5859c79cfaf05a6b31bf8405c4aefbd458c34114a7852", 0x36}, {&(0x7f0000000700)="8d5c59d33ea2a6f28cf6b930be44313a372a0b6831b1a00eeee07572f3a8690e397a341a203e96a4aab1cc", 0x2b}], 0x6, &(0x7f00000007c0)=[@mark={{0x14, 0x1, 0x24, 0x80000001}}], 0x18}}, {{&(0x7f0000000800)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x4, 0x2, 0x3, 0x4, {0xa, 0x4e23, 0x10001, @rand_addr=' \x01\x00'}}}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000880)="ad540e9f97ee17fdc01209e74361c2461f13f5a4f27c0292def15c269e22f6e5585bedfe52d9b75bf9c11709d7dc27e8ae3e930dbe348432958fff12b730c042aec8e2b63b35966c5e593376da767265c2b4f0783900fc345a9acaedbcddda69159539db0e504a17f43120dd6aad538469b040990534d2fba942eea171cc29f2ee07da7f11a796436bf0248ce6a7b949d9aea04cc16c91dec61a3d2fffed78b1bda664670713d414ce3c9fa16b7371aa9969ca3023b58d34c073b1ea0360ebb74044adf61bc94937999ca5789f5fba5677bb6359", 0xd4}, {&(0x7f0000000980)="4e514c87fa4399831b8f1e102cfb4cba8ceb2265a54faeb919b354775b70ed07e8dbe18b480ebf7723c992ca28940cbb9a4032ee206b322023cfaab6afce59d8700f803bf39afad054ba7060fca5c631ff0a90782160b102fb85b24198e7b9fee39395dfa7e98e94934ffd8c6594cbf66e9fcbc5f719a430d2e082f2032e5c8ae23aab5a9825d3ca4003b1021e47d8e19784e1c390ccc3caab1786df07173b69011bf0083ceaff7674588c345ce9d54a2eb512a34b8d7285657b7a9b5f551f029be11963bd9909af1703edb5c990830035c0cb7f448221cbe1f8deaa719dd7980ada1c250b352a32b1a1", 0xea}, {&(0x7f0000000a80)="4e8639f637ed39ade1605629ec8b088b53", 0x11}, {&(0x7f0000000ac0)}, {&(0x7f0000000b00)="7427a4056e7170fbbfa3ac5a30db865ed27296431246", 0x16}, {&(0x7f0000000b40)="0039ee617f77191ed60ef2eb53eb7e82c4a19ea7f7cac100ba0268e132020cfe43b54b513febe4bb69488b108b3c981d85d1a748fe6875e52d0323c5e973f633a46c1a749da35b42b108080a22c149b77cd1e3197454cf7680bae8642cae0bb594d7aec1f4d556c8d257", 0x6a}, {&(0x7f000001aa40)="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", 0x1000}, {&(0x7f0000000bc0)="d94e7d76063feec5320bdacaa4a284a6e06680f4f66088821358f7c9d42f2235bff9691141f3ed98d323b8", 0x2b}, {&(0x7f0000000c00)="91b40134349eda792eff30ea26407195bdce88672c17da2f83da911218c38d5956fed84d0628cfd179c12699d68291595cde816b18af231992eccc2f50695c", 0x3f}], 0x9, &(0x7f0000000d00)=[@txtime={{0x18, 0x1, 0x3d, 0xd}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0xcdfd}}, @timestamping={{0x14, 0x1, 0x25, 0xffffff01}}, @mark={{0x14, 0x1, 0x24, 0x698}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x90}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000dc0)="06c518e76b206c628e5164e0eae095ff9a2b0b80e5fcd8662199c1a39cbc8f357c58ef650a0a411b6393c5bea6de56f3954cd99771bc71f9fef7daa138a23b003857c7d0004182124c80a4f479ed3b9d34eca5fdd912bdd184ba1b81c36607b4f40d05b6bc8ae0914a0d32db79dd6fb9088b14c1970be181b89aafe36cfaba8c228a00a6", 0x84}], 0x1, &(0x7f0000000ec0)=[@txtime={{0x18, 0x1, 0x3d, 0x1ff}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x10}}, @txtime={{0x18, 0x1, 0x3d, 0x9db}}, @mark={{0x14, 0x1, 0x24, 0xc855}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x40}}], 0xa8}}, {{&(0x7f0000000f80)=@un=@abs={0x1, 0x0, 0x4e21}, 0x80, &(0x7f0000001100)=[{&(0x7f0000001000)="9aeea22874c3bd7ba0f79392f4e9e43d40635c32adc6bc5af9f29af15339b7107b40a5adfc1c39ac262c1efb6edc102df36060ba6775f25f12a71fb70288fbf3512a377654a1fe365f99da1bd32dc35ee028f07901ef4ee5345dea60db6586794c8541a8fd485b81af00345f54139a8b728017fe300efc81b4273396971daf6ecf0cecc15d80d16c39ba5de053b4ddf8fa77b1228566981970ee355f12d3e3d3450ef7edf7bd13065dd7e30fb459d9887be73f9e90902514120522e0fdfe97466c786c0456", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001140)="48ced7eaf121eae6b5a05de8a12554f21c8fdd81b52dd423726c52bf0a0c62863e8ff2f6972b56a4389455e36285f12c2cfabe4aea160381bec4494d0d26bda35b83dfff859357b46968b1564ec3af4ac0347a983f7498fa0c27f5bc", 0x5c}, {&(0x7f00000011c0)="db63e8f78699e36dbc882b9f143e3845e188c8330f05416688", 0x19}, {&(0x7f0000001200)="b385ac7ea2495be4d974bd42e7996e33eb038fe9437706ee22b109aea50e74d6b0e84f49866bc35a0cca5b6a02e443bd1e9b3d2ba8baa6151dad32f1e87c36e628678ab448a5bb18d1feb890f38776683d8ca61deb32b894c7d88f764c4e91e67e16485457f8d477808fd4437446e6231d109ef347a27a178067d2dbd5eb692797d184ff21d8d8a0cfe8a879a45b1e48b18b1ed136ddedc351d82cbe1ed25b9e36fb5ff7d8ad3711a1e8bce1c93078230f4aea9dac93706b6bd307e45e2f4d55ecef4406aac7dcdd2a44a5a3260cbf6b1bcda25634d6fefa137873a7f8bcc876ea9d60ae5c58f036b9212a33d1", 0xed}, {&(0x7f0000001340)}], 0x4, &(0x7f0000001480)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0xd}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0xc0}}], 0x5, 0x4000084) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$read(0xb, 0x0, 0x0, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}, {{&(0x7f0000000200)=@isdn={0x22, 0x5, 0x40, 0xff, 0x3}, 0x80, 0x0}}], 0x2, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000001, 0x20031, 0xffffffffffffffff, 0xec785000) shmdt(0x0) r4 = socket(0x2a, 0x5, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_RADAR_DETECT(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00022dbd7000fddbdf255e0000000c0033f4fd560d99000000000057000013c269856b9700bb00050019010f0000000800a00009000000050018012a0000000800270000000000"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4004004) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10018}, [@FRA_DST={0x14, 0x1, @private1}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xffffffff}, @FRA_SRC={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x4c}}, 0x0) 2m14.82662292s ago: executing program 9 (id=1900): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) request_key(0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) setsockopt$ax25_int(r3, 0x101, 0x5, &(0x7f0000000240)=0xfffffff9, 0x29) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="cc010000", @ANYRES16=0x0, @ANYBLOB="02002dbd7000fcdbdf250e00000018000180140002006970366772657461703000000000000094000280880003801c0001800500020000000000080001009530ffff080001000700000018000180080001000f00000008000100d0cc000004000300100001800400030008000100ec000000400001800e0002002f6465762f70746d780000000800020047504c000400030011000200646e735f7265736f6c7665720000000008000100010100000400030008000200d11e0000580001800800030003000000080003000100000008000100", @ANYRES32=r4, @ANYBLOB="14ee02006e7230000000000000000000000000001400020073797a6b616c6c65723100000000000014000200626f6e645f736c6176655f3100000000b4000280a20005002739b6f932705982c889cac69ae6e24e42f6d24fbbaccd041c1aaf4db9e29b99c590bac1e551331ae0fde80f910d0783f42a45f10274da1de390571cfff00d586d50a5401b316855866e18a5cb20a6271ac4fa3ac9a65b5998ec61214d536aff7dd16c6ad76c612b9d2cd4ea42b552f9f48bf34cb6ea90220ad71a2e0583533b0be7fd536fd08edf76f3b2ff4b0f0f1727d253a639d9b9788f7654a852150000040001000800020091a90000"], 0x1cc}, 0x1, 0x0, 0x0, 0x8c0}, 0x8040) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = io_uring_setup(0xfc6, &(0x7f0000000180)) close_range(r5, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1400000017001c7275b30b925796010029bd0900fcdbdf2501000000d28e5542360c2f7f73dcae56f8df977c3f2c7422d26d05305bbdbe38ccda8b743b004e58dd47da58a18415de6a4efa01d86fe353a573a132b79580"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20044002) listen(r6, 0x0) listen(r6, 0x4) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r8, 0x5402, 0x0) 2m13.323796508s ago: executing program 9 (id=1904): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000540), 0x400000, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4008011) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x400001, 0x20) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xc, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) msgget$private(0x0, 0x69c) fcntl$setflags(r0, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x4e20, @broadcast}, 0x10) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r4, 0x0, 0x0, 0x800) 2m9.762577213s ago: executing program 9 (id=1907): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000030500000000000000", @ANYBLOB="030000"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m54.148633683s ago: executing program 39 (id=1907): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000030500000000000000", @ANYBLOB="030000"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 22.754429527s ago: executing program 6 (id=2271): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x8080) 22.41718425s ago: executing program 6 (id=2272): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) getpeername$packet(r2, &(0x7f0000000040), &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2b1f5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}}, 0x800) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async) getpeername$packet(r2, &(0x7f0000000040), &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2b1f5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}}, 0x800) (async) 19.910116273s ago: executing program 6 (id=2274): dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x44, 0x30, 0x9, 0x2, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) (async) setpriority(0x2, 0x0, 0x2a14b58) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000100000504358e19f2acffe3"], 0x0, 0x32, 0x0, 0x1, 0x7}, 0x28) 19.017047077s ago: executing program 8 (id=2276): setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@local, @multicast2, 0x0, "12ceb9b22ab7dd44e8a81784c9daab4158e800", 0xfffffffe, 0x6, 0x90, 0x4}, 0x3c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 1) 18.911736826s ago: executing program 4 (id=2277): openat$comedi(0xffffffffffffff9c, 0x0, 0x40, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x5, &(0x7f0000000040)=0x29) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000400)={0x6, 0x2, {0x3}, 0x5}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000400)="03", 0x1}], 0x1, 0x0, 0x0, 0x8800}], 0x1, 0x20004014) 18.573843969s ago: executing program 6 (id=2279): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r0, 0x4b32, 0x3f) r1 = userfaultfd(0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa07, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x2b}}, &(0x7f0000000040)=0x20) 17.721740617s ago: executing program 8 (id=2280): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, &(0x7f0000004800)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000240)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x65, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @rand_addr=0x64010102, {[@cipso={0x86, 0x24, 0x0, [{0x0, 0xc, "5e000000000000bfb486"}, {0x1, 0x4, "de00"}, {0x0, 0xe, "9606053d0006ff00800000b6"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x6}]}}}}}}}, 0x0) 17.620956457s ago: executing program 6 (id=2281): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200008d5}, 0x8080) 15.909708866s ago: executing program 3 (id=2282): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x84) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r2 = getpid() r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x9}, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000040)="42149d640c1ce2afaeac571a47bd52daaa7c013aa3a59e022e9ff86be409dd0780c7ea69b851e21bcf29467582a38e18f4", &(0x7f00000000c0)=@tcp=r4, 0x1}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r7, 0x6, 0x21, &(0x7f0000000280)="dc8daf8d760c0b8caa98fa19c6a35a18883775d272c579ff33a6effc0c49320f", 0x20) getsockopt$inet_tcp_buf(r7, 0x6, 0x21, 0x0, &(0x7f0000000580)) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) 15.909177642s ago: executing program 6 (id=2283): r0 = syz_clone3(&(0x7f0000000240)={0x400, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x7}, &(0x7f0000000140)=""/80, 0x50, &(0x7f00000001c0)=""/8, &(0x7f0000000200)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r1 = getpid() rt_tgsigqueueinfo(r1, 0x0, 0xb, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r2 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07}) mq_getsetattr(r2, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) syz_clone(0x44000000, 0x0, 0x0, 0x0, 0x0, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000000)) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x8400, &(0x7f0000000180)={[{@nfs_export_on}, {@metacopy_on}]}) write$tun(0xffffffffffffffff, &(0x7f0000000040)={@val={0x0, 0x88be}, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @empty, @multicast2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @multicast2}}, 0x20) 15.906058312s ago: executing program 2 (id=1940): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r0, 0xc0205866, &(0x7f00000000c0)={&(0x7f0000000040)=0x1, 0xfffff660, &(0x7f0000000140)=[{}, {}, {}, {}, {}], &(0x7f0000000080)}) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 15.735825213s ago: executing program 4 (id=2284): ioctl$FUSE_DEV_IOC_BACKING_CLOSE(0xffffffffffffffff, 0xe503, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) read$FUSE(0xffffffffffffffff, &(0x7f0000004140)={0x2020}, 0x2020) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 15.469969581s ago: executing program 2 (id=2285): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r0, 0x4b32, 0x3f) r1 = userfaultfd(0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa07, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x2b}}, &(0x7f0000000040)=0x20) 13.512770856s ago: executing program 3 (id=2286): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) lseek(r1, 0x1, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r4, 0x6, 0x21, &(0x7f0000000280)="dc8daf8d760c0b8caa98fa19c6a35a18883775d272c579ff33a6effc0c49320f", 0x20) getsockopt$inet_tcp_buf(r4, 0x6, 0x21, 0x0, &(0x7f0000000580)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) 12.365742163s ago: executing program 2 (id=2288): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x100]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4, 0x9, @loopback, 0x2}, {0xa, 0x4e24, 0x8000000, @mcast2}, 0x1, {[0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x390]}}, 0x5c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c98e16a6009e62476f000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000001780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000740)=[{{&(0x7f00000002c0)=@generic, 0x80, &(0x7f0000000340)=[{&(0x7f0000000240)=""/38, 0x26}, {&(0x7f0000000440)=""/234, 0xea}], 0x2}, 0x800}, {{&(0x7f0000000380)=@caif=@rfm, 0x80, &(0x7f00000005c0)=[{&(0x7f00000006c0)=""/110, 0x6e}], 0x1, &(0x7f00000007c0)=""/124, 0x7c}, 0x2}], 0x2, 0x2, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20) socket$pppoe(0x18, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r5, 0xc038943b, &(0x7f00000000c0)={0x9, 0x48, '\x00', 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') getdents64(r6, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1a, 0x4, 0x8, 0x7ff, 0x282, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r6, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) 11.4499184s ago: executing program 8 (id=2289): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000540), 0x400000, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4008011) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/vmcoreinfo', 0x400001, 0x20) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xc, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) msgget$private(0x0, 0x69c) fcntl$setflags(r0, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x4e20, @broadcast}, 0x10) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r4, 0x0, 0x0, 0x800) 9.75390726s ago: executing program 2 (id=2290): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="020000001e91ffff040000000800000000000000", @ANYRES32=0x1, @ANYBLOB="d50a00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffff000000000000000000000000000000000000000000000000748f3269a384ac3340744eb86cecff2c561d16fffd108b5f46fbb5efe125525e280d"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0, @ANYRES8, @ANYRES8=r0, @ANYRES16=r0, @ANYRES64=r0, @ANYRES64, @ANYRES32=r0], 0x50) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x38) mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0x2f) sendmmsg(r2, &(0x7f0000007780)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001440)="d791e7295f", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000080)="edb28c0de4af1b688a0efac728d5e6994caf4927ed31ed2767f5aec5aa9bc63b1edf355124601ff3d2e4ced7e52e259fe4eb1d5908feea24d13c334c7ff6c9e94de911b53ea76308db427251157b69a5449d242c8bc4b24f0b2a3d1079551d4da78681dda8dab0", 0x67}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=ANY=[@ANYRESHEX=r1], 0x2010}}], 0x3, 0x894) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000340), 0x4) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x291200) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x28c42) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x5, &(0x7f0000000040)=0x29) prctl$PR_SCHED_CORE(0x3e, 0x2, r4, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0xc040ff0b, &(0x7f0000000180)) 9.599149799s ago: executing program 8 (id=2291): setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x804) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) getpeername(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$ax25_int(r1, 0x101, 0xc, &(0x7f0000000080)=0x10000, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3}, 0x4) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x5, 0x7, 0x6}}, 0x28) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x400, 0x0) setsockopt$ax25_int(r1, 0x101, 0x1, &(0x7f0000000140)=0x8, 0x4) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x13, r5, 0x1f795000) fsetxattr$smack_xattr_label(r5, &(0x7f0000000000)='security.SMACK64EXEC\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="267e5d2125792a86d1"], 0x9, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22, 0x20}, 0x1c) 8.791614907s ago: executing program 4 (id=2292): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x101004, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x80) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 8.574336848s ago: executing program 4 (id=2293): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200008d5}, 0x8080) 8.295233616s ago: executing program 4 (id=2294): openat$comedi(0xffffffffffffff9c, 0x0, 0x40, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x5, &(0x7f0000000040)=0x29) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000400)="03", 0x1}], 0x1, 0x0, 0x0, 0x8800}], 0x1, 0x20004014) 5.937539253s ago: executing program 4 (id=2295): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x105140, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000100)=0x7ff) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0xc00) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={0x0, 0xffffffffffffffff, 0x0, 0x2000000}, 0x18) kexec_load(0x7, 0x7, &(0x7f0000000100)=[{0x0, 0x0, 0x3e0000000000, 0x6000000}], 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x3, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x1, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x20, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x0, 0x8, 0x129432e2, 0xcb, 0xf6, 0xb, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x73b, 0x4, 0x4002, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7f, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x20000004, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x0, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x20000, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8ce, 0x9, 0x1, 0x1, 0x0, 0x4, 0xb, 0x4, 0x5, 0x5, 0x0, 0x6, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0xb530, 0x0, 0x0, 0x7, 0x53cf697b, 0x7, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x3, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x0, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x7, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8fffc, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x1, 0x6, 0x5, 0x10000, 0x2, 0x8, 0x2b91, 0x4, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x44, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) epoll_create(0xff9) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) setgroups(0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x840) syz_usb_connect(0x2, 0x36, &(0x7f0000000fc0)={{0x12, 0x1, 0x200, 0xfa, 0xb9, 0x1d, 0x40, 0x45e, 0x283, 0x43bd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x2, 0x3, 0xd4, 0x80, 0x9, [{{0x9, 0x4, 0x1, 0xff, 0x1, 0xaf, 0xc9, 0xfb, 0xb, [], [{{0x9, 0x5, 0x1, 0x4, 0x0, 0x3, 0x4, 0x53}}]}}, {{0x9, 0x4, 0x2f, 0xff, 0x0, 0xff, 0xff, 0xff, 0x8}}]}}]}}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 5.169198347s ago: executing program 3 (id=2296): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x84) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r2 = getpid() r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x9}, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000040)="42149d640c1ce2afaeac571a47bd52daaa7c013aa3a59e022e9ff86be409dd0780c7ea69b851e21bcf29467582a38e18f4", &(0x7f00000000c0)=@tcp=r4, 0x1}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r7, 0x6, 0x21, &(0x7f0000000280)="dc8daf8d760c0b8caa98fa19c6a35a18883775d272c579ff33a6effc0c49320f", 0x20) getsockopt$inet_tcp_buf(r7, 0x6, 0x21, 0x0, &(0x7f0000000580)) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) 4.754151718s ago: executing program 2 (id=2297): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 3.477707207s ago: executing program 3 (id=2298): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, &(0x7f0000004800)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000240)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x65, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @rand_addr=0x64010102, {[@cipso={0x86, 0x24, 0x0, [{0x0, 0xc, "5e000000000000bfb486"}, {0x1, 0x4, "de00"}, {0x0, 0xe, "9606053d0006ff00800000b6"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x6}]}}}}}}}, 0x0) 3.066202255s ago: executing program 2 (id=2299): ppoll(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x8, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$vsock_stream(0x28, 0x1, 0x0) fcntl$setstatus(r3, 0x4, 0x40c00) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) connect$vsock_stream(r3, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb635773f07ebbeec, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000040)={'\a\x00', 0x0, 0x7, 0x22, 0x0, 0x4, "00000000020000000000002100", "00004702", "0300", "63a90900", ["ed27a89d4c84b0f5a1062957", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00", "00008000000000f3ffff100a"]}) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0x2, 0x6, 0x8, 0x6, 0x7fff, "16b0bc410cfc47961ed5e8167d4f7865", 0x1, 0x53, 0x4, 0x0, 0x9, 0x8, 0x4}) 1.110200386s ago: executing program 3 (id=2300): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_PEC(r1, 0x708, 0xffffffff) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x1, 0xfd, 0x1, &(0x7f0000000000)={0xb, "e89bc5d748e8290e3619f6201f98cad6d3bf3734cdb92f5963a07b61dedbd29410"}}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_delroute={0x24, 0x19, 0x1, 0x70bd2d, 0x25dfdbfb, {0x2, 0x20, 0x20, 0x0, 0xff, 0x3, 0x0, 0x0, 0x1800}, [@RTA_DST={0x8, 0x1, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x44050}, 0x5800) 910.254056ms ago: executing program 8 (id=2301): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) read$FUSE(r0, &(0x7f0000004140)={0x2020}, 0x2020) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 59.434641ms ago: executing program 3 (id=2302): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000340)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r5, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, 0x0) getsockopt$inet_int(r4, 0x0, 0x31, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100feffffff0000000001000000100007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c000500ff03bb32a8772efb0c0002"], 0x3c}}, 0x20000000) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000085000000070000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, r9, {0x506}}, './file0\x00'}) r13 = syz_open_procfs(0x0, &(0x7f0000000140)='net/softnet_stat\x00') readv(r13, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/130, 0x82}], 0x1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x44, r1, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040001) 0s ago: executing program 8 (id=2303): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200008d5}, 0x8080) kernel console output (not intermixed with test programs): [ 733.462855][T10786] name failslab, interval 1, probability 0, space 0, times 0 [ 733.462920][T10786] CPU: 1 UID: 0 PID: 10786 Comm: syz.1.1515 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 733.462947][T10786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 733.462961][T10786] Call Trace: [ 733.462969][T10786] [ 733.462979][T10786] dump_stack_lvl+0xe8/0x150 [ 733.463017][T10786] should_fail_ex+0x46b/0x600 [ 733.463050][T10786] should_failslab+0xa8/0x100 [ 733.463079][T10786] kmem_cache_alloc_noprof+0x87/0x680 [ 733.463103][T10786] ? do_getname+0x2e/0x250 [ 733.463133][T10786] do_getname+0x2e/0x250 [ 733.463158][T10786] ? getname_flags+0x11/0x20 [ 733.463187][T10786] do_sys_openat2+0xca/0x200 [ 733.463217][T10786] ? __pfx___schedule+0x10/0x10 [ 733.463245][T10786] ? __pfx_do_sys_openat2+0x10/0x10 [ 733.463272][T10786] ? ksys_write+0x227/0x270 [ 733.463299][T10786] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 733.463332][T10786] __x64_sys_openat+0x138/0x170 [ 733.463368][T10786] do_syscall_64+0x14d/0xf80 [ 733.463397][T10786] ? rcu_is_watching+0x15/0xb0 [ 733.463428][T10786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.463451][T10786] ? clear_bhb_loop+0x40/0x90 [ 733.463478][T10786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.463500][T10786] RIP: 0033:0x7f0ab271cece [ 733.463520][T10786] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 733.463540][T10786] RSP: 002b:00007f0ab098cb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 733.463564][T10786] RAX: ffffffffffffffda RBX: 00007f0ab098d6c0 RCX: 00007f0ab271cece [ 733.463580][T10786] RDX: 0000000000121600 RSI: 00007f0ab098cc00 RDI: ffffffffffffff9c [ 733.463595][T10786] RBP: 00007f0ab098cc00 R08: 0000000000000000 R09: 0000000000000000 [ 733.463609][T10786] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 733.463624][T10786] R13: 00007f0ab29d6128 R14: 00007f0ab29d6090 R15: 00007ffcab6f7618 [ 733.463667][T10786] [ 734.336986][ T819] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 734.501949][ T819] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 734.502007][ T819] usb 9-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 734.502033][ T819] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.557662][ T819] usb 9-1: config 0 descriptor?? [ 734.788383][T10670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 734.959181][T10670] 8021q: adding VLAN 0 to HW filter on device team0 [ 735.035892][ T2163] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.048346][ T2163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 735.073747][ T819] hid-alps 0003:044E:121E.000D: item fetching failed at offset 2/5 [ 735.097302][ T819] hid-alps 0003:044E:121E.000D: parse failed [ 735.097414][ T819] hid-alps 0003:044E:121E.000D: probe with driver hid-alps failed with error -22 [ 735.123336][ T2163] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.123467][ T2163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 735.567037][ T5812] usb 9-1: USB disconnect, device number 15 [ 735.874742][T10806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 735.886457][T10806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.135358][ T5812] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 736.364594][T10814] FAULT_INJECTION: forcing a failure. [ 736.364594][T10814] name failslab, interval 1, probability 0, space 0, times 0 [ 736.364699][T10814] CPU: 0 UID: 0 PID: 10814 Comm: syz.6.1525 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 736.364725][T10814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 736.364739][T10814] Call Trace: [ 736.364748][T10814] [ 736.364758][T10814] dump_stack_lvl+0xe8/0x150 [ 736.364794][T10814] should_fail_ex+0x46b/0x600 [ 736.364826][T10814] should_failslab+0xa8/0x100 [ 736.364854][T10814] kmem_cache_alloc_noprof+0x87/0x680 [ 736.364879][T10814] ? alloc_vfsmnt+0x23/0x420 [ 736.364908][T10814] alloc_vfsmnt+0x23/0x420 [ 736.364934][T10814] vfs_create_mount+0x69/0x320 [ 736.364956][T10814] ? __se_sys_fsmount+0x512/0xb40 [ 736.364988][T10814] __se_sys_fsmount+0x53e/0xb40 [ 736.365018][T10814] ? __pfx___schedule+0x10/0x10 [ 736.365053][T10814] ? __pfx___se_sys_fsmount+0x10/0x10 [ 736.365101][T10814] do_syscall_64+0x14d/0xf80 [ 736.365130][T10814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.365153][T10814] ? clear_bhb_loop+0x40/0x90 [ 736.365179][T10814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.365201][T10814] RIP: 0033:0x7fe08eddc629 [ 736.365222][T10814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 736.365242][T10814] RSP: 002b:00007fe08d015028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b0 [ 736.365265][T10814] RAX: ffffffffffffffda RBX: 00007fe08f056090 RCX: 00007fe08eddc629 [ 736.365281][T10814] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 736.365294][T10814] RBP: 00007fe08d015090 R08: 0000000000000000 R09: 0000000000000000 [ 736.365308][T10814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 736.365322][T10814] R13: 00007fe08f056128 R14: 00007fe08f056090 R15: 00007fff65ae0dd8 [ 736.365359][T10814] [ 736.467204][ T5812] usb 8-1: Using ep0 maxpacket: 16 [ 736.743624][ T5812] usb 8-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 736.743660][ T5812] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.743682][ T5812] usb 8-1: Product: syz [ 736.743697][ T5812] usb 8-1: Manufacturer: syz [ 736.743712][ T5812] usb 8-1: SerialNumber: syz [ 736.780110][ T5812] usb 8-1: config 0 descriptor?? [ 736.793395][ T5812] safe_serial 8-1:0.0: safe_serial converter detected [ 737.069730][ T5812] usb 8-1: safe_serial converter now attached to ttyUSB0 [ 737.148506][ T5812] usb 8-1: USB disconnect, device number 18 [ 737.176138][T10817] netlink: 25 bytes leftover after parsing attributes in process `syz.8.1527'. [ 737.193416][ T5812] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 737.194263][ T5812] safe_serial 8-1:0.0: device disconnected [ 737.222378][T10817] netlink: 'syz.8.1527': attribute type 4 has an invalid length. [ 738.458079][T10670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 739.060074][T10847] netlink: 25 bytes leftover after parsing attributes in process `syz.8.1539'. [ 739.079954][T10847] netlink: 'syz.8.1539': attribute type 4 has an invalid length. [ 741.452158][ T5812] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 742.157926][ T5812] usb 2-1: device descriptor read/all, error -71 [ 743.824987][T10670] veth0_vlan: entered promiscuous mode [ 743.858141][T10670] veth1_vlan: entered promiscuous mode [ 744.008484][T10670] veth0_macvtap: entered promiscuous mode [ 744.030041][T10670] veth1_macvtap: entered promiscuous mode [ 744.078354][T10670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 744.084402][T10670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 745.357063][ T8732] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.396330][ T1272] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.402225][ T1272] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.403098][T10874] netlink: 'syz.7.1542': attribute type 8 has an invalid length. [ 745.619167][ T1272] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.330768][ T1299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.330792][ T1299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.438190][ T5969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.438207][ T5969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 749.706488][ T10] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 749.859668][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.859707][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.859733][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 749.859779][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 749.859804][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.938093][ T10] usb 2-1: config 0 descriptor?? [ 750.077602][ T5818] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 750.205843][ T10] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 751.848755][ T5818] usb 9-1: config 6 has an invalid interface number: 14 but max is 0 [ 751.848786][ T5818] usb 9-1: config 6 has no interface number 0 [ 751.848822][ T5818] usb 9-1: config 6 interface 14 has no altsetting 0 [ 751.881840][ T5818] usb 9-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50 [ 751.881873][ T5818] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.881895][ T5818] usb 9-1: Product: syz [ 751.881911][ T5818] usb 9-1: Manufacturer: syz [ 751.881928][ T5818] usb 9-1: SerialNumber: syz [ 752.153412][ T5986] usb 2-1: USB disconnect, device number 47 [ 752.493848][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.506349][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.751138][ T5818] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 752.751244][ T5818] command write [95] error -22 [ 752.818658][ T5818] usb 9-1: USB disconnect, device number 16 [ 755.241337][T10963] ODEBUG: Out of memory. ODEBUG disabled [ 755.386971][ T5891] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 755.762159][ T5891] usb 9-1: Using ep0 maxpacket: 8 [ 756.006982][ T5891] usb 9-1: config index 0 descriptor too short (expected 6427, got 27) [ 756.007014][ T5891] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 756.007037][ T5891] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 756.008553][ T5891] usb 9-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 756.008585][ T5891] usb 9-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 756.008607][ T5891] usb 9-1: Product: syz [ 757.052908][ T5891] usb 9-1: config 0 descriptor?? [ 757.903946][T10976] FAULT_INJECTION: forcing a failure. [ 757.903946][T10976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 757.904010][T10976] CPU: 1 UID: 0 PID: 10976 Comm: syz.6.1582 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 757.904037][T10976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 757.904050][T10976] Call Trace: [ 757.904058][T10976] [ 757.904069][T10976] dump_stack_lvl+0xe8/0x150 [ 757.904106][T10976] should_fail_ex+0x46b/0x600 [ 757.904140][T10976] _copy_from_user+0x2d/0xb0 [ 757.904173][T10976] __sys_bind+0x1cc/0x410 [ 757.904206][T10976] ? __pfx___sys_bind+0x10/0x10 [ 757.904251][T10976] ? __pfx_ksys_write+0x10/0x10 [ 757.904282][T10976] __x64_sys_bind+0x7a/0x90 [ 757.904322][T10976] do_syscall_64+0x14d/0xf80 [ 757.904350][T10976] ? rcu_is_watching+0x15/0xb0 [ 757.904382][T10976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.904405][T10976] ? clear_bhb_loop+0x40/0x90 [ 757.904432][T10976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.904453][T10976] RIP: 0033:0x7fe08eddc629 [ 757.904473][T10976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.904494][T10976] RSP: 002b:00007fe08d015028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 757.904518][T10976] RAX: ffffffffffffffda RBX: 00007fe08f056090 RCX: 00007fe08eddc629 [ 757.904534][T10976] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0000000000000005 [ 757.904548][T10976] RBP: 00007fe08d015090 R08: 0000000000000000 R09: 0000000000000000 [ 757.904562][T10976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 757.904575][T10976] R13: 00007fe08f056128 R14: 00007fe08f056090 R15: 00007fff65ae0dd8 [ 757.904610][T10976] [ 758.360643][T10974] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1584'. [ 759.347402][ T5891] usb 9-1: can't set config #0, error -71 [ 759.362566][ T5891] usb 9-1: USB disconnect, device number 17 [ 760.666701][T11003] workqueue: Failed to create a rescuer kthread for wq "nbd22-recv": -EINTR [ 760.766388][T11003] block (null): Could not allocate knbd recv work queue. [ 761.579858][T11003] nbd: failed to add new device [ 764.236414][ T8903] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 764.348973][T11038] netlink: 25 bytes leftover after parsing attributes in process `syz.9.1608'. [ 764.366605][T11038] netlink: 'syz.9.1608': attribute type 4 has an invalid length. [ 764.406850][ T8903] usb 9-1: Using ep0 maxpacket: 8 [ 764.421236][ T8903] usb 9-1: config index 0 descriptor too short (expected 6427, got 27) [ 764.421265][ T8903] usb 9-1: config 0 has an invalid interface number: 255 but max is 0 [ 764.421286][ T8903] usb 9-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 764.421307][ T8903] usb 9-1: config 0 has no interface number 0 [ 764.421343][ T8903] usb 9-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 764.421395][ T8903] usb 9-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 764.421427][ T8903] usb 9-1: config 0 interface 255 has no altsetting 0 [ 764.424714][ T8903] usb 9-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 764.424745][ T8903] usb 9-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 764.424767][ T8903] usb 9-1: Product: syz [ 764.517006][ T8903] usb 9-1: config 0 descriptor?? [ 764.563305][ T36] audit: type=1800 audit(2000000628.000:227): pid=11037 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.1607" name="bus" dev="tmpfs" ino=628 res=0 errno=0 [ 764.738525][T11029] netlink: 'syz.8.1603': attribute type 6 has an invalid length. [ 765.563835][ T8903] usb 9-1: USB disconnect, device number 18 [ 767.657955][T11062] netlink: 'syz.9.1614': attribute type 8 has an invalid length. [ 767.982509][T11063] lo speed is unknown, defaulting to 1000 [ 768.676035][ T36] audit: type=1800 audit(2000000632.110:228): pid=11087 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.1623" name="bus" dev="tmpfs" ino=649 res=0 errno=0 [ 769.276784][ T819] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 769.426747][ T819] usb 8-1: Using ep0 maxpacket: 8 [ 769.430174][ T819] usb 8-1: config index 0 descriptor too short (expected 6427, got 27) [ 769.430205][ T819] usb 8-1: config 0 has an invalid interface number: 255 but max is 0 [ 769.430228][ T819] usb 8-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 769.430249][ T819] usb 8-1: config 0 has no interface number 0 [ 769.430281][ T819] usb 8-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 769.430324][ T819] usb 8-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 769.430354][ T819] usb 8-1: config 0 interface 255 has no altsetting 0 [ 769.431967][ T819] usb 8-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 769.431996][ T819] usb 8-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 769.432018][ T819] usb 8-1: Product: syz [ 769.548977][ T819] usb 8-1: config 0 descriptor?? [ 769.596999][ T807] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 769.772092][ T807] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 769.772129][ T807] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.772152][ T807] usb 10-1: Product: syz [ 769.772178][ T807] usb 10-1: Manufacturer: syz [ 769.772194][ T807] usb 10-1: SerialNumber: syz [ 769.812009][T11095] netlink: 'syz.7.1627': attribute type 6 has an invalid length. [ 769.874873][ T807] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 769.924121][ T5873] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 770.327971][ T807] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 770.504995][ T807] usb 9-1: config 6 has an invalid interface number: 14 but max is 0 [ 770.505026][ T807] usb 9-1: config 6 has no interface number 0 [ 770.505061][ T807] usb 9-1: config 6 interface 14 has no altsetting 0 [ 770.525606][ T807] usb 9-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50 [ 770.527546][ T807] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.527572][ T807] usb 9-1: Product: syz [ 770.527589][ T807] usb 9-1: Manufacturer: syz [ 770.528243][ T807] usb 9-1: SerialNumber: syz [ 770.914379][ T819] usb 8-1: USB disconnect, device number 19 [ 771.021212][ T807] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 771.022890][ T807] command write [95] error -22 [ 771.180081][ T807] usb 9-1: USB disconnect, device number 19 [ 771.197253][ T5873] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 771.197587][ T5873] ath9k_htc: Failed to initialize the device [ 772.827717][ T5873] usb 10-1: ath9k_htc: USB layer deinitialized [ 773.830964][T11135] FAULT_INJECTION: forcing a failure. [ 773.830964][T11135] name failslab, interval 1, probability 0, space 0, times 0 [ 773.831002][T11135] CPU: 1 UID: 0 PID: 11135 Comm: syz.1.1642 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 773.831028][T11135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 773.831042][T11135] Call Trace: [ 773.831050][T11135] [ 773.831060][T11135] dump_stack_lvl+0xe8/0x150 [ 773.831097][T11135] should_fail_ex+0x46b/0x600 [ 773.831131][T11135] should_failslab+0xa8/0x100 [ 773.831159][T11135] __kmalloc_noprof+0xdf/0x7b0 [ 773.831182][T11135] ? kfree+0x4d/0x690 [ 773.831200][T11135] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 773.831233][T11135] tomoyo_realpath_from_path+0xe3/0x5d0 [ 773.831262][T11135] ? tomoyo_domain+0xd8/0x130 [ 773.831293][T11135] ? tomoyo_path_number_perm+0x219/0x630 [ 773.831328][T11135] tomoyo_path_number_perm+0x246/0x630 [ 773.831364][T11135] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 773.831397][T11135] ? __lock_acquire+0x6b5/0x2cf0 [ 773.831432][T11135] ? do_raw_spin_lock+0x12b/0x2f0 [ 773.831494][T11135] ? __fget_files+0x2a/0x420 [ 773.831530][T11135] ? __fget_files+0x2a/0x420 [ 773.831560][T11135] ? __fget_files+0x3a6/0x420 [ 773.831591][T11135] ? __fget_files+0x2a/0x420 [ 773.831627][T11135] security_file_ioctl+0xc3/0x2a0 [ 773.831664][T11135] __se_sys_ioctl+0x47/0x170 [ 773.831692][T11135] do_syscall_64+0x14d/0xf80 [ 773.831723][T11135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.831746][T11135] ? trace_irq_disable+0x37/0x100 [ 773.831766][T11135] ? clear_bhb_loop+0x40/0x90 [ 773.831795][T11135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.831819][T11135] RIP: 0033:0x7f0ab275c629 [ 773.831846][T11135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 773.831868][T11135] RSP: 002b:00007f0ab09ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 773.831892][T11135] RAX: ffffffffffffffda RBX: 00007f0ab29d5fa0 RCX: 00007f0ab275c629 [ 773.831910][T11135] RDX: 00002000000001c0 RSI: 00000000c08c5335 RDI: 0000000000000007 [ 773.831926][T11135] RBP: 00007f0ab09ae090 R08: 0000000000000000 R09: 0000000000000000 [ 773.831940][T11135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 773.831955][T11135] R13: 00007f0ab29d6038 R14: 00007f0ab29d5fa0 R15: 00007ffcab6f7618 [ 773.831993][T11135] [ 773.832003][T11135] ERROR: Out of memory at tomoyo_realpath_from_path. [ 777.556842][ T5818] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 777.750256][ T5818] usb 2-1: config 6 has an invalid interface number: 14 but max is 0 [ 777.750292][ T5818] usb 2-1: config 6 has no interface number 0 [ 777.750331][ T5818] usb 2-1: config 6 interface 14 has no altsetting 0 [ 777.812501][ T5818] usb 2-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50 [ 777.812535][ T5818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.812557][ T5818] usb 2-1: Product: syz [ 777.812573][ T5818] usb 2-1: Manufacturer: syz [ 777.812584][ T5818] usb 2-1: SerialNumber: syz [ 778.768073][ T5818] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 778.768172][ T5818] command write [95] error -22 [ 778.818581][ T5818] usb 2-1: USB disconnect, device number 48 [ 778.887986][T10503] udevd[10503]: setting mode of /dev/bus/usb/002/048 to 020664 failed: No such file or directory [ 778.888168][T10503] udevd[10503]: setting owner of /dev/bus/usb/002/048 to uid=0, gid=0 failed: No such file or directory [ 779.796076][ T36] audit: type=1800 audit(2000000643.230:229): pid=11185 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.1658" name="bus" dev="tmpfs" ino=708 res=0 errno=0 [ 782.132282][T11210] FAULT_INJECTION: forcing a failure. [ 782.132282][T11210] name failslab, interval 1, probability 0, space 0, times 0 [ 782.132344][T11210] CPU: 0 UID: 0 PID: 11210 Comm: syz.8.1666 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 782.132373][T11210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 782.132389][T11210] Call Trace: [ 782.132398][T11210] [ 782.132408][T11210] dump_stack_lvl+0xe8/0x150 [ 782.132442][T11210] should_fail_ex+0x46b/0x600 [ 782.132466][T11210] should_failslab+0xa8/0x100 [ 782.132486][T11210] __kmalloc_cache_noprof+0x84/0x690 [ 782.132505][T11210] ? __pfx_sched_clock_cpu+0x10/0x10 [ 782.132520][T11210] ? alloc_pipe_info+0xe8/0x4d0 [ 782.132540][T11210] alloc_pipe_info+0xe8/0x4d0 [ 782.132559][T11210] splice_direct_to_actor+0xa19/0xc80 [ 782.132581][T11210] ? __lock_acquire+0x6b5/0x2cf0 [ 782.132610][T11210] ? __pfx_direct_splice_actor+0x10/0x10 [ 782.132638][T11210] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 782.132669][T11210] do_splice_direct+0x19b/0x2a0 [ 782.132693][T11210] ? __pfx_do_splice_direct+0x10/0x10 [ 782.132716][T11210] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 782.132744][T11210] ? rw_verify_area+0x25b/0x4e0 [ 782.132773][T11210] do_sendfile+0x547/0x7e0 [ 782.132800][T11210] ? __pfx_do_sendfile+0x10/0x10 [ 782.132822][T11210] ? irqentry_exit+0x59e/0x620 [ 782.132844][T11210] ? lockdep_hardirqs_on+0x7a/0x110 [ 782.132864][T11210] ? irqentry_exit+0x59e/0x620 [ 782.132886][T11210] __se_sys_sendfile64+0x144/0x1a0 [ 782.132909][T11210] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 782.132937][T11210] do_syscall_64+0x14d/0xf80 [ 782.132958][T11210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.132975][T11210] ? clear_bhb_loop+0x40/0x90 [ 782.132995][T11210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.133011][T11210] RIP: 0033:0x7fa4eeaac629 [ 782.133031][T11210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 782.133046][T11210] RSP: 002b:00007fa4ecce5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 782.133064][T11210] RAX: ffffffffffffffda RBX: 00007fa4eed26090 RCX: 00007fa4eeaac629 [ 782.133077][T11210] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006 [ 782.133087][T11210] RBP: 00007fa4ecce5090 R08: 0000000000000000 R09: 0000000000000000 [ 782.133097][T11210] R10: 0000000000ffba83 R11: 0000000000000246 R12: 0000000000000001 [ 782.133107][T11210] R13: 00007fa4eed26128 R14: 00007fa4eed26090 R15: 00007ffdaffecde8 [ 782.133133][T11210] [ 786.063705][T11241] FAULT_INJECTION: forcing a failure. [ 786.063705][T11241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 786.063769][T11241] CPU: 0 UID: 0 PID: 11241 Comm: syz.9.1677 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 786.063800][T11241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 786.063814][T11241] Call Trace: [ 786.063824][T11241] [ 786.063834][T11241] dump_stack_lvl+0xe8/0x150 [ 786.063874][T11241] should_fail_ex+0x46b/0x600 [ 786.063904][T11241] _copy_from_user+0x2d/0xb0 [ 786.063928][T11241] __se_sys_io_uring_setup+0x1b4/0x2c0 [ 786.063947][T11241] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 786.063985][T11241] do_syscall_64+0x14d/0xf80 [ 786.064007][T11241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.064024][T11241] ? clear_bhb_loop+0x40/0x90 [ 786.064044][T11241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.064060][T11241] RIP: 0033:0x7f9fa162c629 [ 786.064074][T11241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 786.064089][T11241] RSP: 002b:00007f9f9f85cfb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 786.064107][T11241] RAX: ffffffffffffffda RBX: 00007f9fa18a6090 RCX: 00007f9fa162c629 [ 786.064119][T11241] RDX: 0000200000001080 RSI: 00002000000001c0 RDI: 0000000000001eae [ 786.064130][T11241] RBP: 00002000000001c0 R08: 0000000000000000 R09: 0000200000001080 [ 786.064141][T11241] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 786.064151][T11241] R13: 0000200000000080 R14: 0000000000001eae R15: 0000200000001080 [ 786.064177][T11241] [ 788.697912][ T5807] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 788.701493][ T5807] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 788.703705][ T5807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 788.721080][ T5807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 788.727772][ T5807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 790.565267][T11259] lo speed is unknown, defaulting to 1000 [ 790.796420][ T5115] Bluetooth: hci0: command tx timeout [ 791.150255][T11268] FAULT_INJECTION: forcing a failure. [ 791.150255][T11268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 791.150294][T11268] CPU: 1 UID: 0 PID: 11268 Comm: syz.6.1686 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 791.150321][T11268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 791.150335][T11268] Call Trace: [ 791.150344][T11268] [ 791.150356][T11268] dump_stack_lvl+0xe8/0x150 [ 791.150394][T11268] should_fail_ex+0x46b/0x600 [ 791.150429][T11268] _copy_to_user+0x31/0xb0 [ 791.150463][T11268] simple_read_from_buffer+0xe1/0x170 [ 791.150499][T11268] proc_fail_nth_read+0x1be/0x230 [ 791.150528][T11268] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 791.150557][T11268] ? rw_verify_area+0x2ac/0x4e0 [ 791.150590][T11268] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 791.150616][T11268] vfs_read+0x212/0xa70 [ 791.150647][T11268] ? __pfx_vfs_read+0x10/0x10 [ 791.150672][T11268] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 791.150704][T11268] ? lockdep_hardirqs_on+0x7a/0x110 [ 791.150733][T11268] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 791.150762][T11268] ? mutex_lock_nested+0x152/0x1d0 [ 791.150783][T11268] ? fdget_pos+0x252/0x320 [ 791.150826][T11268] ksys_read+0x156/0x270 [ 791.150851][T11268] ? __pfx_ksys_read+0x10/0x10 [ 791.150887][T11268] do_syscall_64+0x14d/0xf80 [ 791.150915][T11268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.150937][T11268] ? trace_irq_disable+0x37/0x100 [ 791.150957][T11268] ? clear_bhb_loop+0x40/0x90 [ 791.150986][T11268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.151008][T11268] RIP: 0033:0x7fe08ed9cece [ 791.151029][T11268] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 791.151049][T11268] RSP: 002b:00007fe08d014fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 791.151074][T11268] RAX: ffffffffffffffda RBX: 00007fe08d0156c0 RCX: 00007fe08ed9cece [ 791.151091][T11268] RDX: 000000000000000f RSI: 00007fe08d0150a0 RDI: 0000000000000005 [ 791.151107][T11268] RBP: 00007fe08d015090 R08: 0000000000000000 R09: 0000000000000000 [ 791.151121][T11268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 791.151136][T11268] R13: 00007fe08f056128 R14: 00007fe08f056090 R15: 00007fff65ae0dd8 [ 791.151181][T11268] [ 792.969546][ T5115] Bluetooth: hci0: command tx timeout [ 794.605890][T11259] chnl_net:caif_netlink_parms(): no params data found [ 795.038190][ T5115] Bluetooth: hci0: command tx timeout [ 795.847430][T11259] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.847642][T11259] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.847903][T11259] bridge_slave_0: entered allmulticast mode [ 795.850777][T11259] bridge_slave_0: entered promiscuous mode [ 795.863478][T11259] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.869260][T11259] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.870042][T11259] bridge_slave_1: entered allmulticast mode [ 795.899229][T11259] bridge_slave_1: entered promiscuous mode [ 796.190146][T11259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 796.204683][T11259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 798.557030][ T5115] Bluetooth: hci0: command tx timeout [ 798.603925][T11259] team0: Port device team_slave_0 added [ 798.626588][ T5818] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 798.677510][T11259] team0: Port device team_slave_1 added [ 798.785305][ T5818] usb 2-1: Using ep0 maxpacket: 32 [ 798.861721][ T5818] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 798.861756][ T5818] usb 2-1: config 0 has no interface number 0 [ 798.861809][ T5818] usb 2-1: config 0 interface 184 has no altsetting 0 [ 798.871659][T11259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 798.871680][T11259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 798.871712][T11259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 798.875923][T11259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 798.875940][T11259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 798.875972][T11259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 799.146394][ T5818] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 799.146430][ T5818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.146452][ T5818] usb 2-1: Product: syz [ 799.146469][ T5818] usb 2-1: Manufacturer: syz [ 799.146486][ T5818] usb 2-1: SerialNumber: syz [ 799.152341][ T5818] usb 2-1: config 0 descriptor?? [ 799.203127][ T5818] smsc75xx v1.0.0 [ 799.329545][T11322] FAULT_INJECTION: forcing a failure. [ 799.329545][T11322] name failslab, interval 1, probability 0, space 0, times 0 [ 799.329572][T11322] CPU: 0 UID: 0 PID: 11322 Comm: syz.8.1705 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 799.329591][T11322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 799.329602][T11322] Call Trace: [ 799.329608][T11322] [ 799.329616][T11322] dump_stack_lvl+0xe8/0x150 [ 799.329644][T11322] should_fail_ex+0x46b/0x600 [ 799.329670][T11322] should_failslab+0xa8/0x100 [ 799.329691][T11322] __kmalloc_cache_noprof+0x84/0x690 [ 799.329736][T11322] ? alloc_pipe_info+0xe8/0x4d0 [ 799.329757][T11322] alloc_pipe_info+0xe8/0x4d0 [ 799.329776][T11322] splice_direct_to_actor+0xa19/0xc80 [ 799.329798][T11322] ? __lock_acquire+0x6b5/0x2cf0 [ 799.329823][T11322] ? kstrtouint+0x6e/0xe0 [ 799.329842][T11322] ? __pfx_direct_splice_actor+0x10/0x10 [ 799.329869][T11322] ? __lock_acquire+0x6b5/0x2cf0 [ 799.329891][T11322] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 799.329920][T11322] do_splice_direct+0x19b/0x2a0 [ 799.329945][T11322] ? __pfx_do_splice_direct+0x10/0x10 [ 799.329967][T11322] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 799.329996][T11322] ? rw_verify_area+0x25b/0x4e0 [ 799.330024][T11322] do_sendfile+0x547/0x7e0 [ 799.330044][T11322] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 799.330072][T11322] ? __pfx_do_sendfile+0x10/0x10 [ 799.330102][T11322] __se_sys_sendfile64+0x144/0x1a0 [ 799.330124][T11322] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 799.330152][T11322] do_syscall_64+0x14d/0xf80 [ 799.330173][T11322] ? rcu_is_watching+0x15/0xb0 [ 799.330196][T11322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.330212][T11322] ? clear_bhb_loop+0x40/0x90 [ 799.330231][T11322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.330247][T11322] RIP: 0033:0x7fa4eeaac629 [ 799.330262][T11322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 799.330277][T11322] RSP: 002b:00007fa4ecd06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 799.330294][T11322] RAX: ffffffffffffffda RBX: 00007fa4eed25fa0 RCX: 00007fa4eeaac629 [ 799.330306][T11322] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 799.330316][T11322] RBP: 00007fa4ecd06090 R08: 0000000000000000 R09: 0000000000000000 [ 799.330327][T11322] R10: 0000000000ffba83 R11: 0000000000000246 R12: 0000000000000001 [ 799.330337][T11322] R13: 00007fa4eed26038 R14: 00007fa4eed25fa0 R15: 00007ffdaffecde8 [ 799.330362][T11322] [ 799.742678][ T5818] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 799.742950][ T5818] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 800.006038][ T10] usb 10-1: USB disconnect, device number 2 [ 800.097225][ T5818] usb 2-1: USB disconnect, device number 49 [ 800.112568][T11259] hsr_slave_0: entered promiscuous mode [ 800.114058][T11259] hsr_slave_1: entered promiscuous mode [ 800.115101][T11259] debugfs: 'hsr0' already exists in 'hsr' [ 800.115129][T11259] Cannot create hsr debugfs directory [ 804.147066][T11347] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1715'. [ 804.204606][T11349] netlink: 'syz.1.1715': attribute type 4 has an invalid length. [ 804.298100][ T5818] lo speed is unknown, defaulting to 1000 [ 804.298813][ T8400] lo speed is unknown, defaulting to 1000 [ 805.384803][T11259] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.002307][T11259] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.811606][T11387] autofs: Unknown parameter '0x0000000000000000' [ 809.902209][T11390] FAULT_INJECTION: forcing a failure. [ 809.902209][T11390] name failslab, interval 1, probability 0, space 0, times 0 [ 809.902247][T11390] CPU: 1 UID: 0 PID: 11390 Comm: syz.1.1727 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 809.902275][T11390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 809.902289][T11390] Call Trace: [ 809.902299][T11390] [ 809.902309][T11390] dump_stack_lvl+0xe8/0x150 [ 809.902347][T11390] should_fail_ex+0x46b/0x600 [ 809.902381][T11390] should_failslab+0xa8/0x100 [ 809.902409][T11390] __kmalloc_noprof+0xdf/0x7b0 [ 809.902433][T11390] ? kfree+0x4d/0x690 [ 809.902453][T11390] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 809.902486][T11390] tomoyo_realpath_from_path+0xe3/0x5d0 [ 809.902514][T11390] ? tomoyo_domain+0xd8/0x130 [ 809.902547][T11390] ? tomoyo_path_number_perm+0x219/0x630 [ 809.902583][T11390] tomoyo_path_number_perm+0x246/0x630 [ 809.902622][T11390] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 809.902665][T11390] ? __lock_acquire+0x6b5/0x2cf0 [ 809.902700][T11390] ? do_raw_spin_lock+0x12b/0x2f0 [ 809.902764][T11390] ? __fget_files+0x2a/0x420 [ 809.902798][T11390] ? __fget_files+0x2a/0x420 [ 809.902829][T11390] ? __fget_files+0x3a6/0x420 [ 809.902858][T11390] ? __fget_files+0x2a/0x420 [ 809.902894][T11390] security_file_ioctl+0xc3/0x2a0 [ 809.902932][T11390] __se_sys_ioctl+0x47/0x170 [ 809.902960][T11390] do_syscall_64+0x14d/0xf80 [ 809.902990][T11390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.903013][T11390] ? trace_irq_disable+0x37/0x100 [ 809.903034][T11390] ? clear_bhb_loop+0x40/0x90 [ 809.903062][T11390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.903085][T11390] RIP: 0033:0x7f0ab275c629 [ 809.903105][T11390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 809.903125][T11390] RSP: 002b:00007f0ab098d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 809.903150][T11390] RAX: ffffffffffffffda RBX: 00007f0ab29d6090 RCX: 00007f0ab275c629 [ 809.903168][T11390] RDX: 0000200000004a40 RSI: 00000000c0306201 RDI: 0000000000000005 [ 809.903184][T11390] RBP: 00007f0ab098d090 R08: 0000000000000000 R09: 0000000000000000 [ 809.903199][T11390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 809.903214][T11390] R13: 00007f0ab29d6128 R14: 00007f0ab29d6090 R15: 00007ffcab6f7618 [ 809.903252][T11390] [ 809.903262][T11390] ERROR: Out of memory at tomoyo_realpath_from_path. [ 809.903336][T11390] binder_alloc: 11384: binder_alloc_buf, no vma [ 810.284990][ T10] libceph: connect (1)[c::]:6789 error -101 [ 810.285189][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 810.285812][ T10] libceph: connect (1)[c::]:6789 error -101 [ 810.285984][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 810.344425][T11394] ceph: No mds server is up or the cluster is laggy [ 810.450289][T11259] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.995721][T11406] FAULT_INJECTION: forcing a failure. [ 810.995721][T11406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 810.995761][T11406] CPU: 0 UID: 0 PID: 11406 Comm: syz.9.1735 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 810.995787][T11406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 810.995801][T11406] Call Trace: [ 810.995811][T11406] [ 810.995821][T11406] dump_stack_lvl+0xe8/0x150 [ 810.995859][T11406] should_fail_ex+0x46b/0x600 [ 810.995891][T11406] _copy_from_user+0x2d/0xb0 [ 810.995924][T11406] do_handle_open+0xf2/0x970 [ 810.995961][T11406] ? __pfx_do_handle_open+0x10/0x10 [ 810.995997][T11406] ? ksys_write+0x248/0x270 [ 810.996022][T11406] ? __pfx_ksys_write+0x10/0x10 [ 810.996057][T11406] do_syscall_64+0x14d/0xf80 [ 810.996087][T11406] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.996109][T11406] ? trace_irq_disable+0x37/0x100 [ 810.996130][T11406] ? clear_bhb_loop+0x40/0x90 [ 810.996158][T11406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.996181][T11406] RIP: 0033:0x7f9fa162c629 [ 810.996205][T11406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 810.996223][T11406] RSP: 002b:00007f9f9f87e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 810.996247][T11406] RAX: ffffffffffffffda RBX: 00007f9fa18a5fa0 RCX: 00007f9fa162c629 [ 810.996263][T11406] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 810.996278][T11406] RBP: 00007f9f9f87e090 R08: 0000000000000000 R09: 0000000000000000 [ 810.996292][T11406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 810.996306][T11406] R13: 00007f9fa18a6038 R14: 00007f9fa18a5fa0 R15: 00007ffdf5861078 [ 810.996352][T11406] [ 812.306169][T11259] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.476757][T11416] autofs: Unknown parameter '0x0000000000000000' [ 815.010307][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 815.010381][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 815.859777][T11259] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 816.330744][T11259] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 816.486768][T11259] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 817.557082][T11259] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 818.024709][T11259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 818.124902][T11259] 8021q: adding VLAN 0 to HW filter on device team0 [ 818.168166][ T1413] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.168272][ T1413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 818.174017][ T1413] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.174120][ T1413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 820.707013][ T8400] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 821.575918][T11478] Device name cannot be null; rc = [-22] [ 822.637063][ T8400] usb 10-1: Using ep0 maxpacket: 16 [ 822.639803][ T8400] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 822.639840][ T8400] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 822.642827][ T8400] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 822.642859][ T8400] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.642882][ T8400] usb 10-1: Product: syz [ 822.642899][ T8400] usb 10-1: Manufacturer: syz [ 822.642916][ T8400] usb 10-1: SerialNumber: syz [ 822.986107][ T8400] usb 10-1: config 0 descriptor?? [ 823.021403][ T8400] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 823.021443][ T8400] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 825.132511][ T8400] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 825.132992][ T8400] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 825.133414][ T8400] em28xx 10-1:0.0: AC97 chip type couldn't be determined [ 825.133435][ T8400] em28xx 10-1:0.0: No AC97 audio processor [ 825.236120][T11259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 825.329449][ T5873] usb 10-1: USB disconnect, device number 3 [ 825.331855][ T5873] em28xx 10-1:0.0: Disconnecting em28xx [ 825.334597][ T5873] em28xx 10-1:0.0: Freeing device [ 825.588528][T11259] veth0_vlan: entered promiscuous mode [ 825.629334][T11259] veth1_vlan: entered promiscuous mode [ 825.810215][ T32] block nbd9: Dead connection, failed to find a fallback [ 825.810238][ T32] block nbd9: shutting down sockets [ 825.815986][T11259] veth0_macvtap: entered promiscuous mode [ 825.870239][T11259] veth1_macvtap: entered promiscuous mode [ 825.932421][T11259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 825.939470][ T32] blk_print_req_error: 11 callbacks suppressed [ 825.939541][ T32] I/O error, dev nbd9, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 826.038249][T11259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 826.074721][ T68] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.074988][ T68] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.075031][ T68] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.075071][ T68] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.707189][ T1299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 828.707213][ T1299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 828.870410][ T2163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 828.870434][ T2163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 833.110174][T11547] FAULT_INJECTION: forcing a failure. [ 833.110174][T11547] name failslab, interval 1, probability 0, space 0, times 0 [ 833.110213][T11547] CPU: 0 UID: 0 PID: 11547 Comm: syz.6.1784 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 833.110241][T11547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 833.110255][T11547] Call Trace: [ 833.110265][T11547] [ 833.110276][T11547] dump_stack_lvl+0xe8/0x150 [ 833.110320][T11547] should_fail_ex+0x46b/0x600 [ 833.110354][T11547] should_failslab+0xa8/0x100 [ 833.110383][T11547] __kmalloc_noprof+0xdf/0x7b0 [ 833.110407][T11547] ? kfree+0x4d/0x690 [ 833.110427][T11547] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 833.110461][T11547] tomoyo_realpath_from_path+0xe3/0x5d0 [ 833.110489][T11547] ? tomoyo_domain+0xd8/0x130 [ 833.110523][T11547] ? tomoyo_path_number_perm+0x219/0x630 [ 833.110558][T11547] tomoyo_path_number_perm+0x246/0x630 [ 833.110597][T11547] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 833.110631][T11547] ? __lock_acquire+0x6b5/0x2cf0 [ 833.110665][T11547] ? do_raw_spin_lock+0x12b/0x2f0 [ 833.110728][T11547] ? __fget_files+0x2a/0x420 [ 833.110763][T11547] ? __fget_files+0x2a/0x420 [ 833.110793][T11547] ? __fget_files+0x3a6/0x420 [ 833.110824][T11547] ? __fget_files+0x2a/0x420 [ 833.110860][T11547] security_file_ioctl+0xc3/0x2a0 [ 833.110899][T11547] __se_sys_ioctl+0x47/0x170 [ 833.110927][T11547] do_syscall_64+0x14d/0xf80 [ 833.110958][T11547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.110981][T11547] ? trace_irq_disable+0x37/0x100 [ 833.111002][T11547] ? clear_bhb_loop+0x40/0x90 [ 833.111029][T11547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.111052][T11547] RIP: 0033:0x7fe08eddc629 [ 833.111073][T11547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 833.111094][T11547] RSP: 002b:00007fe08d036028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 833.111120][T11547] RAX: ffffffffffffffda RBX: 00007fe08f055fa0 RCX: 00007fe08eddc629 [ 833.111138][T11547] RDX: 0000200000000980 RSI: 0000000040081271 RDI: 0000000000000003 [ 833.111173][T11547] RBP: 00007fe08d036090 R08: 0000000000000000 R09: 0000000000000000 [ 833.111189][T11547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 833.111204][T11547] R13: 00007fe08f056038 R14: 00007fe08f055fa0 R15: 00007fff65ae0dd8 [ 833.111243][T11547] [ 833.112081][T11547] ERROR: Out of memory at tomoyo_realpath_from_path. [ 833.969272][T11555] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1786'. [ 837.052010][T11580] Device name cannot be null; rc = [-22] [ 838.759816][ T5873] libceph: connect (1)[c::]:6789 error -101 [ 838.759997][ T5873] libceph: mon0 (1)[c::]:6789 connect error [ 838.763432][ T5873] libceph: connect (1)[c::]:6789 error -101 [ 838.763636][ T5873] libceph: mon0 (1)[c::]:6789 connect error [ 838.926102][T11591] ceph: No mds server is up or the cluster is laggy [ 839.026834][ T5812] libceph: connect (1)[c::]:6789 error -101 [ 839.027030][ T5812] libceph: mon0 (1)[c::]:6789 connect error [ 839.149936][T11603] FAULT_INJECTION: forcing a failure. [ 839.149936][T11603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 839.149974][T11603] CPU: 1 UID: 0 PID: 11603 Comm: syz.6.1797 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 839.150000][T11603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 839.150014][T11603] Call Trace: [ 839.150023][T11603] [ 839.150035][T11603] dump_stack_lvl+0xe8/0x150 [ 839.150072][T11603] should_fail_ex+0x46b/0x600 [ 839.150104][T11603] _copy_to_user+0x31/0xb0 [ 839.150138][T11603] rng_dev_read+0x3ec/0x7a0 [ 839.150175][T11603] ? __pfx_rng_dev_read+0x10/0x10 [ 839.150202][T11603] ? __lock_acquire+0x6b5/0x2cf0 [ 839.150245][T11603] ? rw_verify_area+0x2ac/0x4e0 [ 839.150286][T11603] vfs_readv+0x594/0x850 [ 839.150316][T11603] ? __pfx_rng_dev_read+0x10/0x10 [ 839.150350][T11603] ? __pfx_vfs_readv+0x10/0x10 [ 839.150396][T11603] ? __fget_files+0x2a/0x420 [ 839.150432][T11603] ? __fget_files+0x3a6/0x420 [ 839.150461][T11603] ? __fget_files+0x2a/0x420 [ 839.150501][T11603] __x64_sys_preadv+0x1a2/0x2b0 [ 839.150529][T11603] ? __pfx___x64_sys_preadv+0x10/0x10 [ 839.150608][T11603] do_syscall_64+0x14d/0xf80 [ 839.150639][T11603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.150662][T11603] ? trace_irq_disable+0x37/0x100 [ 839.150681][T11603] ? clear_bhb_loop+0x40/0x90 [ 839.150709][T11603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.150731][T11603] RIP: 0033:0x7fe08eddc629 [ 839.150752][T11603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 839.150773][T11603] RSP: 002b:00007fe08d036028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 839.150798][T11603] RAX: ffffffffffffffda RBX: 00007fe08f055fa0 RCX: 00007fe08eddc629 [ 839.150816][T11603] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000003 [ 839.150831][T11603] RBP: 00007fe08d036090 R08: 0000000000000000 R09: 0000000000000000 [ 839.150846][T11603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 839.150861][T11603] R13: 00007fe08f056038 R14: 00007fe08f055fa0 R15: 00007fff65ae0dd8 [ 839.150898][T11603] [ 839.584243][T11605] netlink: 25 bytes leftover after parsing attributes in process `syz.8.1799'. [ 839.605674][T11605] netlink: 'syz.8.1799': attribute type 4 has an invalid length. [ 839.817304][ T5807] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 839.841304][ T5807] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 839.842414][ T5807] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 839.867381][ T5807] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 839.869327][ T5807] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 840.226864][ T9] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 840.376545][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 840.378893][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 840.378929][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 840.378973][ T9] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 840.378998][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.447888][ T9] usb 9-1: config 0 descriptor?? [ 840.530777][T11608] lo speed is unknown, defaulting to 1000 [ 841.917002][ T5115] Bluetooth: hci2: command tx timeout [ 842.235168][T11608] chnl_net:caif_netlink_parms(): no params data found [ 842.663745][ T36] audit: type=1326 audit(2000000706.070:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11640 comm="syz.6.1810" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe08eddc629 code=0x0 [ 843.009424][ T9] usbhid 9-1:0.0: can't add hid device: -71 [ 843.009548][ T9] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 843.046606][ T9] usb 9-1: USB disconnect, device number 20 [ 843.274382][T11654] netlink: 'syz.6.1813': attribute type 2 has an invalid length. [ 843.302251][T11608] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.302471][T11608] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.302833][T11608] bridge_slave_0: entered allmulticast mode [ 843.305640][T11608] bridge_slave_0: entered promiscuous mode [ 843.350880][T11608] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.351021][T11608] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.351312][T11608] bridge_slave_1: entered allmulticast mode [ 843.354763][T11608] bridge_slave_1: entered promiscuous mode [ 843.602991][T11608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 843.622867][T11608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 843.682493][T11608] team0: Port device team_slave_0 added [ 843.695315][T11608] team0: Port device team_slave_1 added [ 843.746028][T11608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 843.746047][T11608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 843.746076][T11608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 843.792896][T11608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 843.792915][T11608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 843.792946][T11608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 843.998705][ T5115] Bluetooth: hci2: command tx timeout [ 844.173311][T11608] hsr_slave_0: entered promiscuous mode [ 844.182166][T11608] hsr_slave_1: entered promiscuous mode [ 844.183413][T11608] debugfs: 'hsr0' already exists in 'hsr' [ 844.183442][T11608] Cannot create hsr debugfs directory [ 844.838525][T11668] autofs: Unknown parameter 'fd0x0000000000000000' [ 846.211310][ T5115] Bluetooth: hci2: command tx timeout [ 847.377428][ T5873] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 847.527710][ T5873] usb 9-1: Using ep0 maxpacket: 32 [ 847.530036][ T5873] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 847.530072][ T5873] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 847.530113][ T5873] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 847.530140][ T5873] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.461121][ T5115] Bluetooth: hci2: command tx timeout [ 848.543277][ T5873] usb 9-1: config 0 descriptor?? [ 848.639834][T11705] autofs: Unknown parameter 'fd0x0000000000000000' [ 848.800562][ T5115] Bluetooth: hci3: command 0x0406 tx timeout [ 850.877024][T11608] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.422267][ T5873] usbhid 9-1:0.0: can't add hid device: -71 [ 851.422385][ T5873] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 851.444982][ T5873] usb 9-1: USB disconnect, device number 21 [ 851.610788][T11747] netlink: 25 bytes leftover after parsing attributes in process `syz.9.1843'. [ 851.672088][T11748] netlink: 'syz.9.1843': attribute type 4 has an invalid length. [ 851.839213][T11608] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.857757][ T5892] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 852.730668][ T5892] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 852.730722][ T5892] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 852.730748][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.744916][ T5892] usb 4-1: config 0 descriptor?? [ 855.223199][ T5892] usbhid 4-1:0.0: can't add hid device: -71 [ 855.223326][ T5892] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 855.240267][ T5892] usb 4-1: USB disconnect, device number 18 [ 855.410962][T11608] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.532659][ T10] libceph: connect (1)[c::]:6789 error -101 [ 856.532849][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 856.539245][ T10] libceph: connect (1)[c::]:6789 error -101 [ 856.539434][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 856.618638][T11790] ceph: No mds server is up or the cluster is laggy [ 856.807708][ T9] libceph: connect (1)[c::]:6789 error -101 [ 856.807874][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 856.853501][T11803] netlink: 25 bytes leftover after parsing attributes in process `syz.9.1857'. [ 856.860984][T11608] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.122632][T11806] netlink: 'syz.9.1857': attribute type 4 has an invalid length. [ 861.784721][T11834] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1872'. [ 861.914286][T11838] comedi comedi0: pcl812: I/O port conflict (0x7ffe,16) [ 862.252714][T11608] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 862.350281][T11608] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 862.480590][T11848] FAULT_INJECTION: forcing a failure. [ 862.480590][T11848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 862.480755][T11848] CPU: 0 UID: 0 PID: 11848 Comm: syz.6.1875 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 862.480785][T11848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 862.480800][T11848] Call Trace: [ 862.480810][T11848] [ 862.480821][T11848] dump_stack_lvl+0xe8/0x150 [ 862.480861][T11848] should_fail_ex+0x46b/0x600 [ 862.480897][T11848] _copy_from_user+0x2d/0xb0 [ 862.480933][T11848] do_sys_poll+0x2a0/0xfa0 [ 862.480981][T11848] ? __lock_acquire+0x6b5/0x2cf0 [ 862.481016][T11848] ? __pfx_do_sys_poll+0x10/0x10 [ 862.481069][T11848] ? is_bpf_text_address+0x292/0x2b0 [ 862.481096][T11848] ? is_bpf_text_address+0x26/0x2b0 [ 862.481240][T11848] ? set_user_sigmask+0xcd/0x1c0 [ 862.481271][T11848] ? __pfx_set_user_sigmask+0x10/0x10 [ 862.481299][T11848] ? rt_mutex_slowunlock+0x1cb/0x300 [ 862.481325][T11848] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 862.481359][T11848] __se_sys_ppoll+0x209/0x2b0 [ 862.481392][T11848] ? fput+0xa0/0xd0 [ 862.481428][T11848] ? __pfx___se_sys_ppoll+0x10/0x10 [ 862.481460][T11848] ? __pfx_ksys_write+0x10/0x10 [ 862.481491][T11848] ? __x64_sys_ppoll+0x20/0xc0 [ 862.481524][T11848] do_syscall_64+0x14d/0xf80 [ 862.481556][T11848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.481581][T11848] ? trace_irq_disable+0x37/0x100 [ 862.481611][T11848] ? clear_bhb_loop+0x40/0x90 [ 862.481642][T11848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.481667][T11848] RIP: 0033:0x7fe08eddc629 [ 862.481690][T11848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 862.481711][T11848] RSP: 002b:00007fe08d036028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 862.481738][T11848] RAX: ffffffffffffffda RBX: 00007fe08f055fa0 RCX: 00007fe08eddc629 [ 862.481757][T11848] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 862.481774][T11848] RBP: 00007fe08d036090 R08: 0000000000000000 R09: 0000000000000000 [ 862.481790][T11848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 862.481806][T11848] R13: 00007fe08f056038 R14: 00007fe08f055fa0 R15: 00007fff65ae0dd8 [ 862.481845][T11848] [ 862.502364][T11608] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 862.922237][T11608] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 866.186755][ T5818] usb 9-1: new low-speed USB device number 22 using dummy_hcd [ 866.276883][T11608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 866.346677][ T5818] usb 9-1: Invalid ep0 maxpacket: 64 [ 866.442974][T11608] 8021q: adding VLAN 0 to HW filter on device team0 [ 866.487201][ T5818] usb 9-1: new low-speed USB device number 23 using dummy_hcd [ 866.514916][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.533809][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 866.617242][T11875] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1883'. [ 866.689597][ T5818] usb 9-1: Invalid ep0 maxpacket: 64 [ 866.689998][ T5818] usb usb9-port1: attempt power cycle [ 866.729175][ T2163] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.729350][ T2163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 867.054062][ T5818] usb 9-1: new low-speed USB device number 24 using dummy_hcd [ 867.067786][ T5818] usb 9-1: Invalid ep0 maxpacket: 64 [ 867.206655][ T5818] usb 9-1: new low-speed USB device number 25 using dummy_hcd [ 867.441870][ T5818] usb 9-1: device descriptor read/8, error -71 [ 867.546903][ T5818] usb usb9-port1: unable to enumerate USB device [ 867.551251][T11884] FAULT_INJECTION: forcing a failure. [ 867.551251][T11884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 867.551281][T11884] CPU: 1 UID: 0 PID: 11884 Comm: syz.9.1888 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 867.551300][T11884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 867.551311][T11884] Call Trace: [ 867.551317][T11884] [ 867.551326][T11884] dump_stack_lvl+0xe8/0x150 [ 867.551354][T11884] should_fail_ex+0x46b/0x600 [ 867.551379][T11884] _copy_from_user+0x2d/0xb0 [ 867.551403][T11884] io_register_rsrc_update+0xc4/0x1c0 [ 867.551428][T11884] ? __pfx_io_register_rsrc_update+0x10/0x10 [ 867.551452][T11884] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 867.551475][T11884] ? mutex_lock_nested+0x152/0x1d0 [ 867.551490][T11884] ? __se_sys_io_uring_register+0x20b/0x18c0 [ 867.551515][T11884] __se_sys_io_uring_register+0xf8b/0x18c0 [ 867.551541][T11884] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 867.551565][T11884] ? ksys_write+0x248/0x270 [ 867.551583][T11884] ? __pfx_ksys_write+0x10/0x10 [ 867.551608][T11884] do_syscall_64+0x14d/0xf80 [ 867.551630][T11884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.551646][T11884] ? trace_irq_disable+0x37/0x100 [ 867.551660][T11884] ? clear_bhb_loop+0x40/0x90 [ 867.551680][T11884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.551696][T11884] RIP: 0033:0x7f9fa162c629 [ 867.551711][T11884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 867.551726][T11884] RSP: 002b:00007f9f9f87e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 867.551743][T11884] RAX: ffffffffffffffda RBX: 00007f9fa18a5fa0 RCX: 00007f9fa162c629 [ 867.551755][T11884] RDX: 0000200000000600 RSI: 0000000000000010 RDI: 0000000000000003 [ 867.551766][T11884] RBP: 00007f9f9f87e090 R08: 0000000000000000 R09: 0000000000000000 [ 867.551776][T11884] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 867.551786][T11884] R13: 00007f9fa18a6038 R14: 00007f9fa18a5fa0 R15: 00007ffdf5861078 [ 867.551812][T11884] [ 868.060966][T11889] netlink: 25 bytes leftover after parsing attributes in process `syz.8.1890'. [ 868.108007][T11889] netlink: 'syz.8.1890': attribute type 4 has an invalid length. [ 868.186739][ T5818] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 868.364549][ T5818] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 868.364591][ T5818] usb 7-1: config 0 interface 0 has no altsetting 1 [ 868.389853][ T5818] usb 7-1: New USB device found, idVendor=0499, idProduct=5ae2, bcdDevice= 9.0f [ 868.389887][ T5818] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 868.389911][ T5818] usb 7-1: Product: syz [ 868.389928][ T5818] usb 7-1: Manufacturer: syz [ 868.389944][ T5818] usb 7-1: SerialNumber: syz [ 868.449463][ T5818] usb 7-1: config 0 descriptor?? [ 868.671631][T11893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 868.674765][T11893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 868.725555][T11608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 870.153852][ T5818] usb 7-1: USB disconnect, device number 23 [ 870.404863][T10503] udevd[10503]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 871.948344][T11608] veth0_vlan: entered promiscuous mode [ 871.983075][T11608] veth1_vlan: entered promiscuous mode [ 873.212747][T11608] veth0_macvtap: entered promiscuous mode [ 873.276895][T11608] veth1_macvtap: entered promiscuous mode [ 873.429229][T11608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 873.479309][T11608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 873.588245][ T70] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.588479][ T70] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.588521][ T70] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.588559][ T70] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.709095][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 876.709173][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 877.325919][ T5891] usb 9-1: new low-speed USB device number 26 using dummy_hcd [ 877.696278][ T5891] usb 9-1: Invalid ep0 maxpacket: 64 [ 877.896140][ T5891] usb 9-1: new low-speed USB device number 27 using dummy_hcd [ 878.767965][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 878.767988][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 878.996334][ T5891] usb 9-1: Invalid ep0 maxpacket: 64 [ 878.996709][ T5891] usb usb9-port1: attempt power cycle [ 879.164170][ T1413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.164195][ T1413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.347007][ T5891] usb 9-1: new low-speed USB device number 28 using dummy_hcd [ 879.372688][ T5891] usb 9-1: Invalid ep0 maxpacket: 64 [ 879.506966][ T5891] usb 9-1: new low-speed USB device number 29 using dummy_hcd [ 879.547463][ T5891] usb 9-1: Invalid ep0 maxpacket: 64 [ 879.547820][ T5891] usb usb9-port1: unable to enumerate USB device [ 884.257968][T11995] batadv0: entered promiscuous mode [ 887.755141][T12017] FAULT_INJECTION: forcing a failure. [ 887.755141][T12017] name failslab, interval 1, probability 0, space 0, times 0 [ 887.755182][T12017] CPU: 0 UID: 0 PID: 12017 Comm: syz.6.1930 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 887.755209][T12017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 887.755235][T12017] Call Trace: [ 887.755245][T12017] [ 887.755256][T12017] dump_stack_lvl+0xe8/0x150 [ 887.755295][T12017] should_fail_ex+0x46b/0x600 [ 887.755329][T12017] should_failslab+0xa8/0x100 [ 887.755359][T12017] __kmalloc_noprof+0xdf/0x7b0 [ 887.755383][T12017] ? kfree+0x4d/0x690 [ 887.755402][T12017] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 887.755435][T12017] tomoyo_realpath_from_path+0xe3/0x5d0 [ 887.755464][T12017] ? tomoyo_domain+0xd8/0x130 [ 887.755496][T12017] ? tomoyo_path_number_perm+0x219/0x630 [ 887.755530][T12017] tomoyo_path_number_perm+0x246/0x630 [ 887.755567][T12017] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 887.755600][T12017] ? __lock_acquire+0x6b5/0x2cf0 [ 887.755634][T12017] ? do_raw_spin_lock+0x12b/0x2f0 [ 887.755697][T12017] ? __fget_files+0x2a/0x420 [ 887.755732][T12017] ? __fget_files+0x2a/0x420 [ 887.755760][T12017] ? __fget_files+0x3a6/0x420 [ 887.755790][T12017] ? __fget_files+0x2a/0x420 [ 887.755825][T12017] security_file_ioctl+0xc3/0x2a0 [ 887.755863][T12017] __se_sys_ioctl+0x47/0x170 [ 887.755890][T12017] do_syscall_64+0x14d/0xf80 [ 887.755920][T12017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.755942][T12017] ? trace_irq_disable+0x37/0x100 [ 887.755979][T12017] ? clear_bhb_loop+0x40/0x90 [ 887.756008][T12017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.756030][T12017] RIP: 0033:0x7fe08eddc629 [ 887.756052][T12017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 887.756073][T12017] RSP: 002b:00007fe08d036028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 887.756099][T12017] RAX: ffffffffffffffda RBX: 00007fe08f055fa0 RCX: 00007fe08eddc629 [ 887.756117][T12017] RDX: 0000200000000180 RSI: 0000000080506409 RDI: 0000000000000003 [ 887.756133][T12017] RBP: 00007fe08d036090 R08: 0000000000000000 R09: 0000000000000000 [ 887.756147][T12017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 887.756166][T12017] R13: 00007fe08f056038 R14: 00007fe08f055fa0 R15: 00007fff65ae0dd8 [ 887.756200][T12017] [ 887.807337][T12017] ERROR: Out of memory at tomoyo_realpath_from_path. [ 888.092801][T12020] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 890.056694][ T5818] usb 9-1: new full-speed USB device number 30 using dummy_hcd [ 890.241793][ T5818] usb 9-1: not running at top speed; connect to a high speed hub [ 890.244238][ T5818] usb 9-1: config 3 has an invalid interface number: 47 but max is 1 [ 890.244270][ T5818] usb 9-1: config 3 has no interface number 0 [ 890.244399][ T5818] usb 9-1: config 3 interface 1 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 890.244426][ T5818] usb 9-1: config 3 interface 1 has no altsetting 0 [ 890.244447][ T5818] usb 9-1: config 3 interface 47 has no altsetting 0 [ 892.952619][ T5818] usb 9-1: string descriptor 0 read error: -71 [ 892.952768][ T5818] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=43.bd [ 892.952795][ T5818] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.012815][ T5818] usb 9-1: can't set config #3, error -71 [ 893.032497][ T5818] usb 9-1: USB disconnect, device number 30 [ 893.618023][T12060] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 893.637185][T12060] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 893.642010][T12060] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 893.643608][T12060] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 893.644903][T12060] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 893.934813][T12059] lo speed is unknown, defaulting to 1000 [ 894.037617][T12066] loop1: detected capacity change from 0 to 7 [ 894.058787][T12066] Dev loop1: unable to read RDB block 7 [ 894.058838][T12066] loop1: unable to read partition table [ 894.059046][T12066] loop1: partition table beyond EOD, truncated [ 894.059089][T12066] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 894.282754][T12071] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 896.006333][ T5807] Bluetooth: hci1: command tx timeout [ 897.265915][T12089] netlink: 'syz.3.1957': attribute type 8 has an invalid length. [ 897.530723][T12102] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 897.530750][T12102] UDF-fs: Scanning with blocksize 512 failed [ 897.550138][T12102] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 897.550160][T12102] UDF-fs: Scanning with blocksize 1024 failed [ 897.554070][T12102] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 897.554096][T12102] UDF-fs: Scanning with blocksize 2048 failed [ 897.554417][T12102] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 897.554435][T12102] UDF-fs: Scanning with blocksize 4096 failed [ 899.006241][T12060] Bluetooth: hci1: command tx timeout [ 899.423293][T12123] FAULT_INJECTION: forcing a failure. [ 899.423293][T12123] name failslab, interval 1, probability 0, space 0, times 0 [ 899.423332][T12123] CPU: 0 UID: 0 PID: 12123 Comm: syz.8.1967 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 899.423360][T12123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 899.423375][T12123] Call Trace: [ 899.423385][T12123] [ 899.423396][T12123] dump_stack_lvl+0xe8/0x150 [ 899.423434][T12123] should_fail_ex+0x46b/0x600 [ 899.423468][T12123] should_failslab+0xa8/0x100 [ 899.423497][T12123] __kmalloc_cache_noprof+0x84/0x690 [ 899.423524][T12123] ? alloc_pipe_info+0xe8/0x4d0 [ 899.423552][T12123] alloc_pipe_info+0xe8/0x4d0 [ 899.423581][T12123] splice_direct_to_actor+0xa19/0xc80 [ 899.423613][T12123] ? __lock_acquire+0x6b5/0x2cf0 [ 899.423648][T12123] ? kstrtouint+0x6e/0xe0 [ 899.423675][T12123] ? __pfx_direct_splice_actor+0x10/0x10 [ 899.423713][T12123] ? __lock_acquire+0x6b5/0x2cf0 [ 899.423745][T12123] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 899.423788][T12123] do_splice_direct+0x19b/0x2a0 [ 899.423823][T12123] ? __pfx_do_splice_direct+0x10/0x10 [ 899.423855][T12123] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 899.423896][T12123] ? rw_verify_area+0x25b/0x4e0 [ 899.423936][T12123] do_sendfile+0x547/0x7e0 [ 899.423964][T12123] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 899.424003][T12123] ? __pfx_do_sendfile+0x10/0x10 [ 899.424047][T12123] __se_sys_sendfile64+0x144/0x1a0 [ 899.424078][T12123] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 899.424120][T12123] do_syscall_64+0x14d/0xf80 [ 899.424149][T12123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.424172][T12123] ? trace_irq_disable+0x37/0x100 [ 899.424198][T12123] ? clear_bhb_loop+0x40/0x90 [ 899.424226][T12123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.424248][T12123] RIP: 0033:0x7fa4eeaac629 [ 899.424270][T12123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 899.424290][T12123] RSP: 002b:00007fa4ecd06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 899.424315][T12123] RAX: ffffffffffffffda RBX: 00007fa4eed25fa0 RCX: 00007fa4eeaac629 [ 899.424332][T12123] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 899.424347][T12123] RBP: 00007fa4ecd06090 R08: 0000000000000000 R09: 0000000000000000 [ 899.424362][T12123] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 899.424377][T12123] R13: 00007fa4eed26038 R14: 00007fa4eed25fa0 R15: 00007ffdaffecde8 [ 899.424413][T12123] [ 900.008607][T12059] chnl_net:caif_netlink_parms(): no params data found [ 901.446574][T12060] Bluetooth: hci1: command tx timeout [ 901.474348][T12142] FAULT_INJECTION: forcing a failure. [ 901.474348][T12142] name failslab, interval 1, probability 0, space 0, times 0 [ 901.474387][T12142] CPU: 1 UID: 0 PID: 12142 Comm: syz.6.1977 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 901.474413][T12142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 901.474428][T12142] Call Trace: [ 901.474437][T12142] [ 901.474447][T12142] dump_stack_lvl+0xe8/0x150 [ 901.474486][T12142] should_fail_ex+0x46b/0x600 [ 901.474518][T12142] should_failslab+0xa8/0x100 [ 901.474547][T12142] __kmalloc_noprof+0xdf/0x7b0 [ 901.474570][T12142] ? kfree+0x4d/0x690 [ 901.474590][T12142] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 901.474623][T12142] tomoyo_realpath_from_path+0xe3/0x5d0 [ 901.474661][T12142] ? tomoyo_domain+0xd8/0x130 [ 901.474695][T12142] ? tomoyo_path_number_perm+0x219/0x630 [ 901.474729][T12142] tomoyo_path_number_perm+0x246/0x630 [ 901.474767][T12142] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 901.474801][T12142] ? __lock_acquire+0x6b5/0x2cf0 [ 901.474836][T12142] ? do_raw_spin_lock+0x12b/0x2f0 [ 901.474899][T12142] ? __fget_files+0x2a/0x420 [ 901.474935][T12142] ? __fget_files+0x2a/0x420 [ 901.474964][T12142] ? __fget_files+0x3a6/0x420 [ 901.474993][T12142] ? __fget_files+0x2a/0x420 [ 901.475029][T12142] security_file_ioctl+0xc3/0x2a0 [ 901.475068][T12142] __se_sys_ioctl+0x47/0x170 [ 901.475095][T12142] do_syscall_64+0x14d/0xf80 [ 901.475126][T12142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.475148][T12142] ? trace_irq_disable+0x37/0x100 [ 901.475168][T12142] ? clear_bhb_loop+0x40/0x90 [ 901.475196][T12142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.475220][T12142] RIP: 0033:0x7fe08eddc629 [ 901.475240][T12142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 901.475259][T12142] RSP: 002b:00007fe08d036028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 901.475283][T12142] RAX: ffffffffffffffda RBX: 00007fe08f055fa0 RCX: 00007fe08eddc629 [ 901.475300][T12142] RDX: 00002000000003c0 RSI: 00000000c0386105 RDI: 0000000000000003 [ 901.475316][T12142] RBP: 00007fe08d036090 R08: 0000000000000000 R09: 0000000000000000 [ 901.475331][T12142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 901.475344][T12142] R13: 00007fe08f056038 R14: 00007fe08f055fa0 R15: 00007fff65ae0dd8 [ 901.475381][T12142] [ 901.475391][T12142] ERROR: Out of memory at tomoyo_realpath_from_path. [ 902.059860][T12153] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 904.921778][T12060] Bluetooth: hci1: command tx timeout [ 905.137593][ T5807] block nbd22: Receive control failed (result -32) [ 905.820902][ T5969] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.304395][T12180] netlink: 'syz.3.1987': attribute type 8 has an invalid length. [ 909.283870][ T5969] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.324688][T12230] FAULT_INJECTION: forcing a failure. [ 909.324688][T12230] name failslab, interval 1, probability 0, space 0, times 0 [ 909.324726][T12230] CPU: 1 UID: 0 PID: 12230 Comm: syz.6.2004 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 909.324752][T12230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 909.324767][T12230] Call Trace: [ 909.324776][T12230] [ 909.324787][T12230] dump_stack_lvl+0xe8/0x150 [ 909.324826][T12230] should_fail_ex+0x46b/0x600 [ 909.324859][T12230] should_failslab+0xa8/0x100 [ 909.324888][T12230] kmem_cache_alloc_noprof+0x87/0x680 [ 909.324913][T12230] ? do_getname+0x2e/0x250 [ 909.324937][T12230] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 909.324974][T12230] do_getname+0x2e/0x250 [ 909.324999][T12230] ? user_path_at+0x1e/0x160 [ 909.325036][T12230] user_path_at+0x2a/0x160 [ 909.325074][T12230] __se_sys_mount+0x2dc/0x420 [ 909.325112][T12230] ? __pfx___se_sys_mount+0x10/0x10 [ 909.325150][T12230] ? __x64_sys_mount+0x20/0xc0 [ 909.325190][T12230] do_syscall_64+0x14d/0xf80 [ 909.325220][T12230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.325243][T12230] ? trace_irq_disable+0x37/0x100 [ 909.325264][T12230] ? clear_bhb_loop+0x40/0x90 [ 909.325293][T12230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.325316][T12230] RIP: 0033:0x7fe08eddc629 [ 909.325337][T12230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 909.325358][T12230] RSP: 002b:00007fe08d036028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 909.325384][T12230] RAX: ffffffffffffffda RBX: 00007fe08f055fa0 RCX: 00007fe08eddc629 [ 909.325401][T12230] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 909.325416][T12230] RBP: 00007fe08d036090 R08: 0000000000000000 R09: 0000000000000000 [ 909.325431][T12230] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001 [ 909.325446][T12230] R13: 00007fe08f056038 R14: 00007fe08f055fa0 R15: 00007fff65ae0dd8 [ 909.325483][T12230] [ 910.001657][ T5969] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.051465][T12059] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.051601][T12059] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.051911][T12059] bridge_slave_0: entered allmulticast mode [ 910.054333][T12059] bridge_slave_0: entered promiscuous mode [ 910.139615][T12059] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.139708][T12059] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.139962][T12059] bridge_slave_1: entered allmulticast mode [ 910.142074][T12059] bridge_slave_1: entered promiscuous mode [ 910.376871][ T5891] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 910.480631][ T5969] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.508337][T12247] FAULT_INJECTION: forcing a failure. [ 910.508337][T12247] name failslab, interval 1, probability 0, space 0, times 0 [ 910.508379][T12247] CPU: 0 UID: 0 PID: 12247 Comm: syz.6.2011 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 910.508407][T12247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 910.508422][T12247] Call Trace: [ 910.508432][T12247] [ 910.508448][T12247] dump_stack_lvl+0xe8/0x150 [ 910.508487][T12247] should_fail_ex+0x46b/0x600 [ 910.508522][T12247] should_failslab+0xa8/0x100 [ 910.508553][T12247] __kmalloc_noprof+0xdf/0x7b0 [ 910.508577][T12247] ? kfree+0x4d/0x690 [ 910.508597][T12247] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 910.508631][T12247] tomoyo_realpath_from_path+0xe3/0x5d0 [ 910.508659][T12247] ? tomoyo_domain+0xd8/0x130 [ 910.508693][T12247] ? tomoyo_path_number_perm+0x219/0x630 [ 910.508730][T12247] tomoyo_path_number_perm+0x246/0x630 [ 910.508769][T12247] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 910.508803][T12247] ? __lock_acquire+0x6b5/0x2cf0 [ 910.508839][T12247] ? do_raw_spin_lock+0x12b/0x2f0 [ 910.508903][T12247] ? __fget_files+0x2a/0x420 [ 910.508937][T12247] ? __fget_files+0x2a/0x420 [ 910.508969][T12247] ? __fget_files+0x3a6/0x420 [ 910.509000][T12247] ? __fget_files+0x2a/0x420 [ 910.509037][T12247] security_file_ioctl+0xc3/0x2a0 [ 910.509092][T12247] __se_sys_ioctl+0x47/0x170 [ 910.509122][T12247] do_syscall_64+0x14d/0xf80 [ 910.509153][T12247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.509176][T12247] ? trace_irq_disable+0x37/0x100 [ 910.509196][T12247] ? clear_bhb_loop+0x40/0x90 [ 910.509224][T12247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.509247][T12247] RIP: 0033:0x7fe08eddc629 [ 910.509269][T12247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 910.509291][T12247] RSP: 002b:00007fe08d036028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 910.509316][T12247] RAX: ffffffffffffffda RBX: 00007fe08f055fa0 RCX: 00007fe08eddc629 [ 910.509333][T12247] RDX: 0000000000000000 RSI: 00000000c0506107 RDI: 0000000000000003 [ 910.509348][T12247] RBP: 00007fe08d036090 R08: 0000000000000000 R09: 0000000000000000 [ 910.509364][T12247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 910.509379][T12247] R13: 00007fe08f056038 R14: 00007fe08f055fa0 R15: 00007fff65ae0dd8 [ 910.509417][T12247] [ 910.513906][T12247] ERROR: Out of memory at tomoyo_realpath_from_path. [ 910.588254][ T5891] usb 4-1: Using ep0 maxpacket: 32 [ 910.645247][ T5818] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 910.670049][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 910.670087][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 910.670129][ T5891] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 910.670156][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.836771][ T5818] usb 9-1: Using ep0 maxpacket: 8 [ 910.862336][ T5818] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 910.862401][ T5818] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 910.862426][ T5818] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 910.862455][ T5818] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 910.862481][ T5818] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 910.862528][ T5818] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 910.862554][ T5818] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.961710][ T5891] usb 4-1: config 0 descriptor?? [ 911.550690][ T5818] usb 9-1: usb_control_msg returned -32 [ 911.550692][T12059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 911.550743][ T5818] usbtmc 9-1:16.0: can't read capabilities [ 911.760780][T12059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 912.110030][T12059] team0: Port device team_slave_0 added [ 912.134399][T12059] team0: Port device team_slave_1 added [ 912.439938][T12059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 912.439959][T12059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 912.439992][T12059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 912.470307][T12059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 912.470336][T12059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 912.470430][T12059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 913.342785][T12060] Bluetooth: hci0: command 0x0406 tx timeout [ 913.750364][ T5986] usb 9-1: USB disconnect, device number 31 [ 913.989166][ T5891] usbhid 4-1:0.0: can't add hid device: -71 [ 913.989277][ T5891] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 914.098694][ T5891] usb 4-1: USB disconnect, device number 19 [ 914.150449][T12270] FAULT_INJECTION: forcing a failure. [ 914.150449][T12270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 914.150488][T12270] CPU: 1 UID: 0 PID: 12270 Comm: syz.6.2021 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 914.150515][T12270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 914.150530][T12270] Call Trace: [ 914.150539][T12270] [ 914.150550][T12270] dump_stack_lvl+0xe8/0x150 [ 914.150589][T12270] should_fail_ex+0x46b/0x600 [ 914.150626][T12270] _copy_from_user+0x2d/0xb0 [ 914.150660][T12270] ___sys_sendmsg+0x1c6/0x360 [ 914.150683][T12270] ? __lock_acquire+0x6b5/0x2cf0 [ 914.150730][T12270] ? __pfx____sys_sendmsg+0x10/0x10 [ 914.150793][T12270] ? __fget_files+0x2a/0x420 [ 914.150823][T12270] ? __fget_files+0x3a6/0x420 [ 914.150864][T12270] __x64_sys_sendmsg+0x1c3/0x2a0 [ 914.150891][T12270] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 914.150925][T12270] ? __pfx_ksys_write+0x10/0x10 [ 914.150973][T12270] do_syscall_64+0x14d/0xf80 [ 914.151003][T12270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.151025][T12270] ? trace_irq_disable+0x37/0x100 [ 914.151045][T12270] ? clear_bhb_loop+0x40/0x90 [ 914.151072][T12270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.151093][T12270] RIP: 0033:0x7fe08eddc629 [ 914.151113][T12270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 914.151134][T12270] RSP: 002b:00007fe08d036028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 914.151157][T12270] RAX: ffffffffffffffda RBX: 00007fe08f055fa0 RCX: 00007fe08eddc629 [ 914.151174][T12270] RDX: 0000000020024014 RSI: 0000200000000040 RDI: 0000000000000004 [ 914.151189][T12270] RBP: 00007fe08d036090 R08: 0000000000000000 R09: 0000000000000000 [ 914.151203][T12270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 914.151217][T12270] R13: 00007fe08f056038 R14: 00007fe08f055fa0 R15: 00007fff65ae0dd8 [ 914.151253][T12270] [ 914.454182][T12059] hsr_slave_0: entered promiscuous mode [ 914.455217][T12059] hsr_slave_1: entered promiscuous mode [ 914.455874][T12059] debugfs: 'hsr0' already exists in 'hsr' [ 914.455892][T12059] Cannot create hsr debugfs directory [ 916.023419][ T5888] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 916.064186][ T5969] bridge_slave_1: left allmulticast mode [ 916.064380][ T5969] bridge_slave_1: left promiscuous mode [ 916.107786][ T5969] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.196413][ T5888] usb 4-1: Using ep0 maxpacket: 32 [ 916.204921][ T5888] usb 4-1: config 0 has an invalid interface number: 182 but max is 0 [ 916.204953][ T5888] usb 4-1: config 0 has no interface number 0 [ 916.204987][ T5888] usb 4-1: config 0 interface 182 has no altsetting 0 [ 916.323936][ T5888] usb 4-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 916.323974][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.323997][ T5888] usb 4-1: Product: syz [ 916.324013][ T5888] usb 4-1: Manufacturer: syz [ 916.324030][ T5888] usb 4-1: SerialNumber: syz [ 916.372714][ T5888] usb 4-1: config 0 descriptor?? [ 916.404159][ T5888] hub 4-1:0.182: bad descriptor, ignoring hub [ 916.404204][ T5888] hub 4-1:0.182: probe with driver hub failed with error -5 [ 916.452018][ T5969] bridge_slave_0: left allmulticast mode [ 916.452818][ T5969] bridge_slave_0: left promiscuous mode [ 916.453694][ T5969] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.801902][ T5888] kaweth 4-1:0.182: Firmware present in device. [ 916.980341][ T5888] kaweth 4-1:0.182: Statistics collection: 0 [ 916.980368][ T5888] kaweth 4-1:0.182: Multicast filter limit: 0 [ 916.980386][ T5888] kaweth 4-1:0.182: MTU: 0 [ 916.980401][ T5888] kaweth 4-1:0.182: Read MAC address 00:00:00:00:00:00 [ 917.692771][ T5888] kaweth 4-1:0.182: Error setting SOFS wait [ 917.693040][ T5888] kaweth 4-1:0.182: probe with driver kaweth failed with error -5 [ 917.768500][ T5888] usb 4-1: USB disconnect, device number 20 [ 920.129641][T12333] FAULT_INJECTION: forcing a failure. [ 920.129641][T12333] name failslab, interval 1, probability 0, space 0, times 0 [ 920.129670][T12333] CPU: 1 UID: 0 PID: 12333 Comm: syz.6.2045 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 920.129689][T12333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 920.129699][T12333] Call Trace: [ 920.129709][T12333] [ 920.129717][T12333] dump_stack_lvl+0xe8/0x150 [ 920.129745][T12333] should_fail_ex+0x46b/0x600 [ 920.129770][T12333] should_failslab+0xa8/0x100 [ 920.129790][T12333] __kvmalloc_node_noprof+0x170/0x8e0 [ 920.129811][T12333] ? seq_read_iter+0x203/0xe20 [ 920.129828][T12333] ? mutex_lock_nested+0x152/0x1d0 [ 920.129843][T12333] ? seq_read_iter+0xb8/0xe20 [ 920.129863][T12333] seq_read_iter+0x203/0xe20 [ 920.129880][T12333] ? _parse_integer_limit+0x1ae/0x1f0 [ 920.129905][T12333] ? __asan_memset+0x22/0x50 [ 920.129933][T12333] seq_read+0x36a/0x490 [ 920.129949][T12333] ? get_pid_task+0x20/0x1f0 [ 920.129980][T12333] ? __pfx_seq_read+0x10/0x10 [ 920.129998][T12333] ? __lock_acquire+0x6b5/0x2cf0 [ 920.130031][T12333] ? __pfx_seq_read+0x10/0x10 [ 920.130046][T12333] proc_reg_read+0x1f6/0x2f0 [ 920.130066][T12333] ? __pfx_proc_reg_read+0x10/0x10 [ 920.130087][T12333] vfs_read+0x212/0xa70 [ 920.130109][T12333] ? __pfx_vfs_read+0x10/0x10 [ 920.130126][T12333] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 920.130148][T12333] ? lockdep_hardirqs_on+0x7a/0x110 [ 920.130169][T12333] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 920.130190][T12333] ? mutex_lock_nested+0x152/0x1d0 [ 920.130210][T12333] ? fdget_pos+0x252/0x320 [ 920.130239][T12333] ksys_read+0x156/0x270 [ 920.130256][T12333] ? __pfx_ksys_read+0x10/0x10 [ 920.130281][T12333] do_syscall_64+0x14d/0xf80 [ 920.130302][T12333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.130318][T12333] ? trace_irq_disable+0x37/0x100 [ 920.130332][T12333] ? clear_bhb_loop+0x40/0x90 [ 920.130351][T12333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.130368][T12333] RIP: 0033:0x7fe08eddc629 [ 920.130383][T12333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 920.130397][T12333] RSP: 002b:00007fe08d036028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 920.130414][T12333] RAX: ffffffffffffffda RBX: 00007fe08f055fa0 RCX: 00007fe08eddc629 [ 920.130427][T12333] RDX: 0000000000002020 RSI: 0000200000012400 RDI: 0000000000000004 [ 920.130437][T12333] RBP: 00007fe08d036090 R08: 0000000000000000 R09: 0000000000000000 [ 920.130448][T12333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 920.130458][T12333] R13: 00007fe08f056038 R14: 00007fe08f055fa0 R15: 00007fff65ae0dd8 [ 920.130485][T12333] [ 921.686904][ T5891] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 921.896972][ T5891] usb 4-1: Using ep0 maxpacket: 8 [ 921.928889][ T5891] usb 4-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 921.928923][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 921.928945][ T5891] usb 4-1: Product: syz [ 921.928962][ T5891] usb 4-1: Manufacturer: syz [ 921.928978][ T5891] usb 4-1: SerialNumber: syz [ 921.972972][ T5891] usb 4-1: config 0 descriptor?? [ 922.012800][ T5891] usbtest 4-1:0.0: FX2 device [ 922.012832][ T5891] usbtest 4-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 922.194615][ T5969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 922.344311][ T5969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 922.460684][ T5969] bond0 (unregistering): Released all slaves [ 922.577208][ T5888] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 922.744668][ T5888] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 922.744712][ T5888] usb 5-1: can't read configurations, error -61 [ 922.884237][ T5888] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 923.081241][ T5888] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 923.081283][ T5888] usb 5-1: can't read configurations, error -61 [ 923.081918][ T5888] usb usb5-port1: attempt power cycle [ 923.401380][ T8400] usb 4-1: USB disconnect, device number 21 [ 923.436770][ T5888] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 923.474190][ T5888] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 923.474223][ T5888] usb 5-1: can't read configurations, error -61 [ 924.115111][ T5888] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 925.498337][ T5888] usb 5-1: device descriptor read/8, error -71 [ 925.607132][ T5888] usb usb5-port1: unable to enumerate USB device [ 929.524760][T12425] binder: 12424:12425 ioctl c0306201 200000000040 returned -22 [ 930.194571][T12059] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.970131][T12452] fuse: Bad value for 'fd' [ 932.238592][ T5807] block nbd23: Receive control failed (result -32) [ 932.513279][T12059] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.397518][ T5969] hsr_slave_0: left promiscuous mode [ 934.478134][ T5969] hsr_slave_1: left promiscuous mode [ 934.479500][ T5969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 934.479671][ T5969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 934.563697][ T5969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 934.563729][ T5969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 934.904151][ T5969] veth1_macvtap: left promiscuous mode [ 934.904425][ T5969] veth0_macvtap: left promiscuous mode [ 934.904723][ T5969] veth1_vlan: left promiscuous mode [ 934.905041][ T5969] veth0_vlan: left promiscuous mode [ 935.438940][T12483] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 935.482329][T12483] FAULT_INJECTION: forcing a failure. [ 935.482329][T12483] name failslab, interval 1, probability 0, space 0, times 0 [ 935.482372][T12483] CPU: 1 UID: 0 PID: 12483 Comm: syz.6.2102 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 935.482399][T12483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 935.482424][T12483] Call Trace: [ 935.482434][T12483] [ 935.482445][T12483] dump_stack_lvl+0xe8/0x150 [ 935.482483][T12483] should_fail_ex+0x46b/0x600 [ 935.482517][T12483] should_failslab+0xa8/0x100 [ 935.482546][T12483] __kmalloc_noprof+0xdf/0x7b0 [ 935.482570][T12483] ? kfree+0x4d/0x690 [ 935.482589][T12483] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 935.482621][T12483] tomoyo_realpath_from_path+0xe3/0x5d0 [ 935.482659][T12483] ? tomoyo_domain+0xd8/0x130 [ 935.482692][T12483] ? tomoyo_path_number_perm+0x219/0x630 [ 935.482727][T12483] tomoyo_path_number_perm+0x246/0x630 [ 935.482765][T12483] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 935.482797][T12483] ? __lock_acquire+0x6b5/0x2cf0 [ 935.482831][T12483] ? do_raw_spin_lock+0x12b/0x2f0 [ 935.482892][T12483] ? __fget_files+0x2a/0x420 [ 935.482926][T12483] ? __fget_files+0x2a/0x420 [ 935.482956][T12483] ? __fget_files+0x3a6/0x420 [ 935.482986][T12483] ? __fget_files+0x2a/0x420 [ 935.483023][T12483] security_file_ioctl+0xc3/0x2a0 [ 935.483056][T12483] __se_sys_ioctl+0x47/0x170 [ 935.483081][T12483] do_syscall_64+0x14d/0xf80 [ 935.483105][T12483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.483122][T12483] ? trace_irq_disable+0x37/0x100 [ 935.483137][T12483] ? clear_bhb_loop+0x40/0x90 [ 935.483158][T12483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.483175][T12483] RIP: 0033:0x7fe08eddc629 [ 935.483192][T12483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 935.483208][T12483] RSP: 002b:00007fe08d036028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 935.483227][T12483] RAX: ffffffffffffffda RBX: 00007fe08f055fa0 RCX: 00007fe08eddc629 [ 935.483240][T12483] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 935.483251][T12483] RBP: 00007fe08d036090 R08: 0000000000000000 R09: 0000000000000000 [ 935.483262][T12483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 935.483273][T12483] R13: 00007fe08f056038 R14: 00007fe08f055fa0 R15: 00007fff65ae0dd8 [ 935.483300][T12483] [ 935.508331][T12483] ERROR: Out of memory at tomoyo_realpath_from_path. [ 936.011136][T12483] picdev_read: 26 callbacks suppressed [ 936.011161][T12483] kvm: pic: non byte read [ 936.028080][T12483] kvm: pic: non byte read [ 936.028922][T12483] kvm: pic: non byte read [ 936.754068][T12497] fuse: Bad value for 'fd' [ 936.807332][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.807416][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 943.374935][ T5969] team0 (unregistering): Port device team_slave_1 removed [ 943.684129][ T5969] team0 (unregistering): Port device team_slave_0 removed [ 945.344196][ T5807] block nbd24: Receive control failed (result -32) [ 952.183857][T12059] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.234934][ T5807] block nbd25: Receive control failed (result -32) [ 955.578961][T12060] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 955.643619][T12060] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 955.687109][T12060] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 955.734466][T12060] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 955.760844][T12060] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 955.864264][T12059] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.191886][T12625] lo speed is unknown, defaulting to 1000 [ 957.123261][T12650] FAULT_INJECTION: forcing a failure. [ 957.123261][T12650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 957.123292][T12650] CPU: 1 UID: 0 PID: 12650 Comm: syz.6.2164 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 957.123313][T12650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 957.123324][T12650] Call Trace: [ 957.123331][T12650] [ 957.123339][T12650] dump_stack_lvl+0xe8/0x150 [ 957.123370][T12650] should_fail_ex+0x46b/0x600 [ 957.123404][T12650] _copy_from_user+0x2d/0xb0 [ 957.123431][T12650] ___sys_sendmsg+0x1c6/0x360 [ 957.123459][T12650] ? __lock_acquire+0x6b5/0x2cf0 [ 957.123489][T12650] ? __pfx____sys_sendmsg+0x10/0x10 [ 957.123538][T12650] ? __fget_files+0x2a/0x420 [ 957.123564][T12650] ? __fget_files+0x3a6/0x420 [ 957.123597][T12650] __x64_sys_sendmsg+0x1c3/0x2a0 [ 957.123618][T12650] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 957.123643][T12650] ? __pfx_ksys_write+0x10/0x10 [ 957.123669][T12650] do_syscall_64+0x14d/0xf80 [ 957.123695][T12650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.123715][T12650] ? trace_irq_disable+0x37/0x100 [ 957.123731][T12650] ? clear_bhb_loop+0x40/0x90 [ 957.123753][T12650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.123772][T12650] RIP: 0033:0x7fe08eddc629 [ 957.123790][T12650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 957.123807][T12650] RSP: 002b:00007fe08d036028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 957.123827][T12650] RAX: ffffffffffffffda RBX: 00007fe08f055fa0 RCX: 00007fe08eddc629 [ 957.123842][T12650] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 957.123854][T12650] RBP: 00007fe08d036090 R08: 0000000000000000 R09: 0000000000000000 [ 957.123866][T12650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 957.123878][T12650] R13: 00007fe08f056038 R14: 00007fe08f055fa0 R15: 00007fff65ae0dd8 [ 957.123908][T12650] [ 957.916818][T12060] Bluetooth: hci3: command tx timeout [ 958.361021][T12658] netlink: 'syz.3.2154': attribute type 8 has an invalid length. [ 958.484847][T12625] chnl_net:caif_netlink_parms(): no params data found [ 958.552615][T12668] program syz.8.2170 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 958.560073][T12668] input: syz1 as /devices/virtual/input/input39 [ 960.020094][T12060] Bluetooth: hci3: command tx timeout [ 960.628382][ T9928] bridge_slave_1: left allmulticast mode [ 960.628414][ T9928] bridge_slave_1: left promiscuous mode [ 960.632466][ T9928] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.837921][ T9928] bridge_slave_0: left allmulticast mode [ 960.837952][ T9928] bridge_slave_0: left promiscuous mode [ 960.838227][ T9928] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.336967][T12060] Bluetooth: hci3: command tx timeout [ 962.499206][T12712] binder: BINDER_SET_CONTEXT_MGR already set [ 962.502332][T12712] binder: 12710:12712 ioctl 4018620d 200000000040 returned -16 [ 962.502808][T12712] binder: 12710:12712 ioctl c0306201 2000000003c0 returned -14 [ 962.601535][ T5818] usb 9-1: new low-speed USB device number 32 using dummy_hcd [ 962.645574][ T5807] block nbd26: Receive control failed (result -32) [ 962.746666][ T5818] usb 9-1: device descriptor read/64, error -71 [ 964.403135][ T5807] Bluetooth: hci3: command tx timeout [ 964.481437][ T5807] Bluetooth: hci2: command 0x0406 tx timeout [ 964.817583][ T5888] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 964.827112][ T9928] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 965.016556][ T5888] usb 5-1: Using ep0 maxpacket: 8 [ 965.019459][ T5888] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 965.019521][ T5888] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 965.019547][ T5888] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 965.019575][ T5888] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 965.019602][ T5888] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 965.019645][ T5888] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 965.019670][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.108464][ T9928] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 965.202553][ T9928] bond0 (unregistering): Released all slaves [ 965.319213][ T5888] usb 5-1: usb_control_msg returned -32 [ 965.319265][ T5888] usbtmc 5-1:16.0: can't read capabilities [ 965.541186][T12625] bridge0: port 1(bridge_slave_0) entered blocking state [ 965.541329][T12625] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.541651][T12625] bridge_slave_0: entered allmulticast mode [ 965.577627][T12625] bridge_slave_0: entered promiscuous mode [ 966.899983][ T9928] hsr_slave_0: left promiscuous mode [ 967.718435][ T9928] hsr_slave_1: left promiscuous mode [ 967.719588][ T9928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 967.947370][ T5986] usb 5-1: USB disconnect, device number 28 [ 967.954764][ T9928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 968.164755][T12779] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 968.182859][T12775] FAULT_INJECTION: forcing a failure. [ 968.182859][T12775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 968.182895][T12775] CPU: 0 UID: 0 PID: 12775 Comm: syz.6.2204 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 968.182920][T12775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 968.182933][T12775] Call Trace: [ 968.182941][T12775] [ 968.182951][T12775] dump_stack_lvl+0xe8/0x150 [ 968.182988][T12775] should_fail_ex+0x46b/0x600 [ 968.183020][T12775] _copy_to_user+0x31/0xb0 [ 968.183054][T12775] simple_read_from_buffer+0xe1/0x170 [ 968.183089][T12775] proc_fail_nth_read+0x1be/0x230 [ 968.183117][T12775] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 968.183145][T12775] ? rw_verify_area+0x2ac/0x4e0 [ 968.183180][T12775] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 968.183205][T12775] vfs_read+0x212/0xa70 [ 968.183236][T12775] ? __pfx_vfs_read+0x10/0x10 [ 968.183259][T12775] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 968.183290][T12775] ? lockdep_hardirqs_on+0x7a/0x110 [ 968.183319][T12775] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 968.183349][T12775] ? mutex_lock_nested+0x152/0x1d0 [ 968.183371][T12775] ? fdget_pos+0x252/0x320 [ 968.183409][T12775] ksys_read+0x156/0x270 [ 968.183433][T12775] ? __pfx_ksys_read+0x10/0x10 [ 968.183467][T12775] do_syscall_64+0x14d/0xf80 [ 968.183496][T12775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.183518][T12775] ? trace_irq_disable+0x37/0x100 [ 968.183536][T12775] ? clear_bhb_loop+0x40/0x90 [ 968.183564][T12775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.183593][T12775] RIP: 0033:0x7fe08ed9cece [ 968.183613][T12775] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 968.183633][T12775] RSP: 002b:00007fe08d035fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 968.183657][T12775] RAX: ffffffffffffffda RBX: 00007fe08d0366c0 RCX: 00007fe08ed9cece [ 968.183675][T12775] RDX: 000000000000000f RSI: 00007fe08d0360a0 RDI: 0000000000000004 [ 968.183689][T12775] RBP: 00007fe08d036090 R08: 0000000000000000 R09: 0000000000000000 [ 968.183703][T12775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 968.183717][T12775] R13: 00007fe08f056038 R14: 00007fe08f055fa0 R15: 00007fff65ae0dd8 [ 968.183752][T12775] [ 968.437751][T12780] netlink: 'syz.8.2205': attribute type 8 has an invalid length. [ 972.369132][T12824] workqueue: Failed to create a rescuer kthread for wq "nbd27-recv": -EINTR [ 972.369245][T12824] block (null): Could not allocate knbd recv work queue. [ 972.418100][T12824] nbd: failed to add new device [ 972.558738][ T9928] team0 (unregistering): Port device team_slave_1 removed [ 972.807731][ T9928] team0 (unregistering): Port device team_slave_0 removed [ 973.142115][T12834] FAULT_INJECTION: forcing a failure. [ 973.142115][T12834] name failslab, interval 1, probability 0, space 0, times 0 [ 973.142154][T12834] CPU: 1 UID: 0 PID: 12834 Comm: syz.6.2229 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 973.142181][T12834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 973.142195][T12834] Call Trace: [ 973.142204][T12834] [ 973.142215][T12834] dump_stack_lvl+0xe8/0x150 [ 973.142253][T12834] should_fail_ex+0x46b/0x600 [ 973.142288][T12834] should_failslab+0xa8/0x100 [ 973.142317][T12834] __kmalloc_noprof+0xdf/0x7b0 [ 973.142342][T12834] ? kfree+0x4d/0x690 [ 973.142361][T12834] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 973.142396][T12834] tomoyo_realpath_from_path+0xe3/0x5d0 [ 973.142426][T12834] ? tomoyo_domain+0xd8/0x130 [ 973.142464][T12834] ? tomoyo_path_number_perm+0x219/0x630 [ 973.142500][T12834] tomoyo_path_number_perm+0x246/0x630 [ 973.142537][T12834] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 973.142573][T12834] ? __lock_acquire+0x6b5/0x2cf0 [ 973.142607][T12834] ? do_raw_spin_lock+0x12b/0x2f0 [ 973.142672][T12834] ? __fget_files+0x2a/0x420 [ 973.142706][T12834] ? __fget_files+0x2a/0x420 [ 973.142736][T12834] ? __fget_files+0x3a6/0x420 [ 973.142768][T12834] ? __fget_files+0x2a/0x420 [ 973.142804][T12834] security_file_ioctl+0xc3/0x2a0 [ 973.142843][T12834] __se_sys_ioctl+0x47/0x170 [ 973.142870][T12834] do_syscall_64+0x14d/0xf80 [ 973.142901][T12834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.142924][T12834] ? trace_irq_disable+0x37/0x100 [ 973.142944][T12834] ? clear_bhb_loop+0x40/0x90 [ 973.142973][T12834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.142996][T12834] RIP: 0033:0x7fe08eddc629 [ 973.143017][T12834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 973.143037][T12834] RSP: 002b:00007fe08d036028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 973.143062][T12834] RAX: ffffffffffffffda RBX: 00007fe08f055fa0 RCX: 00007fe08eddc629 [ 973.143079][T12834] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 973.143100][T12834] RBP: 00007fe08d036090 R08: 0000000000000000 R09: 0000000000000000 [ 973.143115][T12834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 973.143130][T12834] R13: 00007fe08f056038 R14: 00007fe08f055fa0 R15: 00007fff65ae0dd8 [ 973.143168][T12834] [ 973.143271][T12834] ERROR: Out of memory at tomoyo_realpath_from_path. [ 973.942945][T12625] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.943089][T12625] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.943461][T12625] bridge_slave_1: entered allmulticast mode [ 973.945574][T12625] bridge_slave_1: entered promiscuous mode [ 974.252310][T12625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 974.303359][T12625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 974.446432][T12625] team0: Port device team_slave_0 added [ 974.453541][T12625] team0: Port device team_slave_1 added [ 974.585973][T12625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 974.585989][T12625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 974.586010][T12625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 974.717144][T12625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 974.717164][T12625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 974.717196][T12625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 975.287319][T12880] netlink: 'syz.4.2243': attribute type 4 has an invalid length. [ 975.470329][T12884] FAULT_INJECTION: forcing a failure. [ 975.470329][T12884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 975.470367][T12884] CPU: 0 UID: 0 PID: 12884 Comm: syz.6.2246 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 975.470394][T12884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 975.470409][T12884] Call Trace: [ 975.470419][T12884] [ 975.470429][T12884] dump_stack_lvl+0xe8/0x150 [ 975.470469][T12884] should_fail_ex+0x46b/0x600 [ 975.470503][T12884] _copy_to_user+0x31/0xb0 [ 975.470539][T12884] simple_read_from_buffer+0xe1/0x170 [ 975.470576][T12884] proc_fail_nth_read+0x1be/0x230 [ 975.470606][T12884] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 975.470635][T12884] ? rw_verify_area+0x2ac/0x4e0 [ 975.470677][T12884] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 975.470703][T12884] vfs_read+0x212/0xa70 [ 975.470735][T12884] ? __pfx_vfs_read+0x10/0x10 [ 975.470761][T12884] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 975.470793][T12884] ? lockdep_hardirqs_on+0x7a/0x110 [ 975.470822][T12884] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 975.470854][T12884] ? mutex_lock_nested+0x152/0x1d0 [ 975.470876][T12884] ? fdget_pos+0x252/0x320 [ 975.470924][T12884] ksys_read+0x156/0x270 [ 975.470949][T12884] ? __pfx_ksys_read+0x10/0x10 [ 975.470985][T12884] do_syscall_64+0x14d/0xf80 [ 975.471016][T12884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.471039][T12884] ? trace_irq_disable+0x37/0x100 [ 975.471060][T12884] ? clear_bhb_loop+0x40/0x90 [ 975.471089][T12884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.471111][T12884] RIP: 0033:0x7fe08ed9cece [ 975.471133][T12884] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 975.471154][T12884] RSP: 002b:00007fe08d035fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 975.471180][T12884] RAX: ffffffffffffffda RBX: 00007fe08d0366c0 RCX: 00007fe08ed9cece [ 975.471198][T12884] RDX: 000000000000000f RSI: 00007fe08d0360a0 RDI: 0000000000000004 [ 975.471213][T12884] RBP: 00007fe08d036090 R08: 0000000000000000 R09: 0000000000000000 [ 975.471228][T12884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 975.471243][T12884] R13: 00007fe08f056038 R14: 00007fe08f055fa0 R15: 00007fff65ae0dd8 [ 975.471280][T12884] [ 975.841595][T12625] hsr_slave_0: entered promiscuous mode [ 975.864626][T12625] hsr_slave_1: entered promiscuous mode [ 975.875193][T12625] debugfs: 'hsr0' already exists in 'hsr' [ 975.879311][T12625] Cannot create hsr debugfs directory [ 978.580585][T12625] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 978.836456][T12922] FAULT_INJECTION: forcing a failure. [ 978.836456][T12922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 978.836496][T12922] CPU: 1 UID: 0 PID: 12922 Comm: syz.6.2256 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 978.836522][T12922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 978.836537][T12922] Call Trace: [ 978.836546][T12922] [ 978.836556][T12922] dump_stack_lvl+0xe8/0x150 [ 978.836595][T12922] should_fail_ex+0x46b/0x600 [ 978.836629][T12922] _copy_to_user+0x31/0xb0 [ 978.836666][T12922] simple_read_from_buffer+0xe1/0x170 [ 978.836702][T12922] proc_fail_nth_read+0x1be/0x230 [ 978.836732][T12922] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 978.836760][T12922] ? rw_verify_area+0x2ac/0x4e0 [ 978.836795][T12922] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 978.836822][T12922] vfs_read+0x212/0xa70 [ 978.836853][T12922] ? __pfx_vfs_read+0x10/0x10 [ 978.836887][T12922] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 978.836919][T12922] ? lockdep_hardirqs_on+0x7a/0x110 [ 978.836950][T12922] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 978.836980][T12922] ? mutex_lock_nested+0x152/0x1d0 [ 978.837002][T12922] ? fdget_pos+0x252/0x320 [ 978.837043][T12922] ksys_read+0x156/0x270 [ 978.837068][T12922] ? __pfx_ksys_read+0x10/0x10 [ 978.837103][T12922] do_syscall_64+0x14d/0xf80 [ 978.837133][T12922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.837156][T12922] ? trace_irq_disable+0x37/0x100 [ 978.837176][T12922] ? clear_bhb_loop+0x40/0x90 [ 978.837205][T12922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.837227][T12922] RIP: 0033:0x7fe08ed9cece [ 978.837248][T12922] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 978.837269][T12922] RSP: 002b:00007fe08d035fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 978.837332][T12922] RAX: ffffffffffffffda RBX: 00007fe08d0366c0 RCX: 00007fe08ed9cece [ 978.837350][T12922] RDX: 000000000000000f RSI: 00007fe08d0360a0 RDI: 0000000000000004 [ 978.837365][T12922] RBP: 00007fe08d036090 R08: 0000000000000000 R09: 0000000000000000 [ 978.837379][T12922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 978.837394][T12922] R13: 00007fe08f056038 R14: 00007fe08f055fa0 R15: 00007fff65ae0dd8 [ 978.837431][T12922] [ 979.269780][T12934] netlink: 'syz.4.2258': attribute type 4 has an invalid length. [ 979.778543][T12625] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 981.069731][T12925] workqueue: Failed to create a rescuer kthread for wq "nbd27-recv": -EINTR [ 981.069852][T12925] block (null): Could not allocate knbd recv work queue. [ 981.146891][T12925] nbd: failed to add new device [ 981.280337][T12625] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 981.408399][T12625] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 983.427270][T12625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 983.568205][T12625] 8021q: adding VLAN 0 to HW filter on device team0 [ 983.597547][ T1366] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.597774][ T1366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 983.641703][ T1366] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.641912][ T1366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 984.281823][T12981] ipvlan2: entered promiscuous mode [ 984.739894][T12983] ipvlan2: entered promiscuous mode [ 986.582670][T12994] fuse: Bad value for 'fd' [ 986.786495][T12997] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 986.844061][T12625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 987.377993][T12625] veth0_vlan: entered promiscuous mode [ 987.418019][T12625] veth1_vlan: entered promiscuous mode [ 987.560266][T12625] veth0_macvtap: entered promiscuous mode [ 987.565806][T12625] veth1_macvtap: entered promiscuous mode [ 987.665010][T12625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 987.739937][T12625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 987.805819][ T8095] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.806094][ T8095] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.847015][ T8095] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.885244][ T8095] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.990877][T13010] FAULT_INJECTION: forcing a failure. [ 987.990877][T13010] name failslab, interval 1, probability 0, space 0, times 0 [ 987.990915][T13010] CPU: 1 UID: 0 PID: 13010 Comm: syz.8.2276 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 987.990940][T13010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 987.990953][T13010] Call Trace: [ 987.990963][T13010] [ 987.990973][T13010] dump_stack_lvl+0xe8/0x150 [ 987.991010][T13010] should_fail_ex+0x46b/0x600 [ 987.991044][T13010] should_failslab+0xa8/0x100 [ 987.991072][T13010] __kmalloc_noprof+0xdf/0x7b0 [ 987.991096][T13010] ? kfree+0x4d/0x690 [ 987.991115][T13010] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 987.991146][T13010] tomoyo_realpath_from_path+0xe3/0x5d0 [ 987.991175][T13010] ? tomoyo_domain+0xd8/0x130 [ 987.991209][T13010] ? tomoyo_path_number_perm+0x219/0x630 [ 987.991241][T13010] tomoyo_path_number_perm+0x246/0x630 [ 987.991277][T13010] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 987.991310][T13010] ? __lock_acquire+0x6b5/0x2cf0 [ 987.991344][T13010] ? do_raw_spin_lock+0x12b/0x2f0 [ 987.991407][T13010] ? __fget_files+0x2a/0x420 [ 987.991440][T13010] ? __fget_files+0x2a/0x420 [ 987.991468][T13010] ? __fget_files+0x3a6/0x420 [ 987.991497][T13010] ? __fget_files+0x2a/0x420 [ 987.991533][T13010] security_file_ioctl+0xc3/0x2a0 [ 987.991573][T13010] __se_sys_ioctl+0x47/0x170 [ 987.991600][T13010] do_syscall_64+0x14d/0xf80 [ 987.991630][T13010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.991651][T13010] ? trace_irq_disable+0x37/0x100 [ 987.991671][T13010] ? clear_bhb_loop+0x40/0x90 [ 987.991698][T13010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.991720][T13010] RIP: 0033:0x7fa4eeaac629 [ 987.991750][T13010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 987.991770][T13010] RSP: 002b:00007fa4ecd06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 987.991794][T13010] RAX: ffffffffffffffda RBX: 00007fa4eed25fa0 RCX: 00007fa4eeaac629 [ 987.991811][T13010] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 987.991826][T13010] RBP: 00007fa4ecd06090 R08: 0000000000000000 R09: 0000000000000000 [ 987.991840][T13010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 987.991854][T13010] R13: 00007fa4eed26038 R14: 00007fa4eed25fa0 R15: 00007ffdaffecde8 [ 987.991892][T13010] [ 987.991902][T13010] ERROR: Out of memory at tomoyo_realpath_from_path. [ 988.881550][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 988.881575][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 989.156020][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 989.156045][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 995.059578][ T5807] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 995.078433][ T5807] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 995.089736][ T5807] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 995.105422][ T5807] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 995.114858][ T5807] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 995.285205][T13063] lo speed is unknown, defaulting to 1000 [ 997.286950][ T5807] Bluetooth: hci1: command tx timeout [ 997.555625][T13063] chnl_net:caif_netlink_parms(): no params data found [ 997.690717][T13082] fuse: Bad value for 'fd' [ 998.267090][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.267166][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1000.173370][ T5807] Bluetooth: hci1: command tx timeout [ 1000.994710][T13063] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.046513][T13063] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.046765][T13063] bridge_slave_0: entered allmulticast mode [ 1001.048964][T13063] bridge_slave_0: entered promiscuous mode [ 1001.071116][T13063] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.080414][T13063] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.081260][T13063] bridge_slave_1: entered allmulticast mode [ 1001.147236][T13063] bridge_slave_1: entered promiscuous mode [ 1001.426941][ T5986] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 1001.517806][T13063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1001.522475][T13063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1002.715693][T12060] Bluetooth: hci1: command tx timeout [ 1002.738435][ T5986] usb 5-1: not running at top speed; connect to a high speed hub [ 1002.740299][ T5986] usb 5-1: config 3 has an invalid interface number: 47 but max is 1 [ 1002.740328][ T5986] usb 5-1: config 3 has no interface number 0 [ 1002.740421][ T5986] usb 5-1: config 3 interface 1 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1002.740456][ T5986] usb 5-1: config 3 interface 1 has no altsetting 0 [ 1002.740477][ T5986] usb 5-1: config 3 interface 47 has no altsetting 0 [ 1002.759646][ T5986] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=43.bd [ 1002.759681][ T5986] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.759703][ T5986] usb 5-1: Product: syz [ 1002.759719][ T5986] usb 5-1: Manufacturer: syz [ 1002.759735][ T5986] usb 5-1: SerialNumber: syz [ 1003.134351][T13063] team0: Port device team_slave_0 added [ 1003.180422][T13063] team0: Port device team_slave_1 added [ 1003.510903][T13063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1003.510924][T13063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1003.510968][T13063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1003.652188][T13063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1003.652217][T13063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1003.652257][T13063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1004.717930][T12060] Bluetooth: hci1: command tx timeout [ 1005.528529][T13063] hsr_slave_0: entered promiscuous mode [ 1005.548156][T13063] hsr_slave_1: entered promiscuous mode [ 1005.550954][T13063] debugfs: 'hsr0' already exists in 'hsr' [ 1005.551046][T13063] Cannot create hsr debugfs directory [ 1006.372499][T13136] fuse: Bad value for 'fd' [ 1006.611499][ T5986] usb 5-1: selecting invalid altsetting 0 [ 1006.887528][T13135] ================================================================== [ 1006.887550][T13135] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 1006.887582][T13135] Read of size 8 at addr ffffc9002144b008 by task kworker/1:0/13135 [ 1006.887599][T13135] [ 1006.887611][T13135] CPU: 1 UID: 0 PID: 13135 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1006.887643][T13135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1006.887656][T13135] Workqueue: usb_hub_wq hub_event [ 1006.887685][T13135] Call Trace: [ 1006.887694][T13135] [ 1006.887705][T13135] dump_stack_lvl+0xe8/0x150 [ 1006.887735][T13135] print_report+0xba/0x230 [ 1006.887760][T13135] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1006.887783][T13135] kasan_report+0x117/0x150 [ 1006.887806][T13135] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1006.887830][T13135] __list_del_entry_valid_or_report+0xb5/0x190 [ 1006.887851][T13135] kcov_remote_start+0x2af/0x710 [ 1006.887881][T13135] hub_event+0x150/0x4f60 [ 1006.887904][T13135] ? __lock_acquire+0x6b5/0x2cf0 [ 1006.887929][T13135] ? __lock_acquire+0x6b5/0x2cf0 [ 1006.887952][T13135] ? look_up_lock_class+0x57/0x110 [ 1006.887978][T13135] ? __lock_acquire+0x6b5/0x2cf0 [ 1006.888003][T13135] ? finish_task_switch+0x161/0x920 [ 1006.888029][T13135] ? lock_acquire+0x106/0x330 [ 1006.888056][T13135] ? __pfx_hub_event+0x10/0x10 [ 1006.888079][T13135] ? process_scheduled_works+0xa0f/0x17a0 [ 1006.888102][T13135] ? process_scheduled_works+0xa0f/0x17a0 [ 1006.888120][T13135] ? process_scheduled_works+0xa0f/0x17a0 [ 1006.888140][T13135] process_scheduled_works+0xaec/0x17a0 [ 1006.888172][T13135] ? __pfx_process_scheduled_works+0x10/0x10 [ 1006.888195][T13135] ? assign_work+0x3d5/0x5e0 [ 1006.888216][T13135] worker_thread+0xa50/0xfc0 [ 1006.888247][T13135] kthread+0x388/0x470 [ 1006.888272][T13135] ? __pfx_worker_thread+0x10/0x10 [ 1006.888291][T13135] ? __pfx_kthread+0x10/0x10 [ 1006.888315][T13135] ret_from_fork+0x51e/0xb90 [ 1006.888338][T13135] ? __pfx_ret_from_fork+0x10/0x10 [ 1006.888358][T13135] ? __switch_to+0xc7d/0x1400 [ 1006.888378][T13135] ? __pfx_kthread+0x10/0x10 [ 1006.888402][T13135] ret_from_fork_asm+0x1a/0x30 [ 1006.888435][T13135] [ 1006.888441][T13135] [ 1006.888446][T13135] The buggy address belongs to a vmalloc virtual mapping [ 1006.888463][T13135] Memory state around the buggy address: [ 1006.888473][T13135] ffffc9002144af00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1006.888485][T13135] ffffc9002144af80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1006.888497][T13135] >ffffc9002144b000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1006.888506][T13135] ^ [ 1006.888515][T13135] ffffc9002144b080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1006.888526][T13135] ffffc9002144b100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1006.888535][T13135] ================================================================== [ 1006.888560][T13135] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1006.888577][T13135] CPU: 1 UID: 0 PID: 13135 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1006.888597][T13135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1006.888609][T13135] Workqueue: usb_hub_wq hub_event [ 1006.888640][T13135] Call Trace: [ 1006.888647][T13135] [ 1006.888654][T13135] vpanic+0x1e0/0x670 [ 1006.888680][T13135] panic+0xc5/0xd0 [ 1006.888703][T13135] ? __pfx_panic+0x10/0x10 [ 1006.888727][T13135] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1006.888746][T13135] ? rcu_is_watching+0x15/0xb0 [ 1006.888776][T13135] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1006.888795][T13135] check_panic_on_warn+0x89/0xb0 [ 1006.888812][T13135] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1006.888830][T13135] end_report+0x6f/0x140 [ 1006.888849][T13135] kasan_report+0x128/0x150 [ 1006.888870][T13135] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1006.888893][T13135] __list_del_entry_valid_or_report+0xb5/0x190 [ 1006.888914][T13135] kcov_remote_start+0x2af/0x710 [ 1006.888942][T13135] hub_event+0x150/0x4f60 [ 1006.888965][T13135] ? __lock_acquire+0x6b5/0x2cf0 [ 1006.888990][T13135] ? __lock_acquire+0x6b5/0x2cf0 [ 1006.889014][T13135] ? look_up_lock_class+0x57/0x110 [ 1006.889041][T13135] ? __lock_acquire+0x6b5/0x2cf0 [ 1006.889068][T13135] ? finish_task_switch+0x161/0x920 [ 1006.889096][T13135] ? lock_acquire+0x106/0x330 [ 1006.889124][T13135] ? __pfx_hub_event+0x10/0x10 [ 1006.889148][T13135] ? process_scheduled_works+0xa0f/0x17a0 [ 1006.889173][T13135] ? process_scheduled_works+0xa0f/0x17a0 [ 1006.889193][T13135] ? process_scheduled_works+0xa0f/0x17a0 [ 1006.889215][T13135] process_scheduled_works+0xaec/0x17a0 [ 1006.889250][T13135] ? __pfx_process_scheduled_works+0x10/0x10 [ 1006.889275][T13135] ? assign_work+0x3d5/0x5e0 [ 1006.889297][T13135] worker_thread+0xa50/0xfc0 [ 1006.889332][T13135] kthread+0x388/0x470 [ 1006.889358][T13135] ? __pfx_worker_thread+0x10/0x10 [ 1006.889378][T13135] ? __pfx_kthread+0x10/0x10 [ 1006.889404][T13135] ret_from_fork+0x51e/0xb90 [ 1006.889427][T13135] ? __pfx_ret_from_fork+0x10/0x10 [ 1006.889448][T13135] ? __switch_to+0xc7d/0x1400 [ 1006.889469][T13135] ? __pfx_kthread+0x10/0x10 [ 1006.889495][T13135] ret_from_fork_asm+0x1a/0x30 [ 1006.889531][T13135] [ 1006.890371][T13135] Kernel Offset: disabled