last executing test programs: 5m11.414347444s ago: executing program 4 (id=5112): socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 32) r0 = socket$pptp(0x18, 0x1, 0x2) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, &(0x7f00000000c0)) 5m11.247188516s ago: executing program 4 (id=5115): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x9, 0x0, 0x1, r2}) (fail_nth: 2) 5m10.458683219s ago: executing program 4 (id=5121): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000001240)={0x1, 0x0, &(0x7f00000000c0)=""/243, &(0x7f00000001c0)=""/4096, &(0x7f00000011c0)=""/90, 0xb000}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000001280)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) syz_usb_connect$uac3(0x1, 0xd8, &(0x7f0000001300)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x1739, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x3, 0x1, 0x4, 0x40, 0x8, {0x8, 0xb, 0x1, 0x2, 0x1, 0x671a729e34044b72, 0x30, 0xcb}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xe6, 0x26, 0xfffffff7}, [@mixer_unit={0x9, 0x24, 0x5, 0x1, 0xff, "80db3ef4"}, @output_terminal={0x13, 0x24, 0x3, 0x2, 0x304, 0x1, 0x4, 0x0, 0x0, 0x7a84, 0x8, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x65, 0x3f94, 0x3, 0x0, 0x6, 0x9, 0x9, 0xac}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x4}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x34, 0x2, 0x6d, 0x80}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x3, 0x7, 0xb4, {0xa, 0x25, 0x25, 0x6, 0x8, 0x30}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0xf7, 0x5, 0xe82, 0x2, 0x6, 0x2, 0x8422, 0xb}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x31, 0x3, 0x8a, {0xa, 0x25, 0x25, 0x4, 0x4, 0x6}}}}}}}}]}}, &(0x7f0000001580)={0xa, &(0x7f0000001400)={0xa, 0x6, 0x310, 0x1f, 0x10, 0x40, 0x10, 0xbd}, 0x5, &(0x7f0000001440)={0x5, 0xf, 0x5}, 0x1, [{0xc8, &(0x7f0000001480)=@string={0xc8, 0x3, "2ec9b31894cd19ed8d928a8fd5db1fa207b2f69c70fc167d8048fd17088e40ed37f25d6d90202c96244e2c4dd6f3a672fce5352f36dd662375ded8ec529e2f5a1f9f34c32f83eaebd543eb900d5a2ef4cd774d10622a398ce7bcdd5e3f7dcfcf0ee65461706435c206a9a4c4d02ba95f59b02aba7484a99a0d783b57327dcf1e2988651676d8759e5d0c9562b29c7a66635806bba148682417744d9af582f292563d38c9678831be9bb278a67d04fe8aec9bf996e0fb56bd6893db2d82b2687a68facf87b9e0"}}]}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f00000015c0)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000001600)={@rand_addr=' \x01\x00'}, 0x14) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000001640), &(0x7f0000001680)=0x4) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) inotify_add_watch(0xffffffffffffffff, &(0x7f00000016c0)='./file0\x00', 0x1000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000001740), r2) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x28, r6, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x2008080}, 0x80) connect$inet(r3, &(0x7f0000001840)={0x2, 0x4e24, @remote}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001880), 0x440000, 0x0) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) sendmsg$sock(r7, &(0x7f0000001cc0)={&(0x7f0000001900)=@caif, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001980)="e10762ddca7006c61720e6aee9b9b88b88fd354be73b", 0x16}, {&(0x7f00000019c0)="a5086e38c2cdc2b6ffefa7838701d3bfcffbd787949dea14829cec3dd115f89fad481e9d6dc652541cfd07c3dca29b928b9020a061dda2f702d7256a8018e227c8860d68d7c0a52c443b755f5b025b0fba00e4d32364f20e8df58f94ca70e0171b6c79dec2642716342d2927db756bb8b7ac59b04b7a335182bf674b358afebe0044b35713beb207737a8d75303400d2465b028efc3cfd9574a838416f81fd34f16e92fba6a470814376e4470878d7e97c06d56ceb43c5a011344f321597822cbddb6e1888554a12bb488d67cc992d3ab7acdeb98a2298169fcdeb6835", 0xdd}, {&(0x7f0000001ac0)="138ed4d53eb622a518662cdcb31373aeefbad38a074053753bb88c973ff4b061259822051c3688aab1859a625e14839b3ab29dd0eb5e47291958f66324cf6af8d64348717d16907d6ac0d5b5a45a47b63a60c0c41a72c4dc41b8f79da4d7f959fb1e6c4d2214451c5ffda7ac2461f9fa5333b39a2594052e0fa50192c8b8fac68ede549760bca026e090b46359d0af85a8de5e31208d0bfb182387de04dda044163c1a136fc6d6d93f035bf949b642cd72b39bbdd89f5c4341f9155ed7043b19206889e29eac5611eec2c224788afc4e8672f857ffecec7c09a7ffd050e4e312eade8bdb658eb3fc38a32e", 0xeb}, {&(0x7f0000001bc0)="22ee29d9db65b51a9bfbec18e4f44fb152f6b2b5d33e987d8e8e5845cb6f4fec764681f72cea06d2c2a62df2de8487066b2b570ecf23a93555a28f3e", 0x3c}], 0x4, &(0x7f0000001c40)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x401}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0xd}}], 0x60}, 0x40000) accept(r3, &(0x7f0000001d00)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000001d80)=0x80) r8 = io_uring_setup(0x3a39, &(0x7f0000001dc0)={0x0, 0x6a9d, 0x1, 0x0, 0x173, 0x0, r3}) syz_usb_connect$uac2(0x4, 0xb8, &(0x7f0000001e40)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x582, 0x10f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa6, 0x3, 0x1, 0x9, 0x10, 0x6, {0x8, 0xb, 0x0, 0x0, 0x1, 0x9, 0x20, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x9, 0x0, 0x2a, 0xc}, [@multiply_unit={0x7, 0x24, 0xc, 0x0, 0x4, 0x1, 0x7}, @sample_rate={0x13, 0x24, 0xd, 0x6, 0x0, 0x1, [0x1, 0x2, 0x1, 0x0, 0x0, 0x3]}, @multiply_unit={0x7, 0x24, 0xc, 0x8, 0x1a, 0xfc, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x3c9b, 0x8000, 0x8, "49d2e7ae996c"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x4, 0x4, 0x0, 0xb, "98663e3212"}]}, {{0x9, 0x5, 0x1, 0x9, 0x260, 0xd3, 0x6, 0x43, {0x8, 0x25, 0x1, 0x81, 0x30, 0x4, 0x6bf}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x3, 0xb4, 0x1, {0x8, 0x25, 0x1, 0x0, 0x3, 0x1, 0xfffa}}}}}}}}]}}, &(0x7f0000002200)={0xa, &(0x7f0000001f00)={0xa, 0x6, 0x201, 0x1, 0x44, 0x5, 0x40, 0xc0}, 0x24, &(0x7f0000001f40)={0x5, 0xf, 0x24, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "8d81ab63088cd86419656aa402db98e3"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xa0, 0x8, 0x2, 0x7}]}, 0x6, [{0x5b, &(0x7f0000001f80)=@string={0x5b, 0x3, "0a05ed10e900259ed264cc1f71ca66d4a75d860d9f9bc89a646caab63816617d153622284d4bb3f007f5ad2954fb8e272955064abd03919540e1dc34d46a6235cd1c126b0b9902c365813ccefa30bf5ca4eb9db3f0ee2b4cdd"}}, {0xdf, &(0x7f0000002000)=@string={0xdf, 0x3, "4cd8d588e465d05339829b518c9c381fd51d21e71c76022319efab5463f8c791888f41645861f62b943914536789ae2c7a80c9bb3acdb47daa28f3ab7d82295289c9916e08dcbca125bb073a57d0e73a0b796942425b03cca1ab1072e529e42aef1b3b2c9691722712d4e9b55448105b062284a7f5aa64f8e7bfecf341178859222a1a61fd39962e5b84a83e87df7337b5af801c854c57670557a82a6a281ac19c9d907cf62844697c301d56935d78285128aef96985aee423587b0352f18793d9dd4e3573af5d24351a50a83c244c4c19980f9b7113756eb36804fac8"}}, {0x3b, &(0x7f0000002100)=@string={0x3b, 0x3, "3a633c03aaacebc2c1bb9d43a4abd139143ec9f0a17f938b29cfd86b39e2bf38ee62d9e685d89dc5b8fb3c8d9f8ad5b68baeeabad23f630245"}}, {0x19, &(0x7f0000002140)=@string={0x19, 0x3, "574b9fe49eb4dc41552ba837f278b86d210d5bf827b5b6"}}, {0x4, &(0x7f0000002180)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f00000021c0)=@lang_id={0x4, 0x3, 0x2001}}]}) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f0000002380)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x30, r9, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x1) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0xf95) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000002400)={0x0, 0x7, 0x5, &(0x7f00000023c0)={0x9, "40473184611a51fa27150de07232f7e26927998d15c7c937f5e88bb8f5f44fde91"}}) ioctl$KVM_CAP_DISABLE_QUIRKS(r2, 0x4068aea3, &(0x7f0000002440)={0x74, 0x0, 0x14}) syz_open_dev$video4linux(&(0x7f00000024c0), 0x2400, 0x220a02) syz_usb_connect$uac1(0x0, 0x9c, &(0x7f0000002500)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x763, 0x1031, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0x9, 0x40, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x2d}, [@mixer_unit={0x6, 0x24, 0x4, 0x5, 0xfc, "b4"}, @processing_unit={0x7, 0x24, 0x7, 0x5, 0x3, 0x1}, @selector_unit={0xa, 0x24, 0x5, 0x6, 0xd, "7df76410fa"}, @processing_unit={0xc, 0x24, 0x7, 0x2, 0x3, 0x0, "403ec8bb4b"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x3, 0x7e, 0x7f, {0x7, 0x25, 0x1, 0x0, 0x3, 0xffff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xc, 0x9, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xfa, 0x2, 0x6, {0x7, 0x25, 0x1, 0x8, 0x3, 0x4}}}}}}}}]}}, &(0x7f00000029c0)={0xa, &(0x7f00000025c0)={0xa, 0x6, 0x200, 0x6, 0x2, 0x6, 0x8, 0x6}, 0x182, &(0x7f0000002600)={0x5, 0xf, 0x182, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x4, 0x67, 0x100, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "f35e05b1e243b074a243cb54b30f5281"}, @generic={0xa5, 0x10, 0x1, "b95cf2f32b359d3b597ce3cb1716184a5817008acdb66b7b75e23ff89b62a45aa5154b3dd77b1f885c1b11703fe8416a29410f6b8a3e2b1997e76f62a85c7ca3d496bc97530adb7191141b8eb7ef10b789a1aa71a1c2b62920cfdbdd25921a5b767beab52bb06511c6393f2d69802f74c0403da3046d87626d69a820a76ea14623b3c8ca6efd0876c58df7c08ba13eb6506d8f2ac3d40f32c8f9a2285001d9995233"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "55768db654195d43b1fe573a79af072c"}, @generic={0x89, 0x10, 0x1, "59a8d6f1e72d3796399468ee5eac36267df3109c2adb2095c05dbc4505a45249e51ed37188b2d1e48ef58f56b062ec9128202c9094b97da74fcccf4833a663ec796c0b1ba5c6f183735e39bf2eda822e00f3fa15214a12918269fa820f0b337fd813e54e5611aad09aadcf31702ac66df867e1c6a58ceb8f6ac9f7e5b11afc9b35e6d0a96d35"}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x4, 0x7, 0x9, [0xc0, 0x3f30, 0x0, 0x0]}]}, 0x6, [{0x1f, &(0x7f00000027c0)=@string={0x1f, 0x3, "d21031ac6b2450386146063bc55c1b08d3c440e6d0814fecc834d3bcb7"}}, {0x4, &(0x7f0000002800)=@string={0x4, 0x3, "0c88"}}, {0x5, &(0x7f0000002840)=@string={0x5, 0x3, "003fbc"}}, {0x71, &(0x7f0000002880)=@string={0x71, 0x3, "116e309dd211689f3f4567683b44788f94c1b1d8c1cf420b236dafa19da931f129feb1db0d5dee06e8344e8e6852aadfda64db7435162897e09742ed1334c6c57bfc863c5b933950679d47f90355f041335ec28900a1d75994653c417a3f64ed68b2758dd8cb88ea10b9afebbe212a"}}, {0x48, &(0x7f0000002900)=@string={0x48, 0x3, "81efbd8c109c7f0a5e383b572fe6d139bd4e9bd37a3333bb84d93ede67831bf3d6dfacbc99f499ebf1414d0da75a535dc8efe9f6222b7626b44cc6a3994d93a7e9311870471b"}}, {0x4, &(0x7f0000002980)=@lang_id={0x4, 0x3, 0x1409}}]}) 5m7.059927246s ago: executing program 4 (id=5137): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000332000/0x3000)=nil, 0x3000, 0xb635773f07ebbeeb, 0x2010, 0xffffffffffffffff, 0x37ad6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)=@o_path={&(0x7f0000000180)='./file0\x00', r3, 0x4000, r5}, 0x18) unshare(0x22020600) getcwd(0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) bind$netlink(r7, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socket(0xb, 0x80b, 0x1) 5m6.047219461s ago: executing program 4 (id=5140): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x1, 0x270bd24, 0x25dfdbf8, {0x12}}, 0x14}, 0x1, 0x0, 0x0, 0x2040080}, 0x24000010) (fail_nth: 2) 5m5.901702536s ago: executing program 4 (id=5144): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x46) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xe, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x415a, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r2, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) poll(&(0x7f0000000000), 0x0, 0x3) syz_open_dev$usbfs(0x0, 0x77, 0x101301) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 4m50.784720856s ago: executing program 32 (id=5144): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x46) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xe, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x415a, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r2, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) poll(&(0x7f0000000000), 0x0, 0x3) syz_open_dev$usbfs(0x0, 0x77, 0x101301) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 4m9.618383666s ago: executing program 5 (id=5360): open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) epoll_create1(0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x208060, 0x1, 0xfffa, 0x10000, 0xfffffffc, 0x0, 0x0, 0x100, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) (fail_nth: 2) close_range(0xffffffffffffffff, r0, 0x0) 4m7.821825888s ago: executing program 5 (id=5364): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) r1 = syz_clone(0x2100100, &(0x7f00000015c0)="0c0f30b75a7800c0388724eeeca4323bdf409f9b6887ea1966f008333e5320588a8663b1c06b03e7dc43a45aa423765239ace7c178775f76ee2af40265c067bd1971487d986bbc8028b227271e9b003f4a1d5853f032027a9730a6cf868bba8337631972f27fe4bff84823088177feb6f5ef2ce87ccc5c7414e8e69ec84a36d5d95bb288d6b02b8bb26c0f3f36e695d86498d53dcbe7fd83a214102767478a466b", 0xa1, &(0x7f0000001680), &(0x7f00000016c0), &(0x7f0000001700)="d47f8f49197ebfc001c2871394b13d67c61766a6ecb118619bf63aa2ea1b0e2b64ba22121085bbc52a3780b447c4eccceb71a7847f2ddc0f69bdec385e458324b0626643fb33d5e4cc016181d477f436fb3950c3a17e067d5a8ea18254fe04e86b5465805889315a106792f064c4b53c16b98cea67b817d25a809c9eeecbc158577a7f9df30bfb0cc9b98fb2c53e8c7be581d67e5f8df790c361e5ee5f2397e28fd5e0b78ce01ab7b517c378e5f8d068483ee8ab222bd99f18a247fabd8e3f61063d7df3564ad7") ioprio_get$pid(0x0, r1) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f00000001c0)={'icmp\x00'}, &(0x7f00000002c0)=0x1e) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000001500)={{0x0, 0x400, 0x401, 0x7f4, 0xf, 0x8, 0x4, 0x2, 0xfffffff8, 0x40, 0x100, 0x2, 0x1, 0x800, 0xb}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast2, @private1}}}}}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r4, &(0x7f00000003c0), 0x0}, 0x20) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r5, 0xc0905664, &(0x7f00000002c0)={0x0, 0x0, '\x00', @bt={0xfb5, 0x8, 0xfffffffe, 0x4, 0x786, 0xe, 0x6, 0x9}}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) listen(0xffffffffffffffff, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00'/14], 0x14}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x68, 0x2, 0x6, 0x5, 0x0, 0x3000000, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6d23}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) 4m7.006136534s ago: executing program 5 (id=5369): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000000)=0x28, 0x4) getdents64(0xffffffffffffffff, 0x0, 0x22) shmget$private(0x0, 0x2000, 0xfa71340b9fef182d, &(0x7f0000ffe000/0x2000)=nil) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xe0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) r5 = syz_open_dev$usbfs(0x0, 0x875, 0x68841) socket$l2tp(0x2, 0x2, 0x73) dup3(0xffffffffffffffff, r5, 0x0) r6 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7fb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000140)={0x4, 0x1, 0x4, 0x0, 0x9}) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCGARP(r1, 0x8954, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000000408010800000000000000000a000000060002408906000008000300840000002555794e9bc483b70000d5d3b04ca9a816fc4a7193abaa011c73cc5a58f7f8aa859128e9dca608653d6671f09104815894f2258705a329ed"], 0x24}, 0x1, 0x0, 0x0, 0x615800b14e775758}, 0x0) listen(r1, 0x3) write$binfmt_script(r0, &(0x7f0000026800)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000c) 4m4.713748433s ago: executing program 5 (id=5378): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000001ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x4000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4m3.367505155s ago: executing program 5 (id=5384): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f}}, 0x20) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x725da000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$tipc(r2, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f00000005c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x40}}, 0xfffffffffffffe17, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setrlimit(0xd, &(0x7f00000001c0)={0x8, 0x8}) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x1, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0xe}, {}, {0x8, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044010}, 0x4000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4m1.860541128s ago: executing program 5 (id=5389): openat$mice(0xffffffffffffff9c, 0x0, 0x101) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mount$cgroup2(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d656d6f72795f68756765746c625f6163636f756e74696e672c661b4fb1dbb808fc6ac20361766f7264796e6d6f64732c00"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2014800, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x2a, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="000092461340000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x50) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) modify_ldt$write2(0x11, &(0x7f0000000200)={0xd8a, 0x20000800, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, 0x0, 0x110) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r6, 0x4611, 0x3) 3m46.733940174s ago: executing program 33 (id=5389): openat$mice(0xffffffffffffff9c, 0x0, 0x101) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mount$cgroup2(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d656d6f72795f68756765746c625f6163636f756e74696e672c661b4fb1dbb808fc6ac20361766f7264796e6d6f64732c00"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2014800, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x2a, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="000092461340000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x50) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) modify_ldt$write2(0x11, &(0x7f0000000200)={0xd8a, 0x20000800, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, 0x0, 0x110) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r6, 0x4611, 0x3) 52.673474133s ago: executing program 0 (id=6035): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 51.472932347s ago: executing program 0 (id=6037): syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000008260001080006040003000000000000ac1414bbbbbbbbbbbbbbac1414bb"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f00000003c0)=""/187, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 64) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r1, 0x80044dff, 0x1000000000000) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r4, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xf2, 0x207fff) (async, rerun: 32) r6 = getpid() (rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r6, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfffff000) (async, rerun: 32) getrlimit(0x2, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 48.170365238s ago: executing program 0 (id=6051): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x1}, 0x28) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r2, &(0x7f0000001500)=[{{&(0x7f0000000600)={0xa, 0x4e21, 0xffff, @private2, 0x401}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000640)="be", 0x1}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, '\x00', 0x43}, 0x5}, 0x1c, &(0x7f0000000f80)=[{&(0x7f0000000b80)='S', 0x1}], 0x1}}], 0x2, 0x20044040) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}], 0x2}, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) recvmmsg(r1, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20010020, 0x0) ioctl$int_out(r0, 0xa8c0, &(0x7f00000001c0)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4044054}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 47.016966267s ago: executing program 0 (id=6057): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122bd0369cec32bbe791bfc2c0fce202d51df0862c31baa7b80bab6d64c1d5826a7f4c1982e3693e7a0677f2ad388ce872b890394a3ecfd1cec45ba79669452", 0xbb}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)}], 0x3, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990", 0x70}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356", 0x21}, {&(0x7f0000000d00)="dc6e94ac2db166801ffce85f6f44f2cb071c6b5113bc6bbf2f503d468253693a01102fcb8157c6e8a2b5620efa5d22400147cce896821150f95c0c69fa587a1f99fcb28cfeb09f45cb836f0ff891be10bb209dc04adc202ef866f27b74faa5ad3a2e5d40ebd6785c4e4a97ac13238c746d1109d12af5446c4e84591f121a494251e43bed18f6269bdd2e56f9c211dd7145f664286911b8bb3acf76a1b5ece94183a6c8cc47f2e1dd4e91dc10be8732e92e8620fa060fb15016c2dc9b6da18325e778660d499aec6215b0f9f679fa76d22cdd4ae37762", 0xd6}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad9692140de74d9294c555a8c2e0d53acea79b788b5eb1a12ada17eda2b2fb96c439ce16e6266afda6613fd7c90be9a9dfcd1b099fe6b023b725241a6e1048c700e7a939bd3a38f1101213b81c252dd8c44b7e647940438343d0d082507d218a952e6d77ec0918968c74f220c981a3797fb6cadfd6723a75c5c4da33e830ecf602c55bc60831ddd694f15728f4d1eacad82a03540713f52f9485138574e5b6aec693c2c613e442d5306c2ef1c8ad8dda8d005f3f3bacb5991d1c18db228185e4d2fcca72d87d81df01c142428158ad7ba84dd6c65d24a8d094308", 0xed}, {0x0}, {&(0x7f00000011c0)}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53ab8af3f76ffaa86df636018175c4a8ea922a193ad08ca30d5031b27a4a87bff93dc12a98b6e4f25b5550d98a5bf3e040a8902083eea93bdbde6da91df3a730dd2b8215e9840f04dd0ab667500fe952fa1b8845c2cee50f8322175049c4a994def6599287fb0f8d61029188945e", 0xa6}], 0x7, &(0x7f00000014c0)}}], 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 46.572976872s ago: executing program 0 (id=6061): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 45.493456478s ago: executing program 0 (id=6062): setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002004e20e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002004e210000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b"], 0x54}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x20001, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r5, 0x8008330e, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r2, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000480)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x94, &(0x7f0000000540)=[{}, {}], 0x10, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xbf, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x9, 0x7f, 0xd, 0x10064, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1, 0x8}, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan1\x00', 0x0}) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x2, 0x1, 0x8, 0x40154, r8, 0x3ff, '\x00', r9, r10, 0x4, 0x5, 0x0, 0x6}, 0x50) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000940)={0xffffffffffffffff, 0x1, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1, 0x3, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1939, 0x0, 0x0, 0x0, 0xcf6}, @call={0x85, 0x0, 0x0, 0x2e}], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', r4, @fallback=0x20, r2, 0x8, &(0x7f0000000200)={0x5, 0x9}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0x7, 0x6, 0x8d7}, 0x10, r7, 0xffffffffffffffff, 0x1, &(0x7f0000000980)=[r2, r8, r2, r2, r2, r2, r2, r2, r2, r11], &(0x7f00000009c0)=[{0x4, 0x1, 0x5, 0xb}], 0x10, 0x8001}, 0x94) syz_emit_ethernet(0x106, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_connect$uac1(0x0, 0x81, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x763, 0x2003, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0x4, 0x20, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x10, 0xd, 0x4, {0x7, 0x25, 0x1, 0x0, 0xff, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x4, 0x3, 0x84, 0x8}, @as_header={0x7, 0x24, 0x1, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x8, 0x1, {0x7, 0x25, 0x1, 0x4, 0x68, 0x1}}}}}}}}]}}, 0x0) r12 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r12, 0x89f9, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@rand_addr=' \x01\x00', @multicast2, 0xb, 0x15}}) 30.202743014s ago: executing program 34 (id=6062): setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002004e20e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002004e210000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b"], 0x54}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x20001, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r5, 0x8008330e, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r2, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000480)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x94, &(0x7f0000000540)=[{}, {}], 0x10, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xbf, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x9, 0x7f, 0xd, 0x10064, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1, 0x8}, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan1\x00', 0x0}) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x2, 0x1, 0x8, 0x40154, r8, 0x3ff, '\x00', r9, r10, 0x4, 0x5, 0x0, 0x6}, 0x50) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000940)={0xffffffffffffffff, 0x1, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1, 0x3, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1939, 0x0, 0x0, 0x0, 0xcf6}, @call={0x85, 0x0, 0x0, 0x2e}], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', r4, @fallback=0x20, r2, 0x8, &(0x7f0000000200)={0x5, 0x9}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0x7, 0x6, 0x8d7}, 0x10, r7, 0xffffffffffffffff, 0x1, &(0x7f0000000980)=[r2, r8, r2, r2, r2, r2, r2, r2, r2, r11], &(0x7f00000009c0)=[{0x4, 0x1, 0x5, 0xb}], 0x10, 0x8001}, 0x94) syz_emit_ethernet(0x106, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_connect$uac1(0x0, 0x81, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x763, 0x2003, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0x4, 0x20, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x10, 0xd, 0x4, {0x7, 0x25, 0x1, 0x0, 0xff, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x4, 0x3, 0x84, 0x8}, @as_header={0x7, 0x24, 0x1, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x8, 0x1, {0x7, 0x25, 0x1, 0x4, 0x68, 0x1}}}}}}}}]}}, 0x0) r12 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r12, 0x89f9, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@rand_addr=' \x01\x00', @multicast2, 0xb, 0x15}}) 8.282032546s ago: executing program 6 (id=6190): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x3c, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x10, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffff7}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELFLOWTABLE={0x84, 0x18, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netpci0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x15c}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60c6dd0000103afffe8700000000000000000000000000bbff0200000000000000000000000000018900907800fe00000041000000000000"], 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4840) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) r3 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) execveat(r3, 0x0, 0x0, 0x0, 0x1000) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x100001, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r5, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r5, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r5, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') ioctl$TCXONC(r4, 0x540a, 0x3) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0) 6.91064057s ago: executing program 1 (id=6194): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a010200e5000000000000010000000900030073797a3200000000140004800800024000"], 0xf0}}, 0x24000080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000197, 0x0) fsopen(0x0, 0x1) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000700)={'icmp\x00'}, &(0x7f00000006c0)=0x1e) exit(0x100000000000035) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x400, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x9, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x1010, 0x11}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) tkill(0x0, 0x12) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f00000006c0)="3b000000010006", 0x7) fchdir(0xffffffffffffffff) r7 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0, 0x6}, 0x8) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r8, 0x4018aee2, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0}) close(0x3) 5.981925278s ago: executing program 1 (id=6197): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 5.809124422s ago: executing program 1 (id=6199): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x2}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122bd0369cec32bbe791bfc2c0fce202d51df0862c31baa7b80bab6d64c1d5826a7f4c1982e3693e7a0677f2ad388ce872b890394a3", 0xb1}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}], 0x2, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {0x0}, {&(0x7f0000000d00)}, {0x0}, {&(0x7f00000011c0)}], 0x5, &(0x7f00000014c0)}}], 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x8, 0x48, 0x7b, 0x33}) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mq_open(0x0, 0x40, 0x59, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x2, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}}, 0x8010) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f00000004c0)={0x1, 0x1, 0x1000000c, 0x12, 0x10003, 0x0}) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25ADDUID(r7, 0x541b, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 5.24199559s ago: executing program 7 (id=6200): syz_open_dev$dri(0x0, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) mremap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0xfffffffff000, 0x3, &(0x7f0000ffc000/0x4000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x100, &(0x7f0000000840)=ANY=[@ANYRESOCT=r0], 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x90) open(&(0x7f0000000100)='./bus\x00', 0x1031c2, 0x20) mlock(&(0x7f0000c82000/0x4000)=nil, 0x4000) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000400)={0x0, 'pimreg\x00', {0x3}, 0x6f}) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$video(0x0, 0x7fff, 0x40800) mount$fuse(0x0, 0x0, 0x0, 0x80000, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x1c1100) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0x1a, r4, 0xc, &(0x7f0000000000)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r6) 5.123207685s ago: executing program 1 (id=6201): ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) 4.95640189s ago: executing program 1 (id=6203): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x3c, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x10, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffff7}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELFLOWTABLE={0x84, 0x18, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netpci0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x15c}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60c6dd0000103afffe8700000000000000000000000000bbff0200000000000000000000000000018900907800fe00000041000000000000"], 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4840) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) r3 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) execveat(r3, 0x0, 0x0, 0x0, 0x1000) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x100001, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_ep_write(r4, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r4, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r4, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0) 3.881380229s ago: executing program 6 (id=6206): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xa}]}, 0x2c}}, 0x8046) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x20000011}, 0x8801) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[], 0x16) 3.850193374s ago: executing program 2 (id=6207): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a010200e5000000000000010000000900030073797a3200000000140004800800024000"], 0xf0}}, 0x24000080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000197, 0x0) fsopen(0x0, 0x1) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000700)={'icmp\x00'}, &(0x7f00000006c0)=0x1e) exit(0x100000000000035) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x400, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x9, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x1010, 0x11}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) tkill(0x0, 0x12) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f00000006c0)="3b000000010006", 0x7) fchdir(0xffffffffffffffff) r7 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0, 0x6}, 0x8) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r8, 0x4018aee2, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0}) close(0x3) 3.844785177s ago: executing program 3 (id=6208): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080d0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x30, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xf}]}, 0x30}, 0x1, 0x0, 0x0, 0x34000047}, 0x240000d0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) io_getevents(0x0, 0x6, 0x6, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r6 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r7 = fanotify_init(0xf00, 0x1) fanotify_mark(r7, 0x105, 0x40009975, r6, 0x0) fallocate(r5, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0) 3.742269094s ago: executing program 6 (id=6209): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.908847768s ago: executing program 3 (id=6210): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x90, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x40, 0x9, 0x20000000, 0xb, 0x7}}, @TCA_DEF_DATA={0xa, 0x3, 'basic\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)="27030200080314000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}, {&(0x7f0000000440)}, {&(0x7f00000008c0)="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", 0x21c}], 0x4}, 0x5) 2.867917901s ago: executing program 6 (id=6211): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x108) 2.800835556s ago: executing program 6 (id=6212): r0 = socket$netlink(0x10, 0x3, 0xf) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000140)={0xae, 0x6}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) socket$alg(0x26, 0x5, 0x0) recvmmsg(r0, &(0x7f0000001f00)=[{{&(0x7f0000000300)=@tipc=@name, 0x80, &(0x7f0000001640)=[{&(0x7f0000000380)=""/162, 0xa2}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/92, 0x5c}, {&(0x7f00000014c0)=""/51, 0x33}, {&(0x7f0000001500)=""/179, 0xb3}, {&(0x7f00000015c0)=""/21, 0x15}, {&(0x7f0000001600)=""/54, 0x36}], 0x7, &(0x7f00000016c0)=""/170, 0xaa}, 0x6}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001780)=""/122, 0x7a}, {&(0x7f0000001800)=""/232, 0xe8}, {&(0x7f0000001900)=""/50, 0x32}], 0x3, &(0x7f0000001980)=""/232, 0xe8}, 0x2}, {{&(0x7f0000001a80)=@rc, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001b00)=""/86, 0x56}, {&(0x7f0000001b80)=""/238, 0xee}, {&(0x7f00000001c0)=""/64, 0x40}, {&(0x7f0000001cc0)=""/60, 0x3c}, {&(0x7f0000001d00)=""/183, 0xb7}, {&(0x7f0000001dc0)=""/34, 0x22}], 0x6, &(0x7f0000001e80)=""/65, 0x41}, 0x9}], 0x3, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="340000001000010400000000feffffff00000000", @ANYRES32=0x0, @ANYBLOB="0000000000a00100ced2e5354beaf7a29abe573f08001a8004000700590e2a70f2e1b209288b07ef8e5c88d10e7577555b9613736d666e53fc8618e7c0d27941a876516bc9fc3c002ae357169af6e8e55f335865cfe5d5d9dc5eb161575abc86c0f8c586f10e08f66f8d957e93fa15a0b6ad66c8be6bc160a6c2130942a4528b76c40370c0997a121c4664ef2cae5e445cbf7e0366b0c2e5a8f156ea9f8a2ef7c555d6d3df22bdf6a487e864629f"], 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x0) ioctl$TIOCL_BLANKSCREEN(r5, 0x560e, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_RESIZE(r7, 0x5609, &(0x7f0000000140)={0x8, 0x26}) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f0000000180)={0x4, 0x2, 0xfffd, 0xb, 0x6, 0x103}) r8 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r8, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r8, 0xc0945662, &(0x7f0000000240)={0x40, 0x0, '\x00', {0x0, @reserved}}) 2.766832843s ago: executing program 7 (id=6213): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000180)) 2.570860499s ago: executing program 7 (id=6214): r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000440)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e21, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x5dca520cbad2a1f2}}}}}}}, 0x0) fchownat(r1, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) 2.528756642s ago: executing program 7 (id=6215): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122bd0369cec32bbe791bfc2c0fce202d51df0862c31baa7b80bab6d64c1d5826a7f4c1982e3693e7a0677f2ad388ce872b890394a3ecfd1cec45ba79669452", 0xbb}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)}], 0x3, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990", 0x70}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356", 0x21}, {&(0x7f0000000d00)="dc6e94ac2db166801ffce85f6f44f2cb071c6b5113bc6bbf2f503d468253693a01102fcb8157c6e8a2b5620efa5d22400147cce896821150f95c0c69fa587a1f99fcb28cfeb09f45cb836f0ff891be10bb209dc04adc202ef866f27b74faa5ad3a2e5d40ebd6785c4e4a97ac13238c746d1109d12af5446c4e84591f121a494251e43bed18f6269bdd2e56f9c211dd7145f664286911b8bb3acf76a1b5ece94183a6c8cc47f2e1dd4e91dc10be8732e92e8620fa060fb15016c2dc9b6da18325e778660d499aec6215b0f9f679fa76d22cdd4ae37762", 0xd6}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad9692140de74d9294c555a8c2e0d53acea79b788b5eb1a12ada17eda2b2fb96c439ce16e6266afda6613fd7c90be9a9dfcd1b099fe6b023b725241a6e1048c700e7a939bd3a38f1101213b81c252dd8c44b7e647940438343d0d082507d218a952e6d77ec0918968c74f220c981a3797fb6cadfd6723a75c5c4da33e830ecf602c55bc60831ddd694f15728f4d1eacad82a03540713f52f9485138574e5b6aec693c2c613e442d5306c2ef1c8ad8dda8d005f3f3bacb5991d1c18db228185e4d2fcca72d87d81df01c142428158ad7ba84dd6c65d24a8d094308", 0xed}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c52022252eafc1c129e154ab390624dd7fb8ac1e44c203140d6aab524f61cd8642ee0f380ebb21dc9267a8fbefa6eec89ff97e78", 0xb7}, {&(0x7f00000011c0)}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53ab8af3f76ffaa86df636018175c4a8ea922a193ad08ca30d5031b27a4a87bff93dc12a98b6e4f25b5550d98a5bf3e040a8902083eea93bdbde6da91df3a730dd2b8215e9840f04dd0ab667500fe952fa1b8845c2cee50f8322175049c4a994def6599287fb0f8d61029188945e", 0xa6}], 0x7, &(0x7f00000014c0)}}], 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.489121463s ago: executing program 2 (id=6216): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@multicast2, @rand_addr, 0x0}, &(0x7f00000000c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', r1, 0x2f, 0x2, 0x80, 0x5, 0x20, @mcast1, @loopback, 0x700, 0x10, 0x4, 0x4}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002a80)=@newtaction={0x4cc0, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x2600, 0x1, [@m_tunnel_key={0x50, 0x5, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xe08, 0x0, 0x2, 0x1, 0x80000000}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xbc, 0x17, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x25a6, 0x5}}]}, {0x83, 0x6, "e94b698602863c25bc28e16938ea5d1b897050310fda85b57cb6d1dc13132b775907c2647640e7e54a783cf66cbcb57bff8ccfe974e214663ae6d0e31a7db39e324d98c09c3439a34c339f559a029eb6235fca1287b19efe399092ce7bfb64dbd00e95ba5d3fe655dd40fbae559817aebc50efd2d60b4ffac0db5343892b86"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbedit={0x98, 0xa, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x8, 0xfff3}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xa, 0xfffe}}]}, {0x5b, 0x6, "4aca66fd18eff3ac8620e944a98cade11909d5433893d8d969f6aebcd99fba5b168060f5bfc2d1bd627f18ece79dccb851c1de8b7ce5dfa60edec5e4578556d21af242c783da40a54e9c9bec5d82888445549cb1867acb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0x1b8, 0xb, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x1, 0x3, 0x0, 0x7ff}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x7, 0x3, 0x80000001, 0x10000}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1000, 0x7, 0x10000000, 0x6, 0x5}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x8000, 0x7ffffffffffffffa, 0x1ff, 0x4}, 0x4, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x2, 0x1, 0x0, 0xd}, 0x4, r1}}]}, {0xec, 0x6, "4da40d8737015f6bfad77a50c2b49b318647a064852f67e3dd8b8a96cb13cb0df23b006636726d2e5b1d7234e126e165960d450ad990e7644ea7b443700a71e5a722a5ff39b60533387a37db1e519a8d979c5aadd8b1eca8c4c9fde27f7641d6b67b7b57c91c6259dbc70f9e6dc182d37874f859d28fdd19d1c89365d6f1311a6574e03f5378bdd59cdcf39892f25003d3535c7a54b1de23c76413bf469026d411eda1b3d702b3b61fbdbae9e7f4468a2a5819acebe91e86b30e3b769dd27cf6872e9f3d9707b65bec2e62992d6e31b6bc55cb8fac5884a93d8ced7b9c8a0932376f9bbb3c556d50"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_csum={0x144, 0x1d, 0x0, 0x0, {{0x9}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x2, 0x401, 0x7}, 0x6d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xcc, 0xfffffffc, 0x6, 0x80000000, 0x1}, 0x1b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xd, 0x4, 0x4, 0x3, 0x9}, 0x3b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xd, 0x3ff, 0x8, 0x5b693e0e, 0x14}, 0x14}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x200, 0x9, 0x5, 0x5cd, 0x5}, 0x6e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xe1a1, 0x95f, 0x4, 0x2, 0x4b}, 0x33}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xa48a, 0x1000, 0x6, 0x1, 0x2}, 0xd}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x4, 0x0, 0x7, 0x3}, 0x5d}}]}, {0x35, 0x6, "049f2b9792adb8da4b9d8bed89e82c4272f03c3ae73995723d1edd10904eb20cbb8c8d388399974bf685ef3e012ac2bf4a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mirred={0x1050, 0x6, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2e, 0xf0, 0x7, 0x8, 0xa}, 0x2, r3}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0x1060, 0x2, 0x0, 0x0, {{0xa}, {0xf64, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x128, 0x5, 0x0, 0x1, [{0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x95d3b13140061e59}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}, @TCA_PEDIT_PARMS={0xe38, 0x2, {{{0xb7077088, 0xb, 0x0, 0x7, 0x40}, 0x2, 0x80, [{0x2, 0x8, 0x9, 0x0, 0xe, 0x1}]}, [{0xb2dc, 0x8001, 0x7fff, 0x3, 0x1, 0xfffffc46}, {0x2, 0x5, 0x0, 0x4, 0xff, 0x6}, {0x2, 0x3ff, 0x0, 0xc000, 0x9}, {0x8, 0x3ff, 0x8, 0xc, 0x1, 0x7}, {0x17, 0xa1a, 0x3, 0x5, 0x5, 0x400}, {0x8, 0x7, 0x2, 0x10, 0x2}, {0x5, 0x200, 0x92, 0x7ff, 0xc53, 0x5}, {0x2, 0x1, 0x1, 0x6, 0x9, 0x401}, {0xfe000000, 0x8, 0x1, 0xe53, 0x10, 0x7}, {0x3, 0x5, 0x5, 0x4, 0x9, 0x91}, {0xe, 0x5, 0x6, 0x6, 0x1c000000, 0x1}, {0x8, 0x9, 0x6, 0x1369, 0xec, 0x3}, {0x5, 0x7fffffff, 0x1, 0xef, 0x7, 0xd}, {0x39a4, 0x200, 0x4, 0x400000, 0x9, 0x4}, {0x0, 0x7, 0x1, 0xd8, 0x8, 0x1}, {0xffff, 0x3, 0x81, 0x10, 0x4c, 0xc7ed}, {0x7, 0x1, 0x6a51, 0xe, 0x4, 0x6}, {0x2, 0xc, 0x8, 0x8, 0x5, 0xffffffff}, {0xffffffff, 0x3ff, 0x1, 0x325, 0x4, 0x9}, {0x42, 0x6c8, 0x4500, 0x0, 0x4, 0xd}, {0xfffff801, 0x6, 0x98, 0x4, 0x8, 0x5e}, {0x7, 0x2, 0xd16, 0x5, 0xa, 0x2}, {0x7, 0x1, 0x2, 0x6, 0xb558, 0x6}, {0xffc66f64, 0x7, 0x8, 0x80, 0x53}, {0x4, 0x5, 0x271d78fc, 0x0, 0x7ff, 0x7}, {0x3, 0x7fffffff, 0x3, 0x4, 0x34, 0xff}, {0x4, 0x0, 0x9, 0x9, 0x7, 0x7fff}, {0x2, 0x1, 0x8, 0x4, 0x1, 0xfffffffc}, {0x1, 0x80000000, 0x8, 0x4, 0x6, 0x40}, {0xffff7d88, 0xbc61, 0x3, 0x4, 0x7f, 0x2}, {0x10000000, 0x7, 0x5, 0x5, 0x1, 0x2}, {0x3, 0x6, 0x7ff, 0x3, 0xe, 0x7f}, {0x4, 0xf, 0x7, 0x4, 0x8, 0x7b}, {0x93, 0xfffffff8, 0x1, 0x5, 0x2, 0xfffffffb}, {0x1, 0xa2d, 0x1, 0xfffffffc, 0x3, 0x8}, {0xe, 0x2, 0x10000, 0x8, 0x81, 0x5}, {0x101, 0x8, 0x3, 0x9, 0x9}, {0x6, 0xffffffff, 0x7, 0x2, 0x6, 0x7}, {0x9, 0x0, 0x10000, 0xf86, 0xfffffffb, 0x4c1f}, {0xff, 0x9, 0x100, 0x1ff, 0x4, 0x7f}, {0x7f, 0x3, 0x7fff, 0x5, 0x6, 0x2}, {0x9, 0x2, 0x0, 0x5cf7, 0x1, 0x1354571a}, {0xca, 0xc50, 0xf, 0x629, 0x7, 0xed}, {0x4, 0x5, 0x5, 0x2, 0x83c, 0x200}, {0x1, 0x7, 0x80000001, 0x4, 0xbb9e, 0x4}, {0x40, 0x50, 0x5b0, 0x10001, 0xe763, 0x3}, {0x3, 0x7, 0x0, 0x9, 0x19d8, 0x3fe}, {0x2, 0x7, 0x2, 0x2, 0x3, 0xfff}, {0x4, 0x3, 0x5, 0x5, 0x5, 0x8}, {0x6, 0x8, 0x3ff, 0xf, 0xca8, 0x7fff}, {0x9, 0x4, 0x227, 0x80, 0x80000000, 0xd}, {0x533e, 0x80000000, 0x3, 0x4, 0x3, 0x3}, {0xe3, 0x3cf, 0x100, 0x600000, 0x3, 0x7}, {0x1, 0x0, 0x0, 0x5, 0x45c9, 0x400}, {0x8, 0x1, 0x5, 0x6, 0x10000, 0x9}, {0x0, 0x2, 0x80000001, 0x379cc4ad, 0xffffb8f3}, {0x6, 0x23, 0x100, 0x2, 0xff49, 0x9452}, {0x5, 0xfffffff5, 0x8, 0x40, 0x2, 0x4}, {0xa, 0x5, 0x272a, 0xa10b, 0x4, 0x1}, {0x3, 0x81, 0xffffff01, 0xef3, 0x153, 0x100}, {0x3, 0x200, 0x6576fa13, 0x184c, 0x12, 0x3}, {0x6, 0x4, 0x7, 0x5fea3eda, 0x4, 0x2}, {0x8, 0x5, 0x7, 0x9, 0x4, 0x8}, {0xfffffff8, 0x3, 0x4fd8eac5, 0x6, 0xb, 0x7}, {0x7, 0x0, 0x6, 0x8e, 0x8, 0x1}, {0x7, 0x1, 0x3, 0x40, 0x5, 0x8}, {0x1, 0x628, 0x400, 0x100000, 0xb, 0xfffffff8}, {0x6, 0xf, 0x1, 0xffffffff, 0x3, 0x1}, {0x200, 0x8, 0x1, 0x1000, 0xbdf, 0x3}, {0x7, 0x3218c8d2, 0x0, 0xf, 0x1c48, 0xfffffffa}, {0x8001, 0x5, 0xfffffffa, 0x7, 0x9, 0x4}, {0x3, 0x1, 0x9, 0x8, 0x9, 0x8}, {0x6, 0xffffff37, 0xc, 0x80000001, 0xe09, 0x2}, {0x9, 0x1ff, 0xd, 0x1ff, 0x5}, {0xc, 0x100, 0x0, 0x5, 0x3ff, 0x8}, {0x3, 0x5, 0x9, 0x7, 0x4, 0x2}, {0x5, 0x9, 0x8, 0x7, 0x557, 0xfffffffe}, {0xfffffff9, 0xfffffffe, 0x2, 0x6, 0xf, 0x2}, {0x1394, 0x3, 0x1, 0x6, 0x6, 0xa}, {0x48fe9b1c, 0x5, 0x7fff, 0xe, 0x40, 0x45}, {0x4669, 0xffffff00, 0x3, 0x100, 0x10, 0x81}, {0x1, 0x6ce, 0x9, 0x2, 0x8, 0x8}, {0x1, 0x8, 0x1, 0xfffffffc, 0x6, 0x401}, {0x8001, 0x1, 0x800, 0x10001, 0xd}, {0x4, 0x7ff, 0x9, 0x4, 0x3, 0x7}, {0x8, 0x2, 0x0, 0xffc0000, 0xfffffffd, 0x530}, {0x0, 0x6, 0x8000, 0xe47, 0x8001}, {0xce38, 0xe131, 0xd60, 0x8, 0xb, 0x6}, {0x1, 0x400, 0x4, 0x3, 0x7, 0x1e2d950b}, {0x4, 0x54d0000, 0x85, 0x2, 0x10000, 0x7}, {0x0, 0x3, 0xffffface, 0x3b41, 0x5, 0x9}, {0xff, 0x10000, 0x8000, 0xffffffff, 0xf39, 0x9}, {0xf, 0x0, 0x0, 0xf, 0x9, 0x1ff}, {0x0, 0x8, 0x7, 0x8001, 0x1700000, 0x6}, {0xffff, 0x2, 0x400, 0x0, 0x8, 0x7c4a}, {0x2, 0xff, 0x9, 0x120, 0x200, 0x8}, {0x4, 0xfffffffb, 0x1, 0x9, 0x8, 0x80}, {0x4, 0x8, 0xc, 0x1, 0x7, 0x5b96d319}, {0x2, 0x80000000, 0x3, 0xa, 0x5, 0xe69}, {0xba, 0x200, 0x8, 0x3, 0x40, 0x80000000}, {0x5, 0x2, 0x9, 0x87, 0x100, 0x7518}, {0x800, 0x0, 0x9, 0x0, 0x7, 0x307a}, {0x8, 0x2, 0x101, 0x1308, 0x9, 0x77b}, {0x10, 0x4c, 0x372, 0xfffffff7, 0x8, 0x200000}, {0xe139, 0xfffffff5, 0x5, 0x4, 0x8, 0x1}, {0x2, 0x5, 0x4, 0x6, 0x1, 0x7f}, {0x9, 0x7fffffff, 0x9bec, 0xff, 0x2, 0x3}, {0x6, 0x4, 0x8, 0x0, 0xffff, 0x6}, {0x40, 0x9, 0x6, 0x1, 0xfffffff7, 0x4}, {0x5, 0xffffffff, 0xfba, 0x59, 0x82, 0x7f}, {0x4, 0x2c4, 0x8, 0x5, 0x2, 0x8}, {0x406, 0xfff, 0xfffffff9, 0x2, 0x3, 0xffffff48}, {0x1, 0x80000000, 0x3, 0x5, 0x2, 0x4}, {0x32, 0x1, 0x7fffffff, 0x0, 0x3ff, 0x101}, {0x6, 0x4, 0x5, 0x3, 0xe47a, 0x100}, {0x7, 0x9, 0x20000000, 0x0, 0x32b2, 0x22}, {0x8, 0x8, 0xed8, 0x4, 0x7fff, 0xf}, {0x442, 0xe0, 0x2, 0x2, 0x3, 0x1}, {0x80, 0xfff, 0x6, 0x4, 0xfd, 0xffff6c89}, {0x2ddcbc9c, 0x10, 0x5b7, 0x1, 0x3, 0x18}, {0x0, 0xe, 0x5, 0x20, 0x4, 0x7fffffff}, {0x1, 0x6, 0x3, 0x401, 0x1, 0x7b6}, {0x8856, 0x200, 0x6, 0x9, 0x5, 0x10001}, {0x8, 0x10, 0x80000000, 0xee, 0x9da, 0x90}, {0x2, 0x401, 0xfffffffd, 0x81, 0x7, 0x2}, {0x800, 0x7, 0x7, 0xe000000, 0xc, 0x4f}, {0x4, 0xcf6, 0x2, 0x9b6a, 0x5, 0x5}, {0x0, 0xeac, 0xb8, 0x3, 0x7, 0x7fff}], [{0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x6}, {0x4}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x3}, {0x4, 0x1}, {}, {0x5}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x3}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x4}, {0x3}, {0x6}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x7}, {0x3}, {0x4, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3f46f73f0d86ccdf}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x2}, {0x3}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}], 0x1}}]}, {0xd1, 0x6, "9043fc5cd947b1eff827ef5a1f3471775574cde3945905c6001f61425c422303eb85149bb680e32bf77d2a4d540de0d106a0daeddca2202bf137a746b5d9843785fd3f720cc1bc4227f6d3123c270dc39a2db496987ec85e5163c0400dba3b552d218f66c3b41702360af9000a6f939ada54978493c47a9f6c23781a17df4ed9759c9617e039cb2def0fe732cb1314ef4c73e74ed4097f091bd31ab30d9f2474196964a1cf502fea4d8dd04245593ea9062fc34ffb46d8ee058e85bec5f34b6aea422912e5086e90e014c9471a"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0xac, 0x10, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x10a3}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xf16, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x200, 0xc4, 0x20000000, 0x2, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x7, 0x5, 0x2, 0x9}}]}, {0x38, 0x6, "a9fbdbff333c0187979d7c03feeed1b8b4f9515c9f7dbf649611c94ab720d0acfda27f173154b107884218f92101b79a94645212"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x4}, {0x26a8, 0x1, [@m_gact={0x1054, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a6}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xf08, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x852, 0xffffffffffffffff}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mpls={0x148, 0x3, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x41d3f}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x9000}, @TCA_MPLS_LABEL={0x8, 0x5, 0xdf3b7}, @TCA_MPLS_PROTO={0x6, 0x4, 0x96a1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x8, 0x4, 0x1, 0x80bf, 0x200}, 0x6}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0x7, 0x3, 0x8, 0x3}, 0x4}}, @TCA_MPLS_LABEL={0x8, 0x5, 0xd9570}, @TCA_MPLS_TC={0x5}]}, {0xa9, 0x6, "677b2e688a79d406b94285823951becfff4d199f8e11f9cb29b5b4c43b3aab7522211d047ac68d817d4696d2429d6a3e0c724ec8dcf15e78544311ba95c1d5f265df6bc68bdbf2bd4f03dfba9e9c03ebcda2170f297be4530491cab27f1dc2289c68bb8cffbcae82f2e40ae02bcc7d0d8a6b4a230a4e700a69184f744c40e47ea7ab5223fd7acb1fe2d563f1ea7dc427ac199e47c209ada4ef89a10fd47d6967c88b0c1b79"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbmod={0x1054, 0x7, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x86, 0x5, 0x3, 0x7}, 0x8}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_simple={0x60, 0xa, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x2, 0x10000000, 0x7fff, 0x6}}]}, {0x1a, 0x6, "4455a1f2c06a69b1b26d67c28913527aec1fd830091c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x100, 0x19, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x2, 0x7ff, 0x10001}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1da, 0x85, 0x7, 0x8, 0xffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1c14, 0xc}}, @TCA_GACT_PARMS={0x18, 0x2, {0xef9, 0x8, 0x4, 0xc84, 0x9d3b}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x205, 0x3}}]}, {0x74, 0x6, "6cabaf1640bc2b03c6119942a1b7863a2154675886cba9a8f8048dd89b148c3595367d782827a5f48661d8fe1a799334a3e5cd987675bfabe53a4d6f1abc5933c3e172e19fda0f264ade126923227db9b25356eb7a0f0283eea7c4b1e402a2a0ef15d286d31e0362e8ed171e8da63b0b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x20c, 0x7, 0x0, 0x0, {{0x7}, {0x138, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_TARG={0x122, 0x6, {0x9, 'mangle\x00', 0x5, 0x5, "97038cfb26d056f5a4b490f5a266514d42b98dc04e3642cf027fa578a8fc3b9285ea97f6a65ddd88adc9219e90dd35eaf0f9dd0438351ce77494a6b6663d3dee6c971a0fca5e533063f096a0910966222f87a3ce83cd74480f62c64449dc55a9ec3dd520966d249400d106522475449776a114f4de9f0f7b0a6b9bdd364154710c4b771eea331a3c69dec20845a10204c539327b6bf9b69a986db4e8a56c413dae9322377b0dde839b6d150036b941cfadbf42427ef8415060cbfedf9b387b85d7b02f40e9f64915af5a16923b23b0280712bb68d496c22988cc34a6af3b1d8e52ce5e4cc1ba18f472375eef4dd3130f6dd4378b24b44b3b"}}]}, {0xb0, 0x6, "a17a86efa2a140701f2c323b83c6bc76e2387b6e2cd54edc89c78e09d16d8ee727a04046c182ce0c788a1020cc4f9d2c93cb4a3102b72ec01e4115fe976b52599a82a4364dd8b4de3fccd5c07ab0f6178db65d141b7f557f26ec25a853a8da9b84cf9dedbce73d58dfda3380551d3cf70ddf422c16a5b3924cb74cf1b575b10fc1fc05a911b497ec932c84e81d170ca0f43884898ccca78aa9158dd84801cc05cbd7d3741c237ff0bbecd50c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mirred={0xb8, 0x18, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x101, 0x9d7, 0xe, 0x2f493da5, 0x4}, 0x2, r1}}]}, {0x6c, 0x6, "12fa3a3c83ad20992204055575f25011c0c6e765c52653ce326f1c28c3339cf518e784e218d430268da98d1a19b284e57275fa34b6e2c80ea4f51c551290eb24ffb640d88553db7c91afc1e1a4d6e889f32e615c6e55dcceea5fa1099f013ddf2e9b0b8039e2ea25"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x90, 0x3, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x7, 0x5, 0xc, 0x1}, @dev={0xac, 0x14, 0x14, 0x11}, @rand_addr=0x64010102, 0xffffffff, 0x1}}]}, {0x3f, 0x6, "9e6b4f5a1a4f21c6e9d45db6d5eab0b63d715e3f775e04ded939c7e9686d1e649f8f2d075e0eb73bbaa601e815e0b1569cfc1680076c729a72fbf3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x4cc0}}, 0x4000800) 2.402046914s ago: executing program 2 (id=6217): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000001200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x9841, 0xffffffffffffffff, 0x0, 0x0, 0x200005, 0x0, 0x1}]) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xc0) sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)}], 0x1}}], 0x2, 0x0) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000002940)={0x50, 0xfffffffffffffffe, r7, {0x7, 0x2d, 0x3, 0x180080, 0x5, 0x257, 0x6, 0x80000001, 0x0, 0x0, 0x100, 0x1}}, 0x50) syz_open_dev$tty1(0xc, 0x4, 0x1) 2.204518425s ago: executing program 3 (id=6218): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c000000d213ad", @ANYRES16=r2, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpgid(r0) r5 = syz_open_dev$video4linux(0x0, 0x71, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r5, 0xc0585605, &(0x7f00000005c0)={0x0, 0x1, @raw_data=[0x5, 0x400008, 0x3012, 0x0, 0x8, 0x3f, 0x7, 0xa, 0x7, 0x4, 0x4, 0xd62, 0x80000004, 0x4, 0x1, 0x5]}) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r1) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$netrom(0x6, 0x5, 0xf0) sendmsg$TIPC_NL_NODE_GET(r7, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0xdc, r8, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd6}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x20000001) syz_open_dev$dri(0x0, 0x1ff, 0x80800) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) (fail_nth: 1) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000001c0)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=@newlink={0x44, 0x10, 0x401, 0xfdfffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1243}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e20}]}}}, @IFLA_LINK={0x8, 0x5, r11}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000940)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f00000007c0)=@newae={0x140, 0x1e, 0x8, 0x70bd2c, 0x25dfdbff, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d6, 0xa, 0x3c}, @in6=@private2, 0x3, 0xfffffff8}, [@sec_ctx={0xf5, 0x8, {0xf1, 0x8, 0x0, 0x40, 0xe9, "33ba5b9d57c56da904e74e784204c7ded1d45c5d566e628137f1538a508ba02d4b6c58fcb4b71a700f1d99176ce2ccbd79310cbb23bc7bbd74dd6018245899bd90b35f2f6d30b065dc673233973c98d92a69b144b119d1bb8c9ce92dc461776e5155793933baabd7587d8be790134074e0fbff8c54293c03eb28ea85aa0c223ccbcf8e8bae666d6cbab402845cc2ed3cf11119ee1817fdb41b0cbd1f47e8a828518bbdfcf03fcbf0c310c495271c12267123221dfdd23809be54ae7efd1bc453e123d5808ed98724ad146a49895cbec61b6a4ac4b4e8ecfd69c6124d020b55ebbc5df78139c5cf539b"}}, @tfcpad={0x8, 0x16, 0x7ff}]}, 0x140}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.479479796s ago: executing program 2 (id=6219): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x8046) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x20000011}, 0x8801) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[], 0x16) 1.238239374s ago: executing program 7 (id=6220): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x0) (fail_nth: 2) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) 922.64317ms ago: executing program 3 (id=6221): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000140)="28032000a9ff140000007ef506be00000000000000008100000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x134, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x108, 0x4, 0x0, 0x1, [{0x104, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xf4, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xd, 0x1, 'connmark\x00'}, @NFTA_MATCH_INFO={0x10, 0x3, "a62a1a4094b2c56d78942e97"}, @NFTA_MATCH_INFO={0xce, 0x3, "d9455232e626ad31feae558d643027538718d9f0aae465edceebb54b2b21d244bf502a7d2170ee48d1359a3c072f6ff7799968bbae9a69b4dd7b5cb6dacfc1587cd1b051c0fb07fe6ba8a6a364c56560dc69f1e093ff82e867692bc0d08b35b2cfe9462c42b97d986ee678efba4968ff925475123dc66ce65eddc4c35ab9334aaa4eacff6084ae717a613f72970cc4001e112773f6ac366d2497c2c4cb9868c69fde6ea693ce8258c58949b65f339bd465418ffa54a3640b407486e9f799aa08c6942dcf2e7a6e986fef"}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x15c}}, 0xe040) close(0x3) 919.953871ms ago: executing program 6 (id=6222): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000480)) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c030000", @ANYRES16=r4], 0x324}, 0x1, 0x0, 0x0, 0x24040811}, 0xc044) setitimer(0x1, 0x0, 0x0) getitimer(0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000004}, 0x94) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x1f) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8ac41, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="00006003ffffffffffffaaaaaafac60208004500002040004000002f90"], 0x32) openat$cgroup_ro(r5, 0x0, 0x275a, 0x0) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xaee2, 0x0, 0x6, 0xbfdbfdfc}, &(0x7f0000000000), &(0x7f00000001c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_NAPI(r7, 0x1b, 0x0, 0x1) syz_emit_vhci(&(0x7f0000001480)=ANY=[@ANYBLOB="02c9"], 0x11) 917.633841ms ago: executing program 2 (id=6223): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000080)={0x1c, r1, 0xf21, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x1) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) 698.37951ms ago: executing program 7 (id=6224): syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109"], 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x100) accept4(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f00000011c0)=ANY=[], 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, 0x0) 697.847307ms ago: executing program 2 (id=6225): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x132) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000280)=0xf, 0x4) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = gettid() timer_create(0x3, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={0xe, 0x100002, 0x60000}, 0x20) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x0, &(0x7f0000000040), 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x4}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r4, &(0x7f0000000300)=[{&(0x7f0000000100)=""/195, 0xc3}, {&(0x7f0000000400)=""/205, 0xcd}, {&(0x7f0000000640)=""/124, 0x7c}, {&(0x7f0000000000)=""/59, 0x3b}, {&(0x7f0000000540)=""/231, 0xe7}], 0x5) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_THREAD_EXIT(r5, 0xc0046209, 0x200000000000000) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r6, &(0x7f0000002600)=""/4113, 0x1011) socket$netlink(0x10, 0x3, 0x12) 234.056368ms ago: executing program 3 (id=6226): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x132) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000002600)=""/4113, 0x1011) (fail_nth: 2) 192.786683ms ago: executing program 1 (id=6227): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000ac0), 0x0, 0x6022, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r6}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r7}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r8 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0) set_mempolicy_home_node(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x0) r9 = open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x40) ftruncate(r9, 0x2007ffd) sendfile(r3, r8, 0x0, 0x1000a3) 0s ago: executing program 3 (id=6228): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x2}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122bd0369cec32bbe791bfc2c0fce202d51df0862c31baa7b80bab6d64c1d5826a7f4c1982e3693e7a0677f2ad388ce872b890394a3ecfd1cec45ba7966945271fc033565d4a9bb17a41aacf550c4510ba99a24b48eab32e5d7549de9bae7954e0f750b55f706de3d5001638a1260dd8d2a", 0xed}, {&(0x7f0000000580)="49a6cc7e52cf0644e1fb10e13cb6893bd19afc65f2af20dd1746a881eb4dabcaf163ce54133d2499c296320937b805f1880adf0cb1507d", 0x37}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556", 0x6f}], 0x3, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8da", 0x41}, {0x0}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c52022252eafc1c129e154ab390624dd7fb8ac1e44c203140d6aab524f61cd8642ee0f380ebb21dc9267a8fbefa6eec89ff97e7800f44f89b17d43206217941c34067892c05465382550a1da2519", 0xd1}, {&(0x7f00000011c0)}], 0x6, &(0x7f00000014c0)}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df5326ed67c09d8b72eceeb87023f6188e15cb258cd8c85be3eddaac311ee4cb17a08ef47157753606ce7996162ea4b18214763730e2b944b468575927829842ee7f6f8a3603a7a522025c55284c9ca0ab899626f86c9336ead2278445733db5e643e10fa93339be48ff1592bc6bcf2b68b4536951c600a0e6d1b5d5b0cdbdf85122560b431", 0xe9}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95", 0x8a}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/wireless\x00') preadv(r4, &(0x7f0000001540)=[{&(0x7f0000001600)=""/171, 0xab}], 0x1, 0x2000000, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (fail_nth: 2) kernel console output (not intermixed with test programs): 39090 R08: 0000000000000408 R09: 0000000000000000 [ 1454.662645][T28068] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 1454.662653][T28068] R13: 00007f495a416218 R14: 00007f495a416180 R15: 00007ffcee7ee5d8 [ 1454.662672][T28068] [ 1454.990214][ T29] audit: type=1400 audit(1775713391.885:987): avc: denied { bind } for pid=28050 comm="syz.6.5863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1455.254734][T28073] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28073 comm=syz.3.5867 [ 1455.377533][T10560] usbhid 2-1:0.1: can't add hid device: -71 [ 1455.383990][T10560] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 1455.412605][T10560] usb 2-1: USB disconnect, device number 83 [ 1455.538927][ T5822] Bluetooth: hci2: unexpected event for opcode 0xaa8d [ 1455.678694][T28084] FAULT_INJECTION: forcing a failure. [ 1455.678694][T28084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1455.694016][T28084] CPU: 0 UID: 0 PID: 28084 Comm: syz.2.5871 Tainted: G L syzkaller #0 PREEMPT(full) [ 1455.694044][T28084] Tainted: [L]=SOFTLOCKUP [ 1455.694050][T28084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1455.694061][T28084] Call Trace: [ 1455.694067][T28084] [ 1455.694074][T28084] dump_stack_lvl+0x100/0x190 [ 1455.694109][T28084] should_fail_ex.cold+0x5/0xa [ 1455.694132][T28084] _copy_from_user+0x2e/0xd0 [ 1455.694153][T28084] memdup_user+0x6b/0xe0 [ 1455.694171][T28084] __x64_sys_kexec_load+0x18e/0x230 [ 1455.694201][T28084] do_syscall_64+0x106/0xf80 [ 1455.694217][T28084] ? clear_bhb_loop+0x40/0x90 [ 1455.694239][T28084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1455.694263][T28084] RIP: 0033:0x7fcda379c819 [ 1455.694277][T28084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1455.694295][T28084] RSP: 002b:00007fcda45a9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 1455.694311][T28084] RAX: ffffffffffffffda RBX: 00007fcda3a15fa0 RCX: 00007fcda379c819 [ 1455.694323][T28084] RDX: 0000200000000140 RSI: 0000000000000008 RDI: 0000000000000002 [ 1455.694334][T28084] RBP: 00007fcda45a9090 R08: 0000000000000000 R09: 0000000000000000 [ 1455.694344][T28084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1455.694354][T28084] R13: 00007fcda3a16038 R14: 00007fcda3a15fa0 R15: 00007ffffe6b44b8 [ 1455.694378][T28084] [ 1456.094072][T28094] nfs: Unknown parameter 'ÿÿÿÿ' [ 1456.144281][T28093] comedi comedi1: comedi_config --init_data is deprecated [ 1456.379359][ T29] audit: type=1400 audit(1775713393.595:988): avc: denied { read } for pid=28091 comm="syz.2.5874" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1456.515931][ T29] audit: type=1400 audit(1775713393.595:989): avc: denied { open } for pid=28091 comm="syz.2.5874" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1456.544799][ T29] audit: type=1400 audit(1775713393.605:990): avc: denied { ioctl } for pid=28091 comm="syz.2.5874" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1456.780301][T12945] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1457.090194][T12945] usb 7-1: Using ep0 maxpacket: 32 [ 1457.209988][T12945] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1457.235636][T12945] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1457.260195][T12945] usb 7-1: Product: syz [ 1457.312265][T28118] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1457.556762][T28120] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5880'. [ 1457.569241][T12945] usb 7-1: Manufacturer: syz [ 1457.794924][T28123] overlayfs: overlapping lowerdir path [ 1457.795052][T12945] usb 7-1: SerialNumber: syz [ 1457.840819][T12945] usb 7-1: config 0 descriptor?? [ 1457.873548][T28111] netlink: 'syz.1.5875': attribute type 21 has an invalid length. [ 1457.888087][T28111] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5875'. [ 1457.905636][T28111] netlink: 'syz.1.5875': attribute type 21 has an invalid length. [ 1457.962599][T28111] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5875'. [ 1458.206619][T12945] peak_usb 7-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1458.233643][T12945] peak_usb 7-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1458.331859][T12945] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -71 [ 1458.411505][T12946] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1458.427425][T12945] usb 7-1: USB disconnect, device number 10 [ 1458.431539][T28136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5884'. [ 1458.780319][T12946] usb 3-1: Using ep0 maxpacket: 32 [ 1458.806398][T12946] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1458.844921][T12946] usb 3-1: config 0 has no interface number 0 [ 1458.873191][T12946] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1458.909953][T12946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.921440][T28142] syzkaller0: entered promiscuous mode [ 1458.926913][T12946] usb 3-1: Product: syz [ 1458.931480][T28142] syzkaller0: entered allmulticast mode [ 1458.937053][T12946] usb 3-1: Manufacturer: syz [ 1458.947817][T28142] 0: reclassify loop, rule prio 0, protocol 800 [ 1458.954546][T12946] usb 3-1: SerialNumber: syz [ 1458.979942][T12946] usb 3-1: config 0 descriptor?? [ 1458.987745][T12946] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1459.160515][T11291] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1459.251084][T12946] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1459.261340][T28150] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 1459.267839][T28150] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1459.277467][T12946] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1459.289132][T28150] vhci_hcd vhci_hcd.0: Device attached [ 1459.298988][T28151] vhci_hcd: connection closed [ 1459.301782][ T8990] vhci_hcd vhci_hcd.6: stop threads [ 1459.325330][ T8990] vhci_hcd vhci_hcd.6: release socket [ 1459.339624][ T8990] vhci_hcd vhci_hcd.6: disconnect device [ 1459.351633][T11291] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1459.379773][T11291] usb 2-1: config 0 has no interface number 0 [ 1459.380815][ T792] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1459.393290][T11291] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1459.421123][T11291] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1459.432535][T11291] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1459.441649][T11291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1459.465444][T11291] usb 2-1: config 0 descriptor?? [ 1459.570168][ T792] usb 4-1: Using ep0 maxpacket: 16 [ 1459.582143][ T792] usb 4-1: config 0 interface 0 altsetting 134 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 1459.614908][ T792] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1459.630165][ T792] usb 4-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 1459.639195][ T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1459.676580][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1459.679702][T26368] usb 3-1: USB disconnect, device number 96 [ 1459.694162][ T792] usb 4-1: config 0 descriptor?? [ 1459.716921][T26368] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1459.750898][T26368] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1459.770817][T26368] quatech2 3-1:0.51: device disconnected [ 1459.971231][T28160] random: crng reseeded on system resumption [ 1460.163382][T11291] usbhid 2-1:0.1: can't add hid device: -71 [ 1460.181923][T11291] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 1460.192658][T11291] usb 2-1: USB disconnect, device number 84 [ 1460.370997][ T792] hid_parser_main: 5 callbacks suppressed [ 1460.371027][ T792] microsoft 0003:045E:00F9.001F: unknown main item tag 0x0 [ 1460.410219][ T792] microsoft 0003:045E:00F9.001F: unknown main item tag 0x0 [ 1460.455729][ T792] microsoft 0003:045E:00F9.001F: unknown main item tag 0x0 [ 1460.470264][ T792] microsoft 0003:045E:00F9.001F: unknown main item tag 0x0 [ 1460.487890][ T792] microsoft 0003:045E:00F9.001F: unknown main item tag 0x0 [ 1460.495729][ T792] microsoft 0003:045E:00F9.001F: unknown main item tag 0x0 [ 1460.503211][ T792] microsoft 0003:045E:00F9.001F: unknown main item tag 0x0 [ 1460.523780][T28166] random: crng reseeded on system resumption [ 1460.536022][ T792] microsoft 0003:045E:00F9.001F: unknown main item tag 0x0 [ 1460.619275][ T792] microsoft 0003:045E:00F9.001F: unknown main item tag 0x0 [ 1460.682905][T28168] FAT-fs (nbd6): unable to read boot sector [ 1460.706055][T28171] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1460.786757][ T792] microsoft 0003:045E:00F9.001F: unknown main item tag 0x0 [ 1460.879088][ T792] microsoft 0003:045E:00F9.001F: hidraw0: USB HID v0.08 Device [HID 045e:00f9] on usb-dummy_hcd.3-1/input0 [ 1461.240321][ T792] microsoft 0003:045E:00F9.001F: no inputs found [ 1461.246674][ T792] microsoft 0003:045E:00F9.001F: could not initialize ff, continuing anyway [ 1461.344489][ T792] usb 4-1: USB disconnect, device number 92 [ 1461.425333][T28175] fido_id[28175]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1461.467504][T28182] tipc: Withdrawal distribution failure [ 1461.779435][T28190] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1463.313854][ T5822] Bluetooth: hci2: unexpected event for opcode 0xaa8d [ 1463.809385][ T29] audit: type=1400 audit(1775713401.045:991): avc: denied { append } for pid=28204 comm="syz.2.5903" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1463.839077][T28205] binder: 28204:28205 ioctl c00c620f 200000000100 returned -22 [ 1463.875438][T24410] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1463.903376][T24410] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1463.914031][T24410] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1463.931780][T24410] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1463.987211][T24410] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1464.038294][T24410] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1464.275716][T28206] vxcan1 speed is unknown, defaulting to 1000 [ 1464.450490][ T49] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1465.142774][T28206] wlan1 speed is unknown, defaulting to 1000 [ 1465.405882][T27772] syz_tun (unregistering): left allmulticast mode [ 1465.766614][ T1152] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1465.778029][ T1152] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.076428][ T1152] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1466.087455][ T5822] Bluetooth: hci5: command tx timeout [ 1466.190216][ T1152] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.242166][T28244] Invalid logical block size (4558) [ 1466.253672][T28206] chnl_net:caif_netlink_parms(): no params data found [ 1466.260789][T28245] Invalid logical block size (4558) [ 1466.368328][ T1152] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1466.389107][ T1152] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.689605][ T5822] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1467.131515][ T1152] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1467.142851][ T1152] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1467.343858][T28206] bridge0: port 1(bridge_slave_0) entered blocking state [ 1467.430242][T28206] bridge0: port 1(bridge_slave_0) entered disabled state [ 1467.877232][T28206] bridge_slave_0: entered allmulticast mode [ 1467.899934][T28206] bridge_slave_0: entered promiscuous mode [ 1467.925384][T28206] bridge0: port 2(bridge_slave_1) entered blocking state [ 1467.930905][ T29] audit: type=1400 audit(1775713405.175:992): avc: denied { write } for pid=28284 comm="syz.1.5923" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1467.957452][T28206] bridge0: port 2(bridge_slave_1) entered disabled state [ 1467.969874][T28206] bridge_slave_1: entered allmulticast mode [ 1467.977230][T28206] bridge_slave_1: entered promiscuous mode [ 1468.022681][ T29] audit: type=1400 audit(1775713405.255:993): avc: denied { ioctl } for pid=28284 comm="syz.1.5923" path="socket:[134337]" dev="sockfs" ino=134337 ioctlcmd=0x9440 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1468.073546][T28206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1468.146153][T28206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1468.161295][ T5822] Bluetooth: hci5: command tx timeout [ 1468.166862][ T29] audit: type=1400 audit(1775713405.395:994): avc: denied { bind } for pid=28288 comm="syz.2.5925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1468.270789][T28297] FAULT_INJECTION: forcing a failure. [ 1468.270789][T28297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1468.294229][T28297] CPU: 0 UID: 0 PID: 28297 Comm: syz.2.5928 Tainted: G L syzkaller #0 PREEMPT(full) [ 1468.294256][T28297] Tainted: [L]=SOFTLOCKUP [ 1468.294263][T28297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1468.294273][T28297] Call Trace: [ 1468.294280][T28297] [ 1468.294287][T28297] dump_stack_lvl+0x100/0x190 [ 1468.294319][T28297] should_fail_ex.cold+0x5/0xa [ 1468.294343][T28297] _copy_to_user+0x32/0xd0 [ 1468.294365][T28297] simple_read_from_buffer+0xcb/0x170 [ 1468.294387][T28297] proc_fail_nth_read+0x1af/0x230 [ 1468.294415][T28297] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1468.294442][T28297] ? rw_verify_area+0xce/0x6d0 [ 1468.294468][T28297] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1468.294494][T28297] vfs_read+0x1e4/0xb30 [ 1468.294513][T28297] ? __pfx_vfs_read+0x10/0x10 [ 1468.294529][T28297] ? __fget_files+0x215/0x3d0 [ 1468.294555][T28297] ? __fget_files+0x21f/0x3d0 [ 1468.294581][T28297] ksys_read+0x12a/0x250 [ 1468.294598][T28297] ? __pfx_ksys_read+0x10/0x10 [ 1468.294622][T28297] do_syscall_64+0x106/0xf80 [ 1468.294638][T28297] ? clear_bhb_loop+0x40/0x90 [ 1468.294660][T28297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1468.294678][T28297] RIP: 0033:0x7fcda375d04e [ 1468.294693][T28297] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1468.294710][T28297] RSP: 002b:00007fcda45a8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1468.294727][T28297] RAX: ffffffffffffffda RBX: 00007fcda45a96c0 RCX: 00007fcda375d04e [ 1468.294739][T28297] RDX: 000000000000000f RSI: 00007fcda45a90a0 RDI: 0000000000000003 [ 1468.294749][T28297] RBP: 00007fcda45a9090 R08: 0000000000000000 R09: 0000000000000000 [ 1468.294759][T28297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1468.294768][T28297] R13: 00007fcda3a16038 R14: 00007fcda3a15fa0 R15: 00007ffffe6b44b8 [ 1468.294794][T28297] [ 1468.321485][T28206] team0: Port device team_slave_0 added [ 1468.900707][T26368] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1468.978654][ T1152] bond2 (unregistering): (slave geneve2): Releasing active interface [ 1469.039447][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1469.050189][T26368] usb 3-1: device descriptor read/64, error -71 [ 1469.290235][T26368] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1469.339149][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1469.359290][ T1152] bond0 (unregistering): Released all slaves [ 1469.393969][ T1152] bond1 (unregistering): Released all slaves [ 1469.431428][T26368] usb 3-1: device descriptor read/64, error -71 [ 1469.459982][ T1152] bond2 (unregistering): Released all slaves [ 1469.502821][ T1152] bond3 (unregistering): Released all slaves [ 1469.529417][ T1152] bond4 (unregistering): Released all slaves [ 1469.561479][T26368] usb usb3-port1: attempt power cycle [ 1469.605800][ T1152] bond5 (unregistering): Released all slaves [ 1469.750818][T12948] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1469.775629][ T1152] bond6 (unregistering): Released all slaves [ 1469.855945][T28206] team0: Port device team_slave_1 added [ 1469.936285][T12948] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1469.947243][T28206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1469.970600][T12948] usb 7-1: config 0 has no interface number 0 [ 1469.976710][T28206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1470.002650][T26368] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1470.023896][T26368] usb 3-1: device descriptor read/8, error -71 [ 1470.065849][T28206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1470.088791][T12948] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1470.102422][T12948] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.112186][ T1152] tipc: Left network mode [ 1470.113194][T28206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1470.539283][ T5822] Bluetooth: hci5: command tx timeout [ 1470.597450][T12948] usb 7-1: Product: syz [ 1470.610371][T28206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1470.637179][T12948] usb 7-1: Manufacturer: syz [ 1470.660410][T12948] usb 7-1: SerialNumber: syz [ 1470.675703][T12948] usb 7-1: config 0 descriptor?? [ 1470.685587][T28206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1470.700882][T26368] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1470.976796][T26368] usb 3-1: device descriptor read/8, error -71 [ 1471.013246][T12948] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1471.037168][T12948] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1471.080725][T12948] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1471.102082][T12948] usb 7-1: media controller created [ 1471.120496][T26368] usb usb3-port1: unable to enumerate USB device [ 1471.137635][T12948] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1471.229950][T28206] hsr_slave_0: entered promiscuous mode [ 1471.239325][T28206] hsr_slave_1: entered promiscuous mode [ 1471.245518][T28206] debugfs: 'hsr0' already exists in 'hsr' [ 1471.251346][T28206] Cannot create hsr debugfs directory [ 1472.243502][T12948] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1472.243528][T28327] usb 7-1: dvb_usb_ec168: I2C read not implemented [ 1472.408966][T28372] random: crng reseeded on system resumption [ 1472.560162][ T5822] Bluetooth: hci5: command tx timeout [ 1472.685526][T28374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5940'. [ 1472.787935][T12948] usb 7-1: USB disconnect, device number 11 [ 1472.906585][ T1152] hsr_slave_0: left promiscuous mode [ 1472.935864][ T1152] hsr_slave_1: left promiscuous mode [ 1472.961497][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1472.974848][T28384] 9p: Bad value for 'wfdno' [ 1472.993614][T12947] IPVS: starting estimator thread 0... [ 1473.042566][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1473.083253][ T1152] veth1_macvtap: left promiscuous mode [ 1473.088734][ T1152] veth0_macvtap: left allmulticast mode [ 1473.133660][T28385] IPVS: using max 76 ests per chain, 182400 per kthread [ 1473.149388][ T1152] veth0_macvtap: left promiscuous mode [ 1473.205810][ T1152] veth1_vlan: left promiscuous mode [ 1473.312181][ T5822] Bluetooth: hci1: unexpected event for opcode 0xaa8d [ 1473.340468][ T1152] veth0_vlan: left promiscuous mode [ 1473.957112][T28407] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1474.554606][ T29] audit: type=1800 audit(1775713411.795:995): pid=28376 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.5941" name="bus" dev="ramfs" ino=134711 res=0 errno=0 [ 1474.623694][T28414] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1475.047549][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 1475.066056][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 1476.030673][ T5884] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1476.378880][ T5884] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1476.448054][ T5884] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1476.459274][ T5884] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1476.478608][ T5884] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1476.570229][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1476.590433][ T5884] usb 3-1: Product: syz [ 1476.594888][ T5884] usb 3-1: Manufacturer: syz [ 1476.599479][ T5884] usb 3-1: SerialNumber: syz [ 1477.180349][T28425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1477.279510][T28425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1477.373010][ T5884] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 101 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1477.656708][ T5884] usb 3-1: USB disconnect, device number 101 [ 1477.680349][ T5884] usblp0: removed [ 1477.870669][T28459] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=51472 sclass=netlink_xfrm_socket pid=28459 comm=syz.3.5956 [ 1477.887839][T28447] Bluetooth: MGMT ver 1.23 [ 1477.913948][T28447] netlink: 208 bytes leftover after parsing attributes in process `syz.1.5954'. [ 1477.932050][T28447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5954'. [ 1477.950989][T28447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5954'. [ 1478.005044][T28206] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1478.053372][T28206] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1478.109633][T28206] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1478.133885][T28206] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1478.230429][T26368] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1478.496025][T28476] FAULT_INJECTION: forcing a failure. [ 1478.496025][T28476] name failslab, interval 1, probability 0, space 0, times 0 [ 1478.520205][T26368] usb 4-1: Using ep0 maxpacket: 8 [ 1478.525284][T28476] CPU: 1 UID: 0 PID: 28476 Comm: syz.1.5958 Tainted: G L syzkaller #0 PREEMPT(full) [ 1478.525310][T28476] Tainted: [L]=SOFTLOCKUP [ 1478.525316][T28476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1478.525326][T28476] Call Trace: [ 1478.525333][T28476] [ 1478.525340][T28476] dump_stack_lvl+0x100/0x190 [ 1478.525371][T28476] should_fail_ex.cold+0x5/0xa [ 1478.525395][T28476] ? tomoyo_encode2+0xfb/0x3c0 [ 1478.525420][T28476] should_failslab+0xc2/0x120 [ 1478.525437][T28476] __kmalloc_noprof+0xe0/0x850 [ 1478.525461][T28476] ? d_absolute_path+0x136/0x1b0 [ 1478.525490][T28476] tomoyo_encode2+0xfb/0x3c0 [ 1478.525524][T28476] tomoyo_encode+0x29/0x50 [ 1478.525549][T28476] tomoyo_realpath_from_path+0x18c/0x690 [ 1478.525583][T28476] tomoyo_path_number_perm+0x23c/0x580 [ 1478.525605][T28476] ? tomoyo_path_number_perm+0x22e/0x580 [ 1478.525630][T28476] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1478.525677][T28476] ? find_held_lock+0x2b/0x80 [ 1478.525699][T28476] ? __fget_files+0x215/0x3d0 [ 1478.525718][T28476] ? hook_file_ioctl_common+0x146/0x410 [ 1478.525742][T28476] ? __fget_files+0x21f/0x3d0 [ 1478.525771][T28476] security_file_ioctl+0xd3/0x230 [ 1478.525798][T28476] __x64_sys_ioctl+0xb7/0x210 [ 1478.525829][T28476] do_syscall_64+0x106/0xf80 [ 1478.525845][T28476] ? clear_bhb_loop+0x40/0x90 [ 1478.525868][T28476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1478.525884][T28476] RIP: 0033:0x7f44ebd9c819 [ 1478.525900][T28476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1478.525916][T28476] RSP: 002b:00007f44ecc58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1478.525933][T28476] RAX: ffffffffffffffda RBX: 00007f44ec015fa0 RCX: 00007f44ebd9c819 [ 1478.525945][T28476] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000003 [ 1478.525955][T28476] RBP: 00007f44ecc58090 R08: 0000000000000000 R09: 0000000000000000 [ 1478.525965][T28476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1478.525975][T28476] R13: 00007f44ec016038 R14: 00007f44ec015fa0 R15: 00007ffc86227858 [ 1478.525999][T28476] [ 1478.526013][T28476] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1478.536946][T26368] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1478.536986][T26368] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1478.537014][T26368] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.539184][T26368] usb 4-1: config 0 descriptor?? [ 1478.799836][T26368] uvcvideo 4-1:0.0: probe with driver uvcvideo failed with error -22 [ 1478.887900][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1478.906895][T28487] syzkaller0: entered promiscuous mode [ 1478.912426][T10560] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1478.926183][T28487] syzkaller0: entered allmulticast mode [ 1479.090204][T10560] usb 3-1: Using ep0 maxpacket: 16 [ 1479.101925][T10560] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1479.120321][T10560] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1479.200460][T28494] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1479.509976][T10560] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1479.519164][T10560] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1479.536587][T10560] usb 3-1: config 0 descriptor?? [ 1479.655987][T12947] usb 4-1: USB disconnect, device number 93 [ 1480.099491][T10560] HID 045e:07da: Invalid code 65791 type 1 [ 1480.127794][T10560] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0020/input/input34 [ 1480.190466][T10560] microsoft 0003:045E:07DA.0020: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1480.413243][T28515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5125 sclass=netlink_route_socket pid=28515 comm=syz.3.5962 [ 1482.105136][ T5884] usb 3-1: USB disconnect, device number 102 [ 1482.196856][T28206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1482.212912][T28206] 8021q: adding VLAN 0 to HW filter on device team0 [ 1482.287495][ T5822] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 1482.328658][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 1482.335794][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1482.361565][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 1482.368681][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1483.473397][T28206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1483.597780][T28206] veth0_vlan: entered promiscuous mode [ 1483.639851][T28206] veth1_vlan: entered promiscuous mode [ 1483.715130][T28206] veth0_macvtap: entered promiscuous mode [ 1483.755477][T28206] veth1_macvtap: entered promiscuous mode [ 1483.817189][T28206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1483.868816][T28206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1483.918910][ T148] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1483.949893][ T148] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1484.003041][ T148] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1484.036332][ T148] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1484.945560][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1484.989712][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1485.094469][T28582] syzkaller0: entered promiscuous mode [ 1485.108779][T28582] syzkaller0: entered allmulticast mode [ 1485.125751][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1485.143154][T28582] 0: reclassify loop, rule prio 0, protocol 800 [ 1485.157448][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1485.349363][ T5822] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 1485.623855][T28603] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5125 sclass=netlink_route_socket pid=28603 comm=syz.2.5978 [ 1486.050337][T12945] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1486.180313][T10560] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1486.261656][T12945] usb 2-1: Using ep0 maxpacket: 32 [ 1486.282251][T12945] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1486.309477][T12945] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1486.345145][T10560] usb 3-1: Using ep0 maxpacket: 32 [ 1486.364964][T10560] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1486.365590][T12945] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1486.406864][T10560] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.437655][T12945] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1486.438517][T10560] usb 3-1: config 0 descriptor?? [ 1486.466650][T12945] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1486.977760][T12945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.085273][T12945] usb 2-1: Product: syz [ 1487.109401][T12945] usb 2-1: Manufacturer: syz [ 1487.188976][T12945] usb 2-1: SerialNumber: syz [ 1487.311183][T10560] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1487.320241][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1487.332209][ T29] audit: type=1400 audit(1775713424.565:996): avc: denied { getopt } for pid=28624 comm="syz.0.5985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1487.342785][T12945] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input36 [ 1487.353085][T10560] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1487.407189][ T49] Bluetooth: hci5: unexpected event for opcode 0x1408 [ 1487.408342][T10560] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1487.441473][T12947] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1487.550370][T12945] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1487.558636][T12945] (id 0x00) [ 1487.613530][T12947] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1487.623387][T12947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.626636][T28635] syzkaller0: entered promiscuous mode [ 1487.637270][T28635] syzkaller0: entered allmulticast mode [ 1487.640586][T12947] usb 4-1: Product: syz [ 1487.647889][T12947] usb 4-1: Manufacturer: syz [ 1487.651559][T28635] simple: basic_1 [ 1487.652558][T12945] rc_core: IR keymap rc-imon-pad not found [ 1487.656311][T28635] simple: basic_2 [ 1487.665753][T28635] simple: basic_3 [ 1487.669377][T28635] simple: basic_4 [ 1487.670327][T12945] Registered IR keymap rc-empty [ 1487.673016][T28635] simple: basic_5 [ 1487.677866][T12945] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1487.681458][T28635] simple: basic_6 [ 1487.681471][T28635] simple: basic_7 [ 1487.681480][T28635] simple: basic_8 [ 1487.681491][T28635] simple: basic_9 [ 1487.681500][T28635] simple: basic_10 [ 1487.681510][T28635] simple: basic_11 [ 1487.681520][T28635] simple: basic_12 [ 1487.681530][T28635] simple: basic_13 [ 1487.681539][T28635] simple: basic_14 [ 1487.681551][T28635] simple: basic_15 [ 1487.681560][T28635] simple: basic_16 [ 1487.681568][T28635] simple: basic_17 [ 1487.681578][T28635] 0: reclassify loop, rule prio 0, protocol 800 [ 1487.746489][T12947] usb 4-1: SerialNumber: syz [ 1487.753248][T12945] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1487.764949][T12947] usb 4-1: config 0 descriptor?? [ 1487.778686][T12945] imon:send_packet: packet tx failed (-71) [ 1487.800250][T12945] imon 2-1:155.0: remote input dev register failed [ 1487.807220][T12945] imon 2-1:155.0: imon_init_intf0: rc device setup failed [ 1487.833913][T12945] imon 2-1:155.0: unable to initialize intf0, err 0 [ 1487.850450][T12945] imon:imon_probe: failed to initialize context! [ 1487.857186][T12945] imon 2-1:155.0: unable to register, err -19 [ 1487.900681][T12945] usb 2-1: USB disconnect, device number 85 [ 1487.997937][T28639] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5984'. [ 1488.070414][T28637] syzkaller0: entered promiscuous mode [ 1488.093488][T28637] syzkaller0: entered allmulticast mode [ 1488.099907][T12947] usb 4-1: Firmware version (0.0) predates our first public release. [ 1488.109056][T12947] usb 4-1: Please update to version 0.2 or newer [ 1488.114537][T28637] 0: reclassify loop, rule prio 0, protocol 800 [ 1488.162540][T12947] usb 4-1: USB disconnect, device number 94 [ 1488.630160][T12947] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1488.922816][T28675] ubi: mtd0 is already attached to ubi31 [ 1488.966904][ T49] Bluetooth: Frame is too long (len 12, expected len 4) [ 1489.030785][T12947] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 1489.100276][T12946] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1489.139708][T12947] usb 4-1: config 0 has no interface number 0 [ 1489.264767][T12947] usb 4-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1489.286938][ T49] Bluetooth: hci0: unexpected event for opcode 0xaa8d [ 1489.307066][T12947] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1489.338693][T12947] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1489.364715][T12947] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1489.390475][T12947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1489.393853][T28680] FAULT_INJECTION: forcing a failure. [ 1489.393853][T28680] name failslab, interval 1, probability 0, space 0, times 0 [ 1489.421105][T12947] usb 4-1: config 0 descriptor?? [ 1489.426687][T28651] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1489.429979][T28680] CPU: 0 UID: 0 PID: 28680 Comm: syz.1.5998 Tainted: G L syzkaller #0 PREEMPT(full) [ 1489.430002][T28680] Tainted: [L]=SOFTLOCKUP [ 1489.430008][T28680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1489.430017][T28680] Call Trace: [ 1489.430022][T28680] [ 1489.430028][T28680] dump_stack_lvl+0x100/0x190 [ 1489.430057][T28680] should_fail_ex.cold+0x5/0xa [ 1489.430080][T28680] ? tomoyo_encode2+0xfb/0x3c0 [ 1489.430101][T28680] should_failslab+0xc2/0x120 [ 1489.430118][T28680] __kmalloc_noprof+0xe0/0x850 [ 1489.430139][T28680] ? d_absolute_path+0x136/0x1b0 [ 1489.430166][T28680] tomoyo_encode2+0xfb/0x3c0 [ 1489.430191][T28680] tomoyo_encode+0x29/0x50 [ 1489.430213][T28680] tomoyo_realpath_from_path+0x18c/0x690 [ 1489.430241][T28680] tomoyo_path_number_perm+0x23c/0x580 [ 1489.430259][T28680] ? tomoyo_path_number_perm+0x22e/0x580 [ 1489.430281][T28680] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1489.430323][T28680] ? find_held_lock+0x2b/0x80 [ 1489.430342][T28680] ? __fget_files+0x215/0x3d0 [ 1489.430358][T28680] ? hook_file_ioctl_common+0x146/0x410 [ 1489.430380][T28680] ? __fget_files+0x21f/0x3d0 [ 1489.430400][T28680] security_file_ioctl+0xd3/0x230 [ 1489.430423][T28680] __x64_sys_ioctl+0xb7/0x210 [ 1489.430447][T28680] do_syscall_64+0x106/0xf80 [ 1489.430462][T28680] ? clear_bhb_loop+0x40/0x90 [ 1489.430480][T28680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.430496][T28680] RIP: 0033:0x7f44ebd9c819 [ 1489.430509][T28680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1489.430523][T28680] RSP: 002b:00007f44ecc58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1489.430539][T28680] RAX: ffffffffffffffda RBX: 00007f44ec015fa0 RCX: 00007f44ebd9c819 [ 1489.430549][T28680] RDX: 0000200000000000 RSI: 000000008038550a RDI: 0000000000000003 [ 1489.430559][T28680] RBP: 00007f44ecc58090 R08: 0000000000000000 R09: 0000000000000000 [ 1489.430568][T28680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1489.430577][T28680] R13: 00007f44ec016038 R14: 00007f44ec015fa0 R15: 00007ffc86227858 [ 1489.430598][T28680] [ 1489.433413][T28680] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1489.440341][T12946] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1489.741054][T12947] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.120/input/input38 [ 1489.776630][T28683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5993'. [ 1489.886290][T12946] usb 7-1: config 0 has no interface number 0 [ 1489.903725][T12946] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1489.914990][T12946] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1489.927304][T12946] usb 7-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1489.976181][T12946] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1490.017136][T12946] usb 7-1: config 0 descriptor?? [ 1490.114397][T28685] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1490.221841][T28698] syzkaller0: entered promiscuous mode [ 1490.227335][T28698] syzkaller0: entered allmulticast mode [ 1490.237642][T28698] 0: reclassify loop, rule prio 0, protocol 800 [ 1490.295855][T28696] ISOFS: Unable to identify CD-ROM format. [ 1490.325313][T28696] netlink: 'syz.0.6003': attribute type 10 has an invalid length. [ 1490.344131][T28696] team0: Device ipvlan1 failed to register rx_handler [ 1490.431431][T28700] FAULT_INJECTION: forcing a failure. [ 1490.431431][T28700] name failslab, interval 1, probability 0, space 0, times 0 [ 1490.458127][T28700] CPU: 0 UID: 0 PID: 28700 Comm: syz.1.6005 Tainted: G L syzkaller #0 PREEMPT(full) [ 1490.458153][T28700] Tainted: [L]=SOFTLOCKUP [ 1490.458160][T28700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1490.458170][T28700] Call Trace: [ 1490.458176][T28700] [ 1490.458183][T28700] dump_stack_lvl+0x100/0x190 [ 1490.458217][T28700] should_fail_ex.cold+0x5/0xa [ 1490.458239][T28700] ? tomoyo_encode2+0xfb/0x3c0 [ 1490.458263][T28700] should_failslab+0xc2/0x120 [ 1490.458282][T28700] __kmalloc_noprof+0xe0/0x850 [ 1490.458313][T28700] tomoyo_encode2+0xfb/0x3c0 [ 1490.458328][T12946] hid_parser_main: 19 callbacks suppressed [ 1490.458347][T12946] prodikeys 0003:041E:2801.0021: unknown main item tag 0x0 [ 1490.458343][T28700] tomoyo_encode+0x29/0x50 [ 1490.458370][T28700] tomoyo_realpath_from_path+0x18c/0x690 [ 1490.458398][T28700] tomoyo_path_number_perm+0x23c/0x580 [ 1490.458417][T28700] ? tomoyo_path_number_perm+0x22e/0x580 [ 1490.458438][T28700] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1490.458480][T28700] ? find_held_lock+0x2b/0x80 [ 1490.458499][T28700] ? __fget_files+0x215/0x3d0 [ 1490.458515][T28700] ? hook_file_ioctl_common+0x146/0x410 [ 1490.458536][T28700] ? __fget_files+0x21f/0x3d0 [ 1490.458556][T28700] security_file_ioctl+0xd3/0x230 [ 1490.458580][T28700] __x64_sys_ioctl+0xb7/0x210 [ 1490.458604][T28700] do_syscall_64+0x106/0xf80 [ 1490.458619][T28700] ? clear_bhb_loop+0x40/0x90 [ 1490.458638][T28700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.458661][T28700] RIP: 0033:0x7f44ebd9c819 [ 1490.458677][T28700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1490.458691][T28700] RSP: 002b:00007f44ecc58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1490.458707][T28700] RAX: ffffffffffffffda RBX: 00007f44ec015fa0 RCX: 00007f44ebd9c819 [ 1490.458717][T28700] RDX: 00002000000015c0 RSI: 000000004188aea7 RDI: 0000000000000005 [ 1490.458726][T28700] RBP: 00007f44ecc58090 R08: 0000000000000000 R09: 0000000000000000 [ 1490.458735][T28700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1490.458744][T28700] R13: 00007f44ec016038 R14: 00007f44ec015fa0 R15: 00007ffc86227858 [ 1490.458766][T28700] [ 1490.458829][T28700] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1490.718888][T12946] prodikeys 0003:041E:2801.0021: unknown main item tag 0x0 [ 1490.727909][T12946] prodikeys 0003:041E:2801.0021: unknown main item tag 0x0 [ 1490.738101][T12946] prodikeys 0003:041E:2801.0021: unknown main item tag 0x0 [ 1490.745736][T12946] prodikeys 0003:041E:2801.0021: unknown main item tag 0x0 [ 1490.754877][T12946] prodikeys 0003:041E:2801.0021: unknown main item tag 0x0 [ 1490.762732][T12946] prodikeys 0003:041E:2801.0021: unknown main item tag 0x0 [ 1490.771352][T28702] QAT: Stopping all acceleration devices. [ 1490.873289][T12946] prodikeys 0003:041E:2801.0021: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.6-1/input1 [ 1490.897214][T12946] hid_prodikeys: hid-prodikeys: failed to find output report [ 1490.897214][T12946] [ 1490.944269][T12946] usb 7-1: USB disconnect, device number 12 [ 1490.979945][T28706] fido_id[28706]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 1491.076608][ T49] Bluetooth: hci0: unexpected event for opcode 0xaa8d [ 1491.452330][ T49] Bluetooth: hci5: command 0x2016 tx timeout [ 1491.903771][T12946] usb 4-1: USB disconnect, device number 95 [ 1491.959860][T28714] netlink: 'syz.1.6009': attribute type 21 has an invalid length. [ 1491.974988][T28714] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6009'. [ 1492.010271][T28722] netlink: 'syz.1.6009': attribute type 21 has an invalid length. [ 1492.018663][T28722] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6009'. [ 1492.446120][T28735] ubi: mtd0 is already attached to ubi31 [ 1492.500475][ T5822] Bluetooth: Frame is too long (len 12, expected len 4) [ 1492.847833][T28734] openvswitch: netlink: Flow actions attr not present in new flow. [ 1493.204453][T28739] netlink: 'syz.6.6015': attribute type 1 has an invalid length. [ 1493.292933][T28739] bond1: entered promiscuous mode [ 1493.318436][T28739] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1493.693772][T28749] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6017'. [ 1493.715704][T28741] random: crng reseeded on system resumption [ 1493.735561][T28741] FAT-fs (nbd0): unable to read boot sector [ 1493.928318][T28756] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1494.669053][T28771] 9p: Bad value for 'wfdno' [ 1495.530367][T28779] ubi: mtd0 is already attached to ubi31 [ 1495.572510][ T5822] Bluetooth: Frame is too long (len 12, expected len 4) [ 1496.571541][T28785] openvswitch: netlink: Flow actions attr not present in new flow. [ 1496.742630][T28791] netlink: 'syz.2.6030': attribute type 1 has an invalid length. [ 1496.757987][T28792] netlink: 'syz.0.6031': attribute type 1 has an invalid length. [ 1496.823385][T28791] bond12: entered promiscuous mode [ 1496.839004][T28791] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1496.871284][ T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1496.880686][ T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1496.890279][ T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1496.898044][ T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1496.906892][ T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1497.004825][T28804] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1497.047459][T28798] vxcan1 speed is unknown, defaulting to 1000 [ 1497.374354][T16624] syz_tun (unregistering): left allmulticast mode [ 1498.359592][T28817] 9p: Bad value for 'wfdno' [ 1498.549151][T28798] wlan1 speed is unknown, defaulting to 1000 [ 1498.632432][ T49] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 1498.742590][T28819] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.863626][T28833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6040'. [ 1498.879238][ T8990] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.890546][T26368] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1498.905303][T28835] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6041'. [ 1498.962232][ T49] Bluetooth: hci4: command tx timeout [ 1498.977491][T28819] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.097402][T28841] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1499.119582][T28844] netlink: 'syz.1.6043': attribute type 1 has an invalid length. [ 1499.128909][ T8990] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.234659][T28819] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.282378][T28844] bond1: entered promiscuous mode [ 1499.287864][T28844] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1499.340428][ T8990] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.361749][T26368] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1499.386778][T26368] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1499.410117][T26368] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1499.430104][T26368] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.456166][T26368] usb 1-1: config 0 descriptor?? [ 1499.472162][T28819] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.514104][ T8990] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.814651][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1499.833498][T28865] binder: 28855:28865 ioctl c0306201 200000000080 returned -14 [ 1499.846365][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1499.869251][T28865] binder: 28855:28865 ioctl c0306201 2000000003c0 returned -14 [ 1499.923538][T28865] openvswitch: netlink: Tunnel attr 9 has unexpected len 80 expected 2 [ 1499.945528][ T1142] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1499.967380][T28798] chnl_net:caif_netlink_parms(): no params data found [ 1500.230707][T10532] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.720363][ T49] Bluetooth: hci0: command 0x0c1a tx timeout [ 1501.040146][ T49] Bluetooth: hci4: command tx timeout [ 1501.901393][T26368] usbhid 1-1:0.0: can't add hid device: -71 [ 1501.907629][T26368] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1501.918215][T26368] usb 1-1: USB disconnect, device number 101 [ 1502.105735][T28892] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28892 comm=syz.0.6051 [ 1502.240846][T28899] random: crng reseeded on system resumption [ 1502.350227][T28899] FAT-fs (nbd2): unable to read boot sector [ 1502.540262][T12946] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1502.710818][T12946] usb 2-1: Using ep0 maxpacket: 8 [ 1502.737464][T12946] usb 2-1: config 0 has no interfaces? [ 1502.776913][T12946] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1502.800991][ T49] Bluetooth: hci0: command 0x0c1a tx timeout [ 1502.850478][T12946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1502.850549][ T792] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1502.976850][T12946] usb 2-1: config 0 descriptor?? [ 1503.032762][ T8990] bond0 (unregistering): (slave geneve2): Releasing active interface [ 1503.040954][ T8990] geneve2 (unregistering): left allmulticast mode [ 1503.120430][ T5822] Bluetooth: hci4: command tx timeout [ 1503.154420][ T8990] bond1 (unregistering): Released all slaves [ 1503.184621][ T792] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1503.194776][T12946] usb 2-1: USB disconnect, device number 86 [ 1503.216312][ T792] usb 7-1: config 0 has no interface number 0 [ 1503.244225][ T8990] bond0 (unregistering): Released all slaves [ 1503.250721][ T792] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1503.279132][ T792] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1503.294735][ T792] usb 7-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1503.295000][ T8990] bond2 (unregistering): Released all slaves [ 1503.313695][ T792] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1503.340537][ T792] usb 7-1: config 0 descriptor?? [ 1503.345506][ T8990] bond3 (unregistering): Released all slaves [ 1503.363579][ T8990] bond4 (unregistering): Released all slaves [ 1503.394751][ T8990] bond5 (unregistering): Released all slaves [ 1503.448688][ T8990] bond6 (unregistering): Released all slaves [ 1503.505131][ T8990] bond7 (unregistering): Released all slaves [ 1504.330217][T28939] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6060'. [ 1505.165412][T28798] bridge0: port 1(bridge_slave_0) entered blocking state [ 1505.195987][T28798] bridge0: port 1(bridge_slave_0) entered disabled state [ 1505.217515][T28798] bridge_slave_0: entered allmulticast mode [ 1505.223545][ T5822] Bluetooth: hci4: command tx timeout [ 1505.245129][T28798] bridge_slave_0: entered promiscuous mode [ 1505.260630][T28798] bridge0: port 2(bridge_slave_1) entered blocking state [ 1505.283881][T28798] bridge0: port 2(bridge_slave_1) entered disabled state [ 1505.311796][T28798] bridge_slave_1: entered allmulticast mode [ 1505.321250][T28944] binder: 28940:28944 ioctl 8933 2000000001c0 returned -22 [ 1505.334263][T28798] bridge_slave_1: entered promiscuous mode [ 1505.346969][T28944] random: crng reseeded on system resumption [ 1505.359163][ T8990] tipc: Disabling bearer [ 1505.367643][T28942] IPVS: persistence engine module ip_vs_pe_ not found [ 1505.369313][ T8990] tipc: Left network mode [ 1505.376431][ T29] audit: type=1400 audit(1775713442.605:997): avc: denied { ioctl } for pid=28940 comm="syz.0.6062" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x330e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1505.406504][ T792] usbhid 7-1:0.1: can't add hid device: -71 [ 1505.412607][ T792] usbhid 7-1:0.1: probe with driver usbhid failed with error -71 [ 1505.444764][ T792] usb 7-1: USB disconnect, device number 13 [ 1505.466242][T28798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1505.479669][T28798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1505.553630][T28798] team0: Port device team_slave_0 added [ 1505.562106][T28798] team0: Port device team_slave_1 added [ 1505.589457][T28798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1505.598457][T28798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1505.635835][T28798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1505.653466][T28798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1505.668440][T28798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1505.698244][T26368] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1505.707186][T28798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1505.764114][T12946] kernel read not supported for file /dsp1 (pid: 12946 comm: kworker/1:10) [ 1505.812832][T28798] hsr_slave_0: entered promiscuous mode [ 1505.829785][T28798] hsr_slave_1: entered promiscuous mode [ 1505.857384][T28798] debugfs: 'hsr0' already exists in 'hsr' [ 1505.869386][T28798] Cannot create hsr debugfs directory [ 1505.875545][T26368] usb 1-1: Using ep0 maxpacket: 8 [ 1505.884038][T26368] usb 1-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 1505.893676][T26368] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.902024][T26368] usb 1-1: Product: syz [ 1505.907151][T26368] usb 1-1: Manufacturer: syz [ 1505.912252][ T8990] hsr_slave_0: left promiscuous mode [ 1505.912439][T26368] usb 1-1: SerialNumber: syz [ 1505.922954][ T8990] hsr_slave_1: left promiscuous mode [ 1505.940459][ T8990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1505.949374][ T8990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1505.958137][ T8990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1505.965683][ T8990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1505.985235][ T8990] veth1_macvtap: left promiscuous mode [ 1505.991215][ T8990] veth0_macvtap: left promiscuous mode [ 1505.996781][ T8990] veth1_vlan: left promiscuous mode [ 1506.022153][ T8990] veth0_vlan: left promiscuous mode [ 1506.095918][T28961] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5125 sclass=netlink_route_socket pid=28961 comm=syz.6.6063 [ 1506.200338][ T8990] team0 (unregistering): Port device team_slave_1 removed [ 1506.213223][ T8990] team0 (unregistering): Port device team_slave_0 removed [ 1506.800891][T28981] FAULT_INJECTION: forcing a failure. [ 1506.800891][T28981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1506.824088][T28981] CPU: 0 UID: 0 PID: 28981 Comm: syz.1.6066 Tainted: G L syzkaller #0 PREEMPT(full) [ 1506.824116][T28981] Tainted: [L]=SOFTLOCKUP [ 1506.824121][T28981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1506.824132][T28981] Call Trace: [ 1506.824138][T28981] [ 1506.824145][T28981] dump_stack_lvl+0x100/0x190 [ 1506.824180][T28981] should_fail_ex.cold+0x5/0xa [ 1506.824205][T28981] _copy_to_user+0x32/0xd0 [ 1506.824226][T28981] simple_read_from_buffer+0xcb/0x170 [ 1506.824248][T28981] proc_fail_nth_read+0x1af/0x230 [ 1506.824274][T28981] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1506.824301][T28981] ? rw_verify_area+0xce/0x6d0 [ 1506.824324][T28981] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1506.824349][T28981] vfs_read+0x1e4/0xb30 [ 1506.824367][T28981] ? __pfx_vfs_read+0x10/0x10 [ 1506.824382][T28981] ? __fget_files+0x215/0x3d0 [ 1506.824405][T28981] ? __fget_files+0x21f/0x3d0 [ 1506.824432][T28981] ksys_read+0x12a/0x250 [ 1506.824447][T28981] ? __pfx_ksys_read+0x10/0x10 [ 1506.824471][T28981] do_syscall_64+0x106/0xf80 [ 1506.824488][T28981] ? clear_bhb_loop+0x40/0x90 [ 1506.824510][T28981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1506.824527][T28981] RIP: 0033:0x7f44ebd5d04e [ 1506.824542][T28981] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1506.824558][T28981] RSP: 002b:00007f44ecc36fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1506.824575][T28981] RAX: ffffffffffffffda RBX: 00007f44ecc376c0 RCX: 00007f44ebd5d04e [ 1506.824586][T28981] RDX: 000000000000000f RSI: 00007f44ecc370a0 RDI: 0000000000000004 [ 1506.824597][T28981] RBP: 00007f44ecc37090 R08: 0000000000000000 R09: 0000000000000000 [ 1506.824608][T28981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1506.824618][T28981] R13: 00007f44ec016128 R14: 00007f44ec016090 R15: 00007ffc86227858 [ 1506.824643][T28981] [ 1507.167133][T28982] FAT-fs (nbd2): unable to read boot sector [ 1507.347447][ T5822] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 1507.930642][T28798] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1507.977202][T28798] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1507.977356][T29014] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5125 sclass=netlink_route_socket pid=29014 comm=syz.2.6075 [ 1508.043031][T28798] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1508.098655][T28798] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1508.417406][T29006] netlink: 'syz.6.6072': attribute type 21 has an invalid length. [ 1508.444665][T29006] netlink: 156 bytes leftover after parsing attributes in process `syz.6.6072'. [ 1508.504730][T29006] netlink: 'syz.6.6072': attribute type 21 has an invalid length. [ 1508.515873][T28798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1508.545218][T29006] netlink: 156 bytes leftover after parsing attributes in process `syz.6.6072'. [ 1508.587114][T28798] 8021q: adding VLAN 0 to HW filter on device team0 [ 1508.933031][T29040] FAT-fs (nbd2): unable to read boot sector [ 1508.945664][T10532] bridge0: port 1(bridge_slave_0) entered blocking state [ 1508.952723][T10532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1509.021898][ T1042] bridge0: port 2(bridge_slave_1) entered blocking state [ 1509.029004][ T1042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1509.597180][T28798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1509.699266][T28798] veth0_vlan: entered promiscuous mode [ 1509.727379][T28798] veth1_vlan: entered promiscuous mode [ 1509.794320][T28798] veth0_macvtap: entered promiscuous mode [ 1509.822297][T28798] veth1_macvtap: entered promiscuous mode [ 1509.868589][T28798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1509.905260][T28798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1509.936679][ T1042] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.981842][ T1042] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.059291][ T1042] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.145931][ T1042] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.435224][T10532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1510.488949][T10532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1510.541413][ T1042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1510.575726][ T1042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1510.896083][ T29] audit: type=1400 audit(1775713448.125:998): avc: denied { read } for pid=29104 comm="syz.3.6028" dev="nsfs" ino=4026532901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1510.944002][T29097] netlink: 'syz.6.6083': attribute type 21 has an invalid length. [ 1510.972679][T29097] netlink: 156 bytes leftover after parsing attributes in process `syz.6.6083'. [ 1511.024245][ T29] audit: type=1400 audit(1775713448.125:999): avc: denied { open } for pid=29104 comm="syz.3.6028" path="net:[4026532901]" dev="nsfs" ino=4026532901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1511.063901][T26368] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1511.075353][T26368] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 1511.092100][T26368] usb 1-1: 2:1 : sample bitwidth 132 in over sample bytes 3 [ 1511.394721][T26368] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1511.420252][T10852] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1511.580406][T10852] usb 4-1: device descriptor read/64, error -71 [ 1511.649365][T29121] FAULT_INJECTION: forcing a failure. [ 1511.649365][T29121] name failslab, interval 1, probability 0, space 0, times 0 [ 1511.680323][T29121] CPU: 0 UID: 0 PID: 29121 Comm: syz.1.6085 Tainted: G L syzkaller #0 PREEMPT(full) [ 1511.680351][T29121] Tainted: [L]=SOFTLOCKUP [ 1511.680357][T29121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1511.680367][T29121] Call Trace: [ 1511.680374][T29121] [ 1511.680380][T29121] dump_stack_lvl+0x100/0x190 [ 1511.680413][T29121] should_fail_ex.cold+0x5/0xa [ 1511.680436][T29121] ? tomoyo_encode2+0xfb/0x3c0 [ 1511.680459][T29121] should_failslab+0xc2/0x120 [ 1511.680479][T29121] __kmalloc_noprof+0xe0/0x850 [ 1511.680506][T29121] tomoyo_encode2+0xfb/0x3c0 [ 1511.680531][T29121] tomoyo_encode+0x29/0x50 [ 1511.680557][T29121] tomoyo_realpath_from_path+0x18c/0x690 [ 1511.680604][T29121] tomoyo_path_number_perm+0x23c/0x580 [ 1511.680627][T29121] ? tomoyo_path_number_perm+0x22e/0x580 [ 1511.680651][T29121] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1511.680699][T29121] ? find_held_lock+0x2b/0x80 [ 1511.680722][T29121] ? __fget_files+0x215/0x3d0 [ 1511.680740][T29121] ? hook_file_ioctl_common+0x146/0x410 [ 1511.680765][T29121] ? __fget_files+0x21f/0x3d0 [ 1511.680787][T29121] security_file_ioctl+0xd3/0x230 [ 1511.680812][T29121] __x64_sys_ioctl+0xb7/0x210 [ 1511.680837][T29121] do_syscall_64+0x106/0xf80 [ 1511.680853][T29121] ? clear_bhb_loop+0x40/0x90 [ 1511.680873][T29121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1511.680890][T29121] RIP: 0033:0x7f44ebd9c819 [ 1511.680906][T29121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1511.680922][T29121] RSP: 002b:00007f44ecc58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1511.680940][T29121] RAX: ffffffffffffffda RBX: 00007f44ec015fa0 RCX: 00007f44ebd9c819 [ 1511.680952][T29121] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1511.680962][T29121] RBP: 00007f44ecc58090 R08: 0000000000000000 R09: 0000000000000000 [ 1511.680972][T29121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1511.680982][T29121] R13: 00007f44ec016038 R14: 00007f44ec015fa0 R15: 00007ffc86227858 [ 1511.681006][T29121] [ 1511.681023][T29121] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1511.910637][T29121] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1511.982767][T29131] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6086'. [ 1512.050173][T10852] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1512.270753][T29147] netlink: 'syz.2.6088': attribute type 1 has an invalid length. [ 1512.293943][T10852] usb 4-1: device descriptor read/64, error -71 [ 1512.308508][T29147] bond13: entered promiscuous mode [ 1512.317124][T29147] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1512.410785][T10852] usb usb4-port1: attempt power cycle [ 1512.760199][T10852] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1512.790952][T10852] usb 4-1: device descriptor read/8, error -71 [ 1512.924861][ T49] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1512.934258][ T49] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1512.944028][ T49] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1512.953609][ T49] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1512.961809][ T49] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1513.044695][T16976] bond0: (slave syz_tun): Releasing backup interface [ 1513.060171][T10852] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1513.061775][T29156] vxcan1 speed is unknown, defaulting to 1000 [ 1513.100523][T10852] usb 4-1: device descriptor read/8, error -71 [ 1513.214110][T29167] IPVS: set_ctl: invalid protocol: 46 172.20.20.52:32790 [ 1513.263839][T29156] wlan1 speed is unknown, defaulting to 1000 [ 1513.289728][T10852] usb usb4-port1: unable to enumerate USB device [ 1513.805568][T12947] IPVS: starting estimator thread 0... [ 1514.000713][T29174] IPVS: using max 77 ests per chain, 184800 per kthread [ 1514.521876][T29156] chnl_net:caif_netlink_parms(): no params data found [ 1514.597562][T29185] FAULT_INJECTION: forcing a failure. [ 1514.597562][T29185] name failslab, interval 1, probability 0, space 0, times 0 [ 1514.615543][T29185] CPU: 1 UID: 0 PID: 29185 Comm: syz.3.6097 Tainted: G L syzkaller #0 PREEMPT(full) [ 1514.615570][T29185] Tainted: [L]=SOFTLOCKUP [ 1514.615577][T29185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1514.615586][T29185] Call Trace: [ 1514.615593][T29185] [ 1514.615600][T29185] dump_stack_lvl+0x100/0x190 [ 1514.615630][T29185] should_fail_ex.cold+0x5/0xa [ 1514.615654][T29185] ? tomoyo_encode2+0xfb/0x3c0 [ 1514.615680][T29185] should_failslab+0xc2/0x120 [ 1514.615700][T29185] __kmalloc_noprof+0xe0/0x850 [ 1514.615723][T29185] ? d_absolute_path+0x136/0x1b0 [ 1514.615759][T29185] tomoyo_encode2+0xfb/0x3c0 [ 1514.615787][T29185] tomoyo_encode+0x29/0x50 [ 1514.615814][T29185] tomoyo_realpath_from_path+0x18c/0x690 [ 1514.615847][T29185] tomoyo_path_number_perm+0x23c/0x580 [ 1514.615870][T29185] ? tomoyo_path_number_perm+0x22e/0x580 [ 1514.615895][T29185] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1514.615942][T29185] ? find_held_lock+0x2b/0x80 [ 1514.615964][T29185] ? __fget_files+0x215/0x3d0 [ 1514.615982][T29185] ? hook_file_ioctl_common+0x146/0x410 [ 1514.616008][T29185] ? __fget_files+0x21f/0x3d0 [ 1514.616032][T29185] security_file_ioctl+0xd3/0x230 [ 1514.616059][T29185] __x64_sys_ioctl+0xb7/0x210 [ 1514.616087][T29185] do_syscall_64+0x106/0xf80 [ 1514.616104][T29185] ? clear_bhb_loop+0x40/0x90 [ 1514.616126][T29185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1514.616144][T29185] RIP: 0033:0x7f17d939c819 [ 1514.616159][T29185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1514.616176][T29185] RSP: 002b:00007f17da1f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1514.616194][T29185] RAX: ffffffffffffffda RBX: 00007f17d9615fa0 RCX: 00007f17d939c819 [ 1514.616206][T29185] RDX: 0000200000000005 RSI: 0000000040480923 RDI: 0000000000000004 [ 1514.616217][T29185] RBP: 00007f17da1f8090 R08: 0000000000000000 R09: 0000000000000000 [ 1514.616227][T29185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1514.616236][T29185] R13: 00007f17d9616038 R14: 00007f17d9615fa0 R15: 00007ffce00998c8 [ 1514.616261][T29185] [ 1514.832933][T29185] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1514.880834][T29185] md: array md2 already has disks! [ 1514.900792][ T29] audit: type=1400 audit(1775713452.145:1000): avc: denied { getopt } for pid=29192 comm="syz.1.6099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1514.905588][T29156] bridge0: port 1(bridge_slave_0) entered blocking state [ 1514.932281][T29156] bridge0: port 1(bridge_slave_0) entered disabled state [ 1514.939580][T29156] bridge_slave_0: entered allmulticast mode [ 1514.947709][T29156] bridge_slave_0: entered promiscuous mode [ 1514.958507][T29156] bridge0: port 2(bridge_slave_1) entered blocking state [ 1514.966373][T29156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1514.971459][T10852] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1514.988826][T29156] bridge_slave_1: entered allmulticast mode [ 1514.996435][T29156] bridge_slave_1: entered promiscuous mode [ 1515.005584][T29193] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1515.025057][T29156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1515.039900][T29156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1515.055304][ T49] Bluetooth: hci1: command tx timeout [ 1515.073102][T29156] team0: Port device team_slave_0 added [ 1515.081209][T29156] team0: Port device team_slave_1 added [ 1515.108236][T29156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1515.115462][T29156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1515.144902][T29199] FAULT_INJECTION: forcing a failure. [ 1515.144902][T29199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1515.150435][T10852] usb 7-1: Using ep0 maxpacket: 32 [ 1515.158022][T29199] CPU: 1 UID: 0 PID: 29199 Comm: syz.3.6101 Tainted: G L syzkaller #0 PREEMPT(full) [ 1515.158045][T29199] Tainted: [L]=SOFTLOCKUP [ 1515.158051][T29199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1515.158059][T29199] Call Trace: [ 1515.158065][T29199] [ 1515.158072][T29199] dump_stack_lvl+0x100/0x190 [ 1515.158101][T29199] should_fail_ex.cold+0x5/0xa [ 1515.158123][T29199] _copy_from_user+0x2e/0xd0 [ 1515.158142][T29199] kstrtouint_from_user+0xd6/0x1d0 [ 1515.158163][T29199] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1515.158183][T29199] ? __lock_acquire+0x4a5/0x2630 [ 1515.158202][T29199] ? lock_acquire+0x1cf/0x380 [ 1515.158222][T29199] proc_fail_nth_write+0x83/0x220 [ 1515.158245][T29199] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1515.158272][T29199] vfs_write+0x2aa/0x1070 [ 1515.158288][T29199] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1515.158312][T29199] ? __pfx_vfs_write+0x10/0x10 [ 1515.158326][T29199] ? __fget_files+0x215/0x3d0 [ 1515.158348][T29199] ? __fget_files+0x21f/0x3d0 [ 1515.158371][T29199] ksys_write+0x12a/0x250 [ 1515.158385][T29199] ? __pfx_ksys_write+0x10/0x10 [ 1515.158407][T29199] do_syscall_64+0x106/0xf80 [ 1515.158422][T29199] ? clear_bhb_loop+0x40/0x90 [ 1515.158441][T29199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1515.158457][T29199] RIP: 0033:0x7f17d935d04e [ 1515.158470][T29199] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1515.158485][T29199] RSP: 002b:00007f17da1d6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1515.158500][T29199] RAX: ffffffffffffffda RBX: 00007f17da1d76c0 RCX: 00007f17d935d04e [ 1515.158510][T29199] RDX: 0000000000000001 RSI: 00007f17da1d70a0 RDI: 0000000000000005 [ 1515.158519][T29199] RBP: 00007f17da1d7090 R08: 0000000000000000 R09: 0000000000000000 [ 1515.158528][T29199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1515.158537][T29199] R13: 00007f17d9616128 R14: 00007f17d9616090 R15: 00007ffce00998c8 [ 1515.158559][T29199] [ 1515.158877][T29156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1515.168956][T10852] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1515.193879][T29156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1515.230730][T10852] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1515.234345][T29156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1515.237483][T10852] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1515.242049][T29156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1515.247054][T29197] vxcan1 speed is unknown, defaulting to 1000 [ 1515.254186][T10852] usb 7-1: Product: syz [ 1515.367323][T29156] hsr_slave_0: entered promiscuous mode [ 1515.369715][T10852] usb 7-1: Manufacturer: syz [ 1515.396687][T29156] hsr_slave_1: entered promiscuous mode [ 1515.401244][T29156] debugfs: 'hsr0' already exists in 'hsr' [ 1515.406818][T10852] usb 7-1: SerialNumber: syz [ 1515.462442][T29156] Cannot create hsr debugfs directory [ 1515.466630][ T792] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1515.516316][T10852] usb 7-1: config 0 descriptor?? [ 1515.521951][T29188] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1515.531837][T10852] hub 7-1:0.0: bad descriptor, ignoring hub [ 1515.537738][T10852] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1515.585648][T29197] wlan1 speed is unknown, defaulting to 1000 [ 1515.650154][ T792] usb 2-1: Using ep0 maxpacket: 16 [ 1515.656777][ T792] usb 2-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 1515.667004][ T792] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1515.678696][ T792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1515.693683][ T792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1515.708252][T29156] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1515.708585][ T792] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1515.740093][ T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1515.748085][ T792] usb 2-1: Product: syz [ 1515.758730][ T792] usb 2-1: Manufacturer: syz [ 1515.889508][ T792] usb 2-1: SerialNumber: syz [ 1515.900728][ T792] usb 2-1: config 0 descriptor?? [ 1515.927434][T29156] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1516.027763][T29156] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1516.040453][T12946] usb 7-1: USB disconnect, device number 14 [ 1516.118655][ T29] audit: type=1400 audit(1775713453.355:1001): avc: denied { accept } for pid=29200 comm="syz.1.6102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1516.119139][T29156] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1516.140182][T29201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1516.156887][T29201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1516.165812][ T792] appledisplay 2-1:0.0: Error while getting initial brightness: -71 [ 1516.177361][ T792] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -71 [ 1516.191333][ T792] usb 2-1: USB disconnect, device number 87 [ 1516.301070][T29156] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1516.312643][T29156] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1516.339822][T29156] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1516.350779][T29156] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1516.444043][T29156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1516.472221][T29156] 8021q: adding VLAN 0 to HW filter on device team0 [ 1516.484501][ T1042] bridge0: port 1(bridge_slave_0) entered blocking state [ 1516.491627][ T1042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1516.554975][T29215] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1516.579350][ T1042] bridge0: port 2(bridge_slave_1) entered blocking state [ 1516.586474][ T1042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1516.621422][T29217] netlink: 'syz.6.6105': attribute type 1 has an invalid length. [ 1516.678658][T29217] bond2: entered promiscuous mode [ 1516.687705][T29217] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1516.782890][T29225] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29225 comm=syz.1.6106 [ 1516.800515][T29225] netlink: 'syz.1.6106': attribute type 1 has an invalid length. [ 1516.948211][T29156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1517.018157][T29234] FAT-fs (nbd6): unable to read boot sector [ 1517.117491][T29156] veth0_vlan: entered promiscuous mode [ 1517.125189][ T49] Bluetooth: hci1: command tx timeout [ 1517.170006][T29156] veth1_vlan: entered promiscuous mode [ 1517.196500][T29156] veth0_macvtap: entered promiscuous mode [ 1517.205932][T29156] veth1_macvtap: entered promiscuous mode [ 1517.225410][T29156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1517.265917][T29156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1517.278887][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1517.327217][T29239] netlink: 'syz.3.6109': attribute type 1 has an invalid length. [ 1517.347997][ T8990] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1517.371605][ T8990] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1517.418442][T29247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6111'. [ 1517.421183][ T8990] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1517.477951][ T1042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1517.486888][ T792] kernel read not supported for file /comedi4 (pid: 792 comm: kworker/0:2) [ 1517.495506][ T1042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1517.505046][T10852] kernel write not supported for file /input/event2 (pid: 10852 comm: kworker/0:5) [ 1517.532147][ T1042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1517.540599][ T1042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1517.656591][T29253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29253 comm=syz.6.6112 [ 1517.697444][ T29] audit: type=1400 audit(1775713454.915:1002): avc: denied { setattr } for pid=29252 comm="syz.2.6090" name="IEEE-802.15.4-RAW" dev="sockfs" ino=139250 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1518.271813][T29268] FAULT_INJECTION: forcing a failure. [ 1518.271813][T29268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1518.300248][T29268] CPU: 1 UID: 0 PID: 29268 Comm: syz.2.6115 Tainted: G L syzkaller #0 PREEMPT(full) [ 1518.300277][T29268] Tainted: [L]=SOFTLOCKUP [ 1518.300283][T29268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1518.300294][T29268] Call Trace: [ 1518.300300][T29268] [ 1518.300307][T29268] dump_stack_lvl+0x100/0x190 [ 1518.300339][T29268] should_fail_ex.cold+0x5/0xa [ 1518.300363][T29268] _copy_from_user+0x2e/0xd0 [ 1518.300384][T29268] sctp_setsockopt+0x8cc/0xb370 [ 1518.300424][T29268] ? __pfx_sctp_setsockopt+0x10/0x10 [ 1518.300444][T29268] ? __fget_files+0x215/0x3d0 [ 1518.300467][T29268] ? selinux_socket_setsockopt+0x6a/0x80 [ 1518.300490][T29268] ? sock_common_setsockopt+0x2e/0xf0 [ 1518.300509][T29268] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1518.300529][T29268] do_sock_setsockopt+0xf3/0x1d0 [ 1518.300551][T29268] __sys_setsockopt+0x195/0x220 [ 1518.300579][T29268] __x64_sys_setsockopt+0xbd/0x160 [ 1518.300602][T29268] ? do_syscall_64+0x95/0xf80 [ 1518.300619][T29268] ? lockdep_hardirqs_on+0x78/0x100 [ 1518.300646][T29268] do_syscall_64+0x106/0xf80 [ 1518.300660][T29268] ? clear_bhb_loop+0x40/0x90 [ 1518.300681][T29268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1518.300699][T29268] RIP: 0033:0x7f474599c819 [ 1518.300714][T29268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1518.300731][T29268] RSP: 002b:00007f474679e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1518.300749][T29268] RAX: ffffffffffffffda RBX: 00007f4745c15fa0 RCX: 00007f474599c819 [ 1518.300760][T29268] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000005 [ 1518.300771][T29268] RBP: 00007f474679e090 R08: 000000000000009c R09: 0000000000000000 [ 1518.300781][T29268] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 1518.300790][T29268] R13: 00007f4745c16038 R14: 00007f4745c15fa0 R15: 00007fff19ec02e8 [ 1518.300815][T29268] [ 1518.633432][T10852] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1518.679069][T29276] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6117'. [ 1518.810146][T10852] usb 4-1: Using ep0 maxpacket: 32 [ 1518.817253][T10852] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1518.832383][T10852] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1518.847793][T10852] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1518.868335][T10852] usb 4-1: Product: syz [ 1518.881688][T10852] usb 4-1: Manufacturer: syz [ 1518.893454][T10852] usb 4-1: SerialNumber: syz [ 1518.908648][T10852] usb 4-1: config 0 descriptor?? [ 1518.920712][T29266] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1518.931072][T10852] hub 4-1:0.0: bad descriptor, ignoring hub [ 1518.941369][T10852] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1519.233964][ T49] Bluetooth: hci1: command tx timeout [ 1519.360879][T10852] usb 4-1: USB disconnect, device number 100 [ 1519.859981][T29286] FAT-fs (nbd1): unable to read boot sector [ 1520.078207][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1520.098357][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1520.108207][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1520.115777][ T5822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1520.123486][ T5822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1520.233460][T29301] netlink: 'syz.1.6123': attribute type 1 has an invalid length. [ 1520.241650][T29298] vxcan1 speed is unknown, defaulting to 1000 [ 1520.334154][T29301] bond2: entered promiscuous mode [ 1520.359371][T10852] IPVS: starting estimator thread 0... [ 1520.369187][T29301] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1520.376623][T29305] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1520.480874][T29307] IPVS: using max 49 ests per chain, 117600 per kthread [ 1520.508706][T29305] IPv6: Can't replace route, no match found [ 1520.751434][T29312] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1520.753619][T29298] wlan1 speed is unknown, defaulting to 1000 [ 1521.319489][ T5822] Bluetooth: hci1: command tx timeout [ 1522.160294][ T5822] Bluetooth: hci3: command tx timeout [ 1522.415805][T29325] FAULT_INJECTION: forcing a failure. [ 1522.415805][T29325] name failslab, interval 1, probability 0, space 0, times 0 [ 1522.428502][T29325] CPU: 0 UID: 0 PID: 29325 Comm: syz.6.6129 Tainted: G L syzkaller #0 PREEMPT(full) [ 1522.428529][T29325] Tainted: [L]=SOFTLOCKUP [ 1522.428535][T29325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1522.428545][T29325] Call Trace: [ 1522.428552][T29325] [ 1522.428559][T29325] dump_stack_lvl+0x100/0x190 [ 1522.428592][T29325] should_fail_ex.cold+0x5/0xa [ 1522.428614][T29325] should_failslab+0xc2/0x120 [ 1522.428634][T29325] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1522.428661][T29325] ? __alloc_skb+0x140/0x710 [ 1522.428690][T29325] __alloc_skb+0x140/0x710 [ 1522.428713][T29325] ? __alloc_skb+0x5b7/0x710 [ 1522.428736][T29325] ? __pfx___alloc_skb+0x10/0x10 [ 1522.428766][T29325] netlink_alloc_large_skb+0x69/0x150 [ 1522.428786][T29325] netlink_sendmsg+0x680/0xda0 [ 1522.428808][T29325] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1522.428822][T29325] ? __might_fault+0x50/0x140 [ 1522.428855][T29325] ____sys_sendmsg+0x9e1/0xb70 [ 1522.428872][T29325] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1522.428891][T29325] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1522.428921][T29325] ___sys_sendmsg+0x190/0x1e0 [ 1522.428944][T29325] ? __pfx____sys_sendmsg+0x10/0x10 [ 1522.428994][T29325] __sys_sendmsg+0x170/0x220 [ 1522.429020][T29325] ? __pfx___sys_sendmsg+0x10/0x10 [ 1522.429061][T29325] do_syscall_64+0x106/0xf80 [ 1522.429077][T29325] ? clear_bhb_loop+0x40/0x90 [ 1522.429099][T29325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1522.429117][T29325] RIP: 0033:0x7f495a19c819 [ 1522.429132][T29325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1522.429148][T29325] RSP: 002b:00007f495b07b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1522.429166][T29325] RAX: ffffffffffffffda RBX: 00007f495a415fa0 RCX: 00007f495a19c819 [ 1522.429178][T29325] RDX: 00000000040040c0 RSI: 0000200000000200 RDI: 0000000000000003 [ 1522.429189][T29325] RBP: 00007f495b07b090 R08: 0000000000000000 R09: 0000000000000000 [ 1522.429199][T29325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1522.429209][T29325] R13: 00007f495a416038 R14: 00007f495a415fa0 R15: 00007ffcee7ee5d8 [ 1522.429234][T29325] [ 1522.665433][T29298] chnl_net:caif_netlink_parms(): no params data found [ 1522.749760][T29298] bridge0: port 1(bridge_slave_0) entered blocking state [ 1522.759313][T29298] bridge0: port 1(bridge_slave_0) entered disabled state [ 1522.766549][T29298] bridge_slave_0: entered allmulticast mode [ 1522.781579][T29298] bridge_slave_0: entered promiscuous mode [ 1522.789829][T29298] bridge0: port 2(bridge_slave_1) entered blocking state [ 1522.797010][T29298] bridge0: port 2(bridge_slave_1) entered disabled state [ 1522.805378][T29298] bridge_slave_1: entered allmulticast mode [ 1522.812747][T29298] bridge_slave_1: entered promiscuous mode [ 1522.854103][T29298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1522.877222][T29298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1522.924681][T29298] team0: Port device team_slave_0 added [ 1522.942069][T29298] team0: Port device team_slave_1 added [ 1523.045902][T29298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1523.053561][T29298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1523.081868][T29298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1523.103069][T29298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1523.105832][T29340] FAT-fs (nbd6): unable to read boot sector [ 1523.110122][T29298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1523.151974][T29298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1523.287926][T29298] hsr_slave_0: entered promiscuous mode [ 1523.300781][T29298] hsr_slave_1: entered promiscuous mode [ 1523.309255][T29298] debugfs: 'hsr0' already exists in 'hsr' [ 1523.316152][T29298] Cannot create hsr debugfs directory [ 1523.448687][T29351] FAULT_INJECTION: forcing a failure. [ 1523.448687][T29351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1523.464909][T29351] CPU: 1 UID: 0 PID: 29351 Comm: syz.6.6137 Tainted: G L syzkaller #0 PREEMPT(full) [ 1523.464937][T29351] Tainted: [L]=SOFTLOCKUP [ 1523.464944][T29351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1523.464955][T29351] Call Trace: [ 1523.464961][T29351] [ 1523.464969][T29351] dump_stack_lvl+0x100/0x190 [ 1523.465002][T29351] should_fail_ex.cold+0x5/0xa [ 1523.465025][T29351] _copy_from_user+0x2e/0xd0 [ 1523.465047][T29351] sk_getsockopt+0x2f4/0x3160 [ 1523.465067][T29351] ? avc_has_perm_noaudit+0x145/0x3b0 [ 1523.465090][T29351] ? __pfx_sk_getsockopt+0x10/0x10 [ 1523.465119][T29351] ? __pfx_avc_has_perm+0x10/0x10 [ 1523.465141][T29351] ? __lock_acquire+0x4a5/0x2630 [ 1523.465163][T29351] ? sock_has_perm+0x258/0x2f0 [ 1523.465191][T29351] ? find_held_lock+0x2b/0x80 [ 1523.465214][T29351] ? __might_fault+0xc5/0x140 [ 1523.465238][T29351] ? __might_fault+0xc5/0x140 [ 1523.465271][T29351] do_sock_getsockopt+0x373/0x3d0 [ 1523.465291][T29351] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1523.465321][T29351] __sys_getsockopt+0x148/0x260 [ 1523.465351][T29351] ? __x64_sys_getsockopt+0xbd/0x160 [ 1523.465374][T29351] __x64_sys_getsockopt+0xbd/0x160 [ 1523.465398][T29351] ? do_syscall_64+0x95/0xf80 [ 1523.465416][T29351] ? lockdep_hardirqs_on+0x78/0x100 [ 1523.465443][T29351] do_syscall_64+0x106/0xf80 [ 1523.465458][T29351] ? clear_bhb_loop+0x40/0x90 [ 1523.465481][T29351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1523.465499][T29351] RIP: 0033:0x7f495a19c819 [ 1523.465515][T29351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1523.465536][T29351] RSP: 002b:00007f495b07b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1523.465554][T29351] RAX: ffffffffffffffda RBX: 00007f495a415fa0 RCX: 00007f495a19c819 [ 1523.465566][T29351] RDX: 000000000000001c RSI: 0000000000000001 RDI: 0000000000000004 [ 1523.465575][T29351] RBP: 00007f495b07b090 R08: 0000200000001140 R09: 0000000000000000 [ 1523.465585][T29351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1523.465605][T29351] R13: 00007f495a416038 R14: 00007f495a415fa0 R15: 00007ffcee7ee5d8 [ 1523.465630][T29351] [ 1523.778060][ T29] audit: type=1400 audit(1775713461.015:1003): avc: denied { ioctl } for pid=29355 comm="syz.6.6138" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1523.779442][T29356] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 1523.822904][T10852] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1523.969079][T29356] netlink: 1240 bytes leftover after parsing attributes in process `syz.6.6138'. [ 1523.991679][T10852] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1524.003060][T10852] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1524.019200][T29298] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1524.027098][T10852] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1524.044843][T29298] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1524.054158][T10852] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1524.063711][T10852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1524.074977][T29298] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1524.081947][T10852] usb 4-1: Product: syz [ 1524.089611][T10852] usb 4-1: Manufacturer: syz [ 1524.098152][T29298] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1524.105910][T10852] usb 4-1: SerialNumber: syz [ 1524.131516][T10852] usb 4-1: config 0 descriptor?? [ 1524.143361][T29353] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1524.161487][T29353] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1524.173162][T10852] usb 4-1: ucan: probing device on interface #0 [ 1524.240455][ T5822] Bluetooth: hci3: command tx timeout [ 1524.298487][T29298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1524.337886][T29298] 8021q: adding VLAN 0 to HW filter on device team0 [ 1524.362930][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1524.370000][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1524.396274][ T1042] bridge0: port 2(bridge_slave_1) entered blocking state [ 1524.403392][ T1042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1524.587633][T10852] usb 4-1: ucan: device reported invalid device info [ 1524.604000][T10852] usb 4-1: ucan: probe failed; try to update the device firmware [ 1524.674001][T29368] syzkaller0: entered promiscuous mode [ 1524.680024][T29368] syzkaller0: entered allmulticast mode [ 1524.970796][ T5884] usb 4-1: USB disconnect, device number 101 [ 1525.274948][ T5822] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1525.982802][T29390] FAT-fs (nbd2): unable to read boot sector [ 1526.320296][ T5822] Bluetooth: hci3: command tx timeout [ 1528.403375][ T5822] Bluetooth: hci3: command tx timeout [ 1529.108078][T29298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1529.213139][T29405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1529.245026][T29405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1529.300888][T11291] libceph: connect (1)[c::]:6789 error -101 [ 1529.338357][T11291] libceph: mon0 (1)[c::]:6789 connect error [ 1529.357138][T29405] ceph: No mds server is up or the cluster is laggy [ 1529.651847][T11291] libceph: connect (1)[c::]:6789 error -101 [ 1529.687478][T11291] libceph: mon0 (1)[c::]:6789 connect error [ 1530.011760][ T49] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 1530.632010][T29298] veth0_vlan: entered promiscuous mode [ 1530.670677][T29298] veth1_vlan: entered promiscuous mode [ 1530.732444][T29298] veth0_macvtap: entered promiscuous mode [ 1530.752167][T29298] veth1_macvtap: entered promiscuous mode [ 1530.798581][T29298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1530.836230][T29298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1531.250449][ T8990] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.290177][ T8990] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.300822][ T8990] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.309705][ T8990] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.637963][T29458] FAT-fs (nbd1): unable to read boot sector [ 1531.765319][ T8990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1531.788861][ T49] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 1531.794485][ T8990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1531.920505][T10532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1531.935498][T10532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1531.942698][T29470] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1531.945809][T29467] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1532.259423][T29470] @0Ù: renamed from bond_slave_1 (while UP) [ 1532.318759][T12947] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 1532.412217][T29469] batman_adv: batadv0: Adding interface: macsec1 [ 1532.418811][T29469] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1532.445409][T29469] batman_adv: batadv0: Interface activated: macsec1 [ 1532.458854][T29479] md: array md2 already has disks! [ 1532.724877][ T49] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1532.735071][ T49] CPU: 0 UID: 0 PID: 49 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1532.735103][ T49] Tainted: [L]=SOFTLOCKUP [ 1532.735110][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1532.735124][ T49] Workqueue: hci1 hci_rx_work [ 1532.735153][ T49] Call Trace: [ 1532.735159][ T49] [ 1532.735167][ T49] dump_stack_lvl+0x100/0x190 [ 1532.735201][ T49] sysfs_warn_dup.cold+0x1c/0x28 [ 1532.735226][ T49] sysfs_create_dir_ns+0x24b/0x2b0 [ 1532.735258][ T49] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1532.735286][ T49] ? find_held_lock+0x2b/0x80 [ 1532.735311][ T49] ? kobject_add_internal+0x25f/0x930 [ 1532.735332][ T49] ? kobject_add_internal+0x25f/0x930 [ 1532.735354][ T49] ? do_raw_spin_unlock+0x145/0x1e0 [ 1532.735378][ T49] kobject_add_internal+0x2c8/0x930 [ 1532.735405][ T49] kobject_add+0x16a/0x1e0 [ 1532.735426][ T49] ? __pfx_kobject_add+0x10/0x10 [ 1532.735447][ T49] ? class_to_subsys+0x10f/0x150 [ 1532.735475][ T49] ? kobject_put+0xb9/0x640 [ 1532.735492][ T49] ? _raw_spin_unlock+0x28/0x50 [ 1532.735525][ T49] device_add+0x294/0x1950 [ 1532.735547][ T49] ? __pfx_dev_set_name+0x10/0x10 [ 1532.735579][ T49] ? __pfx_device_add+0x10/0x10 [ 1532.735603][ T49] ? mgmt_send_event_skb+0x2fb/0x460 [ 1532.735637][ T49] hci_conn_add_sysfs+0x1a3/0x260 [ 1532.735669][ T49] le_conn_complete_evt+0x11eb/0x1f60 [ 1532.735701][ T49] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1532.735734][ T49] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1532.735760][ T49] ? skb_pull_data+0x15f/0x1e0 [ 1532.735784][ T49] hci_le_meta_evt+0x34a/0x5f0 [ 1532.735811][ T49] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1532.735843][ T49] hci_event_packet+0x51c/0xcd0 [ 1532.735870][ T49] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1532.735898][ T49] ? __pfx_hci_event_packet+0x10/0x10 [ 1532.735925][ T49] ? kcov_remote_start+0x374/0x660 [ 1532.735951][ T49] ? lockdep_hardirqs_on+0x78/0x100 [ 1532.735987][ T49] hci_rx_work+0x451/0xfc0 [ 1532.736017][ T49] process_one_work+0xa23/0x19a0 [ 1532.736048][ T49] ? __pfx_process_one_work+0x10/0x10 [ 1532.736091][ T49] ? __pfx_hci_rx_work+0x10/0x10 [ 1532.736120][ T49] worker_thread+0x5ef/0xe50 [ 1532.736154][ T49] ? kthread+0x13a/0x450 [ 1532.736172][ T49] ? __pfx_worker_thread+0x10/0x10 [ 1532.736192][ T49] kthread+0x370/0x450 [ 1532.736210][ T49] ? __pfx_kthread+0x10/0x10 [ 1532.736231][ T49] ret_from_fork+0x754/0xd80 [ 1532.736253][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 1532.736275][ T49] ? __switch_to+0x7b4/0x1120 [ 1532.736299][ T49] ? __pfx_kthread+0x10/0x10 [ 1532.736317][ T49] ret_from_fork_asm+0x1a/0x30 [ 1532.736354][ T49] [ 1532.736376][ T49] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1533.016228][ T49] Bluetooth: hci1: failed to register connection device [ 1533.172745][T12947] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1533.363684][T12947] usb 7-1: not running at top speed; connect to a high speed hub [ 1533.407659][T12947] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1533.439982][T12947] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1533.566375][T12947] usb 7-1: New USB device found, idVendor=09e8, idProduct=0021, bcdDevice= 0.40 [ 1533.670779][T12947] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.697579][T12947] usb 7-1: Product: syz [ 1533.702112][T12947] usb 7-1: Manufacturer: syz [ 1533.706713][T12947] usb 7-1: SerialNumber: syz [ 1533.854131][T29505] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1534.060245][T12945] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1534.232412][T29487] Bluetooth: hci4: command 0x2016 tx timeout [ 1534.285559][T29510] FAULT_INJECTION: forcing a failure. [ 1534.285559][T29510] name failslab, interval 1, probability 0, space 0, times 0 [ 1534.301212][T29510] CPU: 1 UID: 0 PID: 29510 Comm: syz.7.6163 Tainted: G L syzkaller #0 PREEMPT(full) [ 1534.301237][T29510] Tainted: [L]=SOFTLOCKUP [ 1534.301243][T29510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1534.301253][T29510] Call Trace: [ 1534.301259][T29510] [ 1534.301269][T29510] dump_stack_lvl+0x100/0x190 [ 1534.301301][T29510] should_fail_ex.cold+0x5/0xa [ 1534.301326][T29510] should_failslab+0xc2/0x120 [ 1534.301345][T29510] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1534.301372][T29510] ? __alloc_skb+0x140/0x710 [ 1534.301401][T29510] __alloc_skb+0x140/0x710 [ 1534.301424][T29510] ? __alloc_skb+0x5b7/0x710 [ 1534.301447][T29510] ? __pfx___alloc_skb+0x10/0x10 [ 1534.301485][T29510] netlink_alloc_large_skb+0x69/0x150 [ 1534.301505][T29510] netlink_sendmsg+0x680/0xda0 [ 1534.301526][T29510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1534.301543][T29510] ? __might_fault+0x50/0x140 [ 1534.301577][T29510] ____sys_sendmsg+0x9e1/0xb70 [ 1534.301596][T29510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1534.301616][T29510] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1534.301647][T29510] ___sys_sendmsg+0x190/0x1e0 [ 1534.301670][T29510] ? __pfx____sys_sendmsg+0x10/0x10 [ 1534.301721][T29510] __sys_sendmsg+0x170/0x220 [ 1534.301748][T29510] ? __pfx___sys_sendmsg+0x10/0x10 [ 1534.301790][T29510] do_syscall_64+0x106/0xf80 [ 1534.301807][T29510] ? clear_bhb_loop+0x40/0x90 [ 1534.301830][T29510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.301848][T29510] RIP: 0033:0x7f8d0b99c819 [ 1534.301862][T29510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1534.301879][T29510] RSP: 002b:00007f8d0c944028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1534.301896][T29510] RAX: ffffffffffffffda RBX: 00007f8d0bc15fa0 RCX: 00007f8d0b99c819 [ 1534.301908][T29510] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1534.301918][T29510] RBP: 00007f8d0c944090 R08: 0000000000000000 R09: 0000000000000000 [ 1534.301929][T29510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1534.301939][T29510] R13: 00007f8d0bc16038 R14: 00007f8d0bc15fa0 R15: 00007ffed4093898 [ 1534.301963][T29510] [ 1534.547859][T29459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1534.556455][T29459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1534.640172][T12945] usb 4-1: Using ep0 maxpacket: 16 [ 1534.650636][T12945] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1534.661572][T12945] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1534.675323][T12945] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1534.685579][T12945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1534.704118][T12945] usb 4-1: config 0 descriptor?? [ 1534.998988][T29499] wlan1 speed is unknown, defaulting to 1000 [ 1535.023542][T29499] óyz2: Port: 1 Link DOWN [ 1535.042492][T29526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6168'. [ 1535.180185][T29499] usb 2-1: new low-speed USB device number 88 using dummy_hcd [ 1535.892771][T29527] team0: entered promiscuous mode [ 1535.919381][T29499] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1535.928028][T29527] team_slave_0: entered promiscuous mode [ 1535.945979][T29527] team_slave_1: entered promiscuous mode [ 1535.946273][T29499] usb 2-1: config 243 has an invalid interface number: 5 but max is 0 [ 1535.961512][T29532] lo: entered promiscuous mode [ 1535.980800][T29499] usb 2-1: config 243 has no interface number 0 [ 1536.025094][T29499] usb 2-1: config 243 interface 5 altsetting 4 endpoint 0x1 has invalid maxpacket 1023, setting to 8 [ 1536.058369][T29499] usb 2-1: config 243 interface 5 has no altsetting 0 [ 1536.102418][T12945] HID 045e:07da: Invalid code 65791 type 1 [ 1536.174896][T12945] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0022/input/input42 [ 1536.259650][T12945] microsoft 0003:045E:07DA.0022: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1536.339909][T29519] lo: left promiscuous mode [ 1536.346407][T29519] team0: left promiscuous mode [ 1536.351423][T29519] team_slave_0: left promiscuous mode [ 1536.389478][T29519] team_slave_1: left promiscuous mode [ 1536.905664][T11291] usb 4-1: USB disconnect, device number 102 [ 1536.927475][T12947] usb 7-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1536.984275][T12947] usb 7-1: MIDIStreaming interface descriptor not found [ 1537.207297][T12947] usb 7-1: USB disconnect, device number 15 [ 1537.263845][T29553] netlink: 'syz.6.6170': attribute type 21 has an invalid length. [ 1537.280513][T29487] Bluetooth: hci0: command 0x0c1a tx timeout [ 1537.293777][T29553] netlink: 156 bytes leftover after parsing attributes in process `syz.6.6170'. [ 1537.333220][T29557] netlink: 'syz.6.6170': attribute type 21 has an invalid length. [ 1537.372824][T29557] netlink: 156 bytes leftover after parsing attributes in process `syz.6.6170'. [ 1537.751460][T29562] udevd[29562]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1537.956389][T29499] usb 2-1: New USB device found, idVendor=0c52, idProduct=2104, bcdDevice=bf.55 [ 1538.000387][T29499] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.041684][T29499] usb 2-1: Product: 瞄ꙧ [ 1538.046135][T29499] usb 2-1: Manufacturer: Ñ„ [ 1538.182725][T29499] usb 2-1: can't set config #243, error -71 [ 1538.260389][T29499] usb 2-1: USB disconnect, device number 88 [ 1538.282959][T29590] netlink: 72 bytes leftover after parsing attributes in process `syz.7.6175'. [ 1538.949553][T29600] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6179'. [ 1540.163161][ T29] audit: type=1400 audit(1775713477.405:1004): avc: denied { associate } for pid=29614 comm="syz.1.6181" name="file1" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1540.342206][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1540.547967][T29626] vxcan1 speed is unknown, defaulting to 1000 [ 1540.561539][ T5822] block nbd0: Receive control failed (result -32) [ 1540.585792][ T5822] block nbd0: Receive control failed (result -32) [ 1540.630667][T29615] nbd0: detected capacity change from 0 to 63 [ 1540.704393][T29566] block nbd0: Dead connection, failed to find a fallback [ 1540.730443][ T90] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1540.878526][T29566] block nbd0: shutting down sockets [ 1541.008568][T29566] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1541.073989][T29566] buffer_io_error: 27 callbacks suppressed [ 1541.074000][T29566] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1541.129342][T29644] FAULT_INJECTION: forcing a failure. [ 1541.129342][T29644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1541.138713][T29566] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1541.152146][ T90] usb 4-1: Using ep0 maxpacket: 16 [ 1541.186059][ T90] usb 4-1: config 0 has no interfaces? [ 1541.204337][ T90] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1541.205515][T29644] CPU: 0 UID: 0 PID: 29644 Comm: syz.6.6187 Tainted: G L syzkaller #0 PREEMPT(full) [ 1541.205539][T29644] Tainted: [L]=SOFTLOCKUP [ 1541.205544][T29644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1541.205553][T29644] Call Trace: [ 1541.205559][T29644] [ 1541.205565][T29644] dump_stack_lvl+0x100/0x190 [ 1541.205594][T29644] should_fail_ex.cold+0x5/0xa [ 1541.205616][T29644] strncpy_from_user+0x3b/0x2d0 [ 1541.205636][T29644] do_getname+0x78/0x390 [ 1541.205659][T29644] do_sys_openat2+0xc5/0x1e0 [ 1541.205679][T29644] ? __pfx_do_sys_openat2+0x10/0x10 [ 1541.205697][T29644] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1541.205716][T29644] ? __fget_files+0x21f/0x3d0 [ 1541.205737][T29644] __x64_sys_openat+0x12d/0x210 [ 1541.205758][T29644] ? __pfx___x64_sys_openat+0x10/0x10 [ 1541.205776][T29644] ? ksys_write+0x1ac/0x250 [ 1541.205798][T29644] do_syscall_64+0x106/0xf80 [ 1541.205812][T29644] ? clear_bhb_loop+0x40/0x90 [ 1541.205831][T29644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1541.205847][T29644] RIP: 0033:0x7f495a19c819 [ 1541.205860][T29644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1541.205875][T29644] RSP: 002b:00007f495b07b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1541.205891][T29644] RAX: ffffffffffffffda RBX: 00007f495a415fa0 RCX: 00007f495a19c819 [ 1541.205901][T29644] RDX: 0000000000088040 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 1541.205910][T29644] RBP: 00007f495b07b090 R08: 0000000000000000 R09: 0000000000000000 [ 1541.205919][T29644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1541.205928][T29644] R13: 00007f495a416038 R14: 00007f495a415fa0 R15: 00007ffcee7ee5d8 [ 1541.205949][T29644] [ 1541.396200][T29566] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1541.420146][T29566] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1541.435455][T29566] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1541.478378][T29566] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1541.549061][T29626] wlan1 speed is unknown, defaulting to 1000 [ 1541.602384][T29645] netlink: 'syz.1.6186': attribute type 21 has an invalid length. [ 1541.616500][T29645] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6186'. [ 1541.636661][ T90] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1541.639110][T29566] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1541.679296][T29651] netlink: 'syz.1.6186': attribute type 21 has an invalid length. [ 1541.687407][T29566] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1541.690348][ T90] usb 4-1: Manufacturer: syz [ 1541.711532][T29651] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6186'. [ 1541.721175][T29566] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1541.771506][ T90] usb 4-1: config 0 descriptor?? [ 1541.780467][T29566] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1541.789947][T29566] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1541.859014][T29566] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1541.886283][T29566] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1541.919689][T29566] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1541.939846][T29566] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1541.961246][T29566] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1542.000160][T29566] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1542.285953][T29566] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1542.295704][T29566] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1542.316063][T29566] ldm_validate_partition_table(): Disk read failed. [ 1542.326571][T29566] Dev nbd0: unable to read RDB block 0 [ 1542.338670][T29566] nbd0: unable to read partition table [ 1542.367375][T29566] ldm_validate_partition_table(): Disk read failed. [ 1542.389274][T29626] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6183'. [ 1542.575995][T29566] Dev nbd0: unable to read RDB block 0 [ 1542.903028][T10852] usb 4-1: USB disconnect, device number 103 [ 1542.940307][T29566] nbd0: unable to read partition table [ 1543.146332][T29682] binder: 29681:29682 ioctl c0306201 200000000640 returned -22 [ 1543.154046][ T90] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1543.176643][T29685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6194'. [ 1543.400119][ T90] usb 7-1: Using ep0 maxpacket: 16 [ 1543.408078][ T90] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1543.424170][ T90] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1543.437991][ T90] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1543.447641][ T90] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1543.462211][ T90] usb 7-1: config 0 descriptor?? [ 1543.679859][ T5822] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 1543.889266][ T90] HID 045e:07da: Invalid code 65791 type 1 [ 1543.954417][ T90] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0023/input/input43 [ 1544.080462][ T90] microsoft 0003:045E:07DA.0023: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1544.327312][T29721] netlink: 676 bytes leftover after parsing attributes in process `syz.7.6198'. [ 1544.327909][T29722] netlink: 676 bytes leftover after parsing attributes in process `syz.7.6198'. [ 1544.933106][T11291] usb 7-1: USB disconnect, device number 16 [ 1546.140550][ T5884] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1546.219658][ T5822] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 1546.271222][T29762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6207'. [ 1546.380111][ T5884] usb 2-1: Using ep0 maxpacket: 16 [ 1546.400661][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1546.481442][T29769] overlayfs: conflicting lowerdir path [ 1547.055002][ T5884] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1547.076120][ T5884] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1547.085433][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.111173][ T5884] usb 2-1: config 0 descriptor?? [ 1547.319951][T29775] syzkaller0: entered promiscuous mode [ 1547.340238][T29775] syzkaller0: entered allmulticast mode [ 1547.375181][T29775] simple: basic_1 [ 1547.378492][ T29] audit: type=1400 audit(1775713484.615:1005): avc: denied { setattr } for pid=29780 comm="syz.7.6214" name="/" dev="configfs" ino=1059 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1547.379415][T29775] simple: basic_2 [ 1547.405458][T29775] simple: basic_3 [ 1547.409073][T29775] simple: basic_4 [ 1547.412728][T29775] simple: basic_5 [ 1547.416364][T29775] simple: basic_6 [ 1547.419984][T29775] simple: basic_7 [ 1547.423630][T29775] simple: basic_8 [ 1547.427271][T29775] simple: basic_9 [ 1547.430919][T29775] simple: basic_10 [ 1547.434629][T29775] simple: basic_11 [ 1547.438338][T29775] simple: basic_12 [ 1547.442086][T29775] simple: basic_13 [ 1547.445811][T29775] simple: basic_14 [ 1547.449541][T29775] simple: basic_15 [ 1547.453277][T29775] simple: basic_16 [ 1547.456997][T29775] simple: basic_17 [ 1547.460740][T29775] 0: reclassify loop, rule prio 0, protocol 800 [ 1548.215972][T29795] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6212'. [ 1548.313717][T29794] FAULT_INJECTION: forcing a failure. [ 1548.313717][T29794] name failslab, interval 1, probability 0, space 0, times 0 [ 1548.326616][T29794] CPU: 0 UID: 0 PID: 29794 Comm: syz.3.6218 Tainted: G L syzkaller #0 PREEMPT(full) [ 1548.326645][T29794] Tainted: [L]=SOFTLOCKUP [ 1548.326651][T29794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1548.326659][T29794] Call Trace: [ 1548.326663][T29794] [ 1548.326667][T29794] dump_stack_lvl+0x100/0x190 [ 1548.326689][T29794] should_fail_ex.cold+0x5/0xa [ 1548.326707][T29794] should_failslab+0xc2/0x120 [ 1548.326719][T29794] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1548.326734][T29794] ? do_getname+0x35/0x390 [ 1548.326751][T29794] do_getname+0x35/0x390 [ 1548.326767][T29794] __x64_sys_execveat+0xc5/0x130 [ 1548.326779][T29794] do_syscall_64+0x106/0xf80 [ 1548.326789][T29794] ? clear_bhb_loop+0x40/0x90 [ 1548.326802][T29794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1548.326814][T29794] RIP: 0033:0x7f17d939c819 [ 1548.326823][T29794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1548.326834][T29794] RSP: 002b:00007f17da1d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1548.326844][T29794] RAX: ffffffffffffffda RBX: 00007f17d9616090 RCX: 00007f17d939c819 [ 1548.326851][T29794] RDX: 0000000000000000 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 1548.326857][T29794] RBP: 00007f17da1d7090 R08: 0000000000000000 R09: 0000000000000000 [ 1548.326863][T29794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1548.326869][T29794] R13: 00007f17d9616128 R14: 00007f17d9616090 R15: 00007ffce00998c8 [ 1548.326883][T29794] [ 1548.832247][T29803] FAULT_INJECTION: forcing a failure. [ 1548.832247][T29803] name failslab, interval 1, probability 0, space 0, times 0 [ 1548.846088][T29803] CPU: 0 UID: 0 PID: 29803 Comm: syz.7.6220 Tainted: G L syzkaller #0 PREEMPT(full) [ 1548.846116][T29803] Tainted: [L]=SOFTLOCKUP [ 1548.846123][T29803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1548.846133][T29803] Call Trace: [ 1548.846139][T29803] [ 1548.846146][T29803] dump_stack_lvl+0x100/0x190 [ 1548.846183][T29803] should_fail_ex.cold+0x5/0xa [ 1548.846206][T29803] should_failslab+0xc2/0x120 [ 1548.846226][T29803] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1548.846252][T29803] ? __alloc_skb+0x140/0x710 [ 1548.846281][T29803] __alloc_skb+0x140/0x710 [ 1548.846302][T29803] ? __alloc_skb+0x5b7/0x710 [ 1548.846325][T29803] ? __pfx___alloc_skb+0x10/0x10 [ 1548.846358][T29803] netlink_alloc_large_skb+0x69/0x150 [ 1548.846379][T29803] netlink_sendmsg+0x680/0xda0 [ 1548.846401][T29803] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1548.846417][T29803] ? __might_fault+0x50/0x140 [ 1548.846449][T29803] ____sys_sendmsg+0x9e1/0xb70 [ 1548.846467][T29803] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1548.846486][T29803] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1548.846515][T29803] ___sys_sendmsg+0x190/0x1e0 [ 1548.846538][T29803] ? __pfx____sys_sendmsg+0x10/0x10 [ 1548.846587][T29803] __sys_sendmsg+0x170/0x220 [ 1548.846614][T29803] ? __pfx___sys_sendmsg+0x10/0x10 [ 1548.846654][T29803] do_syscall_64+0x106/0xf80 [ 1548.846671][T29803] ? clear_bhb_loop+0x40/0x90 [ 1548.846693][T29803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1548.846711][T29803] RIP: 0033:0x7f8d0b99c819 [ 1548.846725][T29803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1548.846741][T29803] RSP: 002b:00007f8d0c944028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1548.846759][T29803] RAX: ffffffffffffffda RBX: 00007f8d0bc15fa0 RCX: 00007f8d0b99c819 [ 1548.846770][T29803] RDX: 0000000000000000 RSI: 0000200000000f00 RDI: 0000000000000003 [ 1548.846781][T29803] RBP: 00007f8d0c944090 R08: 0000000000000000 R09: 0000000000000000 [ 1548.846791][T29803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1548.846802][T29803] R13: 00007f8d0bc16038 R14: 00007f8d0bc15fa0 R15: 00007ffed4093898 [ 1548.846827][T29803] [ 1549.157815][T29805] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1549.164991][T29805] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1549.343583][T29814] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1549.414686][T29815] ubi: mtd0 is already attached to ubi31 [ 1549.532195][ T5822] Bluetooth: Frame is too long (len 12, expected len 4) [ 1549.823969][ T5884] usbhid 2-1:0.0: can't add hid device: -71 [ 1549.832996][ T5884] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1549.845260][ T5884] usb 2-1: USB disconnect, device number 89 [ 1549.888400][T29820] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1549.898224][T29820] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1549.908058][T29820] FAULT_INJECTION: forcing a failure. [ 1549.908058][T29820] name failslab, interval 1, probability 0, space 0, times 0 [ 1549.922886][T29820] CPU: 0 UID: 0 PID: 29820 Comm: syz.3.6226 Tainted: G L syzkaller #0 PREEMPT(full) [ 1549.922913][T29820] Tainted: [L]=SOFTLOCKUP [ 1549.922920][T29820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1549.922930][T29820] Call Trace: [ 1549.922937][T29820] [ 1549.922944][T29820] dump_stack_lvl+0x100/0x190 [ 1549.922977][T29820] should_fail_ex.cold+0x5/0xa [ 1549.923002][T29820] should_failslab+0xc2/0x120 [ 1549.923021][T29820] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1549.923048][T29820] ? alloc_empty_file+0x55/0x1c0 [ 1549.923076][T29820] alloc_empty_file+0x55/0x1c0 [ 1549.923101][T29820] dentry_open+0x46/0xd0 [ 1549.923122][T29820] ovl_path_open+0x182/0x1d0 [ 1549.923147][T29820] ovl_dir_read_merged+0x2e8/0x790 [ 1549.923174][T29820] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 1549.923201][T29820] ? __pfx_ovl_fill_merge+0x10/0x10 [ 1549.923235][T29820] ovl_iterate+0xb7b/0x11e0 [ 1549.923258][T29820] ? __pfx_down_read_killable+0x10/0x10 [ 1549.923281][T29820] ? __pfx_ovl_iterate+0x10/0x10 [ 1549.923300][T29820] wrap_directory_iterator+0xa2/0xe0 [ 1549.923330][T29820] iterate_dir+0x296/0xae0 [ 1549.923351][T29820] __x64_sys_getdents64+0x13b/0x2c0 [ 1549.923376][T29820] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 1549.923393][T29820] ? fput+0x79/0x100 [ 1549.923414][T29820] ? __pfx_filldir64+0x10/0x10 [ 1549.923451][T29820] do_syscall_64+0x106/0xf80 [ 1549.923467][T29820] ? clear_bhb_loop+0x40/0x90 [ 1549.923490][T29820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1549.923509][T29820] RIP: 0033:0x7f17d939c819 [ 1549.923524][T29820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1549.923541][T29820] RSP: 002b:00007f17da1f8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 1549.923560][T29820] RAX: ffffffffffffffda RBX: 00007f17d9615fa0 RCX: 00007f17d939c819 [ 1549.923571][T29820] RDX: 0000000000001011 RSI: 0000200000002600 RDI: 0000000000000003 [ 1549.923582][T29820] RBP: 00007f17da1f8090 R08: 0000000000000000 R09: 0000000000000000 [ 1549.923593][T29820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1549.923603][T29820] R13: 00007f17d9616038 R14: 00007f17d9615fa0 R15: 00007ffce00998c8 [ 1549.923629][T29820] [ 1549.928490][T29816] binder: 29811:29816 ioctl c0046209 200000000000000 returned -22 [ 1550.080922][T29822] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1550.170273][T29823] [ 1550.172603][T29823] ====================================================== [ 1550.179603][T29823] WARNING: possible circular locking dependency detected [ 1550.180669][ T29] audit: type=1400 audit(1775713487.395:1006): avc: denied { create } for pid=29811 comm="syz.2.6225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1550.186595][T29823] syzkaller #0 Tainted: G L [ 1550.186608][T29823] ------------------------------------------------------ [ 1550.220523][T29823] syz.2.6225/29823 is trying to acquire lock: [ 1550.226562][T29823] ffffffff8e9ab8a0 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_noprof+0xb2/0x850 [ 1550.235319][T29823] [ 1550.235319][T29823] but task is already holding lock: [ 1550.242651][T29823] ffff88801cac8188 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_fop_readdir+0x15b/0x990 [ 1550.252444][T29823] [ 1550.252444][T29823] which lock already depends on the new lock. [ 1550.252444][T29823] [ 1550.262820][T29823] [ 1550.262820][T29823] the existing dependency chain (in reverse order) is: [ 1550.271815][T29823] [ 1550.271815][T29823] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 1550.279774][T29823] down_write+0x8b/0x1f0 [ 1550.284513][T29823] kernfs_add_one+0x38/0x850 [ 1550.289619][T29823] kernfs_create_dir_ns+0xfc/0x1a0 [ 1550.295231][T29823] internal_create_group+0x36f/0xf40 [ 1550.301019][T29823] cpuhp_invoke_callback+0x3ab/0x9a0 [ 1550.306803][T29823] cpuhp_issue_call+0x1b8/0x970 [ 1550.312152][T29823] __cpuhp_setup_state_cpuslocked+0x431/0x880 [ 1550.318719][T29823] __cpuhp_setup_state+0xf4/0x300 [ 1550.324244][T29823] do_one_initcall+0x11d/0x760 [ 1550.329507][T29823] kernel_init_freeable+0x6e5/0x7a0 [ 1550.335204][T29823] kernel_init+0x1f/0x1e0 [ 1550.340029][T29823] ret_from_fork+0x754/0xd80 [ 1550.345133][T29823] ret_from_fork_asm+0x1a/0x30 [ 1550.350396][T29823] [ 1550.350396][T29823] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 1550.358190][T29823] [ 1550.358190][T29823] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 1550.365886][T29823] cpus_read_lock+0x42/0x170 [ 1550.370975][T29823] static_key_slow_inc+0x12/0x30 [ 1550.376407][T29823] setup_udp_tunnel_sock+0x542/0x680 [ 1550.382190][T29823] l2tp_tunnel_register+0xa01/0xc00 [ 1550.387882][T29823] pppol2tp_tunnel_get.constprop.0+0x3f0/0x540 [ 1550.394528][T29823] pppol2tp_connect+0xaf0/0x1c20 [ 1550.399963][T29823] __sys_connect_file+0x141/0x1a0 [ 1550.405493][T29823] __sys_connect+0x141/0x170 [ 1550.410590][T29823] __x64_sys_connect+0x72/0xb0 [ 1550.415850][T29823] do_syscall_64+0x106/0xf80 [ 1550.420932][T29823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1550.427317][T29823] [ 1550.427317][T29823] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1550.435015][T29823] lock_sock_nested+0x41/0xf0 [ 1550.440190][T29823] inet_shutdown+0x67/0x410 [ 1550.445186][T29823] nbd_mark_nsock_dead+0xae/0x5c0 [ 1550.450708][T29823] sock_shutdown+0x16b/0x200 [ 1550.455795][T29823] nbd_config_put+0x1eb/0x750 [ 1550.460971][T29823] nbd_genl_connect+0xaf8/0x1a40 [ 1550.466411][T29823] genl_family_rcv_msg_doit+0x214/0x300 [ 1550.472448][T29823] genl_rcv_msg+0x560/0x800 [ 1550.477443][T29823] netlink_rcv_skb+0x159/0x420 [ 1550.482697][T29823] genl_rcv+0x28/0x40 [ 1550.487181][T29823] netlink_unicast+0x5aa/0x870 [ 1550.492433][T29823] netlink_sendmsg+0x8b0/0xda0 [ 1550.497686][T29823] ____sys_sendmsg+0x9e1/0xb70 [ 1550.502940][T29823] ___sys_sendmsg+0x190/0x1e0 [ 1550.508111][T29823] __sys_sendmsg+0x170/0x220 [ 1550.513203][T29823] do_syscall_64+0x106/0xf80 [ 1550.518285][T29823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1550.524679][T29823] [ 1550.524679][T29823] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1550.532293][T29823] __mutex_lock+0x1a2/0x1b90 [ 1550.537374][T29823] nbd_queue_rq+0x428/0x1080 [ 1550.542466][T29823] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 1550.548508][T29823] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 1550.555330][T29823] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 1550.561810][T29823] blk_mq_run_hw_queue+0x23c/0x670 [ 1550.567437][T29823] blk_mq_dispatch_list+0x51d/0x1360 [ 1550.573235][T29823] blk_mq_flush_plug_list+0x130/0x600 [ 1550.579103][T29823] __blk_flush_plug+0x2c4/0x4b0 [ 1550.584448][T29823] __submit_bio+0x584/0x6c0 [ 1550.589445][T29823] submit_bio_noacct_nocheck+0x562/0xc10 [ 1550.595573][T29823] submit_bio_noacct+0xd17/0x2010 [ 1550.601093][T29823] submit_bh_wbc+0x59c/0x770 [ 1550.606185][T29823] block_read_full_folio+0x264/0x8e0 [ 1550.611976][T29823] filemap_read_folio+0xfc/0x3b0 [ 1550.617411][T29823] do_read_cache_folio+0x2d7/0x6b0 [ 1550.623019][T29823] read_part_sector+0xd1/0x370 [ 1550.628277][T29823] adfspart_check_ICS+0x93/0x910 [ 1550.633718][T29823] bdev_disk_changed+0x7f8/0xc80 [ 1550.639148][T29823] blkdev_get_whole+0x187/0x290 [ 1550.644504][T29823] bdev_open+0x2c7/0xe40 [ 1550.649242][T29823] blkdev_open+0x34e/0x4f0 [ 1550.654166][T29823] do_dentry_open+0x6d8/0x1660 [ 1550.659419][T29823] vfs_open+0x82/0x3f0 [ 1550.663980][T29823] path_openat+0x208c/0x31a0 [ 1550.669062][T29823] do_file_open+0x20e/0x430 [ 1550.674069][T29823] do_sys_openat2+0x10d/0x1e0 [ 1550.679249][T29823] __x64_sys_openat+0x12d/0x210 [ 1550.684594][T29823] do_syscall_64+0x106/0xf80 [ 1550.689681][T29823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1550.696066][T29823] [ 1550.696066][T29823] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1550.703245][T29823] __mutex_lock+0x1a2/0x1b90 [ 1550.708336][T29823] nbd_queue_rq+0xba/0x1080 [ 1550.713332][T29823] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 1550.719373][T29823] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 1550.726193][T29823] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 1550.732668][T29823] blk_mq_run_hw_queue+0x23c/0x670 [ 1550.738273][T29823] blk_mq_dispatch_list+0x51d/0x1360 [ 1550.744054][T29823] blk_mq_flush_plug_list+0x130/0x600 [ 1550.749930][T29823] __blk_flush_plug+0x2c4/0x4b0 [ 1550.755274][T29823] __submit_bio+0x584/0x6c0 [ 1550.760283][T29823] submit_bio_noacct_nocheck+0x562/0xc10 [ 1550.766411][T29823] submit_bio_noacct+0xd17/0x2010 [ 1550.771942][T29823] submit_bh_wbc+0x59c/0x770 [ 1550.777041][T29823] block_read_full_folio+0x264/0x8e0 [ 1550.782823][T29823] filemap_read_folio+0xfc/0x3b0 [ 1550.788256][T29823] do_read_cache_folio+0x2d7/0x6b0 [ 1550.793862][T29823] read_part_sector+0xd1/0x370 [ 1550.799125][T29823] adfspart_check_ICS+0x93/0x910 [ 1550.804558][T29823] bdev_disk_changed+0x7f8/0xc80 [ 1550.809998][T29823] blkdev_get_whole+0x187/0x290 [ 1550.815354][T29823] bdev_open+0x2c7/0xe40 [ 1550.820122][T29823] blkdev_open+0x34e/0x4f0 [ 1550.825034][T29823] do_dentry_open+0x6d8/0x1660 [ 1550.830303][T29823] vfs_open+0x82/0x3f0 [ 1550.834865][T29823] path_openat+0x208c/0x31a0 [ 1550.839948][T29823] do_file_open+0x20e/0x430 [ 1550.844943][T29823] do_sys_openat2+0x10d/0x1e0 [ 1550.850120][T29823] __x64_sys_openat+0x12d/0x210 [ 1550.855497][T29823] do_syscall_64+0x106/0xf80 [ 1550.860577][T29823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1550.866963][T29823] [ 1550.866963][T29823] -> #3 (set->srcu){.+.+}-{0:0}: [ 1550.874057][T29823] __synchronize_srcu+0xa2/0x300 [ 1550.879501][T29823] blk_mq_quiesce_queue+0x149/0x1c0 [ 1550.885204][T29823] elevator_switch+0x17b/0x7e0 [ 1550.890475][T29823] elevator_change+0x352/0x530 [ 1550.895745][T29823] elevator_set_default+0x29e/0x360 [ 1550.901443][T29823] blk_register_queue+0x412/0x590 [ 1550.906961][T29823] __add_disk+0x73f/0xe40 [ 1550.911788][T29823] add_disk_fwnode+0x118/0x5c0 [ 1550.917049][T29823] nbd_dev_add+0x77a/0xb10 [ 1550.921956][T29823] nbd_init+0x291/0x2b0 [ 1550.926606][T29823] do_one_initcall+0x11d/0x760 [ 1550.931865][T29823] kernel_init_freeable+0x6e5/0x7a0 [ 1550.937559][T29823] kernel_init+0x1f/0x1e0 [ 1550.942397][T29823] ret_from_fork+0x754/0xd80 [ 1550.947482][T29823] ret_from_fork_asm+0x1a/0x30 [ 1550.952742][T29823] [ 1550.952742][T29823] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1550.960528][T29823] __mutex_lock+0x1a2/0x1b90 [ 1550.965613][T29823] elevator_change+0x1bc/0x530 [ 1550.970870][T29823] elevator_set_none+0x92/0xf0 [ 1550.976139][T29823] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 1550.982441][T29823] nbd_start_device+0x1a6/0xbd0 [ 1550.987782][T29823] nbd_genl_connect+0xff2/0x1a40 [ 1550.993213][T29823] genl_family_rcv_msg_doit+0x214/0x300 [ 1550.999253][T29823] genl_rcv_msg+0x560/0x800 [ 1551.004252][T29823] netlink_rcv_skb+0x159/0x420 [ 1551.009508][T29823] genl_rcv+0x28/0x40 [ 1551.013986][T29823] netlink_unicast+0x5aa/0x870 [ 1551.019252][T29823] netlink_sendmsg+0x8b0/0xda0 [ 1551.024517][T29823] ____sys_sendmsg+0x9e1/0xb70 [ 1551.029774][T29823] ___sys_sendmsg+0x190/0x1e0 [ 1551.034942][T29823] __sys_sendmsg+0x170/0x220 [ 1551.040029][T29823] do_syscall_64+0x106/0xf80 [ 1551.045122][T29823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1551.051509][T29823] [ 1551.051509][T29823] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1551.060089][T29823] blk_alloc_queue+0x610/0x790 [ 1551.065358][T29823] blk_mq_alloc_queue+0x174/0x290 [ 1551.070884][T29823] __blk_mq_alloc_disk+0x29/0x120 [ 1551.076418][T29823] nbd_dev_add+0x492/0xb10 [ 1551.081347][T29823] nbd_init+0x291/0x2b0 [ 1551.086009][T29823] do_one_initcall+0x11d/0x760 [ 1551.091275][T29823] kernel_init_freeable+0x6e5/0x7a0 [ 1551.096978][T29823] kernel_init+0x1f/0x1e0 [ 1551.101822][T29823] ret_from_fork+0x754/0xd80 [ 1551.106909][T29823] ret_from_fork_asm+0x1a/0x30 [ 1551.112169][T29823] [ 1551.112169][T29823] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1551.119355][T29823] __lock_acquire+0x14b8/0x2630 [ 1551.124703][T29823] lock_acquire+0x1cf/0x380 [ 1551.129699][T29823] fs_reclaim_acquire+0xc4/0x100 [ 1551.135129][T29823] __kmalloc_noprof+0xb2/0x850 [ 1551.140392][T29823] ovl_cache_entry_new+0x64/0x9d0 [ 1551.145911][T29823] ovl_fill_merge+0x7dd/0x1000 [ 1551.151172][T29823] kernfs_fop_readdir+0x40c/0x990 [ 1551.156689][T29823] iterate_dir+0x296/0xae0 [ 1551.161596][T29823] ovl_dir_read_merged+0x37e/0x790 [ 1551.167201][T29823] ovl_iterate+0xb7b/0x11e0 [ 1551.172210][T29823] wrap_directory_iterator+0xa2/0xe0 [ 1551.178003][T29823] iterate_dir+0x296/0xae0 [ 1551.182922][T29823] __x64_sys_getdents64+0x13b/0x2c0 [ 1551.188614][T29823] do_syscall_64+0x106/0xf80 [ 1551.193695][T29823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1551.200169][T29823] [ 1551.200169][T29823] other info that might help us debug this: [ 1551.200169][T29823] [ 1551.210366][T29823] Chain exists of: [ 1551.210366][T29823] fs_reclaim --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 1551.210366][T29823] [ 1551.223450][T29823] Possible unsafe locking scenario: [ 1551.223450][T29823] [ 1551.230870][T29823] CPU0 CPU1 [ 1551.236211][T29823] ---- ---- [ 1551.241548][T29823] rlock(&root->kernfs_rwsem); [ 1551.246375][T29823] lock(cpuhp_state_mutex); [ 1551.253461][T29823] lock(&root->kernfs_rwsem); [ 1551.260714][T29823] lock(fs_reclaim); [ 1551.264667][T29823] [ 1551.264667][T29823] *** DEADLOCK *** [ 1551.264667][T29823] [ 1551.272779][T29823] 4 locks held by syz.2.6225/29823: [ 1551.277943][T29823] #0: ffff888038819978 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1551.287051][T29823] #1: ffff888060790168 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}, at: wrap_directory_iterator+0x54/0xe0 [ 1551.298245][T29823] #2: ffff88805439a908 (&type->i_mutex_dir_key#4){++++}-{4:4}, at: iterate_dir+0x18b/0xae0 [ 1551.308310][T29823] #3: ffff88801cac8188 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_fop_readdir+0x15b/0x990 [ 1551.318543][T29823] [ 1551.318543][T29823] stack backtrace: [ 1551.324406][T29823] CPU: 0 UID: 0 PID: 29823 Comm: syz.2.6225 Tainted: G L syzkaller #0 PREEMPT(full) [ 1551.324422][T29823] Tainted: [L]=SOFTLOCKUP [ 1551.324426][T29823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1551.324433][T29823] Call Trace: [ 1551.324438][T29823] [ 1551.324442][T29823] dump_stack_lvl+0x100/0x190 [ 1551.324460][T29823] print_circular_bug.cold+0x178/0x1c7 [ 1551.324477][T29823] check_noncircular+0x146/0x160 [ 1551.324493][T29823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1551.324506][T29823] __lock_acquire+0x14b8/0x2630 [ 1551.324519][T29823] lock_acquire+0x1cf/0x380 [ 1551.324529][T29823] ? __kmalloc_noprof+0xb2/0x850 [ 1551.324546][T29823] ? ovl_cache_entry_new+0x64/0x9d0 [ 1551.324558][T29823] fs_reclaim_acquire+0xc4/0x100 [ 1551.324569][T29823] ? __kmalloc_noprof+0xb2/0x850 [ 1551.324584][T29823] __kmalloc_noprof+0xb2/0x850 [ 1551.324600][T29823] ovl_cache_entry_new+0x64/0x9d0 [ 1551.324614][T29823] ovl_fill_merge+0x7dd/0x1000 [ 1551.324627][T29823] ? __pfx_ovl_fill_merge+0x10/0x10 [ 1551.324639][T29823] ? kernfs_root+0xee/0x2a0 [ 1551.324650][T29823] kernfs_fop_readdir+0x40c/0x990 [ 1551.324664][T29823] iterate_dir+0x296/0xae0 [ 1551.324674][T29823] ovl_dir_read_merged+0x37e/0x790 [ 1551.324688][T29823] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 1551.324701][T29823] ? __pfx_ovl_fill_merge+0x10/0x10 [ 1551.324717][T29823] ovl_iterate+0xb7b/0x11e0 [ 1551.324730][T29823] ? __pfx_down_read_killable+0x10/0x10 [ 1551.324743][T29823] ? __pfx_ovl_iterate+0x10/0x10 [ 1551.324754][T29823] wrap_directory_iterator+0xa2/0xe0 [ 1551.324771][T29823] iterate_dir+0x296/0xae0 [ 1551.324781][T29823] __x64_sys_getdents64+0x13b/0x2c0 [ 1551.324791][T29823] ? __x64_sys_futex+0x358/0x4d0 [ 1551.324803][T29823] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 1551.324813][T29823] ? __pfx_filldir64+0x10/0x10 [ 1551.324831][T29823] do_syscall_64+0x106/0xf80 [ 1551.324840][T29823] ? clear_bhb_loop+0x40/0x90 [ 1551.324852][T29823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1551.324863][T29823] RIP: 0033:0x7f474599c819 [ 1551.324873][T29823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1551.324883][T29823] RSP: 002b:00007f47437d3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 1551.324893][T29823] RAX: ffffffffffffffda RBX: 00007f4745c16270 RCX: 00007f474599c819 [ 1551.324900][T29823] RDX: 0000000000001011 RSI: 0000200000002600 RDI: 0000000000000009 [ 1551.324906][T29823] RBP: 00007f4745a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1551.324913][T29823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1551.324919][T29823] R13: 00007f4745c16308 R14: 00007f4745c16270 R15: 00007fff19ec02e8 [ 1551.324929][T29823] [ 1551.620686][T10560] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1551.635866][T10560] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1551.661405][T10560] usb 3-1: USB disconnect, device number 103 [ 1551.824629][T29826] FAULT_INJECTION: forcing a failure. [ 1551.824629][T29826] name failslab, interval 1, probability 0, space 0, times 0 [ 1551.838164][T29826] CPU: 1 UID: 0 PID: 29826 Comm: syz.3.6228 Tainted: G L syzkaller #0 PREEMPT(full) [ 1551.838182][T29826] Tainted: [L]=SOFTLOCKUP [ 1551.838186][T29826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1551.838193][T29826] Call Trace: [ 1551.838197][T29826] [ 1551.838201][T29826] dump_stack_lvl+0x100/0x190 [ 1551.838221][T29826] should_fail_ex.cold+0x5/0xa [ 1551.838234][T29826] ? fs_reclaim_acquire+0x70/0x100 [ 1551.838246][T29826] ? tomoyo_encode2+0xfb/0x3c0 [ 1551.838262][T29826] should_failslab+0xc2/0x120 [ 1551.838273][T29826] __kmalloc_noprof+0xe0/0x850 [ 1551.838290][T29826] tomoyo_encode2+0xfb/0x3c0 [ 1551.838306][T29826] tomoyo_encode+0x29/0x50 [ 1551.838323][T29826] tomoyo_realpath_from_path+0x18c/0x690 [ 1551.838344][T29826] tomoyo_path_number_perm+0x23c/0x580 [ 1551.838364][T29826] ? tomoyo_path_number_perm+0x22e/0x580 [ 1551.838386][T29826] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1551.838405][T29826] ? ksys_write+0x190/0x250 [ 1551.838418][T29826] ? rcu_is_watching+0x12/0xc0 [ 1551.838430][T29826] ? __fget_files+0x215/0x3d0 [ 1551.838442][T29826] ? hook_file_ioctl_common+0x146/0x410 [ 1551.838453][T29826] ? __fget_files+0x215/0x3d0 [ 1551.838463][T29826] ? lock_release+0x263/0x320 [ 1551.838474][T29826] ? __fget_files+0x21f/0x3d0 [ 1551.838486][T29826] security_file_ioctl+0xd3/0x230 [ 1551.838502][T29826] __x64_sys_ioctl+0xb7/0x210 [ 1551.838518][T29826] do_syscall_64+0x106/0xf80 [ 1551.838528][T29826] ? clear_bhb_loop+0x40/0x90 [ 1551.838540][T29826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1551.838551][T29826] RIP: 0033:0x7f17d939c819 [ 1551.838560][T29826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1551.838570][T29826] RSP: 002b:00007f17da1f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1551.838581][T29826] RAX: ffffffffffffffda RBX: 00007f17d9615fa0 RCX: 00007f17d939c819 [ 1551.838588][T29826] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 1551.838594][T29826] RBP: 00007f17da1f8090 R08: 0000000000000000 R09: 0000000000000000 [ 1551.838600][T29826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1551.838606][T29826] R13: 00007f17d9616038 R14: 00007f17d9615fa0 R15: 00007ffce00998c8 [ 1551.838616][T29826] [ 1551.838769][T29826] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1552.111313][ T792] usb 1-1: USB disconnect, device number 102 [ 1552.123492][T28944] PM: hibernation: Basic memory bitmaps freed [ 1552.173039][ T1042] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.202588][ T1042] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.252049][ T1042] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.311651][ T1042] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.377474][ T1042] bridge_slave_1: left allmulticast mode [ 1552.383334][ T1042] bridge_slave_1: left promiscuous mode [ 1552.389043][ T1042] bridge0: port 2(bridge_slave_1) entered disabled state [ 1552.397656][ T1042] bridge_slave_0: left allmulticast mode [ 1552.403582][ T1042] bridge_slave_0: left promiscuous mode [ 1552.409213][ T1042] bridge0: port 1(bridge_slave_0) entered disabled state [ 1552.464583][ T1042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1552.474070][ T1042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1552.483290][ T1042] bond0 (unregistering): Released all slaves [ 1552.742450][ T1042] hsr_slave_0: left promiscuous mode [ 1552.760816][ T1042] hsr_slave_1: left promiscuous mode [ 1552.766498][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1552.774085][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1552.782016][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1552.789388][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1552.799732][ T1042] veth1_macvtap: left promiscuous mode [ 1552.805846][ T1042] veth0_macvtap: left promiscuous mode [ 1552.811439][ T1042] veth1_vlan: left promiscuous mode [ 1552.816666][ T1042] veth0_vlan: left promiscuous mode [ 1552.895177][ T1042] team0 (unregistering): Port device team_slave_1 removed [ 1552.912414][ T1042] team0 (unregistering): Port device team_slave_0 removed