last executing test programs: 26m40.341389899s ago: executing program 32 (id=10): r0 = socket(0x2, 0x80805, 0x0) socket(0x10, 0x80002, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x109, &(0x7f0000006680)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000180)={@loopback, 0x8, 0x2, 0x0, 0x1, 0x3}, 0x20) ioctl$XFS_IOC_GETBMAPX(0xffffffffffffffff, 0xc0205838, 0x0) socket$inet6(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs={0x0, 0x0, 0x20004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x88) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x14) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x4e24, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x98}}}, &(0x7f0000000000)=0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x79a}, 0x8) 18m39.887347721s ago: executing program 33 (id=531): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0xa8}) r1 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000ac0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1f, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x4, @mcast2}]}, &(0x7f0000000180)=0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r7, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r7, &(0x7f00000000c0), 0x2) read(r7, &(0x7f00000001c0)=""/93, 0x5d) write$USERIO_CMD_SEND_INTERRUPT(r7, &(0x7f0000000580)={0x2, 0xf8}, 0x2) splice(r4, 0x0, r6, 0x0, 0x39000, 0x0) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5) 18m36.844857525s ago: executing program 34 (id=537): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0xa8}) r1 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000ac0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1f, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x4, @mcast2}]}, &(0x7f0000000180)=0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f00000000c0), 0x2) read(0xffffffffffffffff, &(0x7f00000001c0)=""/93, 0x5d) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0xf8}, 0x2) splice(r4, 0x0, r7, 0x0, 0x39000, 0x0) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffe3e) 18m30.40001018s ago: executing program 35 (id=545): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0xa8}) r1 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000ac0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1f, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x4, @mcast2}]}, &(0x7f0000000180)=0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r7, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r7, &(0x7f00000000c0), 0x2) read(r7, &(0x7f00000001c0)=""/93, 0x5d) write$USERIO_CMD_SEND_INTERRUPT(r7, &(0x7f0000000580)={0x2, 0xf8}, 0x2) splice(r4, 0x0, r6, 0x0, 0x39000, 0x0) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5) 18m28.360981074s ago: executing program 36 (id=548): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0xa8}) r1 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000ac0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1f, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x4, @mcast2}]}, &(0x7f0000000180)=0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r6, &(0x7f00000000c0), 0x2) read(r6, &(0x7f00000001c0)=""/93, 0x5d) write$USERIO_CMD_SEND_INTERRUPT(r6, &(0x7f0000000580)={0x2, 0xf8}, 0x2) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffe3e) 18m22.11592501s ago: executing program 37 (id=552): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x358, 0xffff8881f5c0a000) utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}}) pipe2$9p(&(0x7f0000000100), 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) write(r0, &(0x7f0000000140)='1', 0x1) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) 17m53.725179956s ago: executing program 8 (id=565): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154}) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x358, 0xffff8881f5c0a000) utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}}) pipe2$9p(&(0x7f0000000100), 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r8, 0xc008ae67, &(0x7f00000000c0)={0x3, 0xb018}) 17m52.582608791s ago: executing program 8 (id=567): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x358, 0xffff8881f5c0a000) utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}}) pipe2$9p(&(0x7f0000000100), 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) write(r0, &(0x7f0000000140)='1', 0x1) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) 17m43.726083042s ago: executing program 38 (id=559): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0xa8}) r1 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000ac0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1f, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x4, @mcast2}]}, &(0x7f0000000180)=0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r7, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r7, &(0x7f00000000c0), 0x2) read(r7, &(0x7f00000001c0)=""/93, 0x5d) write$USERIO_CMD_SEND_INTERRUPT(r7, &(0x7f0000000580)={0x2, 0xf8}, 0x2) splice(r4, 0x0, r6, 0x0, 0x39000, 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffe3e) 17m37.281541371s ago: executing program 39 (id=567): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x358, 0xffff8881f5c0a000) utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}}) pipe2$9p(&(0x7f0000000100), 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) write(r0, &(0x7f0000000140)='1', 0x1) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) 17m33.245731136s ago: executing program 40 (id=570): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000340)={0x7, 0x4b, 0x2}, 0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_DESTROY(r1, 0x0, 0x44014) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) r5 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x8087, 0x6, 0xd}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x3e, 0x0, &(0x7f0000000340)="5351e31d94c9f8291396b461802305624443ed3373010000000182d7c68e785968cb15539ab8469f765b4c62f07aaa4b460c5f1b3a0000986919d5d5fe00", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x403}, 0x50) r6 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000040)=0x85) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) creat(&(0x7f00000002c0)='./file0\x00', 0x0) setxattr$incfs_metadata(0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0) 17m31.248867293s ago: executing program 41 (id=572): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0xa8}) r1 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000ac0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1f, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x4, @mcast2}]}, &(0x7f0000000180)=0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r7, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r7, &(0x7f00000000c0), 0x2) read(r7, &(0x7f00000001c0)=""/93, 0x5d) write$USERIO_CMD_SEND_INTERRUPT(r7, &(0x7f0000000580)={0x2, 0xf8}, 0x2) splice(r4, 0x0, r6, 0x0, 0x39000, 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffe3e) 17m23.268361114s ago: executing program 42 (id=577): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154}) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x358, 0xffff8881f5c0a000) utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f00000000c0)={0x3, 0xb018}) 17m4.851006306s ago: executing program 0 (id=582): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$inet6(0xa, 0x80003, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) getegid() setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r4) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, r5, 0x801, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x80) 16m49.664330314s ago: executing program 43 (id=582): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$inet6(0xa, 0x80003, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) getegid() setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r4) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, r5, 0x801, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x80) 16m38.337329357s ago: executing program 44 (id=583): syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000480)={0x1, 0x2000000, 0x2, 0x2, {0x9, 0x80000000, 0x6, 0x56}}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$sock(r1, 0x0, 0x0, 0x20000000) syz_emit_ethernet(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$can_j1939(0x1d, 0x2, 0x7) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 16m34.246851178s ago: executing program 5 (id=581): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0xa8}) r1 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000ac0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1f, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x4, @mcast2}]}, &(0x7f0000000180)=0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r8, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r8, &(0x7f00000000c0), 0x2) splice(r4, 0x0, r7, 0x0, 0x39000, 0x0) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffe3e) 16m33.035813325s ago: executing program 5 (id=589): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x358, 0xffff8881f5c0a000) utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}}) pipe2$9p(&(0x7f0000000100), 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) write(r0, &(0x7f0000000140)='1', 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r7, 0xc008ae67, &(0x7f00000000c0)={0x3, 0xb018}) 16m32.065660296s ago: executing program 5 (id=591): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154}) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x358, 0xffff8881f5c0a000) utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}}) pipe2$9p(&(0x7f0000000100), 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) write(r0, &(0x7f0000000140)='1', 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r8, 0xc008ae67, &(0x7f00000000c0)={0x3, 0xb018}) 16m25.130385989s ago: executing program 45 (id=586): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) socket(0x10, 0x3, 0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x0, 0x8, 0x8, 0x2010, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x85ffffff}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000280)='GPL\x00', 0x2}, 0x94) 16m17.111694533s ago: executing program 46 (id=590): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}}) pipe2$9p(&(0x7f0000000100), 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) write(r0, &(0x7f0000000140)='1', 0x1) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r9, 0xc008ae67, &(0x7f00000000c0)={0x3, 0xb018}) 16m16.030756762s ago: executing program 47 (id=591): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154}) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x358, 0xffff8881f5c0a000) utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}}) pipe2$9p(&(0x7f0000000100), 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) write(r0, &(0x7f0000000140)='1', 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r8, 0xc008ae67, &(0x7f00000000c0)={0x3, 0xb018}) 15m58.933083867s ago: executing program 8 (id=587): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154}) syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x358, 0xffff8881f5c0a000) utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}}) pipe2$9p(&(0x7f0000000100), 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) write(r0, &(0x7f0000000140)='1', 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r8, 0xc008ae67, &(0x7f00000000c0)={0x3, 0xb018}) 15m58.03324634s ago: executing program 8 (id=596): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154}) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x358, 0xffff8881f5c0a000) utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}}) pipe2$9p(&(0x7f0000000100), 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r8, 0xc008ae67, &(0x7f00000000c0)={0x3, 0xb018}) 15m47.470600919s ago: executing program 48 (id=595): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x358, 0xffff8881f5c0a000) utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}}) pipe2$9p(&(0x7f0000000100), 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) write(r0, &(0x7f0000000140)='1', 0x1) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r9, 0xc008ae67, &(0x7f00000000c0)={0x3, 0xb018}) 15m42.486500722s ago: executing program 49 (id=596): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154}) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x358, 0xffff8881f5c0a000) utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}}) pipe2$9p(&(0x7f0000000100), 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r8, 0xc008ae67, &(0x7f00000000c0)={0x3, 0xb018}) 15m14.90896573s ago: executing program 50 (id=604): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0xa8}) r1 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000ac0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1f, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x4, @mcast2}]}, &(0x7f0000000180)=0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r8, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r8, &(0x7f00000000c0), 0x2) read(r8, &(0x7f00000001c0)=""/93, 0x5d) splice(r4, 0x0, r7, 0x0, 0x39000, 0x0) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffe3e) 15m12.419034403s ago: executing program 51 (id=607): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(0x0, 0x80) r3 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f00000001c0)={0x5, [0x8, 0x6], 0x3ff}, 0x10) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmmsg(r4, &(0x7f0000001980)=[{{0x0, 0xffffffffffffffa1, 0x0}, 0x3}], 0x1, 0x12002, 0x0) ioctl$SIOCGSTAMPNS(r4, 0x8907, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)="c1e22038ba518aeefb0386", 0xb}}, 0x0) sendto$inet(r3, &(0x7f0000000240)="cf3a19b8ec99cff8fb81d02704e49cb91c38d2286a3b5bb85dec652de5a00941066b93b56c74855898ad9319383b153e5800", 0x32, 0x4048841, &(0x7f0000000200)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x13}) ioctl$UI_DEV_CREATE(r5, 0x5501) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') fsopen(0x0, 0x33390a8e27754fdf) 15m11.358474622s ago: executing program 52 (id=608): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(0x0, 0x80) r3 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f00000001c0)={0x5, [0x8, 0x6], 0x3ff}, 0x10) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmmsg(r4, &(0x7f0000001980)=[{{0x0, 0xffffffffffffffa1, 0x0}, 0x3}], 0x1, 0x12002, 0x0) ioctl$SIOCGSTAMPNS(r4, 0x8907, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)="c1e22038ba518aeefb0386", 0xb}}, 0x0) sendto$inet(r3, &(0x7f0000000240)="cf3a19b8ec99cff8fb81d02704e49cb91c38d2286a3b5bb85dec652de5a00941066b93b56c74855898ad9319383b153e5800", 0x32, 0x4048841, &(0x7f0000000200)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x13}) ioctl$UI_DEV_CREATE(r5, 0x5501) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') writev(r6, &(0x7f00000006c0)=[{0x0, 0x2}, {&(0x7f00000004c0)='\n', 0x1}], 0x2) 15m10.986155096s ago: executing program 0 (id=597): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0xa8}) r1 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000ac0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1f, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x4, @mcast2}]}, &(0x7f0000000180)=0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r8, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r8, &(0x7f00000000c0), 0x2) read(r8, &(0x7f00000001c0)=""/93, 0x5d) write$USERIO_CMD_SEND_INTERRUPT(r8, &(0x7f0000000580)={0x2, 0xf8}, 0x2) splice(r4, 0x0, r7, 0x0, 0x39000, 0x0) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffe3e) 15m9.644221614s ago: executing program 0 (id=612): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x358, 0xffff8881f5c0a000) utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}}) pipe2$9p(&(0x7f0000000100), 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) write(r0, &(0x7f0000000140)='1', 0x1) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r9, 0xc008ae67, &(0x7f00000000c0)={0x3, 0xb018}) 15m8.66970316s ago: executing program 0 (id=613): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x358, 0xffff8881f5c0a000) utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}}) pipe2$9p(&(0x7f0000000100), 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) write(r0, &(0x7f0000000140)='1', 0x1) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r9, 0xc008ae67, &(0x7f00000000c0)={0x3, 0xb018}) 14m53.357866255s ago: executing program 53 (id=613): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x358, 0xffff8881f5c0a000) utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}}) pipe2$9p(&(0x7f0000000100), 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) write(r0, &(0x7f0000000140)='1', 0x1) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r9, 0xc008ae67, &(0x7f00000000c0)={0x3, 0xb018}) 14m36.821168248s ago: executing program 54 (id=615): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(0x0, 0x80) r3 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f00000001c0)={0x5, [0x8, 0x6], 0x3ff}, 0x10) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmmsg(r4, &(0x7f0000001980)=[{{0x0, 0xffffffffffffffa1, 0x0}, 0x3}], 0x1, 0x12002, 0x0) ioctl$SIOCGSTAMPNS(r4, 0x8907, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)="c1e22038ba518aeefb0386", 0xb}}, 0x0) sendto$inet(r3, &(0x7f0000000240)="cf3a19b8ec99cff8fb81d02704e49cb91c38d2286a3b5bb85dec652de5a00941066b93b56c74855898ad9319383b153e5800", 0x32, 0x4048841, &(0x7f0000000200)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x13}) ioctl$UI_DEV_CREATE(r5, 0x5501) 14m19.467622726s ago: executing program 5 (id=611): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(0x0, 0x80) r3 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f00000001c0)={0x5, [0x8, 0x6], 0x3ff}, 0x10) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmmsg(r4, &(0x7f0000001980)=[{{0x0, 0xffffffffffffffa1, 0x0}, 0x3}], 0x1, 0x12002, 0x0) ioctl$SIOCGSTAMPNS(r4, 0x8907, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)="c1e22038ba518aeefb0386", 0xb}}, 0x0) sendto$inet(r3, &(0x7f0000000240)="cf3a19b8ec99cff8fb81d02704e49cb91c38d2286a3b5bb85dec652de5a00941066b93b56c74855898ad9319383b153e5800", 0x32, 0x4048841, &(0x7f0000000200)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x13}) ioctl$UI_DEV_CREATE(r5, 0x5501) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') writev(r6, &(0x7f00000006c0)=[{0x0, 0x2}, {&(0x7f00000004c0)='\n', 0x1}], 0x2) 14m17.805335555s ago: executing program 5 (id=622): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x358, 0xffff8881f5c0a000) utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}}) pipe2$9p(&(0x7f0000000100), 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) write(r0, &(0x7f0000000140)='1', 0x1) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r9, 0xc008ae67, 0x0) 14m16.941438355s ago: executing program 5 (id=623): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(0x0, 0x80) r3 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f00000001c0)={0x5, [0x8, 0x6], 0x3ff}, 0x10) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmmsg(r4, &(0x7f0000001980)=[{{0x0, 0xffffffffffffffa1, 0x0}, 0x3}], 0x1, 0x12002, 0x0) ioctl$SIOCGSTAMPNS(r4, 0x8907, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)="c1e22038ba518aeefb0386", 0xb}}, 0x0) sendto$inet(r3, &(0x7f0000000240)="cf3a19b8ec99cff8fb81d02704e49cb91c38d2286a3b5bb85dec652de5a00941066b93b56c74855898ad9319383b153e5800", 0x32, 0x4048841, &(0x7f0000000200)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x13}) ioctl$UI_DEV_CREATE(r5, 0x5501) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') fsopen(0x0, 0x33390a8e27754fdf) 14m8.230708936s ago: executing program 2 (id=628): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(0x0, 0x80) r3 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f00000001c0)={0x5, [0x8, 0x6], 0x3ff}, 0x10) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmmsg(r4, &(0x7f0000001980)=[{{0x0, 0xffffffffffffffa1, 0x0}, 0x3}], 0x1, 0x12002, 0x0) ioctl$SIOCGSTAMPNS(r4, 0x8907, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)="c1e22038ba518aeefb0386", 0xb}}, 0x0) sendto$inet(r3, &(0x7f0000000240)="cf3a19b8ec99cff8fb81d02704e49cb91c38d2286a3b5bb85dec652de5a00941066b93b56c74855898ad9319383b153e5800", 0x32, 0x4048841, &(0x7f0000000200)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x13}) ioctl$UI_DEV_CREATE(r5, 0x5501) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') writev(r6, &(0x7f00000006c0)=[{0x0, 0x2}, {&(0x7f00000004c0)='\n', 0x1}], 0x2) fsopen(0x0, 0x33390a8e27754fdf) 14m6.67697249s ago: executing program 2 (id=629): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(0x0, 0x80) r3 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f00000001c0)={0x5, [0x8, 0x6], 0x3ff}, 0x10) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmmsg(r4, &(0x7f0000001980)=[{{0x0, 0xffffffffffffffa1, 0x0}, 0x3}], 0x1, 0x12002, 0x0) ioctl$SIOCGSTAMPNS(r4, 0x8907, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)="c1e22038ba518aeefb0386", 0xb}}, 0x0) sendto$inet(r3, &(0x7f0000000240)="cf3a19b8ec99cff8fb81d02704e49cb91c38d2286a3b5bb85dec652de5a00941066b93b56c74855898ad9319383b153e5800", 0x32, 0x4048841, &(0x7f0000000200)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x13}) ioctl$UI_DEV_CREATE(r5, 0x5501) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') writev(r6, &(0x7f00000006c0)=[{0x0, 0x2}, {&(0x7f00000004c0)='\n', 0x1}], 0x2) fsopen(0x0, 0x33390a8e27754fdf) 14m6.59568839s ago: executing program 55 (id=620): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(0x0, 0x80) r3 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f00000001c0)={0x5, [0x8, 0x6], 0x3ff}, 0x10) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmmsg(r4, &(0x7f0000001980)=[{{0x0, 0xffffffffffffffa1, 0x0}, 0x3}], 0x1, 0x12002, 0x0) ioctl$SIOCGSTAMPNS(r4, 0x8907, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)="c1e22038ba518aeefb0386", 0xb}}, 0x0) sendto$inet(r3, &(0x7f0000000240)="cf3a19b8ec99cff8fb81d02704e49cb91c38d2286a3b5bb85dec652de5a00941066b93b56c74855898ad9319383b153e5800", 0x32, 0x4048841, &(0x7f0000000200)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x13}) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') writev(r6, &(0x7f00000006c0)=[{0x0, 0x2}, {&(0x7f00000004c0)='\n', 0x1}], 0x2) 14m5.102020626s ago: executing program 2 (id=631): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(0x0, 0x80) r3 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f00000001c0)={0x5, [0x8, 0x6], 0x3ff}, 0x10) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$SIOCGSTAMPNS(r4, 0x8907, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)="c1e22038ba518aeefb0386", 0xb}}, 0x0) sendto$inet(r3, &(0x7f0000000240)="cf3a19b8ec99cff8fb81d02704e49cb91c38d2286a3b5bb85dec652de5a00941066b93b56c74855898ad9319383b153e5800", 0x32, 0x4048841, &(0x7f0000000200)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x13}) ioctl$UI_DEV_CREATE(r5, 0x5501) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') writev(r6, &(0x7f00000006c0)=[{0x0, 0x2}, {&(0x7f00000004c0)='\n', 0x1}], 0x2) fsopen(0x0, 0x33390a8e27754fdf) 14m3.608933186s ago: executing program 2 (id=632): syz_emit_ethernet(0x76, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) clock_adjtime(0x0, &(0x7f0000000280)={0x1000000000066fb, 0x800000000004, 0x376, 0x0, 0x0, 0x51, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200000240b, 0x3f, 0x9, 0x0, 0x80, 0xfffffffffffffffd, 0x1fff, 0xfffffffffffffffc, 0x4, 0x1010000000000, 0x0, 0x0, 0x100000000003f89, 0x0, 0x7fffffffffffffff}) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000d40)={0x0, 0x7}, 0x8) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1200880, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x2, 0x10, 0xef, 0x5, 0xa, 0x0, 0x70bd2d, 0x25dfdbff, [@sadb_x_policy={0x8, 0x12, 0x2, 0x1, 0x0, 0x6e6bb8, 0x3, {0x6, 0x32, 0x2, 0x7, 0x0, 0xe, 0x0, @in6=@private2, @in=@empty}}]}, 0x50}}, 0x840) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000001600)=[{0x0}], 0x1}, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') preadv(r4, &(0x7f0000010440)=[{&(0x7f0000000180)=""/160, 0xa0}], 0x1, 0xc03, 0x0) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/graphics/fbcon/rotate\x00', 0x1, 0x0) write(r5, &(0x7f0000000300)='1', 0x1) 14m2.047584854s ago: executing program 2 (id=633): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x358, 0xffff8881f5c0a000) utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}}) pipe2$9p(&(0x7f0000000100), 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) write(r0, &(0x7f0000000140)='1', 0x1) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2001, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r9, 0xc008ae67, &(0x7f00000000c0)={0x3, 0xb018}) 14m1.227572372s ago: executing program 56 (id=623): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(0x0, 0x80) r3 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f00000001c0)={0x5, [0x8, 0x6], 0x3ff}, 0x10) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmmsg(r4, &(0x7f0000001980)=[{{0x0, 0xffffffffffffffa1, 0x0}, 0x3}], 0x1, 0x12002, 0x0) ioctl$SIOCGSTAMPNS(r4, 0x8907, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)="c1e22038ba518aeefb0386", 0xb}}, 0x0) sendto$inet(r3, &(0x7f0000000240)="cf3a19b8ec99cff8fb81d02704e49cb91c38d2286a3b5bb85dec652de5a00941066b93b56c74855898ad9319383b153e5800", 0x32, 0x4048841, &(0x7f0000000200)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x13}) ioctl$UI_DEV_CREATE(r5, 0x5501) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') fsopen(0x0, 0x33390a8e27754fdf) 14m1.036046071s ago: executing program 2 (id=635): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(0x0, 0x80) r3 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f00000001c0)={0x5, [0x8, 0x6], 0x3ff}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0xffffffffffffffa1, 0x0}, 0x3}], 0x1, 0x12002, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)="c1e22038ba518aeefb0386", 0xb}}, 0x0) sendto$inet(r3, &(0x7f0000000240)="cf3a19b8ec99cff8fb81d02704e49cb91c38d2286a3b5bb85dec652de5a00941066b93b56c74855898ad9319383b153e5800", 0x32, 0x4048841, &(0x7f0000000200)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x13}) ioctl$UI_DEV_CREATE(r4, 0x5501) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') writev(r5, &(0x7f00000006c0)=[{0x0, 0x2}, {&(0x7f00000004c0)='\n', 0x1}], 0x2) fsopen(0x0, 0x33390a8e27754fdf) 13m44.576304863s ago: executing program 57 (id=635): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(0x0, 0x80) r3 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f00000001c0)={0x5, [0x8, 0x6], 0x3ff}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0xffffffffffffffa1, 0x0}, 0x3}], 0x1, 0x12002, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)="c1e22038ba518aeefb0386", 0xb}}, 0x0) sendto$inet(r3, &(0x7f0000000240)="cf3a19b8ec99cff8fb81d02704e49cb91c38d2286a3b5bb85dec652de5a00941066b93b56c74855898ad9319383b153e5800", 0x32, 0x4048841, &(0x7f0000000200)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x13}) ioctl$UI_DEV_CREATE(r4, 0x5501) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') writev(r5, &(0x7f00000006c0)=[{0x0, 0x2}, {&(0x7f00000004c0)='\n', 0x1}], 0x2) fsopen(0x0, 0x33390a8e27754fdf) 13m40.814658341s ago: executing program 6 (id=647): mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="10000000140003"], 0x10}}, 0x40000) 13m39.076614885s ago: executing program 6 (id=648): bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40082) mq_timedsend(r4, 0x0, 0x0, 0x4, 0x0) listns(&(0x7f00000010c0)={0x20, 0x0, 0x7}, &(0x7f0000000040)=[0x0], 0xf4240, 0x0) 13m35.917327607s ago: executing program 6 (id=649): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(0x0, 0x80) r3 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f00000001c0)={0x5, [0x8, 0x6], 0x3ff}, 0x10) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmmsg(r4, &(0x7f0000001980)=[{{0x0, 0xffffffffffffffa1, 0x0}, 0x3}], 0x1, 0x12002, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)="c1e22038ba518aeefb0386", 0xb}}, 0x0) sendto$inet(r3, &(0x7f0000000240)="cf3a19b8ec99cff8fb81d02704e49cb91c38d2286a3b5bb85dec652de5a00941066b93b56c74855898ad9319383b153e5800", 0x32, 0x4048841, &(0x7f0000000200)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x13}) ioctl$UI_DEV_CREATE(r5, 0x5501) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') writev(r6, &(0x7f00000006c0)=[{0x0, 0x2}, {&(0x7f00000004c0)='\n', 0x1}], 0x2) fsopen(0x0, 0x33390a8e27754fdf) 13m34.491797829s ago: executing program 6 (id=650): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f00000001c0)={0x5, [0x8, 0x6], 0x3ff}, 0x10) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmmsg(r4, &(0x7f0000001980)=[{{0x0, 0xffffffffffffffa1, 0x0}, 0x3}], 0x1, 0x12002, 0x0) ioctl$SIOCGSTAMPNS(r4, 0x8907, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)="c1e22038ba518aeefb0386", 0xb}}, 0x0) sendto$inet(r3, &(0x7f0000000240)="cf3a19b8ec99cff8fb81d02704e49cb91c38d2286a3b5bb85dec652de5a00941066b93b56c74855898ad9319383b153e5800", 0x32, 0x4048841, &(0x7f0000000200)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x13}) ioctl$UI_DEV_CREATE(r5, 0x5501) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') writev(r6, &(0x7f00000006c0)=[{0x0, 0x2}, {&(0x7f00000004c0)='\n', 0x1}], 0x2) 13m32.990905636s ago: executing program 6 (id=651): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x358, 0xffff8881f5c0a000) utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}}) pipe2$9p(&(0x7f0000000100), 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) write(r0, &(0x7f0000000140)='1', 0x1) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2001, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r9, 0xc008ae67, &(0x7f00000000c0)={0x3, 0xb018}) 13m32.261276957s ago: executing program 6 (id=652): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f00000001c0)={0x5, [0x8, 0x6], 0x3ff}, 0x10) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmmsg(r4, &(0x7f0000001980)=[{{0x0, 0xffffffffffffffa1, 0x0}, 0x3}], 0x1, 0x12002, 0x0) ioctl$SIOCGSTAMPNS(r4, 0x8907, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)="c1e22038ba518aeefb0386", 0xb}}, 0x0) sendto$inet(r3, &(0x7f0000000240)="cf3a19b8ec99cff8fb81d02704e49cb91c38d2286a3b5bb85dec652de5a00941066b93b56c74855898ad9319383b153e5800", 0x32, 0x4048841, &(0x7f0000000200)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x13}) ioctl$UI_DEV_CREATE(r5, 0x5501) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') writev(r6, &(0x7f00000006c0)=[{0x0, 0x2}, {&(0x7f00000004c0)='\n', 0x1}], 0x2) 13m16.239657294s ago: executing program 58 (id=652): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f00000001c0)={0x5, [0x8, 0x6], 0x3ff}, 0x10) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmmsg(r4, &(0x7f0000001980)=[{{0x0, 0xffffffffffffffa1, 0x0}, 0x3}], 0x1, 0x12002, 0x0) ioctl$SIOCGSTAMPNS(r4, 0x8907, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)="c1e22038ba518aeefb0386", 0xb}}, 0x0) sendto$inet(r3, &(0x7f0000000240)="cf3a19b8ec99cff8fb81d02704e49cb91c38d2286a3b5bb85dec652de5a00941066b93b56c74855898ad9319383b153e5800", 0x32, 0x4048841, &(0x7f0000000200)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x13}) ioctl$UI_DEV_CREATE(r5, 0x5501) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') writev(r6, &(0x7f00000006c0)=[{0x0, 0x2}, {&(0x7f00000004c0)='\n', 0x1}], 0x2) 5m34.017303546s ago: executing program 8 (id=616): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x358, 0xffff8881f5c0a000) utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}}) pipe2$9p(&(0x7f0000000100), 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r8, 0xc008ae67, &(0x7f00000000c0)={0x3, 0xb018}) 5m33.179919647s ago: executing program 8 (id=1497): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x5a6, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f00000000c0)=0x5, 0x4) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000100)={0x4, @local, 0x4e21, 0x1, 'fo\x00', 0x0, 0xbf64, 0x52}, 0x2c) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2a5, 0x54) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 5m27.825018275s ago: executing program 0 (id=653): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x358, 0xffff8881f5c0a000) utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}}) pipe2$9p(&(0x7f0000000100), 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) write(r0, &(0x7f0000000140), 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r9, 0xc008ae67, &(0x7f00000000c0)={0x3, 0xb018}) 5m26.513455479s ago: executing program 0 (id=1525): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) 5m16.66703217s ago: executing program 59 (id=1497): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x5a6, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f00000000c0)=0x5, 0x4) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000100)={0x4, @local, 0x4e21, 0x1, 'fo\x00', 0x0, 0xbf64, 0x52}, 0x2c) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2a5, 0x54) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 5m9.731324844s ago: executing program 60 (id=1525): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) 4.702591619s ago: executing program 7 (id=3124): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x7c0502, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061147c000000000084040000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) socket$unix(0x1, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x3377}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x4, 0x9, 0x0, 0x0, 0x7fffffff, 0x6}, 0x0, 0x0) 4.14093399s ago: executing program 3 (id=3128): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, 0x0, 0x0) 3.957189148s ago: executing program 3 (id=3130): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/scheduler\x00', 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) write(r0, &(0x7f00000001c0)='kyber', 0x5) 3.689664338s ago: executing program 3 (id=3132): r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000300)="60000000410009010200000000000000010100002a0000002c0001001000040000000000000000000000000006000600", 0x30) 3.573574501s ago: executing program 7 (id=3133): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0xa, 0x0, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0xc00, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 3.469451245s ago: executing program 3 (id=3135): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x488c9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000600)={{r2, &(0x7f0000000280)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x1270c0, &(0x7f0000000480)={@_ha_fsid={[0x6, 0x1]}, {0x34e2, 0x7, 0x2, 0x2}}, 0x40, &(0x7f00000004c0), &(0x7f0000000500)=0x7}, {[0x6, 0x4, 0x4, 0x6]}, 0x9, 0xbf, &(0x7f0000000540)=""/191}) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000080)=0x1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) shutdown(r0, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) 2.412307191s ago: executing program 7 (id=3137): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e147e02000000000e000a00100000000a", 0x29}], 0x1}, 0x4880) 2.185988021s ago: executing program 7 (id=3139): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x0, 0x188, 0xffffffff, 0x2a0, 0x0, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, {0x6}}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x15, @empty, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key=0x85, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) bpf$MAP_CREATE(0xb00000000000014, &(0x7f0000000480)=ANY=[@ANYRES16=r2], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a84000000060a0b160000000000000000020080085800048018000180080001006f7366000c00028008000140000000043c0001800b000100736f636b657400002c0002800800024000000011080001400000000208000240000000110800014000000000080002400000000f0900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r5) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000880)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000600)={0x200, r6, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x50, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ac}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x81}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x45}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x9, 0xb39a, 0xf, 0xffff]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffff7cf9}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x80000001}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xe8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1585}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x35}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x61}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x1, 0x1]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x4, 0xb4b1, 0x1, 0xe8ff, 0xf9b, 0x9]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3c}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7ff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x204}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x401}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x400}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x40a}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xa2}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x40000000}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}]}, @NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xd6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x400, 0x0, 0x6, 0xabeeaa0, 0x10000, 0xca, 0x9, 0x21600000]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}]}, @NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x982b}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x25}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x800000, 0x2, 0x0, 0x80000001]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x29}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x62}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x274}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x4000004}, 0x4008081) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="090b000000000000000005"], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r7, 0x22970aa46767f78b, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44, 0x0, 0x1}, 0x28) write$tun(r9, &(0x7f00000002c0)=ANY=[], 0x33) sendfile(r9, r8, 0x0, 0x10000) 2.011677045s ago: executing program 9 (id=3142): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580), 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x4}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r1 = dup(r0) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[], 0x8) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x34000) 1.712614373s ago: executing program 9 (id=3145): r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000300)="60000000410009010200000000000000010100002a0000002c000100100004000000000000000000000000000600060008000000100007000101010102020202000040001c000200", 0x48) 1.539241873s ago: executing program 9 (id=3147): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x4a, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0xa, 0x0, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0xc00, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.360381333s ago: executing program 1 (id=3148): r0 = socket(0x23, 0x5, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0xc401, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 1.350229122s ago: executing program 4 (id=3149): r0 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) write$smackfs_cipso(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='RAS\x00 0000000000006 00A0000F00000'], 0x30) 1.035243448s ago: executing program 1 (id=3150): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e147e02000000000e000a00100000000a", 0x29}], 0x1}, 0x4880) 1.033976207s ago: executing program 4 (id=3151): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x1, 0x56d, 0x4, 0x42, 0xffffffffffffffff, 0x1000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000005c0), &(0x7f0000000740)="69b91235d81b5e", 0xfffffff8, r0}, 0x38) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r2, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f00000002c0)=r3, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r3, 0x4) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, 0x0, 0xfe33) 899.096594ms ago: executing program 1 (id=3152): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) symlinkat(0x0, 0xffffffffffffff9c, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x11, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xd8, 0x3, 0xd0e7500, 0x0, 0x60, 0x170, 0x1d8, 0x1d8, 0x170, 0x1d8, 0x3, 0x0, {[{{@ip={@private, @dev={0xac, 0x14, 0xd, 0x36}, 0xffffffff, 0xff, 'nr0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x1, 0xd}, 0x0, 0x70, 0xd8, 0x0, {0x60000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x100, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@loopback, @private, 0x0, 0x0, 'tunl0\x00', 'veth1_to_bond\x00', {}, {}, 0x0, 0x0, 0x8}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) 817.904203ms ago: executing program 7 (id=3153): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 629.630518ms ago: executing program 9 (id=3154): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x0) 581.640826ms ago: executing program 1 (id=3155): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580), 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x4}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r1 = dup(r0) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[], 0x8) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x34000) 581.146949ms ago: executing program 7 (id=3156): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="640000001000030427bd70000300000000000000", @ANYRES32=0x0, @ANYBLOB="46040900000000003c00128009000100766c616e000000002c00028006000100010000000600050088a80000100004800c0001000500000001000000860c05008100000008000500", @ANYRES32=r5], 0x64}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="1c0012800b00010062726964676500000c0002800500070006"], 0x44}, 0x1, 0x0, 0x0, 0x2000c051}, 0x40000) 531.342426ms ago: executing program 4 (id=3157): r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000300)="60000000410009010200000000000000010100002a0000002c000100100004000000000000000000000000000600060008000000100007000101010102020202000040001c000200", 0x48) 366.680998ms ago: executing program 9 (id=3158): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000060a0b0400000000000000000200ffff0900010073797a30000000000900020073797a320000000034000480300001800b00010074617267657400002000028008000100534554000c00030000000000000004920800024000"], 0xfea1}}, 0x800) 346.4301ms ago: executing program 1 (id=3159): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000480)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000340)='\x00\x00\x00\x00', 0x4, 0x240250d4, &(0x7f0000000300)={0x11, 0x8100, r2, 0x1, 0x85, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) 315.308647ms ago: executing program 4 (id=3160): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000700850000002d"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 216.715185ms ago: executing program 3 (id=3161): r0 = socket(0x23, 0x5, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0xc401, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 141.677628ms ago: executing program 4 (id=3162): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e147e02000000000e000a00100000000a800000", 0x2c}], 0x1}, 0x4880) 108.865998ms ago: executing program 1 (id=3163): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x2) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r2], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) writev(r4, &(0x7f0000000880)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000300)="1100", 0x2}, {&(0x7f0000000480)="bff86c0c12df76", 0x7}, {&(0x7f0000000540)="09d6c6bb9e1e63174fdb169d5c", 0xd}], 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x8000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x98, &(0x7f0000000600)=[{}, {}], 0x10, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x98, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x3, [@union={0x6, 0x6, 0x0, 0x5, 0x1, 0x0, [{0x2, 0x0, 0xf1c}, {0x4, 0x2, 0x7}, {0x7, 0x1, 0xfffffffe}, {0xd, 0x5, 0x7}, {0xc, 0x2, 0x1}, {0x5, 0x1, 0x3}]}]}, {0x0, [0x7f]}}, &(0x7f00000008c0)=""/119, 0x6f, 0x77, 0x1, 0xa, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1, 0xb, &(0x7f0000000140)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xc, '\x00', 0x0, @fallback=0x1c, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10049, '\x00', r3, @fallback=0x2a, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @value=r0}, 0x94) r10 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r10, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xfffffffffffffe6e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x3}]}, &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 103.764019ms ago: executing program 3 (id=3164): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x4a, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0xa, 0x0, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0xc00, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 21.318219ms ago: executing program 9 (id=3165): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) r1 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b720000003000000850000011b000000950000000000000004e048bb46e46a1f4606c7e1df85dc7b2b857dbcc12b6019feec3fca903c62117f602faaa904f800000000000000039130d8cbe084d35da7914888fefadcf0450c9e6fae4cf6433f199667469c4013a4ac"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x101, 0x8, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000040000000600000080"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x619, r3, 0x100000000000000}, 0x38) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x3) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r5, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002840)={0xe4, 0x27, 0x1, 0x0, 0x0, "", [@nested={0xd1, 0x0, 0x0, 0x1, [@generic="24d4e3455c7216da3484447f8a081f930884b55764ca84de3d0e7bc8d6f29cd84ba9408cf2351604f1724e10a8fcc3988de886d82375980e92a1ba2f8410b06773cbbf6293af17222761aa1289e6a8f1d888f4809cdccfe1c8695630dcb6bad9b53d1d97f2f820a715ce709fcaa40a70dc4c98ebbe761c0eec46d4f50508215e72fc781a471b1a7c769a074f2d6388253cfdd4b0e37a788fbb7296ae39bb35439c66437fa3347adfaca46f74fbc95f1b070287096cc9bdc953ea637c118a68a8ddc03aa44e8aa8ca5dac063a05"]}]}, 0xe4}], 0x1}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x9}}}}}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r6, 0x107, 0x1, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x170}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000000080), 0x4) 0s ago: executing program 4 (id=3166): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x44, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101, 0x1c564}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0xba01, 0x0, 0x40d0}, 0x810) kernel console output (not intermixed with test programs): 1480.726729][T18402] RIP: 0033:0x7f06ea2de159 [ 1480.726741][T18402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1480.726752][T18402] RSP: 002b:00007f06e8536028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1480.726766][T18402] RAX: ffffffffffffffda RBX: 00007f06ea565fa0 RCX: 00007f06ea2de159 [ 1480.726778][T18402] RDX: 00000000000c0a02 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 1480.726786][T18402] RBP: 00007f06ea37506b R08: 0000000000000000 R09: 0000000000000000 [ 1480.726794][T18402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1480.726801][T18402] R13: 00007f06ea566038 R14: 00007f06ea565fa0 R15: 00007ffcbdd8d028 [ 1480.726818][T18402] [ 1480.974219][ T9011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1481.009400][ T9011] bond0 (unregistering): Released all slaves [ 1485.679795][ T9011] hsr_slave_0: left promiscuous mode [ 1485.959214][ T9011] hsr_slave_1: left promiscuous mode [ 1485.960556][ T9011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1486.507301][ T9011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1486.857363][ T9011] veth1_vlan: left promiscuous mode [ 1486.857587][ T9011] veth0_vlan: left promiscuous mode [ 1486.933169][T18494] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.1984'. [ 1489.640882][ T9011] team0 (unregistering): Port device team_slave_1 removed [ 1489.744048][ T9011] team0 (unregistering): Port device team_slave_0 removed [ 1491.024386][T18546] netlink: 6024 bytes leftover after parsing attributes in process `syz.7.2001'. [ 1491.935918][T18566] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2005'. [ 1492.401372][T18574] syzkaller0: entered promiscuous mode [ 1492.401402][T18574] syzkaller0: entered allmulticast mode [ 1493.572958][T18604] netlink: 76 bytes leftover after parsing attributes in process `syz.9.2017'. [ 1494.529905][T18638] netlink: 6024 bytes leftover after parsing attributes in process `syz.7.2028'. [ 1494.813662][T18650] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2032'. [ 1494.942699][T18656] FAULT_INJECTION: forcing a failure. [ 1494.942699][T18656] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1494.942737][T18656] CPU: 1 UID: 0 PID: 18656 Comm: syz.3.2034 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1494.942762][T18656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1494.942775][T18656] Call Trace: [ 1494.942784][T18656] [ 1494.942795][T18656] dump_stack_lvl+0xe8/0x150 [ 1494.942832][T18656] should_fail_ex+0x46b/0x600 [ 1494.942868][T18656] get_futex_key+0x1b4/0x1580 [ 1494.942906][T18656] ? __pfx_keyctl_pkey_params_get_2+0x10/0x10 [ 1494.942966][T18656] ? __pfx_get_futex_key+0x10/0x10 [ 1494.942997][T18656] ? rcu_is_watching+0x16/0xb0 [ 1494.943031][T18656] ? kfree+0x4d/0x6d0 [ 1494.943064][T18656] futex_wake+0x119/0x600 [ 1494.943092][T18656] ? __pfx_keyctl_pkey_e_d_s+0x10/0x10 [ 1494.943117][T18656] ? __pfx_futex_wake+0x10/0x10 [ 1494.943143][T18656] ? do_raw_spin_lock+0x12b/0x2f0 [ 1494.943182][T18656] do_futex+0x458/0x4e0 [ 1494.943209][T18656] ? __pfx_do_futex+0x10/0x10 [ 1494.943238][T18656] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1494.943277][T18656] __se_sys_futex+0x3a8/0x450 [ 1494.943306][T18656] ? __pfx___se_sys_futex+0x10/0x10 [ 1494.943327][T18656] ? rcu_is_watching+0x16/0xb0 [ 1494.943365][T18656] ? __x64_sys_futex+0x21/0xf0 [ 1494.943390][T18656] do_syscall_64+0x166/0x520 [ 1494.943411][T18656] ? trace_irq_disable+0x3b/0x140 [ 1494.943438][T18656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1494.943458][T18656] ? clear_bhb_loop+0x70/0xc0 [ 1494.943481][T18656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1494.943501][T18656] RIP: 0033:0x7f06ea2de159 [ 1494.943521][T18656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1494.943540][T18656] RSP: 002b:00007f06e85360e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1494.943563][T18656] RAX: ffffffffffffffda RBX: 00007f06ea565fa8 RCX: 00007f06ea2de159 [ 1494.943579][T18656] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f06ea565fac [ 1494.943593][T18656] RBP: 00007f06ea565fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1494.943607][T18656] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1494.943621][T18656] R13: 00007f06ea566038 R14: 00007ffcbdd8cf40 R15: 00007ffcbdd8d028 [ 1494.943654][T18656] [ 1495.382404][T18667] tmpfs: Unsupported parameter 'huge' [ 1496.051454][T18688] FAULT_INJECTION: forcing a failure. [ 1496.051454][T18688] name failslab, interval 1, probability 0, space 0, times 0 [ 1496.051494][T18688] CPU: 0 UID: 0 PID: 18688 Comm: syz.3.2042 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1496.051521][T18688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1496.051537][T18688] Call Trace: [ 1496.051545][T18688] [ 1496.051556][T18688] dump_stack_lvl+0xe8/0x150 [ 1496.051594][T18688] should_fail_ex+0x46b/0x600 [ 1496.051631][T18688] should_failslab+0xa8/0x100 [ 1496.051656][T18688] __kmalloc_noprof+0xfb/0x790 [ 1496.051686][T18688] ? group_cpus_evenly+0x2cf/0x5e0 [ 1496.051711][T18688] ? group_cpus_evenly+0x2cf/0x5e0 [ 1496.051743][T18688] group_cpus_evenly+0x2cf/0x5e0 [ 1496.051772][T18688] ? __pfx_group_cpus_evenly+0x10/0x10 [ 1496.051811][T18688] blk_mq_map_queues+0xb1/0x490 [ 1496.051843][T18688] ? __pfx_blk_mq_map_queues+0x10/0x10 [ 1496.051864][T18688] ? __kmalloc_node_noprof+0x58e/0x7b0 [ 1496.051895][T18688] ? blk_mq_alloc_tag_set+0x5f8/0x1000 [ 1496.051920][T18688] ? blk_mq_update_queue_map+0x383/0x450 [ 1496.051954][T18688] blk_mq_alloc_tag_set+0x8dd/0x1000 [ 1496.051993][T18688] loop_add+0x436/0xb50 [ 1496.052019][T18688] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1496.052053][T18688] ? __pfx_loop_add+0x10/0x10 [ 1496.052106][T18688] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1496.052140][T18688] loop_control_ioctl+0x12b/0x5b0 [ 1496.052167][T18688] ? __fget_files+0x2a/0x420 [ 1496.052192][T18688] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1496.052216][T18688] ? __fget_files+0x2a/0x420 [ 1496.052244][T18688] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1496.052271][T18688] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1496.052296][T18688] __se_sys_ioctl+0xff/0x170 [ 1496.052328][T18688] do_syscall_64+0x166/0x520 [ 1496.052352][T18688] ? trace_irq_disable+0x3b/0x140 [ 1496.052379][T18688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1496.052400][T18688] ? clear_bhb_loop+0x70/0xc0 [ 1496.052425][T18688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1496.052449][T18688] RIP: 0033:0x7f06ea2de159 [ 1496.052469][T18688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1496.052490][T18688] RSP: 002b:00007f06e8536028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1496.052515][T18688] RAX: ffffffffffffffda RBX: 00007f06ea565fa0 RCX: 00007f06ea2de159 [ 1496.052532][T18688] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1496.052548][T18688] RBP: 00007f06ea37506b R08: 0000000000000000 R09: 0000000000000000 [ 1496.052564][T18688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1496.052578][T18688] R13: 00007f06ea566038 R14: 00007f06ea565fa0 R15: 00007ffcbdd8d028 [ 1496.052611][T18688] [ 1496.908353][T18704] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2046'. [ 1497.628208][T18733] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2054'. [ 1497.928807][T18737] FAULT_INJECTION: forcing a failure. [ 1497.928807][T18737] name failslab, interval 1, probability 0, space 0, times 0 [ 1497.928847][T18737] CPU: 0 UID: 0 PID: 18737 Comm: syz.3.2055 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1497.928877][T18737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1497.928891][T18737] Call Trace: [ 1497.928900][T18737] [ 1497.928910][T18737] dump_stack_lvl+0xe8/0x150 [ 1497.928948][T18737] should_fail_ex+0x46b/0x600 [ 1497.928981][T18737] ? sock_alloc_inode+0x2c/0x1a0 [ 1497.929013][T18737] should_failslab+0xa8/0x100 [ 1497.929039][T18737] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 1497.929071][T18737] ? sock_alloc_inode+0x2c/0x1a0 [ 1497.929104][T18737] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1497.929133][T18737] sock_alloc_inode+0x2c/0x1a0 [ 1497.929163][T18737] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1497.929191][T18737] alloc_inode+0x6a/0x1b0 [ 1497.929215][T18737] __sock_create+0x12d/0x9d0 [ 1497.929255][T18737] __sys_socket+0xd6/0x1b0 [ 1497.929298][T18737] __x64_sys_socket+0x7a/0x90 [ 1497.929330][T18737] do_syscall_64+0x166/0x520 [ 1497.929355][T18737] ? trace_irq_disable+0x3b/0x140 [ 1497.929384][T18737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1497.929405][T18737] ? clear_bhb_loop+0x70/0xc0 [ 1497.929431][T18737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1497.929452][T18737] RIP: 0033:0x7f06ea2de159 [ 1497.929472][T18737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1497.929491][T18737] RSP: 002b:00007f06e8536028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1497.929515][T18737] RAX: ffffffffffffffda RBX: 00007f06ea565fa0 RCX: 00007f06ea2de159 [ 1497.929532][T18737] RDX: 0000000000000000 RSI: 0000000000080805 RDI: 0000000000000010 [ 1497.929546][T18737] RBP: 00007f06ea37506b R08: 0000000000000000 R09: 0000000000000000 [ 1497.929560][T18737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1497.929574][T18737] R13: 00007f06ea566038 R14: 00007f06ea565fa0 R15: 00007ffcbdd8d028 [ 1497.929607][T18737] [ 1497.929618][T18737] socket: no more sockets [ 1498.508516][T17906] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1498.802358][T17906] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1498.809704][T17906] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1498.867925][T18742] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.2057'. [ 1500.021466][T17906] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1500.047104][T17906] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1500.388736][T17906] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1501.354322][T17906] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1501.660229][T17906] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1501.745433][T18782] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2068'. [ 1502.539725][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 1502.539797][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 1502.953688][T18802] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.2072'. [ 1504.323841][T18818] FAULT_INJECTION: forcing a failure. [ 1504.323841][T18818] name failslab, interval 1, probability 0, space 0, times 0 [ 1504.323894][T18818] CPU: 0 UID: 0 PID: 18818 Comm: syz.7.2076 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1504.323923][T18818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1504.323937][T18818] Call Trace: [ 1504.323947][T18818] [ 1504.323957][T18818] dump_stack_lvl+0xe8/0x150 [ 1504.323994][T18818] should_fail_ex+0x46b/0x600 [ 1504.324029][T18818] should_failslab+0xa8/0x100 [ 1504.324053][T18818] __kmalloc_noprof+0xfb/0x790 [ 1504.324082][T18818] ? group_cpus_evenly+0x2cf/0x5e0 [ 1504.324106][T18818] ? group_cpus_evenly+0x2cf/0x5e0 [ 1504.324136][T18818] group_cpus_evenly+0x2cf/0x5e0 [ 1504.324162][T18818] ? __pfx_group_cpus_evenly+0x10/0x10 [ 1504.324200][T18818] blk_mq_map_queues+0xb1/0x490 [ 1504.324230][T18818] ? __pfx_blk_mq_map_queues+0x10/0x10 [ 1504.324251][T18818] ? __kmalloc_node_noprof+0x58e/0x7b0 [ 1504.324282][T18818] ? blk_mq_alloc_tag_set+0x5f8/0x1000 [ 1504.324306][T18818] ? blk_mq_update_queue_map+0x383/0x450 [ 1504.324336][T18818] blk_mq_alloc_tag_set+0x8dd/0x1000 [ 1504.324371][T18818] loop_add+0x436/0xb50 [ 1504.324395][T18818] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1504.324429][T18818] ? __pfx_loop_add+0x10/0x10 [ 1504.324469][T18818] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1504.324494][T18818] loop_control_ioctl+0x12b/0x5b0 [ 1504.324521][T18818] ? __fget_files+0x2a/0x420 [ 1504.324539][T18818] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1504.324557][T18818] ? __fget_files+0x2a/0x420 [ 1504.324577][T18818] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1504.324597][T18818] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1504.324616][T18818] __se_sys_ioctl+0xff/0x170 [ 1504.324640][T18818] do_syscall_64+0x166/0x520 [ 1504.324666][T18818] ? trace_irq_disable+0x3b/0x140 [ 1504.324688][T18818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1504.324706][T18818] ? clear_bhb_loop+0x70/0xc0 [ 1504.324726][T18818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1504.324743][T18818] RIP: 0033:0x7fd4cbd1e159 [ 1504.324759][T18818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1504.324775][T18818] RSP: 002b:00007fd4c9f76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1504.324794][T18818] RAX: ffffffffffffffda RBX: 00007fd4cbfa5fa0 RCX: 00007fd4cbd1e159 [ 1504.324807][T18818] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1504.324818][T18818] RBP: 00007fd4cbdb506b R08: 0000000000000000 R09: 0000000000000000 [ 1504.324829][T18818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1504.324839][T18818] R13: 00007fd4cbfa6038 R14: 00007fd4cbfa5fa0 R15: 00007fff9f6f8f18 [ 1504.324864][T18818] [ 1504.519763][T18821] input: syz1 as /devices/virtual/input/input108 [ 1504.701546][T17906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1504.775348][T17906] 8021q: adding VLAN 0 to HW filter on device team0 [ 1504.842307][ T2979] bridge0: port 1(bridge_slave_0) entered blocking state [ 1504.843557][ T2979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1504.912010][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1504.912146][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1505.291270][T18846] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2085'. [ 1505.316761][T18846] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2085'. [ 1505.813639][T18864] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.2088'. [ 1505.837807][T18851] nvmet: adding nsid 1 to subsystem testsubsys [ 1507.135257][T18881] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2092'. [ 1507.193977][ T5248] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1507.448747][T18843] null_blk: disk nullb1 created [ 1507.731687][T18903] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2098'. [ 1508.080201][T17906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1508.146495][T18920] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 1508.370627][T18934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2104'. [ 1508.933494][ T5248] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1508.968719][T17906] veth0_vlan: entered promiscuous mode [ 1509.001877][T17906] veth1_vlan: entered promiscuous mode [ 1509.958420][T17906] veth0_macvtap: entered promiscuous mode [ 1509.983395][T17906] veth1_macvtap: entered promiscuous mode [ 1510.084581][T17906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1510.151267][T17906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1510.296657][T18969] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2115'. [ 1513.637203][ T58] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.916843][ T58] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.931060][ T147] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.933237][ T5843] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.295135][T19012] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.2125'. [ 1514.296762][ T36] audit: type=1807 audit(1790841381.882:156): action=measure res=1 [ 1514.321923][T18999] ima: policy update failed [ 1514.342980][ T36] audit: type=1802 audit(1790841381.975:157): pid=18999 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.9.2122" res=0 errno=0 [ 1514.662326][ T6461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1514.662349][ T6461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1514.692393][T19018] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2127'. [ 1514.801713][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1514.801736][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1516.790227][T19062] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1518.995174][ T5922] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1519.124204][ T5922] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1519.727886][T19098] fido_id[19098]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1520.199124][T19124] FAULT_INJECTION: forcing a failure. [ 1520.199124][T19124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1520.199225][T19124] CPU: 0 UID: 0 PID: 19124 Comm: syz.4.2160 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1520.199261][T19124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1520.199273][T19124] Call Trace: [ 1520.199283][T19124] [ 1520.199292][T19124] dump_stack_lvl+0xe8/0x150 [ 1520.199327][T19124] should_fail_ex+0x46b/0x600 [ 1520.199362][T19124] strncpy_from_user+0x36/0x2c0 [ 1520.199394][T19124] path_setxattrat+0x191/0x450 [ 1520.199434][T19124] ? __pfx_path_setxattrat+0x10/0x10 [ 1520.199460][T19124] ? do_futex+0x3e7/0x4e0 [ 1520.199503][T19124] ? rcu_is_watching+0x16/0xb0 [ 1520.199543][T19124] __x64_sys_setxattr+0xbc/0xe0 [ 1520.199579][T19124] do_syscall_64+0x166/0x520 [ 1520.199601][T19124] ? trace_irq_disable+0x3b/0x140 [ 1520.199631][T19124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.199654][T19124] ? clear_bhb_loop+0x70/0xc0 [ 1520.199680][T19124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.199701][T19124] RIP: 0033:0x7fabae55e159 [ 1520.199723][T19124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1520.199742][T19124] RSP: 002b:00007fabac7b6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 1520.199766][T19124] RAX: ffffffffffffffda RBX: 00007fabae7e5fa0 RCX: 00007fabae55e159 [ 1520.199783][T19124] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1520.199803][T19124] RBP: 00007fabae5f506b R08: 0000000000000003 R09: 0000000000000000 [ 1520.199818][T19124] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 1520.199833][T19124] R13: 00007fabae7e6038 R14: 00007fabae7e5fa0 R15: 00007fff72f82618 [ 1520.199868][T19124] [ 1520.553744][T19127] Bluetooth: MGMT ver 1.23 [ 1520.710457][T19133] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.2164'. [ 1521.445299][ T8637] Bluetooth: hci3: command 0x0406 tx timeout [ 1521.967965][T19132] device-mapper: table: 248:0: mirror: Unrecognised feature requested (-EINVAL) [ 1521.968079][T19132] device-mapper: ioctl: error adding target to table [ 1524.185574][T19178] FAULT_INJECTION: forcing a failure. [ 1524.185574][T19178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1524.185615][T19178] CPU: 0 UID: 0 PID: 19178 Comm: syz.9.2172 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1524.185642][T19178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1524.185656][T19178] Call Trace: [ 1524.185666][T19178] [ 1524.185676][T19178] dump_stack_lvl+0xe8/0x150 [ 1524.185714][T19178] should_fail_ex+0x46b/0x600 [ 1524.185750][T19178] strncpy_from_user+0x36/0x2c0 [ 1524.185793][T19178] path_setxattrat+0x191/0x450 [ 1524.185833][T19178] ? __pfx_path_setxattrat+0x10/0x10 [ 1524.185861][T19178] ? do_futex+0x3e7/0x4e0 [ 1524.185911][T19178] ? rcu_is_watching+0x16/0xb0 [ 1524.185950][T19178] __x64_sys_setxattr+0xbc/0xe0 [ 1524.185978][T19178] do_syscall_64+0x166/0x520 [ 1524.186001][T19178] ? trace_irq_disable+0x3b/0x140 [ 1524.186032][T19178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1524.186054][T19178] ? clear_bhb_loop+0x70/0xc0 [ 1524.186080][T19178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1524.186102][T19178] RIP: 0033:0x7f3638d8e159 [ 1524.186122][T19178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1524.186141][T19178] RSP: 002b:00007f3636fe6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 1524.186166][T19178] RAX: ffffffffffffffda RBX: 00007f3639015fa0 RCX: 00007f3638d8e159 [ 1524.186183][T19178] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1524.186199][T19178] RBP: 00007f3638e2506b R08: 0000000000000003 R09: 0000000000000000 [ 1524.186213][T19178] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 1524.186227][T19178] R13: 00007f3639016038 R14: 00007f3639015fa0 R15: 00007fffbcc9b328 [ 1524.186260][T19178] [ 1525.145289][T19206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2178'. [ 1525.743602][T19210] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2179'. [ 1527.554404][T19227] sctp: [Deprecated]: syz.1.2185 (pid 19227) Use of int in max_burst socket option deprecated. [ 1527.554404][T19227] Use struct sctp_assoc_value instead [ 1527.946933][T19242] FAULT_INJECTION: forcing a failure. [ 1527.946933][T19242] name failslab, interval 1, probability 0, space 0, times 0 [ 1527.946966][T19242] CPU: 0 UID: 0 PID: 19242 Comm: syz.1.2191 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1527.946984][T19242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1527.946991][T19242] Call Trace: [ 1527.946997][T19242] [ 1527.947003][T19242] dump_stack_lvl+0xe8/0x150 [ 1527.947026][T19242] should_fail_ex+0x46b/0x600 [ 1527.947045][T19242] should_failslab+0xa8/0x100 [ 1527.947061][T19242] __kmalloc_cache_noprof+0xa1/0x680 [ 1527.947078][T19242] ? resv_map_alloc+0x51/0x2e0 [ 1527.947093][T19242] ? resv_map_alloc+0x51/0x2e0 [ 1527.947117][T19242] resv_map_alloc+0x51/0x2e0 [ 1527.947133][T19242] hugetlbfs_get_inode+0x5f/0x660 [ 1527.947150][T19242] hugetlb_file_setup+0x21d/0x630 [ 1527.947165][T19242] ksys_mmap_pgoff+0x1ec/0x720 [ 1527.947180][T19242] ? __x64_sys_mmap+0x7f/0x140 [ 1527.947195][T19242] do_syscall_64+0x166/0x520 [ 1527.947208][T19242] ? trace_irq_disable+0x3b/0x140 [ 1527.947223][T19242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1527.947235][T19242] ? clear_bhb_loop+0x70/0xc0 [ 1527.947249][T19242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1527.947261][T19242] RIP: 0033:0x7f548734e159 [ 1527.947272][T19242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1527.947282][T19242] RSP: 002b:00007f54855a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1527.947295][T19242] RAX: ffffffffffffffda RBX: 00007f54875d5fa0 RCX: 00007f548734e159 [ 1527.947304][T19242] RDX: 0000000001000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 1527.947311][T19242] RBP: 00007f54873e506b R08: ffffffffffffffff R09: 0000000000000000 [ 1527.947319][T19242] R10: 000200000005c831 R11: 0000000000000246 R12: 0000000000000000 [ 1527.947326][T19242] R13: 00007f54875d6038 R14: 00007f54875d5fa0 R15: 00007ffd2e74fa38 [ 1527.947346][T19242] [ 1528.950892][T19253] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2194'. [ 1529.051195][T19255] FAULT_INJECTION: forcing a failure. [ 1529.051195][T19255] name failslab, interval 1, probability 0, space 0, times 0 [ 1529.051226][T19255] CPU: 1 UID: 0 PID: 19255 Comm: syz.4.2195 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1529.051246][T19255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1529.051257][T19255] Call Trace: [ 1529.051264][T19255] [ 1529.051272][T19255] dump_stack_lvl+0xe8/0x150 [ 1529.051304][T19255] should_fail_ex+0x46b/0x600 [ 1529.051334][T19255] should_failslab+0xa8/0x100 [ 1529.051353][T19255] __kmalloc_noprof+0xfb/0x790 [ 1529.051378][T19255] ? __vb2_queue_alloc+0x2a0/0x1660 [ 1529.051513][T19255] ? __vb2_queue_alloc+0x2a0/0x1660 [ 1529.051540][T19255] __vb2_queue_alloc+0x2a0/0x1660 [ 1529.051587][T19255] vb2_core_reqbufs+0xc3f/0x1470 [ 1529.051622][T19255] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1529.051643][T19255] ? vb2_verify_memory_type+0x1fc/0x570 [ 1529.051667][T19255] ? vb2_reqbufs+0x399/0x630 [ 1529.051750][T19255] v4l2_m2m_ioctl_reqbufs+0x110/0x200 [ 1529.051833][T19255] __video_do_ioctl+0x8b2/0xc70 [ 1529.051893][T19255] ? __pfx___video_do_ioctl+0x10/0x10 [ 1529.051931][T19255] video_usercopy+0x860/0x1430 [ 1529.051963][T19255] ? __pfx___video_do_ioctl+0x10/0x10 [ 1529.051989][T19255] ? __pfx_video_usercopy+0x10/0x10 [ 1529.052012][T19255] ? smack_file_ioctl+0x2c4/0x370 [ 1529.052049][T19255] ? __fget_files+0x2a/0x420 [ 1529.052072][T19255] ? __fget_files+0x3a8/0x420 [ 1529.052097][T19255] v4l2_ioctl+0x190/0x1e0 [ 1529.052120][T19255] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1529.052144][T19255] __se_sys_ioctl+0xff/0x170 [ 1529.052170][T19255] do_syscall_64+0x166/0x520 [ 1529.052189][T19255] ? trace_irq_disable+0x3b/0x140 [ 1529.052212][T19255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1529.052232][T19255] ? clear_bhb_loop+0x70/0xc0 [ 1529.052253][T19255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1529.052270][T19255] RIP: 0033:0x7fabae55e159 [ 1529.052289][T19255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1529.052305][T19255] RSP: 002b:00007fabac7b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1529.052326][T19255] RAX: ffffffffffffffda RBX: 00007fabae7e5fa0 RCX: 00007fabae55e159 [ 1529.052339][T19255] RDX: 0000200000000180 RSI: 00000000c0145608 RDI: 0000000000000004 [ 1529.052352][T19255] RBP: 00007fabae5f506b R08: 0000000000000000 R09: 0000000000000000 [ 1529.052366][T19255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1529.052379][T19255] R13: 00007fabae7e6038 R14: 00007fabae7e5fa0 R15: 00007fff72f82618 [ 1529.052407][T19255] [ 1529.304635][T19258] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1529.462286][T19264] syzkaller0: entered promiscuous mode [ 1529.462315][T19264] syzkaller0: entered allmulticast mode [ 1530.740824][T19282] fuse: Unknown parameter 'group_id00000000000000000000' [ 1532.231384][T19310] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2209'. [ 1532.253208][T19308] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1532.370481][T19318] FAULT_INJECTION: forcing a failure. [ 1532.370481][T19318] name failslab, interval 1, probability 0, space 0, times 0 [ 1532.370516][T19318] CPU: 1 UID: 0 PID: 19318 Comm: syz.4.2213 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1532.370539][T19318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1532.370553][T19318] Call Trace: [ 1532.370563][T19318] [ 1532.370573][T19318] dump_stack_lvl+0xe8/0x150 [ 1532.370611][T19318] should_fail_ex+0x46b/0x600 [ 1532.370642][T19318] should_failslab+0xa8/0x100 [ 1532.370662][T19318] ? sk_prot_alloc+0x57/0x210 [ 1532.370686][T19318] kmem_cache_alloc_noprof+0x9e/0x690 [ 1532.370715][T19318] ? security_inode_alloc+0x39/0x310 [ 1532.370737][T19318] ? sk_prot_alloc+0x57/0x210 [ 1532.370764][T19318] sk_prot_alloc+0x57/0x210 [ 1532.370784][T19318] ? sk_alloc+0x27/0x390 [ 1532.370806][T19318] sk_alloc+0x3a/0x390 [ 1532.370831][T19318] qrtr_create+0xa2/0x1d0 [ 1532.370965][T19318] __sock_create+0x4b3/0x9d0 [ 1532.371005][T19318] __sys_socket+0xd6/0x1b0 [ 1532.371036][T19318] __x64_sys_socket+0x7a/0x90 [ 1532.371066][T19318] do_syscall_64+0x166/0x520 [ 1532.371092][T19318] ? trace_irq_disable+0x3b/0x140 [ 1532.371121][T19318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1532.371144][T19318] ? clear_bhb_loop+0x70/0xc0 [ 1532.371168][T19318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1532.371184][T19318] RIP: 0033:0x7fabae55e159 [ 1532.371204][T19318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1532.371220][T19318] RSP: 002b:00007fabac7b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1532.371243][T19318] RAX: ffffffffffffffda RBX: 00007fabae7e5fa0 RCX: 00007fabae55e159 [ 1532.371259][T19318] RDX: 0000000000000009 RSI: 0000000000000002 RDI: 000000000000002a [ 1532.371272][T19318] RBP: 00007fabae5f506b R08: 0000000000000000 R09: 0000000000000000 [ 1532.371287][T19318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1532.371300][T19318] R13: 00007fabae7e6038 R14: 00007fabae7e5fa0 R15: 00007fff72f82618 [ 1532.371331][T19318] [ 1533.880327][T19338] fuse: Unknown parameter 'group_id00000000000000000000' [ 1534.102495][T19354] netlink: 6024 bytes leftover after parsing attributes in process `syz.9.2221'. [ 1536.247993][T19373] FAULT_INJECTION: forcing a failure. [ 1536.247993][T19373] name failslab, interval 1, probability 0, space 0, times 0 [ 1536.248030][T19373] CPU: 1 UID: 0 PID: 19373 Comm: syz.3.2224 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1536.248063][T19373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1536.248076][T19373] Call Trace: [ 1536.248085][T19373] [ 1536.248094][T19373] dump_stack_lvl+0xe8/0x150 [ 1536.248132][T19373] should_fail_ex+0x46b/0x600 [ 1536.248163][T19373] ? sock_alloc_inode+0x2c/0x1a0 [ 1536.248191][T19373] should_failslab+0xa8/0x100 [ 1536.248214][T19373] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 1536.248242][T19373] ? sock_alloc_inode+0x2c/0x1a0 [ 1536.248278][T19373] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1536.248304][T19373] sock_alloc_inode+0x2c/0x1a0 [ 1536.248331][T19373] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1536.248358][T19373] alloc_inode+0x6a/0x1b0 [ 1536.248381][T19373] __sock_create+0x12d/0x9d0 [ 1536.248420][T19373] __sys_socket+0xd6/0x1b0 [ 1536.248453][T19373] __x64_sys_socket+0x7a/0x90 [ 1536.248487][T19373] do_syscall_64+0x166/0x520 [ 1536.248509][T19373] ? trace_irq_disable+0x3b/0x140 [ 1536.248537][T19373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.248558][T19373] ? clear_bhb_loop+0x70/0xc0 [ 1536.248584][T19373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.248605][T19373] RIP: 0033:0x7f06ea2de159 [ 1536.248625][T19373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1536.248644][T19373] RSP: 002b:00007f06e8536028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1536.248669][T19373] RAX: ffffffffffffffda RBX: 00007f06ea565fa0 RCX: 00007f06ea2de159 [ 1536.248685][T19373] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000010 [ 1536.248699][T19373] RBP: 00007f06ea37506b R08: 0000000000000000 R09: 0000000000000000 [ 1536.248714][T19373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1536.248727][T19373] R13: 00007f06ea566038 R14: 00007f06ea565fa0 R15: 00007ffcbdd8d028 [ 1536.248757][T19373] [ 1536.248781][T19373] socket: no more sockets [ 1536.335137][T19376] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2223'. [ 1536.379262][T19373] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1536.516203][ T67] wlan1: Trigger new scan to find an IBSS to join [ 1536.587606][T19380] netlink: 'syz.1.2225': attribute type 1 has an invalid length. [ 1536.587629][T19380] netlink: 64543 bytes leftover after parsing attributes in process `syz.1.2225'. [ 1537.080659][T19398] fuse: Unknown parameter 'group_id00000000000000000000' [ 1538.090164][T16679] Bluetooth: hci4: command 0x0406 tx timeout [ 1538.739286][T19424] netlink: 'syz.4.2237': attribute type 1 has an invalid length. [ 1538.739311][T19424] netlink: 64543 bytes leftover after parsing attributes in process `syz.4.2237'. [ 1538.927946][T19428] FAULT_INJECTION: forcing a failure. [ 1538.927946][T19428] name failslab, interval 1, probability 0, space 0, times 0 [ 1538.927985][T19428] CPU: 0 UID: 0 PID: 19428 Comm: syz.3.2236 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1538.928012][T19428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1538.928026][T19428] Call Trace: [ 1538.928035][T19428] [ 1538.928045][T19428] dump_stack_lvl+0xe8/0x150 [ 1538.928084][T19428] should_fail_ex+0x46b/0x600 [ 1538.928116][T19428] ? sock_alloc_inode+0x2c/0x1a0 [ 1538.928147][T19428] should_failslab+0xa8/0x100 [ 1538.928171][T19428] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 1538.928203][T19428] ? sock_alloc_inode+0x2c/0x1a0 [ 1538.928237][T19428] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1538.928265][T19428] sock_alloc_inode+0x2c/0x1a0 [ 1538.928302][T19428] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1538.928328][T19428] alloc_inode+0x6a/0x1b0 [ 1538.928351][T19428] __sock_create+0x12d/0x9d0 [ 1538.928390][T19428] __sys_socket+0xd6/0x1b0 [ 1538.928424][T19428] __x64_sys_socket+0x7a/0x90 [ 1538.928455][T19428] do_syscall_64+0x166/0x520 [ 1538.928478][T19428] ? trace_irq_disable+0x3b/0x140 [ 1538.928507][T19428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1538.928529][T19428] ? clear_bhb_loop+0x70/0xc0 [ 1538.928557][T19428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1538.928580][T19428] RIP: 0033:0x7f06ea2de159 [ 1538.928600][T19428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1538.928619][T19428] RSP: 002b:00007f06e8536028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1538.928643][T19428] RAX: ffffffffffffffda RBX: 00007f06ea565fa0 RCX: 00007f06ea2de159 [ 1538.928660][T19428] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000010 [ 1538.928673][T19428] RBP: 00007f06ea37506b R08: 0000000000000000 R09: 0000000000000000 [ 1538.928688][T19428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1538.928702][T19428] R13: 00007f06ea566038 R14: 00007f06ea565fa0 R15: 00007ffcbdd8d028 [ 1538.928736][T19428] [ 1538.928758][T19428] socket: no more sockets [ 1538.944466][T19428] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1539.087685][T19434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2238'. [ 1541.325156][T19479] FAULT_INJECTION: forcing a failure. [ 1541.325156][T19479] name failslab, interval 1, probability 0, space 0, times 0 [ 1541.325195][T19479] CPU: 1 UID: 0 PID: 19479 Comm: syz.3.2249 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1541.325220][T19479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1541.325234][T19479] Call Trace: [ 1541.325243][T19479] [ 1541.325253][T19479] dump_stack_lvl+0xe8/0x150 [ 1541.325292][T19479] should_fail_ex+0x46b/0x600 [ 1541.325327][T19479] should_failslab+0xa8/0x100 [ 1541.325350][T19479] ? security_inode_alloc+0x39/0x310 [ 1541.325374][T19479] kmem_cache_alloc_noprof+0x9e/0x690 [ 1541.325403][T19479] ? security_inode_alloc+0x39/0x310 [ 1541.325433][T19479] security_inode_alloc+0x39/0x310 [ 1541.325462][T19479] inode_init_always_gfp+0x983/0xd40 [ 1541.325491][T19479] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1541.325527][T19479] alloc_inode+0x82/0x1b0 [ 1541.325562][T19479] __sock_create+0x12d/0x9d0 [ 1541.325603][T19479] __sys_socket+0xd6/0x1b0 [ 1541.325638][T19479] __x64_sys_socket+0x7a/0x90 [ 1541.325671][T19479] do_syscall_64+0x166/0x520 [ 1541.325694][T19479] ? trace_irq_disable+0x3b/0x140 [ 1541.325722][T19479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1541.325744][T19479] ? clear_bhb_loop+0x70/0xc0 [ 1541.325770][T19479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1541.325792][T19479] RIP: 0033:0x7f06ea2de159 [ 1541.325813][T19479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1541.325831][T19479] RSP: 002b:00007f06e8536028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1541.325856][T19479] RAX: ffffffffffffffda RBX: 00007f06ea565fa0 RCX: 00007f06ea2de159 [ 1541.325873][T19479] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000010 [ 1541.325887][T19479] RBP: 00007f06ea37506b R08: 0000000000000000 R09: 0000000000000000 [ 1541.325902][T19479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1541.325915][T19479] R13: 00007f06ea566038 R14: 00007f06ea565fa0 R15: 00007ffcbdd8d028 [ 1541.325949][T19479] [ 1541.325992][T19479] socket: no more sockets [ 1541.539516][T19479] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1542.647065][T19526] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1543.022895][ T2979] wlan1: Trigger new scan to find an IBSS to join [ 1546.519842][T19585] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1546.781304][ T6461] wlan1: Creating new IBSS network, BSSID 1a:38:16:d1:1c:37 [ 1547.000251][T19593] Device name cannot be null; rc = [-22] [ 1547.068022][T19595] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1547.233696][T19613] FAULT_INJECTION: forcing a failure. [ 1547.233696][T19613] name failslab, interval 1, probability 0, space 0, times 0 [ 1547.235441][T19613] CPU: 0 UID: 0 PID: 19613 Comm: syz.1.2287 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1547.235476][T19613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1547.235490][T19613] Call Trace: [ 1547.235499][T19613] [ 1547.235509][T19613] dump_stack_lvl+0xe8/0x150 [ 1547.235548][T19613] should_fail_ex+0x46b/0x600 [ 1547.235584][T19613] should_failslab+0xa8/0x100 [ 1547.235608][T19613] __kvmalloc_node_noprof+0x176/0x890 [ 1547.235643][T19613] ? v4l2_ctrl_new+0xa5a/0x1820 [ 1547.235779][T19613] ? v4l2_ctrl_new+0xa5a/0x1820 [ 1547.235810][T19613] v4l2_ctrl_new+0xa5a/0x1820 [ 1547.235851][T19613] v4l2_ctrl_new_std+0x24e/0x300 [ 1547.235887][T19613] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 1547.235912][T19613] ? trace_kmalloc+0x2a/0xf0 [ 1547.235942][T19613] ? v4l2_ctrl_handler_init_class+0x1a1/0x2c0 [ 1547.235966][T19613] ? __kvmalloc_node_noprof+0x5d4/0x890 [ 1547.236009][T19613] ? v4l2_ctrl_handler_init_class+0x1fb/0x2c0 [ 1547.236037][T19613] vicodec_open+0x244/0xbf0 [ 1547.236122][T19613] v4l2_open+0x1bf/0x3a0 [ 1547.236154][T19613] chrdev_open+0x4dc/0x600 [ 1547.236208][T19613] ? __pfx_chrdev_open+0x10/0x10 [ 1547.236237][T19613] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 1547.236274][T19613] ? __pfx_chrdev_open+0x10/0x10 [ 1547.236302][T19613] do_dentry_open+0x849/0x1420 [ 1547.236347][T19613] vfs_open+0x3b/0x350 [ 1547.236368][T19613] ? path_openat+0x142d/0x1d60 [ 1547.236401][T19613] path_openat+0x1448/0x1d60 [ 1547.236456][T19613] do_file_open+0x23e/0x4a0 [ 1547.236491][T19613] ? __pfx_do_file_open+0x10/0x10 [ 1547.236545][T19613] ? alloc_fd+0x654/0x6d0 [ 1547.236580][T19613] do_sys_openat2+0x115/0x200 [ 1547.236606][T19613] ? __pfx_do_sys_openat2+0x10/0x10 [ 1547.236629][T19613] ? exc_page_fault+0x6a/0xc0 [ 1547.236656][T19613] ? do_user_addr_fault+0xc4c/0x1340 [ 1547.236684][T19613] __x64_sys_openat+0x138/0x170 [ 1547.236712][T19613] do_syscall_64+0x166/0x520 [ 1547.236734][T19613] ? trace_irq_disable+0x3b/0x140 [ 1547.236764][T19613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1547.236787][T19613] ? clear_bhb_loop+0x70/0xc0 [ 1547.236813][T19613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1547.236835][T19613] RIP: 0033:0x7f548730e98e [ 1547.236857][T19613] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1547.236876][T19613] RSP: 002b:00007f54855a5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1547.236902][T19613] RAX: ffffffffffffffda RBX: 00007f54855a66c0 RCX: 00007f548730e98e [ 1547.236918][T19613] RDX: 0000000000000002 RSI: 00007f54855a5c00 RDI: ffffffffffffff9c [ 1547.236932][T19613] RBP: 00007f54855a5c00 R08: 0000000000000000 R09: 0000000000000000 [ 1547.236946][T19613] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1547.236961][T19613] R13: 00007f54875d6038 R14: 00007f54875d5fa0 R15: 00007ffd2e74fa38 [ 1547.236996][T19613] [ 1547.782127][ T31] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1547.885592][ T31] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1547.888938][T19633] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1550.007012][T19686] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1550.337232][ T5248] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1550.749114][ T1245] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1550.821257][T13704] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1550.945532][ T1245] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1551.016237][T13704] usb 8-1: Using ep0 maxpacket: 16 [ 1551.017044][T13704] usb 8-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40 [ 1551.047134][T13704] usb 8-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1551.047172][T13704] usb 8-1: config 1 interface 0 has no altsetting 0 [ 1551.056955][T19717] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1551.269512][T13704] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.269544][T13704] usb 8-1: Product: syz [ 1551.269560][T13704] usb 8-1: Manufacturer: syz [ 1551.269576][T13704] usb 8-1: SerialNumber: syz [ 1551.777570][T13704] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input109 [ 1552.005295][ T4938] bcm5974 8-1:1.0: could not read from device [ 1552.086732][ T4938] bcm5974 8-1:1.0: could not read from device [ 1552.354233][T13704] usb 8-1: USB disconnect, device number 2 [ 1552.389904][ T4938] bcm5974 8-1:1.0: could not read from device [ 1552.726056][ T5248] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1553.000594][T19763] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1554.212639][T19809] FAULT_INJECTION: forcing a failure. [ 1554.212639][T19809] name failslab, interval 1, probability 0, space 0, times 0 [ 1554.212678][T19809] CPU: 0 UID: 0 PID: 19809 Comm: syz.7.2346 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1554.212704][T19809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1554.212718][T19809] Call Trace: [ 1554.212727][T19809] [ 1554.212737][T19809] dump_stack_lvl+0xe8/0x150 [ 1554.212777][T19809] should_fail_ex+0x46b/0x600 [ 1554.212815][T19809] should_failslab+0xa8/0x100 [ 1554.212840][T19809] __kmalloc_noprof+0xfb/0x790 [ 1554.212872][T19809] ? binder_open+0x146/0xbb0 [ 1554.213037][T19809] ? binder_open+0x146/0xbb0 [ 1554.213074][T19809] binder_open+0x146/0xbb0 [ 1554.213109][T19809] ? __pfx_binder_open+0x10/0x10 [ 1554.213145][T19809] ? tomoyo_file_open+0x167/0x220 [ 1554.213167][T19809] ? fsnotify_open_perm_and_set_mode+0x142/0x6c0 [ 1554.213203][T19809] ? __pfx_binder_open+0x10/0x10 [ 1554.213240][T19809] do_dentry_open+0x849/0x1420 [ 1554.213281][T19809] vfs_open+0x3b/0x350 [ 1554.213299][T19809] ? path_openat+0x142d/0x1d60 [ 1554.213329][T19809] path_openat+0x1448/0x1d60 [ 1554.213377][T19809] do_file_open+0x23e/0x4a0 [ 1554.213409][T19809] ? __pfx_do_file_open+0x10/0x10 [ 1554.213459][T19809] ? alloc_fd+0x654/0x6d0 [ 1554.213490][T19809] do_sys_openat2+0x115/0x200 [ 1554.213511][T19809] ? __se_sys_futex+0x3a8/0x450 [ 1554.213536][T19809] ? __pfx_do_sys_openat2+0x10/0x10 [ 1554.213562][T19809] ? rcu_is_watching+0x16/0xb0 [ 1554.213600][T19809] __x64_sys_openat+0x138/0x170 [ 1554.213628][T19809] do_syscall_64+0x166/0x520 [ 1554.213653][T19809] ? trace_irq_disable+0x3b/0x140 [ 1554.213681][T19809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1554.213704][T19809] ? clear_bhb_loop+0x70/0xc0 [ 1554.213727][T19809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1554.213747][T19809] RIP: 0033:0x7fd4cbd1e159 [ 1554.213767][T19809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1554.213787][T19809] RSP: 002b:00007fd4c9f76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1554.213811][T19809] RAX: ffffffffffffffda RBX: 00007fd4cbfa5fa0 RCX: 00007fd4cbd1e159 [ 1554.213827][T19809] RDX: 0000000000000800 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 1554.213842][T19809] RBP: 00007fd4cbdb506b R08: 0000000000000000 R09: 0000000000000000 [ 1554.213855][T19809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1554.213869][T19809] R13: 00007fd4cbfa6038 R14: 00007fd4cbfa5fa0 R15: 00007fff9f6f8f18 [ 1554.213902][T19809] [ 1560.197893][T19911] syzkaller0: entered promiscuous mode [ 1560.197945][T19911] syzkaller0: entered allmulticast mode [ 1562.612447][T19953] input: syz0 as /devices/virtual/input/input110 [ 1563.878459][T19983] FAULT_INJECTION: forcing a failure. [ 1563.878459][T19983] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1563.878499][T19983] CPU: 1 UID: 0 PID: 19983 Comm: syz.7.2393 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1563.878525][T19983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1563.878539][T19983] Call Trace: [ 1563.878548][T19983] [ 1563.878558][T19983] dump_stack_lvl+0xe8/0x150 [ 1563.878595][T19983] should_fail_ex+0x46b/0x600 [ 1563.878624][T19983] get_futex_key+0x1b4/0x1580 [ 1563.878659][T19983] ? __pfx_get_futex_key+0x10/0x10 [ 1563.878684][T19983] ? update_se+0x90/0xf90 [ 1563.878711][T19983] futex_wait_setup+0x4a/0x590 [ 1563.878735][T19983] ? __futex_wait+0xe1/0x410 [ 1563.878758][T19983] __futex_wait+0x161/0x410 [ 1563.878782][T19983] ? __pfx___futex_wait+0x10/0x10 [ 1563.878804][T19983] ? __pfx_futex_wake_mark+0x10/0x10 [ 1563.878829][T19983] ? try_to_wake_up+0x84b/0x1430 [ 1563.878857][T19983] futex_wait+0x121/0x390 [ 1563.878878][T19983] ? __pfx_futex_wait+0x10/0x10 [ 1563.878908][T19983] ? lockdep_hardirqs_on+0x7b/0x110 [ 1563.878934][T19983] do_futex+0x3e7/0x4e0 [ 1563.878955][T19983] ? __pfx_sock_free_inode+0x10/0x10 [ 1563.878990][T19983] ? __pfx_do_futex+0x10/0x10 [ 1563.879019][T19983] __se_sys_futex+0x3a8/0x450 [ 1563.879044][T19983] ? iput+0xb84/0xf00 [ 1563.879067][T19983] ? __pfx___se_sys_futex+0x10/0x10 [ 1563.879097][T19983] ? __x64_sys_futex+0x21/0xf0 [ 1563.879122][T19983] do_syscall_64+0x166/0x520 [ 1563.879144][T19983] ? trace_irq_disable+0x3b/0x140 [ 1563.879171][T19983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.879195][T19983] ? clear_bhb_loop+0x70/0xc0 [ 1563.879221][T19983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.879243][T19983] RIP: 0033:0x7fd4cbd1e159 [ 1563.879263][T19983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1563.879281][T19983] RSP: 002b:00007fd4c9f760e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1563.879306][T19983] RAX: ffffffffffffffda RBX: 00007fd4cbfa5fa8 RCX: 00007fd4cbd1e159 [ 1563.879331][T19983] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd4cbfa5fa8 [ 1563.879345][T19983] RBP: 00007fd4cbfa5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1563.879359][T19983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1563.879373][T19983] R13: 00007fd4cbfa6038 R14: 00007fff9f6f8e30 R15: 00007fff9f6f8f18 [ 1563.879407][T19983] [ 1564.480629][T19999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2397'. [ 1564.958179][T19999] veth3: entered promiscuous mode [ 1566.504277][T20033] netlink: 'syz.3.2405': attribute type 1 has an invalid length. [ 1566.504301][T20033] netlink: 64543 bytes leftover after parsing attributes in process `syz.3.2405'. [ 1569.131608][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 1569.131682][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 1569.146127][T20093] netlink: 'syz.1.2418': attribute type 1 has an invalid length. [ 1569.146149][T20093] netlink: 64543 bytes leftover after parsing attributes in process `syz.1.2418'. [ 1571.154471][T20130] FAULT_INJECTION: forcing a failure. [ 1571.154471][T20130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1571.154512][T20130] CPU: 1 UID: 0 PID: 20130 Comm: syz.9.2429 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1571.154539][T20130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1571.154553][T20130] Call Trace: [ 1571.154562][T20130] [ 1571.154573][T20130] dump_stack_lvl+0xe8/0x150 [ 1571.154611][T20130] should_fail_ex+0x46b/0x600 [ 1571.154646][T20130] _copy_to_iter+0x404/0x1810 [ 1571.154691][T20130] ? __pfx__copy_to_iter+0x10/0x10 [ 1571.154734][T20130] copy_page_to_iter+0x23f/0x330 [ 1571.154766][T20130] process_vm_rw+0x863/0xba0 [ 1571.154805][T20130] ? __pfx_process_vm_rw+0x10/0x10 [ 1571.154829][T20130] ? futex_wait+0x2a2/0x390 [ 1571.154911][T20130] ? rcu_is_watching+0x16/0xb0 [ 1571.154947][T20130] __x64_sys_process_vm_readv+0xe0/0x100 [ 1571.154978][T20130] do_syscall_64+0x166/0x520 [ 1571.155000][T20130] ? trace_irq_disable+0x3b/0x140 [ 1571.155028][T20130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1571.155054][T20130] ? clear_bhb_loop+0x70/0xc0 [ 1571.155080][T20130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1571.155102][T20130] RIP: 0033:0x7f3638d8e159 [ 1571.155134][T20130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1571.155153][T20130] RSP: 002b:00007f3636fe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 1571.155177][T20130] RAX: ffffffffffffffda RBX: 00007f3639015fa0 RCX: 00007f3638d8e159 [ 1571.155194][T20130] RDX: 0000000000000002 RSI: 0000200000008400 RDI: 000000000000051c [ 1571.155207][T20130] RBP: 00007f3638e2506b R08: 0000000000000286 R09: 0000000000000000 [ 1571.155221][T20130] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000000 [ 1571.155234][T20130] R13: 00007f3639016038 R14: 00007f3639015fa0 R15: 00007fffbcc9b328 [ 1571.155265][T20130] [ 1571.562787][T20139] netlink: 'syz.9.2434': attribute type 1 has an invalid length. [ 1571.562826][T20139] netlink: 64543 bytes leftover after parsing attributes in process `syz.9.2434'. [ 1573.245588][T20181] netlink: 'syz.9.2445': attribute type 1 has an invalid length. [ 1573.245611][T20181] netlink: 64543 bytes leftover after parsing attributes in process `syz.9.2445'. [ 1573.318247][T20184] FAULT_INJECTION: forcing a failure. [ 1573.318247][T20184] name failslab, interval 1, probability 0, space 0, times 0 [ 1573.318285][T20184] CPU: 1 UID: 0 PID: 20184 Comm: syz.4.2444 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1573.318310][T20184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1573.318323][T20184] Call Trace: [ 1573.318332][T20184] [ 1573.318343][T20184] dump_stack_lvl+0xe8/0x150 [ 1573.318382][T20184] should_fail_ex+0x46b/0x600 [ 1573.318427][T20184] should_failslab+0xa8/0x100 [ 1573.318488][T20184] ? do_getname+0x2e/0x250 [ 1573.318513][T20184] kmem_cache_alloc_noprof+0x9e/0x690 [ 1573.318541][T20184] ? do_getname+0x2e/0x250 [ 1573.318561][T20184] ? lock_vma_under_rcu+0x45a/0x500 [ 1573.318633][T20184] do_getname+0x2e/0x250 [ 1573.318651][T20184] ? getname_flags+0x11/0x20 [ 1573.318674][T20184] do_sys_openat2+0xcc/0x200 [ 1573.318699][T20184] ? __pfx_do_sys_openat2+0x10/0x10 [ 1573.318722][T20184] ? exc_page_fault+0x6a/0xc0 [ 1573.318748][T20184] ? do_user_addr_fault+0xc4c/0x1340 [ 1573.318776][T20184] __x64_sys_openat+0x138/0x170 [ 1573.318805][T20184] do_syscall_64+0x166/0x520 [ 1573.318827][T20184] ? trace_irq_disable+0x3b/0x140 [ 1573.318855][T20184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1573.318875][T20184] ? clear_bhb_loop+0x70/0xc0 [ 1573.318900][T20184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1573.318922][T20184] RIP: 0033:0x7fabae51e98e [ 1573.318943][T20184] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1573.318963][T20184] RSP: 002b:00007fabac7b5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1573.318987][T20184] RAX: ffffffffffffffda RBX: 00007fabac7b66c0 RCX: 00007fabae51e98e [ 1573.319002][T20184] RDX: 0000000000000002 RSI: 00007fabac7b5c00 RDI: ffffffffffffff9c [ 1573.319016][T20184] RBP: 00007fabac7b5c00 R08: 0000000000000000 R09: 0000000000000000 [ 1573.319030][T20184] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1573.319044][T20184] R13: 00007fabae7e6038 R14: 00007fabae7e5fa0 R15: 00007fff72f82618 [ 1573.319075][T20184] [ 1574.580786][T20202] 9p: Bad value for 'rfdno' [ 1575.251673][T20232] FAULT_INJECTION: forcing a failure. [ 1575.251673][T20232] name failslab, interval 1, probability 0, space 0, times 0 [ 1575.251712][T20232] CPU: 1 UID: 0 PID: 20232 Comm: syz.7.2460 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1575.251737][T20232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1575.251751][T20232] Call Trace: [ 1575.251762][T20232] [ 1575.251773][T20232] dump_stack_lvl+0xe8/0x150 [ 1575.251809][T20232] should_fail_ex+0x46b/0x600 [ 1575.251845][T20232] should_failslab+0xa8/0x100 [ 1575.251866][T20232] ? do_getname+0x2e/0x250 [ 1575.251887][T20232] kmem_cache_alloc_noprof+0x9e/0x690 [ 1575.251918][T20232] ? do_getname+0x2e/0x250 [ 1575.251939][T20232] ? lock_vma_under_rcu+0x45a/0x500 [ 1575.251973][T20232] do_getname+0x2e/0x250 [ 1575.251992][T20232] ? getname_flags+0x11/0x20 [ 1575.252014][T20232] do_sys_openat2+0xcc/0x200 [ 1575.252039][T20232] ? __pfx_do_sys_openat2+0x10/0x10 [ 1575.252062][T20232] ? exc_page_fault+0x6a/0xc0 [ 1575.252088][T20232] ? do_user_addr_fault+0xc4c/0x1340 [ 1575.252115][T20232] __x64_sys_openat+0x138/0x170 [ 1575.252142][T20232] do_syscall_64+0x166/0x520 [ 1575.252164][T20232] ? trace_irq_disable+0x3b/0x140 [ 1575.252193][T20232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.252215][T20232] ? clear_bhb_loop+0x70/0xc0 [ 1575.252248][T20232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.252270][T20232] RIP: 0033:0x7fd4cbcde98e [ 1575.252290][T20232] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1575.252309][T20232] RSP: 002b:00007fd4c9f75b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1575.252333][T20232] RAX: ffffffffffffffda RBX: 00007fd4c9f766c0 RCX: 00007fd4cbcde98e [ 1575.252350][T20232] RDX: 0000000000000002 RSI: 00007fd4c9f75c00 RDI: ffffffffffffff9c [ 1575.252366][T20232] RBP: 00007fd4c9f75c00 R08: 0000000000000000 R09: 0000000000000000 [ 1575.252381][T20232] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1575.252396][T20232] R13: 00007fd4cbfa6038 R14: 00007fd4cbfa5fa0 R15: 00007fff9f6f8f18 [ 1575.252429][T20232] [ 1576.224490][T20243] fuse: Unknown parameter 'use00000000000000000000' [ 1577.511403][T20271] 9p: Bad value for 'rfdno' [ 1578.023564][T20298] fuse: Unknown parameter 'use00000000000000000000' [ 1579.132091][ T69] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1579.745978][T20321] 9p: Bad value for 'rfdno' [ 1581.181397][T20361] fuse: Unknown parameter 'use00000000000000000000' [ 1581.414577][T20375] 9p: Bad value for 'wfdno' [ 1581.542552][T20380] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.2496'. [ 1583.634659][T20426] fuse: Unknown parameter 'user_i00000000000000000000' [ 1584.033765][T20437] 9p: Bad value for 'wfdno' [ 1585.306704][T20453] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.2513'. [ 1586.723848][T20471] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2514'. [ 1587.978560][T20505] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.2523'. [ 1589.172322][T20482] syzkaller0: entered promiscuous mode [ 1589.172355][T20482] syzkaller0: entered allmulticast mode [ 1589.174493][T20516] netlink: 6024 bytes leftover after parsing attributes in process `syz.7.2526'. [ 1589.384354][T20519] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2527'. [ 1591.696433][T20543] netlink: 6024 bytes leftover after parsing attributes in process `syz.9.2534'. [ 1593.890694][T20566] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.2540'. [ 1594.965883][T20582] FAULT_INJECTION: forcing a failure. [ 1594.965883][T20582] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1594.965919][T20582] CPU: 0 UID: 0 PID: 20582 Comm: syz.9.2543 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1594.965943][T20582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1594.965955][T20582] Call Trace: [ 1594.965963][T20582] [ 1594.965972][T20582] dump_stack_lvl+0xe8/0x150 [ 1594.966007][T20582] should_fail_ex+0x46b/0x600 [ 1594.966041][T20582] get_futex_key+0x8e2/0x1580 [ 1594.966084][T20582] ? __pfx_get_futex_key+0x10/0x10 [ 1594.966125][T20582] futex_wake+0x119/0x600 [ 1594.966153][T20582] ? __pfx_futex_wake+0x10/0x10 [ 1594.966175][T20582] ? do_raw_spin_lock+0x12b/0x2f0 [ 1594.966214][T20582] do_futex+0x458/0x4e0 [ 1594.966240][T20582] ? __pfx_do_futex+0x10/0x10 [ 1594.966265][T20582] ? __might_fault+0xaf/0x130 [ 1594.966298][T20582] mm_exit_exec_release+0x10d/0x290 [ 1594.966369][T20582] exit_mm+0x50/0x240 [ 1594.966392][T20582] do_exit+0x6cd/0x2360 [ 1594.966415][T20582] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1594.966442][T20582] ? __pfx_do_exit+0x10/0x10 [ 1594.966464][T20582] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1594.966499][T20582] ? rt_spin_unlock+0x159/0x200 [ 1594.966527][T20582] do_group_exit+0x22d/0x2f0 [ 1594.966547][T20582] ? rt_spin_unlock+0x165/0x200 [ 1594.966575][T20582] get_signal+0x121b/0x12c0 [ 1594.966622][T20582] arch_do_signal_or_restart+0xbb/0x860 [ 1594.966668][T20582] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1594.966711][T20582] ? __fget_files+0x2a/0x420 [ 1594.966743][T20582] exit_to_user_mode_loop+0x10e/0x770 [ 1594.966771][T20582] ? rcu_is_watching+0x16/0xb0 [ 1594.966806][T20582] do_syscall_64+0x328/0x520 [ 1594.966826][T20582] ? trace_irq_disable+0x3b/0x140 [ 1594.966852][T20582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1594.966873][T20582] ? clear_bhb_loop+0x70/0xc0 [ 1594.966897][T20582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1594.966917][T20582] RIP: 0033:0x7f3638d8e159 [ 1594.966936][T20582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1594.966953][T20582] RSP: 002b:00007f3636fc50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1594.966975][T20582] RAX: fffffffffffffe00 RBX: 00007f3639016098 RCX: 00007f3638d8e159 [ 1594.966990][T20582] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3639016098 [ 1594.967003][T20582] RBP: 00007f3639016090 R08: 0000000000000000 R09: 0000000000000000 [ 1594.967016][T20582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1594.967029][T20582] R13: 00007f3639016128 R14: 00007fffbcc9b240 R15: 00007fffbcc9b328 [ 1594.967061][T20582] [ 1596.453999][ T5248] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1596.465946][T20604] syzkaller0: entered promiscuous mode [ 1596.465973][T20604] syzkaller0: entered allmulticast mode [ 1598.070552][T20633] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.2554'. [ 1598.222791][T20635] fuse: Bad value for 'fd' [ 1599.083532][T13704] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1599.156816][T13704] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1599.306064][T20656] 9p: Bad value for 'wfdno' [ 1599.516961][T20662] FAULT_INJECTION: forcing a failure. [ 1599.516961][T20662] name failslab, interval 1, probability 0, space 0, times 0 [ 1599.516994][T20662] CPU: 0 UID: 0 PID: 20662 Comm: syz.3.2563 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1599.517017][T20662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1599.517030][T20662] Call Trace: [ 1599.517039][T20662] [ 1599.517049][T20662] dump_stack_lvl+0xe8/0x150 [ 1599.517086][T20662] should_fail_ex+0x46b/0x600 [ 1599.517121][T20662] should_failslab+0xa8/0x100 [ 1599.517146][T20662] __kmalloc_cache_noprof+0xa1/0x680 [ 1599.517177][T20662] ? percpu_ref_init+0xc5/0x350 [ 1599.517200][T20662] ? percpu_ref_init+0xc5/0x350 [ 1599.517230][T20662] ? __pfx_css_release+0x10/0x10 [ 1599.517255][T20662] percpu_ref_init+0xc5/0x350 [ 1599.517285][T20662] cgroup_mkdir+0x2aa/0xf70 [ 1599.517317][T20662] ? kernfs_root+0x1c/0x230 [ 1599.517348][T20662] ? __pfx_cgroup_mkdir+0x10/0x10 [ 1599.517389][T20662] kernfs_iop_mkdir+0x213/0x360 [ 1599.517425][T20662] vfs_mkdir+0x408/0x620 [ 1599.517460][T20662] filename_mkdirat+0x289/0x520 [ 1599.517495][T20662] ? __pfx_filename_mkdirat+0x10/0x10 [ 1599.517528][T20662] ? do_getname+0x151/0x250 [ 1599.517552][T20662] __se_sys_mkdirat+0x35/0x150 [ 1599.517585][T20662] do_syscall_64+0x166/0x520 [ 1599.517609][T20662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1599.517631][T20662] ? clear_bhb_loop+0x70/0xc0 [ 1599.517658][T20662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1599.517680][T20662] RIP: 0033:0x7f06ea2de159 [ 1599.517699][T20662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1599.517719][T20662] RSP: 002b:00007f06e8536028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1599.517743][T20662] RAX: ffffffffffffffda RBX: 00007f06ea565fa0 RCX: 00007f06ea2de159 [ 1599.517759][T20662] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1599.517779][T20662] RBP: 00007f06ea37506b R08: 0000000000000000 R09: 0000000000000000 [ 1599.517794][T20662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1599.517808][T20662] R13: 00007f06ea566038 R14: 00007f06ea565fa0 R15: 00007ffcbdd8d028 [ 1599.517844][T20662] [ 1599.598955][T20657] fido_id[20657]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1599.996588][T20679] device-mapper: table: 248:0: mirror: Invalid number of mirrors (-EINVAL) [ 1599.996613][T20679] device-mapper: ioctl: error adding target to table [ 1600.077849][T20682] fuse: Bad value for 'fd' [ 1600.243923][T20686] netlink: 6024 bytes leftover after parsing attributes in process `syz.9.2572'. [ 1602.697711][T20718] 9p: Bad value for 'wfdno' [ 1602.750023][T20719] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2576'. [ 1603.223012][T20742] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.2584'. [ 1605.949509][ T8637] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 1607.890387][T20815] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.2599'. [ 1610.073054][T20848] FAULT_INJECTION: forcing a failure. [ 1610.073054][T20848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1610.073094][T20848] CPU: 0 UID: 0 PID: 20848 Comm: syz.9.2608 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1610.073119][T20848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1610.073131][T20848] Call Trace: [ 1610.073140][T20848] [ 1610.073149][T20848] dump_stack_lvl+0xe8/0x150 [ 1610.073188][T20848] should_fail_ex+0x46b/0x600 [ 1610.073221][T20848] strncpy_from_user+0x36/0x2c0 [ 1610.073252][T20848] do_getname+0x77/0x250 [ 1610.073275][T20848] do_sys_openat2+0xcc/0x200 [ 1610.073296][T20848] ? __se_sys_futex+0x3a8/0x450 [ 1610.073321][T20848] ? __pfx_do_sys_openat2+0x10/0x10 [ 1610.073348][T20848] ? rcu_is_watching+0x16/0xb0 [ 1610.073386][T20848] __x64_sys_openat+0x138/0x170 [ 1610.073413][T20848] do_syscall_64+0x166/0x520 [ 1610.073437][T20848] ? trace_irq_disable+0x3b/0x140 [ 1610.073464][T20848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1610.073486][T20848] ? clear_bhb_loop+0x70/0xc0 [ 1610.073512][T20848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1610.073534][T20848] RIP: 0033:0x7f3638d8e159 [ 1610.073554][T20848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1610.073573][T20848] RSP: 002b:00007f3636fe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1610.073596][T20848] RAX: ffffffffffffffda RBX: 00007f3639015fa0 RCX: 00007f3638d8e159 [ 1610.073613][T20848] RDX: 0000000000000002 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 1610.073629][T20848] RBP: 00007f3638e2506b R08: 0000000000000000 R09: 0000000000000000 [ 1610.073643][T20848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1610.073656][T20848] R13: 00007f3639016038 R14: 00007f3639015fa0 R15: 00007fffbcc9b328 [ 1610.073689][T20848] [ 1611.996622][T20869] netlink: 6024 bytes leftover after parsing attributes in process `syz.9.2613'. [ 1613.142156][T20890] FAULT_INJECTION: forcing a failure. [ 1613.142156][T20890] name failslab, interval 1, probability 0, space 0, times 0 [ 1613.142195][T20890] CPU: 0 UID: 0 PID: 20890 Comm: syz.1.2620 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1613.142221][T20890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1613.142235][T20890] Call Trace: [ 1613.142244][T20890] [ 1613.142254][T20890] dump_stack_lvl+0xe8/0x150 [ 1613.142292][T20890] should_fail_ex+0x46b/0x600 [ 1613.142328][T20890] should_failslab+0xa8/0x100 [ 1613.142350][T20890] ? do_getname+0x2e/0x250 [ 1613.142371][T20890] kmem_cache_alloc_noprof+0x9e/0x690 [ 1613.142402][T20890] ? do_getname+0x2e/0x250 [ 1613.142432][T20890] do_getname+0x2e/0x250 [ 1613.142450][T20890] ? getname_flags+0x11/0x20 [ 1613.142481][T20890] do_sys_openat2+0xcc/0x200 [ 1613.142505][T20890] ? __se_sys_futex+0x3a8/0x450 [ 1613.142529][T20890] ? __pfx_do_sys_openat2+0x10/0x10 [ 1613.142557][T20890] ? rcu_is_watching+0x16/0xb0 [ 1613.142594][T20890] __x64_sys_openat+0x138/0x170 [ 1613.142622][T20890] do_syscall_64+0x166/0x520 [ 1613.142645][T20890] ? trace_irq_disable+0x3b/0x140 [ 1613.142673][T20890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1613.142696][T20890] ? clear_bhb_loop+0x70/0xc0 [ 1613.142723][T20890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1613.142745][T20890] RIP: 0033:0x7f548734e159 [ 1613.142765][T20890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1613.142785][T20890] RSP: 002b:00007f54855a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1613.142809][T20890] RAX: ffffffffffffffda RBX: 00007f54875d5fa0 RCX: 00007f548734e159 [ 1613.142826][T20890] RDX: 0000000000000002 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 1613.142842][T20890] RBP: 00007f54873e506b R08: 0000000000000000 R09: 0000000000000000 [ 1613.142857][T20890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1613.142870][T20890] R13: 00007f54875d6038 R14: 00007f54875d5fa0 R15: 00007ffd2e74fa38 [ 1613.142904][T20890] [ 1613.358402][ T151] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1616.232054][T20949] netlink: 6024 bytes leftover after parsing attributes in process `syz.9.2645'. [ 1617.688519][T20974] FAULT_INJECTION: forcing a failure. [ 1617.688519][T20974] name failslab, interval 1, probability 0, space 0, times 0 [ 1617.688559][T20974] CPU: 0 UID: 0 PID: 20974 Comm: syz.3.2651 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1617.688586][T20974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1617.688601][T20974] Call Trace: [ 1617.688610][T20974] [ 1617.688621][T20974] dump_stack_lvl+0xe8/0x150 [ 1617.688659][T20974] should_fail_ex+0x46b/0x600 [ 1617.688695][T20974] should_failslab+0xa8/0x100 [ 1617.688719][T20974] ? __pfx_queue_init+0x10/0x10 [ 1617.688746][T20974] __kmalloc_cache_noprof+0xa1/0x680 [ 1617.688779][T20974] ? v4l2_m2m_ctx_init+0x5e/0x2c0 [ 1617.688811][T20974] ? v4l2_m2m_ctx_init+0x5e/0x2c0 [ 1617.688842][T20974] ? v4l2_ctrl_handler_setup+0x74/0x90 [ 1617.688872][T20974] ? __pfx_queue_init+0x10/0x10 [ 1617.688897][T20974] v4l2_m2m_ctx_init+0x5e/0x2c0 [ 1617.688934][T20974] vicodec_open+0x6ce/0xbf0 [ 1617.688969][T20974] v4l2_open+0x1bf/0x3a0 [ 1617.689002][T20974] chrdev_open+0x4dc/0x600 [ 1617.689044][T20974] ? __pfx_chrdev_open+0x10/0x10 [ 1617.689076][T20974] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 1617.689112][T20974] ? __pfx_chrdev_open+0x10/0x10 [ 1617.689141][T20974] do_dentry_open+0x849/0x1420 [ 1617.689186][T20974] vfs_open+0x3b/0x350 [ 1617.689204][T20974] ? path_openat+0x142d/0x1d60 [ 1617.689236][T20974] path_openat+0x1448/0x1d60 [ 1617.689303][T20974] do_file_open+0x23e/0x4a0 [ 1617.689337][T20974] ? __pfx_do_file_open+0x10/0x10 [ 1617.689393][T20974] ? alloc_fd+0x654/0x6d0 [ 1617.689427][T20974] do_sys_openat2+0x115/0x200 [ 1617.689450][T20974] ? __se_sys_futex+0x3a8/0x450 [ 1617.689474][T20974] ? __pfx_do_sys_openat2+0x10/0x10 [ 1617.689498][T20974] ? ksys_write+0x248/0x270 [ 1617.689524][T20974] ? __pfx___se_sys_futex+0x10/0x10 [ 1617.689546][T20974] ? __pfx_ksys_write+0x10/0x10 [ 1617.689577][T20974] __x64_sys_openat+0x138/0x170 [ 1617.689605][T20974] do_syscall_64+0x166/0x520 [ 1617.689628][T20974] ? trace_irq_disable+0x3b/0x140 [ 1617.689656][T20974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.689679][T20974] ? clear_bhb_loop+0x70/0xc0 [ 1617.689706][T20974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.689728][T20974] RIP: 0033:0x7f06ea2de159 [ 1617.689749][T20974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1617.689769][T20974] RSP: 002b:00007f06e8536028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1617.689793][T20974] RAX: ffffffffffffffda RBX: 00007f06ea565fa0 RCX: 00007f06ea2de159 [ 1617.689810][T20974] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1617.689826][T20974] RBP: 00007f06ea37506b R08: 0000000000000000 R09: 0000000000000000 [ 1617.689840][T20974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1617.689854][T20974] R13: 00007f06ea566038 R14: 00007f06ea565fa0 R15: 00007ffcbdd8d028 [ 1617.689886][T20974] [ 1618.151686][T20989] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.2660'. [ 1619.303618][T21009] netlink: 620 bytes leftover after parsing attributes in process `syz.7.2663'. [ 1619.439096][T21012] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.2664'. [ 1621.186438][T21020] FAULT_INJECTION: forcing a failure. [ 1621.186438][T21020] name failslab, interval 1, probability 0, space 0, times 0 [ 1621.186476][T21020] CPU: 0 UID: 0 PID: 21020 Comm: syz.4.2667 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1621.186503][T21020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1621.186517][T21020] Call Trace: [ 1621.186526][T21020] [ 1621.186536][T21020] dump_stack_lvl+0xe8/0x150 [ 1621.186578][T21020] should_fail_ex+0x46b/0x600 [ 1621.186615][T21020] should_failslab+0xa8/0x100 [ 1621.186639][T21020] ? __pfx_queue_init+0x10/0x10 [ 1621.186666][T21020] __kmalloc_cache_noprof+0xa1/0x680 [ 1621.186698][T21020] ? v4l2_m2m_ctx_init+0x5e/0x2c0 [ 1621.186729][T21020] ? v4l2_m2m_ctx_init+0x5e/0x2c0 [ 1621.186767][T21020] ? v4l2_ctrl_handler_setup+0x74/0x90 [ 1621.186798][T21020] ? __pfx_queue_init+0x10/0x10 [ 1621.186825][T21020] v4l2_m2m_ctx_init+0x5e/0x2c0 [ 1621.186862][T21020] vicodec_open+0x6ce/0xbf0 [ 1621.186898][T21020] v4l2_open+0x1bf/0x3a0 [ 1621.186931][T21020] chrdev_open+0x4dc/0x600 [ 1621.186966][T21020] ? __pfx_chrdev_open+0x10/0x10 [ 1621.186999][T21020] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 1621.187037][T21020] ? __pfx_chrdev_open+0x10/0x10 [ 1621.187067][T21020] do_dentry_open+0x849/0x1420 [ 1621.187111][T21020] vfs_open+0x3b/0x350 [ 1621.187129][T21020] ? path_openat+0x142d/0x1d60 [ 1621.187160][T21020] path_openat+0x1448/0x1d60 [ 1621.187208][T21020] do_file_open+0x23e/0x4a0 [ 1621.187243][T21020] ? __pfx_do_file_open+0x10/0x10 [ 1621.187294][T21020] ? alloc_fd+0x654/0x6d0 [ 1621.187328][T21020] do_sys_openat2+0x115/0x200 [ 1621.187350][T21020] ? __se_sys_futex+0x3a8/0x450 [ 1621.187373][T21020] ? __pfx_do_sys_openat2+0x10/0x10 [ 1621.187401][T21020] ? rcu_is_watching+0x16/0xb0 [ 1621.187440][T21020] __x64_sys_openat+0x138/0x170 [ 1621.187468][T21020] do_syscall_64+0x166/0x520 [ 1621.187491][T21020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1621.187513][T21020] ? clear_bhb_loop+0x70/0xc0 [ 1621.187540][T21020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1621.187561][T21020] RIP: 0033:0x7fabae55e159 [ 1621.187582][T21020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1621.187602][T21020] RSP: 002b:00007fabac7b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1621.187627][T21020] RAX: ffffffffffffffda RBX: 00007fabae7e5fa0 RCX: 00007fabae55e159 [ 1621.187643][T21020] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1621.187660][T21020] RBP: 00007fabae5f506b R08: 0000000000000000 R09: 0000000000000000 [ 1621.187675][T21020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1621.187689][T21020] R13: 00007fabae7e6038 R14: 00007fabae7e5fa0 R15: 00007fff72f82618 [ 1621.187725][T21020] [ 1621.313298][T21035] ªªªªªª: renamed from vlan0 (while UP) [ 1621.655621][T21043] FAULT_INJECTION: forcing a failure. [ 1621.655621][T21043] name failslab, interval 1, probability 0, space 0, times 0 [ 1621.655659][T21043] CPU: 1 UID: 0 PID: 21043 Comm: syz.9.2670 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1621.655687][T21043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1621.655701][T21043] Call Trace: [ 1621.655710][T21043] [ 1621.655720][T21043] dump_stack_lvl+0xe8/0x150 [ 1621.655758][T21043] should_fail_ex+0x46b/0x600 [ 1621.655797][T21043] should_failslab+0xa8/0x100 [ 1621.655819][T21043] ? __kernfs_new_node+0xe7/0xa70 [ 1621.655848][T21043] kmem_cache_alloc_noprof+0x9e/0x690 [ 1621.655878][T21043] ? __kernfs_new_node+0xe7/0xa70 [ 1621.655909][T21043] __kernfs_new_node+0xe7/0xa70 [ 1621.655936][T21043] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1621.655967][T21043] ? __pfx___kernfs_new_node+0x10/0x10 [ 1621.655994][T21043] ? kernfs_root+0x1c/0x230 [ 1621.656026][T21043] ? kernfs_root+0x1c/0x230 [ 1621.656051][T21043] ? kernfs_root+0x1c/0x230 [ 1621.656086][T21043] kernfs_new_node+0xea/0x140 [ 1621.656119][T21043] __kernfs_create_file+0x4b/0x2e0 [ 1621.656144][T21043] cgroup_addrm_files+0x837/0xd70 [ 1621.656244][T21043] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 1621.656272][T21043] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1621.656297][T21043] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1621.656318][T21043] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 1621.656363][T21043] ? css_next_descendant_pre+0x17d/0x260 [ 1621.656398][T21043] css_populate_dir+0x2ba/0x3d0 [ 1621.656429][T21043] cgroup_mkdir+0xcfb/0xf70 [ 1621.656469][T21043] ? __pfx_cgroup_mkdir+0x10/0x10 [ 1621.656501][T21043] kernfs_iop_mkdir+0x213/0x360 [ 1621.656535][T21043] vfs_mkdir+0x408/0x620 [ 1621.656572][T21043] filename_mkdirat+0x289/0x520 [ 1621.656607][T21043] ? __pfx_filename_mkdirat+0x10/0x10 [ 1621.656637][T21043] ? do_getname+0x151/0x250 [ 1621.656660][T21043] __se_sys_mkdirat+0x35/0x150 [ 1621.656693][T21043] do_syscall_64+0x166/0x520 [ 1621.656715][T21043] ? trace_irq_disable+0x3b/0x140 [ 1621.656743][T21043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1621.656765][T21043] ? clear_bhb_loop+0x70/0xc0 [ 1621.656792][T21043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1621.656814][T21043] RIP: 0033:0x7f3638d8e159 [ 1621.656835][T21043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1621.656855][T21043] RSP: 002b:00007f3636fe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1621.656880][T21043] RAX: ffffffffffffffda RBX: 00007f3639015fa0 RCX: 00007f3638d8e159 [ 1621.656897][T21043] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1621.656913][T21043] RBP: 00007f3638e2506b R08: 0000000000000000 R09: 0000000000000000 [ 1621.656928][T21043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1621.656942][T21043] R13: 00007f3639016038 R14: 00007f3639015fa0 R15: 00007fffbcc9b328 [ 1621.656979][T21043] [ 1621.682306][T21043] cgroup: cgroup_addrm_files: failed to add cgroup.stat, err=-12 [ 1622.137143][T21055] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.2674'. [ 1623.292607][T21071] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.2679'. [ 1623.978938][T21083] FAULT_INJECTION: forcing a failure. [ 1623.978938][T21083] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1623.978978][T21083] CPU: 0 UID: 0 PID: 21083 Comm: syz.1.2684 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1623.979005][T21083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1623.979019][T21083] Call Trace: [ 1623.979029][T21083] [ 1623.979040][T21083] dump_stack_lvl+0xe8/0x150 [ 1623.979079][T21083] should_fail_ex+0x46b/0x600 [ 1623.979121][T21083] get_futex_key+0x1b4/0x1580 [ 1623.979157][T21083] ? __lock_acquire+0x747/0x2de0 [ 1623.979193][T21083] ? __pfx_get_futex_key+0x10/0x10 [ 1623.979225][T21083] ? __cgroup_account_cputime+0xe8/0x120 [ 1623.979268][T21083] futex_wait_setup+0x4a/0x590 [ 1623.979301][T21083] ? __futex_wait+0xe1/0x410 [ 1623.979333][T21083] __futex_wait+0x161/0x410 [ 1623.979366][T21083] ? __pfx___futex_wait+0x10/0x10 [ 1623.979405][T21083] ? __pfx_futex_wake_mark+0x10/0x10 [ 1623.979438][T21083] ? try_to_wake_up+0x84b/0x1430 [ 1623.979475][T21083] futex_wait+0x121/0x390 [ 1623.979506][T21083] ? __pfx_futex_wait+0x10/0x10 [ 1623.979553][T21083] do_futex+0x3e7/0x4e0 [ 1623.979581][T21083] ? __pfx_do_futex+0x10/0x10 [ 1623.979603][T21083] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1623.979641][T21083] __se_sys_futex+0x3a8/0x450 [ 1623.979668][T21083] ? ksys_write+0x248/0x270 [ 1623.979696][T21083] ? __pfx___se_sys_futex+0x10/0x10 [ 1623.979718][T21083] ? __pfx_ksys_write+0x10/0x10 [ 1623.979750][T21083] ? __x64_sys_futex+0x21/0xf0 [ 1623.979776][T21083] do_syscall_64+0x166/0x520 [ 1623.979798][T21083] ? trace_irq_disable+0x3b/0x140 [ 1623.979826][T21083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1623.979849][T21083] ? clear_bhb_loop+0x70/0xc0 [ 1623.979876][T21083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1623.979897][T21083] RIP: 0033:0x7f548734e159 [ 1623.979917][T21083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1623.979937][T21083] RSP: 002b:00007f54855a60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1623.979962][T21083] RAX: ffffffffffffffda RBX: 00007f54875d5fa8 RCX: 00007f548734e159 [ 1623.979979][T21083] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f54875d5fa8 [ 1623.979994][T21083] RBP: 00007f54875d5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1623.980008][T21083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1623.980022][T21083] R13: 00007f54875d6038 R14: 00007ffd2e74f950 R15: 00007ffd2e74fa38 [ 1623.980058][T21083] [ 1626.134758][T21124] FAULT_INJECTION: forcing a failure. [ 1626.134758][T21124] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1626.134793][T21124] CPU: 0 UID: 0 PID: 21124 Comm: syz.1.2695 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1626.134815][T21124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1626.134827][T21124] Call Trace: [ 1626.134835][T21124] [ 1626.134848][T21124] dump_stack_lvl+0xe8/0x150 [ 1626.134883][T21124] should_fail_ex+0x46b/0x600 [ 1626.134918][T21124] get_futex_key+0x1b4/0x1580 [ 1626.134963][T21124] ? __pfx_get_futex_key+0x10/0x10 [ 1626.134997][T21124] ? update_se+0x90/0xf90 [ 1626.135030][T21124] futex_wait_setup+0x4a/0x590 [ 1626.135061][T21124] ? __futex_wait+0xe1/0x410 [ 1626.135090][T21124] __futex_wait+0x161/0x410 [ 1626.135119][T21124] ? __pfx___futex_wait+0x10/0x10 [ 1626.135150][T21124] ? __pfx_futex_wake_mark+0x10/0x10 [ 1626.135189][T21124] ? try_to_wake_up+0x84b/0x1430 [ 1626.135224][T21124] futex_wait+0x121/0x390 [ 1626.135250][T21124] ? __pfx_futex_wait+0x10/0x10 [ 1626.135289][T21124] do_futex+0x3e7/0x4e0 [ 1626.135314][T21124] ? __pfx_do_futex+0x10/0x10 [ 1626.135335][T21124] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1626.135370][T21124] __se_sys_futex+0x3a8/0x450 [ 1626.135405][T21124] ? ksys_write+0x248/0x270 [ 1626.135432][T21124] ? __pfx___se_sys_futex+0x10/0x10 [ 1626.135454][T21124] ? __pfx_ksys_write+0x10/0x10 [ 1626.135484][T21124] ? __x64_sys_futex+0x21/0xf0 [ 1626.135509][T21124] do_syscall_64+0x166/0x520 [ 1626.135533][T21124] ? trace_irq_disable+0x3b/0x140 [ 1626.135562][T21124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1626.135585][T21124] ? clear_bhb_loop+0x70/0xc0 [ 1626.135611][T21124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1626.135632][T21124] RIP: 0033:0x7f548734e159 [ 1626.135652][T21124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1626.135671][T21124] RSP: 002b:00007f54855a60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1626.135694][T21124] RAX: ffffffffffffffda RBX: 00007f54875d5fa8 RCX: 00007f548734e159 [ 1626.135710][T21124] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f54875d5fa8 [ 1626.135724][T21124] RBP: 00007f54875d5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1626.135739][T21124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1626.135752][T21124] R13: 00007f54875d6038 R14: 00007ffd2e74f950 R15: 00007ffd2e74fa38 [ 1626.135783][T21124] [ 1628.825186][T21181] FAULT_INJECTION: forcing a failure. [ 1628.825186][T21181] name failslab, interval 1, probability 0, space 0, times 0 [ 1628.825223][T21181] CPU: 1 UID: 0 PID: 21181 Comm: syz.1.2708 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1628.825249][T21181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1628.825263][T21181] Call Trace: [ 1628.825272][T21181] [ 1628.825281][T21181] dump_stack_lvl+0xe8/0x150 [ 1628.825320][T21181] should_fail_ex+0x46b/0x600 [ 1628.825353][T21181] ? sock_alloc_inode+0x2c/0x1a0 [ 1628.825383][T21181] should_failslab+0xa8/0x100 [ 1628.825408][T21181] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 1628.825441][T21181] ? sock_alloc_inode+0x2c/0x1a0 [ 1628.825476][T21181] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1628.825503][T21181] sock_alloc_inode+0x2c/0x1a0 [ 1628.825532][T21181] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1628.825560][T21181] alloc_inode+0x6a/0x1b0 [ 1628.825584][T21181] __sock_create+0x12d/0x9d0 [ 1628.825625][T21181] __sys_socket+0xd6/0x1b0 [ 1628.825660][T21181] __x64_sys_socket+0x7a/0x90 [ 1628.825692][T21181] do_syscall_64+0x166/0x520 [ 1628.825715][T21181] ? trace_irq_disable+0x3b/0x140 [ 1628.825743][T21181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1628.825765][T21181] ? clear_bhb_loop+0x70/0xc0 [ 1628.825794][T21181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1628.825817][T21181] RIP: 0033:0x7f548734e159 [ 1628.825838][T21181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1628.825858][T21181] RSP: 002b:00007f54855a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1628.825883][T21181] RAX: ffffffffffffffda RBX: 00007f54875d5fa0 RCX: 00007f548734e159 [ 1628.825900][T21181] RDX: 0000000000000000 RSI: 4000000000000001 RDI: 0000000000000002 [ 1628.825915][T21181] RBP: 00007f54873e506b R08: 0000000000000000 R09: 0000000000000000 [ 1628.825930][T21181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1628.825944][T21181] R13: 00007f54875d6038 R14: 00007f54875d5fa0 R15: 00007ffd2e74fa38 [ 1628.825979][T21181] [ 1628.826007][T21181] socket: no more sockets [ 1628.853137][T21184] Bluetooth: MGMT ver 1.23 [ 1628.853459][T21184] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 1632.009219][T21241] FAULT_INJECTION: forcing a failure. [ 1632.009219][T21241] name failslab, interval 1, probability 0, space 0, times 0 [ 1632.009259][T21241] CPU: 0 UID: 0 PID: 21241 Comm: syz.1.2726 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1632.009286][T21241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1632.009300][T21241] Call Trace: [ 1632.009309][T21241] [ 1632.009320][T21241] dump_stack_lvl+0xe8/0x150 [ 1632.009358][T21241] should_fail_ex+0x46b/0x600 [ 1632.009394][T21241] should_failslab+0xa8/0x100 [ 1632.009417][T21241] ? security_file_alloc+0x34/0x310 [ 1632.009446][T21241] kmem_cache_alloc_noprof+0x9e/0x690 [ 1632.009476][T21241] ? rcu_is_watching+0x16/0xb0 [ 1632.009507][T21241] ? security_file_alloc+0x34/0x310 [ 1632.009536][T21241] ? alloc_empty_file+0x5b/0x1d0 [ 1632.009565][T21241] security_file_alloc+0x34/0x310 [ 1632.009595][T21241] init_file+0x96/0x2d0 [ 1632.009625][T21241] alloc_empty_file+0x74/0x1d0 [ 1632.009648][T21241] alloc_file_pseudo+0x115/0x1e0 [ 1632.009675][T21241] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1632.009699][T21241] ? alloc_fd+0x654/0x6d0 [ 1632.009727][T21241] sock_alloc_file+0xb8/0x2f0 [ 1632.009754][T21241] ? __sys_socket+0x12b/0x1b0 [ 1632.009788][T21241] __sys_socket+0x13f/0x1b0 [ 1632.009823][T21241] __x64_sys_socket+0x7a/0x90 [ 1632.009855][T21241] do_syscall_64+0x166/0x520 [ 1632.009879][T21241] ? trace_irq_disable+0x3b/0x140 [ 1632.009907][T21241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1632.009929][T21241] ? clear_bhb_loop+0x70/0xc0 [ 1632.009956][T21241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1632.009978][T21241] RIP: 0033:0x7f548734e159 [ 1632.009999][T21241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1632.010018][T21241] RSP: 002b:00007f54855a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1632.010043][T21241] RAX: ffffffffffffffda RBX: 00007f54875d5fa0 RCX: 00007f548734e159 [ 1632.010060][T21241] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 1632.010074][T21241] RBP: 00007f54873e506b R08: 0000000000000000 R09: 0000000000000000 [ 1632.010088][T21241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1632.010102][T21241] R13: 00007f54875d6038 R14: 00007f54875d5fa0 R15: 00007ffd2e74fa38 [ 1632.010135][T21241] [ 1634.113579][T21285] FAULT_INJECTION: forcing a failure. [ 1634.113579][T21285] name failslab, interval 1, probability 0, space 0, times 0 [ 1634.113618][T21285] CPU: 1 UID: 0 PID: 21285 Comm: syz.7.2738 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1634.113644][T21285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1634.113657][T21285] Call Trace: [ 1634.113665][T21285] [ 1634.113675][T21285] dump_stack_lvl+0xe8/0x150 [ 1634.113713][T21285] should_fail_ex+0x46b/0x600 [ 1634.113750][T21285] should_failslab+0xa8/0x100 [ 1634.113772][T21285] ? sk_prot_alloc+0x57/0x210 [ 1634.113795][T21285] kmem_cache_alloc_noprof+0x9e/0x690 [ 1634.113826][T21285] ? sk_prot_alloc+0x57/0x210 [ 1634.113850][T21285] ? lock_acquire+0x115/0x350 [ 1634.113880][T21285] sk_prot_alloc+0x57/0x210 [ 1634.113901][T21285] ? sk_alloc+0x27/0x390 [ 1634.113926][T21285] sk_alloc+0x3a/0x390 [ 1634.113952][T21285] inet_create+0x7a9/0x1000 [ 1634.113981][T21285] ? inet_create+0x9d/0x1000 [ 1634.114014][T21285] __sock_create+0x4b3/0x9d0 [ 1634.114050][T21285] __sys_socket+0xd6/0x1b0 [ 1634.114077][T21285] __x64_sys_socket+0x7a/0x90 [ 1634.114103][T21285] do_syscall_64+0x166/0x520 [ 1634.114121][T21285] ? trace_irq_disable+0x3b/0x140 [ 1634.114143][T21285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1634.114161][T21285] ? clear_bhb_loop+0x70/0xc0 [ 1634.114180][T21285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1634.114196][T21285] RIP: 0033:0x7fd4cbd1e159 [ 1634.114213][T21285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1634.114228][T21285] RSP: 002b:00007fd4c9f76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1634.114248][T21285] RAX: ffffffffffffffda RBX: 00007fd4cbfa5fa0 RCX: 00007fd4cbd1e159 [ 1634.114262][T21285] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 1634.114272][T21285] RBP: 00007fd4cbdb506b R08: 0000000000000000 R09: 0000000000000000 [ 1634.114283][T21285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1634.114294][T21285] R13: 00007fd4cbfa6038 R14: 00007fd4cbfa5fa0 R15: 00007fff9f6f8f18 [ 1634.114321][T21285] [ 1635.709232][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 1635.949288][T21341] FAULT_INJECTION: forcing a failure. [ 1635.949288][T21341] name failslab, interval 1, probability 0, space 0, times 0 [ 1635.949326][T21341] CPU: 1 UID: 0 PID: 21341 Comm: syz.7.2749 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1635.949353][T21341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1635.949366][T21341] Call Trace: [ 1635.949374][T21341] [ 1635.949383][T21341] dump_stack_lvl+0xe8/0x150 [ 1635.949419][T21341] should_fail_ex+0x46b/0x600 [ 1635.949456][T21341] should_failslab+0xa8/0x100 [ 1635.949479][T21341] __kmalloc_noprof+0xfb/0x790 [ 1635.949508][T21341] ? sk_prot_alloc+0x57/0x210 [ 1635.949531][T21341] ? security_sk_alloc+0x52/0x360 [ 1635.949556][T21341] ? security_sk_alloc+0x52/0x360 [ 1635.949588][T21341] security_sk_alloc+0x52/0x360 [ 1635.949616][T21341] sk_prot_alloc+0x101/0x210 [ 1635.949642][T21341] sk_alloc+0x3a/0x390 [ 1635.949665][T21341] inet_create+0x7a9/0x1000 [ 1635.949692][T21341] ? inet_create+0x9d/0x1000 [ 1635.949724][T21341] __sock_create+0x4b3/0x9d0 [ 1635.949776][T21341] __sys_socket+0xd6/0x1b0 [ 1635.949810][T21341] __x64_sys_socket+0x7a/0x90 [ 1635.949840][T21341] do_syscall_64+0x166/0x520 [ 1635.949863][T21341] ? trace_irq_disable+0x3b/0x140 [ 1635.949892][T21341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1635.949914][T21341] ? clear_bhb_loop+0x70/0xc0 [ 1635.949939][T21341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1635.949961][T21341] RIP: 0033:0x7fd4cbd1e159 [ 1635.949982][T21341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1635.950001][T21341] RSP: 002b:00007fd4c9f76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1635.950024][T21341] RAX: ffffffffffffffda RBX: 00007fd4cbfa5fa0 RCX: 00007fd4cbd1e159 [ 1635.950040][T21341] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 1635.950053][T21341] RBP: 00007fd4cbdb506b R08: 0000000000000000 R09: 0000000000000000 [ 1635.950068][T21341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1635.950081][T21341] R13: 00007fd4cbfa6038 R14: 00007fd4cbfa5fa0 R15: 00007fff9f6f8f18 [ 1635.950112][T21341] [ 1638.456774][ T8637] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 1638.469774][T21428] FAULT_INJECTION: forcing a failure. [ 1638.469774][T21428] name failslab, interval 1, probability 0, space 0, times 0 [ 1638.469813][T21428] CPU: 0 UID: 0 PID: 21428 Comm: syz.9.2776 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1638.469840][T21428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1638.469854][T21428] Call Trace: [ 1638.469864][T21428] [ 1638.469874][T21428] dump_stack_lvl+0xe8/0x150 [ 1638.469914][T21428] should_fail_ex+0x46b/0x600 [ 1638.469947][T21428] ? sock_alloc_inode+0x2c/0x1a0 [ 1638.469980][T21428] should_failslab+0xa8/0x100 [ 1638.470014][T21428] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 1638.470047][T21428] ? sock_alloc_inode+0x2c/0x1a0 [ 1638.470083][T21428] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1638.470112][T21428] sock_alloc_inode+0x2c/0x1a0 [ 1638.470142][T21428] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1638.470170][T21428] alloc_inode+0x6a/0x1b0 [ 1638.470195][T21428] __sock_create+0x12d/0x9d0 [ 1638.470236][T21428] __sys_socket+0xd6/0x1b0 [ 1638.470273][T21428] __x64_sys_socket+0x7a/0x90 [ 1638.470306][T21428] do_syscall_64+0x166/0x520 [ 1638.470329][T21428] ? trace_irq_disable+0x3b/0x140 [ 1638.470359][T21428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1638.470382][T21428] ? clear_bhb_loop+0x70/0xc0 [ 1638.470409][T21428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1638.470432][T21428] RIP: 0033:0x7f3638d8e159 [ 1638.470453][T21428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1638.470473][T21428] RSP: 002b:00007f3636fe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1638.470498][T21428] RAX: ffffffffffffffda RBX: 00007f3639015fa0 RCX: 00007f3638d8e159 [ 1638.470514][T21428] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 1638.470528][T21428] RBP: 00007f3638e2506b R08: 0000000000000000 R09: 0000000000000000 [ 1638.470543][T21428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1638.470557][T21428] R13: 00007f3639016038 R14: 00007f3639015fa0 R15: 00007fffbcc9b328 [ 1638.470591][T21428] [ 1638.475111][T21428] socket: no more sockets [ 1639.790271][T21462] FAULT_INJECTION: forcing a failure. [ 1639.790271][T21462] name failslab, interval 1, probability 0, space 0, times 0 [ 1639.790307][T21462] CPU: 1 UID: 0 PID: 21462 Comm: syz.3.2787 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1639.790329][T21462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1639.790341][T21462] Call Trace: [ 1639.790349][T21462] [ 1639.790358][T21462] dump_stack_lvl+0xe8/0x150 [ 1639.790404][T21462] should_fail_ex+0x46b/0x600 [ 1639.790435][T21462] ? sock_alloc_inode+0x2c/0x1a0 [ 1639.790465][T21462] should_failslab+0xa8/0x100 [ 1639.790487][T21462] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 1639.790516][T21462] ? sock_alloc_inode+0x2c/0x1a0 [ 1639.790547][T21462] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1639.790574][T21462] sock_alloc_inode+0x2c/0x1a0 [ 1639.790601][T21462] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1639.790628][T21462] alloc_inode+0x6a/0x1b0 [ 1639.790652][T21462] __sock_create+0x12d/0x9d0 [ 1639.790688][T21462] __sys_socket+0xd6/0x1b0 [ 1639.790721][T21462] __x64_sys_socket+0x7a/0x90 [ 1639.790753][T21462] do_syscall_64+0x166/0x520 [ 1639.790776][T21462] ? trace_irq_disable+0x3b/0x140 [ 1639.790803][T21462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1639.790825][T21462] ? clear_bhb_loop+0x70/0xc0 [ 1639.790861][T21462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1639.790884][T21462] RIP: 0033:0x7f06ea2de159 [ 1639.790906][T21462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1639.790926][T21462] RSP: 002b:00007f06e8536028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1639.790951][T21462] RAX: ffffffffffffffda RBX: 00007f06ea565fa0 RCX: 00007f06ea2de159 [ 1639.790968][T21462] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 1639.790981][T21462] RBP: 00007f06ea37506b R08: 0000000000000000 R09: 0000000000000000 [ 1639.790996][T21462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1639.791010][T21462] R13: 00007f06ea566038 R14: 00007f06ea565fa0 R15: 00007ffcbdd8d028 [ 1639.791044][T21462] [ 1639.791055][T21462] socket: no more sockets [ 1640.239286][T21474] netlink: 6024 bytes leftover after parsing attributes in process `syz.9.2792'. [ 1641.600572][T21516] FAULT_INJECTION: forcing a failure. [ 1641.600572][T21516] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1641.600611][T21516] CPU: 1 UID: 0 PID: 21516 Comm: syz.3.2801 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1641.600638][T21516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1641.600652][T21516] Call Trace: [ 1641.600661][T21516] [ 1641.600670][T21516] dump_stack_lvl+0xe8/0x150 [ 1641.600708][T21516] should_fail_ex+0x46b/0x600 [ 1641.600744][T21516] get_futex_key+0x1b4/0x1580 [ 1641.600788][T21516] ? __pfx_get_futex_key+0x10/0x10 [ 1641.600832][T21516] futex_wake+0x119/0x600 [ 1641.600860][T21516] ? rcu_is_watching+0x16/0xb0 [ 1641.600894][T21516] ? __pfx_futex_wake+0x10/0x10 [ 1641.600934][T21516] do_futex+0x458/0x4e0 [ 1641.600953][T21516] ? __asan_memcpy+0x40/0x70 [ 1641.600983][T21516] ? __pfx_do_futex+0x10/0x10 [ 1641.601003][T21516] ? lock_acquire+0x115/0x350 [ 1641.601037][T21516] __se_sys_futex+0x3a8/0x450 [ 1641.601065][T21516] ? __pfx___se_sys_futex+0x10/0x10 [ 1641.601084][T21516] ? fd_install+0x30f/0x3e0 [ 1641.601115][T21516] ? __x64_sys_futex+0x21/0xf0 [ 1641.601139][T21516] do_syscall_64+0x166/0x520 [ 1641.601166][T21516] ? trace_irq_disable+0x3b/0x140 [ 1641.601222][T21516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1641.601244][T21516] ? clear_bhb_loop+0x70/0xc0 [ 1641.601271][T21516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1641.601292][T21516] RIP: 0033:0x7f06ea2de159 [ 1641.601313][T21516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1641.601332][T21516] RSP: 002b:00007f06e85360e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1641.601357][T21516] RAX: ffffffffffffffda RBX: 00007f06ea565fa8 RCX: 00007f06ea2de159 [ 1641.601374][T21516] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f06ea565fac [ 1641.601389][T21516] RBP: 00007f06ea565fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1641.601405][T21516] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1641.601418][T21516] R13: 00007f06ea566038 R14: 00007ffcbdd8cf40 R15: 00007ffcbdd8d028 [ 1641.601453][T21516] [ 1643.297674][T21554] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2809'. [ 1644.837687][T21576] binder: BINDER_SET_CONTEXT_MGR already set [ 1644.837705][T21576] binder: 21575:21576 ioctl 4018620d 200000000040 returned -16 [ 1645.244201][T21585] FAULT_INJECTION: forcing a failure. [ 1645.244201][T21585] name failslab, interval 1, probability 0, space 0, times 0 [ 1645.244239][T21585] CPU: 1 UID: 0 PID: 21585 Comm: syz.1.2814 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1645.244264][T21585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1645.244277][T21585] Call Trace: [ 1645.244286][T21585] [ 1645.244295][T21585] dump_stack_lvl+0xe8/0x150 [ 1645.244329][T21585] should_fail_ex+0x46b/0x600 [ 1645.244361][T21585] ? __d_alloc+0x37/0x6f0 [ 1645.244387][T21585] should_failslab+0xa8/0x100 [ 1645.244411][T21585] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 1645.244443][T21585] ? __d_alloc+0x37/0x6f0 [ 1645.244475][T21585] __d_alloc+0x37/0x6f0 [ 1645.244505][T21585] d_alloc_pseudo+0x21/0xc0 [ 1645.244532][T21585] alloc_path_pseudo+0x107/0x220 [ 1645.244556][T21585] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 1645.244576][T21585] ? rt_spin_lock+0x1e2/0x400 [ 1645.244615][T21585] alloc_file_pseudo+0xa8/0x1e0 [ 1645.244640][T21585] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1645.244665][T21585] ? alloc_fd+0x654/0x6d0 [ 1645.244691][T21585] sock_alloc_file+0xb8/0x2f0 [ 1645.244719][T21585] ? __sys_socket+0x12b/0x1b0 [ 1645.244751][T21585] __sys_socket+0x13f/0x1b0 [ 1645.244785][T21585] __x64_sys_socket+0x7a/0x90 [ 1645.244816][T21585] do_syscall_64+0x166/0x520 [ 1645.244837][T21585] ? trace_irq_disable+0x3b/0x140 [ 1645.244875][T21585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1645.244896][T21585] ? clear_bhb_loop+0x70/0xc0 [ 1645.244920][T21585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1645.244940][T21585] RIP: 0033:0x7f548734e159 [ 1645.244960][T21585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1645.244979][T21585] RSP: 002b:00007f54855a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1645.245003][T21585] RAX: ffffffffffffffda RBX: 00007f54875d5fa0 RCX: 00007f548734e159 [ 1645.245021][T21585] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 1645.245035][T21585] RBP: 00007f54873e506b R08: 0000000000000000 R09: 0000000000000000 [ 1645.245048][T21585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1645.245061][T21585] R13: 00007f54875d6038 R14: 00007f54875d5fa0 R15: 00007ffd2e74fa38 [ 1645.245095][T21585] [ 1645.936150][T21606] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2821'. [ 1646.138227][T21611] netlink: 'syz.3.2823': attribute type 1 has an invalid length. [ 1646.138252][T21611] netlink: 756 bytes leftover after parsing attributes in process `syz.3.2823'. [ 1646.406147][T21618] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.2826'. [ 1646.556678][T21623] netlink: 'syz.9.2827': attribute type 39 has an invalid length. [ 1648.004301][T21649] FAULT_INJECTION: forcing a failure. [ 1648.004301][T21649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1648.004339][T21649] CPU: 0 UID: 0 PID: 21649 Comm: syz.1.2829 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1648.004365][T21649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1648.004379][T21649] Call Trace: [ 1648.004388][T21649] [ 1648.004398][T21649] dump_stack_lvl+0xe8/0x150 [ 1648.004438][T21649] should_fail_ex+0x46b/0x600 [ 1648.004473][T21649] _copy_from_user+0x2d/0xb0 [ 1648.004506][T21649] video_usercopy+0x359/0x1430 [ 1648.004540][T21649] ? smk_tskacc+0x2fb/0x370 [ 1648.004564][T21649] ? __pfx___video_do_ioctl+0x10/0x10 [ 1648.004595][T21649] ? __pfx_video_usercopy+0x10/0x10 [ 1648.004622][T21649] ? smack_file_ioctl+0x2c4/0x370 [ 1648.004663][T21649] ? __fget_files+0x2a/0x420 [ 1648.004686][T21649] ? __fget_files+0x3a8/0x420 [ 1648.004712][T21649] v4l2_ioctl+0x190/0x1e0 [ 1648.004740][T21649] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1648.004765][T21649] __se_sys_ioctl+0xff/0x170 [ 1648.004797][T21649] do_syscall_64+0x166/0x520 [ 1648.004820][T21649] ? trace_irq_disable+0x3b/0x140 [ 1648.004848][T21649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1648.004870][T21649] ? clear_bhb_loop+0x70/0xc0 [ 1648.004896][T21649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1648.004918][T21649] RIP: 0033:0x7f548734e159 [ 1648.004938][T21649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1648.004956][T21649] RSP: 002b:00007f54855a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1648.004981][T21649] RAX: ffffffffffffffda RBX: 00007f54875d5fa0 RCX: 00007f548734e159 [ 1648.004998][T21649] RDX: 0000200000002dc0 RSI: 00000000c058565d RDI: 0000000000000004 [ 1648.005012][T21649] RBP: 00007f54873e506b R08: 0000000000000000 R09: 0000000000000000 [ 1648.005027][T21649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1648.005041][T21649] R13: 00007f54875d6038 R14: 00007f54875d5fa0 R15: 00007ffd2e74fa38 [ 1648.005074][T21649] [ 1648.400274][T21655] netlink: 'syz.1.2833': attribute type 1 has an invalid length. [ 1649.221017][T21680] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.2841'. [ 1650.223140][T21692] FAULT_INJECTION: forcing a failure. [ 1650.223140][T21692] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1650.223177][T21692] CPU: 0 UID: 0 PID: 21692 Comm: syz.7.2843 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1650.223203][T21692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1650.223217][T21692] Call Trace: [ 1650.223226][T21692] [ 1650.223235][T21692] dump_stack_lvl+0xe8/0x150 [ 1650.223272][T21692] should_fail_ex+0x46b/0x600 [ 1650.223309][T21692] get_futex_key+0x1b4/0x1580 [ 1650.223341][T21692] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1650.223373][T21692] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1650.223407][T21692] ? __pfx_get_futex_key+0x10/0x10 [ 1650.223460][T21692] futex_wake+0x119/0x600 [ 1650.223489][T21692] ? __pfx___video_do_ioctl+0x10/0x10 [ 1650.223520][T21692] ? __pfx_futex_wake+0x10/0x10 [ 1650.223544][T21692] ? rcu_is_watching+0x16/0xb0 [ 1650.223577][T21692] ? kfree+0x4d/0x6d0 [ 1650.223611][T21692] ? video_usercopy+0xd53/0x1430 [ 1650.223643][T21692] do_futex+0x458/0x4e0 [ 1650.223671][T21692] ? __pfx_do_futex+0x10/0x10 [ 1650.223690][T21692] ? smack_file_ioctl+0x2c4/0x370 [ 1650.223726][T21692] __se_sys_futex+0x3a8/0x450 [ 1650.223753][T21692] ? __fget_files+0x2a/0x420 [ 1650.223777][T21692] ? __pfx___se_sys_futex+0x10/0x10 [ 1650.223808][T21692] ? __x64_sys_futex+0x21/0xf0 [ 1650.223833][T21692] do_syscall_64+0x166/0x520 [ 1650.223856][T21692] ? trace_irq_disable+0x3b/0x140 [ 1650.223887][T21692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1650.223909][T21692] ? clear_bhb_loop+0x70/0xc0 [ 1650.223935][T21692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1650.223957][T21692] RIP: 0033:0x7fd4cbd1e159 [ 1650.223978][T21692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1650.223996][T21692] RSP: 002b:00007fd4c9f760e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1650.224020][T21692] RAX: ffffffffffffffda RBX: 00007fd4cbfa5fa8 RCX: 00007fd4cbd1e159 [ 1650.224037][T21692] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd4cbfa5fac [ 1650.224051][T21692] RBP: 00007fd4cbfa5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1650.224064][T21692] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1650.224077][T21692] R13: 00007fd4cbfa6038 R14: 00007fff9f6f8e30 R15: 00007fff9f6f8f18 [ 1650.224109][T21692] [ 1650.435193][ T153] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1650.841683][T21702] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2845'. [ 1651.970310][T21711] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2850'. [ 1652.030630][ T8637] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 1653.362217][T21731] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.2854'. [ 1654.525242][T16679] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1654.594758][T16679] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1654.624367][T16679] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1654.632201][T16679] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1654.634542][T16679] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1656.193120][T21771] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2862'. [ 1656.600199][ T8637] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 1656.839692][T21790] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.2867'. [ 1657.029855][ T8637] Bluetooth: hci1: command tx timeout [ 1657.821180][T21745] lo speed is unknown, defaulting to 1000 [ 1659.355779][ T8637] Bluetooth: hci1: command tx timeout [ 1660.560616][T21842] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2876'. [ 1661.266001][ T8637] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 1661.354065][T21856] netlink: 6024 bytes leftover after parsing attributes in process `syz.7.2880'. [ 1661.600430][ T8637] Bluetooth: hci1: command tx timeout [ 1662.551593][T21871] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2883'. [ 1663.834443][ T8637] Bluetooth: hci1: command tx timeout [ 1664.034672][T21911] netlink: 6024 bytes leftover after parsing attributes in process `syz.7.2892'. [ 1664.341514][T21745] bridge0: port 1(bridge_slave_0) entered blocking state [ 1664.343141][T21745] bridge0: port 1(bridge_slave_0) entered disabled state [ 1664.343311][T21745] bridge_slave_0: entered allmulticast mode [ 1664.346201][T21745] bridge_slave_0: entered promiscuous mode [ 1664.352398][T21745] bridge0: port 2(bridge_slave_1) entered blocking state [ 1664.352604][T21745] bridge0: port 2(bridge_slave_1) entered disabled state [ 1664.352760][T21745] bridge_slave_1: entered allmulticast mode [ 1664.355242][T21745] bridge_slave_1: entered promiscuous mode [ 1665.325544][T21745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1665.350506][T21745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1665.374143][T21922] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2894'. [ 1665.753267][ T36] audit: type=1800 audit(1700000027.150:158): pid=21912 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.2888" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 1665.816110][T21912] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1665.816395][T21912] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1665.816498][T21912] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1666.697248][T21745] team0: Port device team_slave_0 added [ 1666.791095][T21745] team0: Port device team_slave_1 added [ 1667.146657][T21934] syzkaller1: entered promiscuous mode [ 1667.146687][T21934] syzkaller1: entered allmulticast mode [ 1667.164966][T21745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1667.164983][T21745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1667.165008][T21745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1667.777705][T21745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1667.777724][T21745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1667.777752][T21745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1667.940504][T21957] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2904'. [ 1668.079037][T21963] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2906'. [ 1668.317677][T21956] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2904'. [ 1668.333727][T21745] hsr_slave_0: entered promiscuous mode [ 1668.335741][T21745] hsr_slave_1: entered promiscuous mode [ 1668.407301][T21745] debugfs: 'hsr0' already exists in 'hsr' [ 1668.407332][T21745] Cannot create hsr debugfs directory [ 1669.071503][T21975] netlink: 608 bytes leftover after parsing attributes in process `syz.3.2907'. [ 1669.475310][T21994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2916'. [ 1669.475337][T21994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2916'. [ 1670.806825][T22027] sctp: [Deprecated]: syz.4.2930 (pid 22027) Use of int in max_burst socket option deprecated. [ 1670.806825][T22027] Use struct sctp_assoc_value instead [ 1671.254600][T21745] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.764346][T22052] FAULT_INJECTION: forcing a failure. [ 1671.764346][T22052] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1671.764386][T22052] CPU: 0 UID: 0 PID: 22052 Comm: syz.4.2936 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1671.764440][T22052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1671.764468][T22052] Call Trace: [ 1671.764486][T22052] [ 1671.764506][T22052] dump_stack_lvl+0xe8/0x150 [ 1671.764545][T22052] should_fail_ex+0x46b/0x600 [ 1671.764580][T22052] get_futex_key+0x1b4/0x1580 [ 1671.764620][T22052] ? __pfx_get_futex_key+0x10/0x10 [ 1671.764658][T22052] futex_wake+0x119/0x600 [ 1671.764687][T22052] ? __pfx_futex_wake+0x10/0x10 [ 1671.764708][T22052] ? do_raw_spin_lock+0x12b/0x2f0 [ 1671.764746][T22052] do_futex+0x458/0x4e0 [ 1671.764771][T22052] ? __pfx_do_futex+0x10/0x10 [ 1671.764796][T22052] ? __might_fault+0xaf/0x130 [ 1671.764826][T22052] mm_exit_exec_release+0x10d/0x290 [ 1671.764858][T22052] exit_mm+0x50/0x240 [ 1671.764880][T22052] do_exit+0x6cd/0x2360 [ 1671.764901][T22052] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1671.764929][T22052] ? __pfx_do_exit+0x10/0x10 [ 1671.764948][T22052] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1671.764984][T22052] ? rt_spin_unlock+0x159/0x200 [ 1671.765016][T22052] do_group_exit+0x22d/0x2f0 [ 1671.765037][T22052] ? rt_spin_unlock+0x165/0x200 [ 1671.765064][T22052] get_signal+0x121b/0x12c0 [ 1671.765111][T22052] arch_do_signal_or_restart+0xbb/0x860 [ 1671.765144][T22052] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1671.765189][T22052] exit_to_user_mode_loop+0x10e/0x770 [ 1671.765218][T22052] ? rcu_is_watching+0x16/0xb0 [ 1671.765259][T22052] do_syscall_64+0x328/0x520 [ 1671.765279][T22052] ? trace_irq_disable+0x3b/0x140 [ 1671.765305][T22052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1671.765326][T22052] ? clear_bhb_loop+0x70/0xc0 [ 1671.765350][T22052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1671.765370][T22052] RIP: 0033:0x7fabae55e159 [ 1671.765388][T22052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1671.765405][T22052] RSP: 002b:00007fabac7b60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1671.765426][T22052] RAX: fffffffffffffe00 RBX: 00007fabae7e5fa8 RCX: 00007fabae55e159 [ 1671.765441][T22052] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fabae7e5fa8 [ 1671.765454][T22052] RBP: 00007fabae7e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1671.765468][T22052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1671.765480][T22052] R13: 00007fabae7e6038 R14: 00007fff72f82530 R15: 00007fff72f82618 [ 1671.765511][T22052] [ 1672.623959][T22075] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.2943'. [ 1673.603801][T21745] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1673.901939][T22087] FAULT_INJECTION: forcing a failure. [ 1673.901939][T22087] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1673.901976][T22087] CPU: 1 UID: 0 PID: 22087 Comm: syz.3.2946 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1673.902001][T22087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1673.902014][T22087] Call Trace: [ 1673.902022][T22087] [ 1673.902032][T22087] dump_stack_lvl+0xe8/0x150 [ 1673.902069][T22087] should_fail_ex+0x46b/0x600 [ 1673.902105][T22087] get_futex_key+0x1b4/0x1580 [ 1673.902140][T22087] ? __lock_acquire+0x747/0x2de0 [ 1673.902176][T22087] ? __pfx_get_futex_key+0x10/0x10 [ 1673.902208][T22087] ? __cgroup_account_cputime+0xe8/0x120 [ 1673.902251][T22087] futex_wait_setup+0x4a/0x590 [ 1673.902283][T22087] ? __futex_wait+0xe1/0x410 [ 1673.902314][T22087] __futex_wait+0x161/0x410 [ 1673.902346][T22087] ? __pfx___futex_wait+0x10/0x10 [ 1673.902376][T22087] ? __pfx_futex_wake_mark+0x10/0x10 [ 1673.902408][T22087] ? try_to_wake_up+0x84b/0x1430 [ 1673.902445][T22087] futex_wait+0x121/0x390 [ 1673.902474][T22087] ? __pfx_futex_wait+0x10/0x10 [ 1673.902529][T22087] do_futex+0x3e7/0x4e0 [ 1673.902557][T22087] ? __pfx_do_futex+0x10/0x10 [ 1673.902589][T22087] __se_sys_futex+0x3a8/0x450 [ 1673.902619][T22087] ? __pfx___se_sys_futex+0x10/0x10 [ 1673.902650][T22087] ? __x64_sys_futex+0x21/0xf0 [ 1673.902674][T22087] do_syscall_64+0x166/0x520 [ 1673.902696][T22087] ? trace_irq_disable+0x3b/0x140 [ 1673.902722][T22087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1673.902743][T22087] ? clear_bhb_loop+0x70/0xc0 [ 1673.902769][T22087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1673.902789][T22087] RIP: 0033:0x7f06ea2de159 [ 1673.902809][T22087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1673.902829][T22087] RSP: 002b:00007f06e85360e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1673.902852][T22087] RAX: ffffffffffffffda RBX: 00007f06ea565fa8 RCX: 00007f06ea2de159 [ 1673.902869][T22087] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f06ea565fa8 [ 1673.902884][T22087] RBP: 00007f06ea565fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1673.902898][T22087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1673.902912][T22087] R13: 00007f06ea566038 R14: 00007ffcbdd8cf40 R15: 00007ffcbdd8d028 [ 1673.902942][T22087] [ 1674.740052][T22114] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.2954'. [ 1676.372886][T21745] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1676.805083][T22141] syzkaller0: entered promiscuous mode [ 1676.805112][T22141] syzkaller0: entered allmulticast mode [ 1677.724425][T21745] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1679.204068][T22217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2971'. [ 1681.719543][T22256] syzkaller0: entered promiscuous mode [ 1681.719571][T22256] syzkaller0: entered allmulticast mode [ 1683.936548][T21745] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1684.050944][T21745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1684.053861][T21745] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1684.290921][T21745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1684.294947][T21745] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1684.349744][T21745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1684.352723][T21745] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1684.451367][T21745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1684.570077][T22337] bridge_slave_1: left allmulticast mode [ 1684.570115][T22337] bridge_slave_1: left promiscuous mode [ 1684.570471][T22337] bridge0: port 2(bridge_slave_1) entered disabled state [ 1684.682834][ T3069] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1685.673722][T22337] bridge_slave_0: left allmulticast mode [ 1685.673759][T22337] bridge_slave_0: left promiscuous mode [ 1685.676982][T22337] bridge0: port 1(bridge_slave_0) entered disabled state [ 1686.188237][T22371] macsec1: entered promiscuous mode [ 1687.026047][T21745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1687.133273][T21745] 8021q: adding VLAN 0 to HW filter on device team0 [ 1687.239484][ T2979] bridge0: port 1(bridge_slave_0) entered blocking state [ 1687.239618][ T2979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1687.468259][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 1687.468395][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1690.580269][T21745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1692.276568][T22542] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3045'. [ 1692.283324][T21745] veth0_vlan: entered promiscuous mode [ 1692.327293][T21745] veth1_vlan: entered promiscuous mode [ 1692.495533][T21745] veth0_macvtap: entered promiscuous mode [ 1692.534250][T21745] veth1_macvtap: entered promiscuous mode [ 1692.737881][T21745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1692.794902][T21745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1692.964567][T22560] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3050'. [ 1693.171325][ T69] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1693.171372][ T69] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1693.171420][ T69] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1693.171454][ T69] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1693.442333][ T8637] Bluetooth: hci2: command 0x0406 tx timeout [ 1694.308692][T22572] netlink: 'syz.3.3053': attribute type 1 has an invalid length. [ 1694.377277][T22577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3053'. [ 1694.550686][T22572] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1694.847792][T22588] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3056'. [ 1695.410493][T22605] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3061'. [ 1695.648352][T22602] syzkaller0: entered promiscuous mode [ 1695.648379][T22602] syzkaller0: entered allmulticast mode [ 1695.651557][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1695.651574][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1696.474694][T22629] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3067'. [ 1696.477545][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1696.477566][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1697.704259][T22660] syzkaller0: entered promiscuous mode [ 1697.704286][T22660] syzkaller0: entered allmulticast mode [ 1697.961637][T22669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3078'. [ 1699.211818][T22671] bridge0: port 2(bridge_slave_1) entered disabled state [ 1699.364626][T22671] bridge0: port 1(bridge_slave_0) entered disabled state [ 1699.981621][T22722] block nbd0: reconnected socket [ 1699.981645][T22722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3090'. [ 1699.991475][T16679] block nbd0: Receive control failed (result -32) [ 1700.078746][T22671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1700.084597][T22671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1700.256734][T22728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3093'. [ 1701.481831][T22696] syzkaller0: entered promiscuous mode [ 1701.481861][T22696] syzkaller0: entered allmulticast mode [ 1701.557078][T22741] syzkaller0: entered promiscuous mode [ 1701.557108][T22741] syzkaller0: entered allmulticast mode [ 1701.573492][T22750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1702.289664][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 1702.748594][T22783] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3103'. [ 1702.752243][T22783] netlink: 'syz.4.3103': attribute type 10 has an invalid length. [ 1702.815369][T22780] 9p: Could not find request transport: fd0x0000000000000004 [ 1703.165596][T22783] mac80211_hwsim hwsim74 wlan0: entered allmulticast mode [ 1703.280378][T22795] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3106'. [ 1703.352469][T22783] team0: Port device wlan0 added [ 1703.362277][T22782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1704.843166][ T1117] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1704.844470][ T1117] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1704.888024][ T1117] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1704.915400][T22820] syzkaller0: entered promiscuous mode [ 1704.915427][T22820] syzkaller0: entered allmulticast mode [ 1704.935845][ T153] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1705.254171][T22834] 9p: Could not find request transport: fd0x0000000000000004 [ 1705.576318][T22853] netlink: 'syz.9.3117': attribute type 1 has an invalid length. [ 1705.576334][T22853] netlink: 244 bytes leftover after parsing attributes in process `syz.9.3117'. [ 1706.398419][T22863] netlink: 'syz.3.3123': attribute type 1 has an invalid length. [ 1706.482637][T22869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3123'. [ 1706.526034][T22863] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1707.460509][T22897] syzkaller0: entered promiscuous mode [ 1707.460537][T22897] syzkaller0: entered allmulticast mode [ 1709.499673][T22948] syzkaller0: entered promiscuous mode [ 1709.499703][T22948] syzkaller0: entered allmulticast mode [ 1709.733210][T22954] 9pnet_fd: Insufficient options for proto=fd [ 1710.113027][T22968] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.3151'. [ 1710.398875][T22975] netlink: 'syz.7.3156': attribute type 1 has an invalid length. [ 1710.464787][T22975] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1710.491172][T22975] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3156'. [ 1710.729838][T22991] 9pnet_fd: Insufficient options for proto=fd [ 1711.058588][T23004] ipvlan2: entered promiscuous mode [ 1711.058782][T23004] bond0: (slave ipvlan2): e ** replaying previous printk message ** [ 1711.058782][T23004] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1711.058805][T23004] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1711.059144][T23004] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 1711.077012][T23004] [ 1711.113924][T23004] ====================================================== [ 1711.120976][T23004] WARNING: possible circular locking dependency detected [ 1711.128014][T23004] syzkaller #0 Not tainted [ 1711.132423][T23004] ------------------------------------------------------ [ 1711.139434][T23004] syz.4.3166/23004 is trying to acquire lock: [ 1711.145484][T23004] ffff88813ff77238 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 1711.155847][T23004] [ 1711.155847][T23004] but task is already holding lock: [ 1711.163202][T23004] ffff88813ff77348 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 1711.174074][T23004] [ 1711.174074][T23004] which lock already depends on the new lock. [ 1711.174074][T23004] [ 1711.184460][T23004] [ 1711.184460][T23004] the existing dependency chain (in reverse order) is: [ 1711.193457][T23004] [ 1711.193457][T23004] -> #10 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 1711.202134][T23004] down_read+0x97/0x200 [ 1711.206810][T23004] kernfs_remove_by_name_ns+0x3f/0x140 [ 1711.212791][T23004] internal_create_group+0x58e/0x1180 [ 1711.218679][T23004] sysfs_update_groups+0x60/0x130 [ 1711.224231][T23004] pmu_dev_alloc+0x2ad/0x310 [ 1711.229332][T23004] perf_event_sysfs_init+0x79/0x100 [ 1711.235189][T23004] do_one_initcall+0x250/0x870 [ 1711.240473][T23004] do_initcall_level+0x10a/0x1a0 [ 1711.245990][T23004] do_initcalls+0x59/0xa0 [ 1711.250859][T23004] kernel_init_freeable+0x29d/0x3e0 [ 1711.256577][T23004] kernel_init+0x22/0x1d0 [ 1711.261421][T23004] ret_from_fork+0x514/0xb70 [ 1711.266521][T23004] ret_from_fork_asm+0x1a/0x30 [ 1711.271818][T23004] [ 1711.271818][T23004] -> #9 (pmus_lock){+.+.}-{4:4}: [ 1711.278945][T23004] mutex_lock_nested+0x5a/0x1d0 [ 1711.284313][T23004] perf_event_init_cpu+0x1d1/0x7a0 [ 1711.289940][T23004] cpuhp_invoke_callback+0x434/0x810 [ 1711.295745][T23004] cpuhp_thread_fun+0x362/0x780 [ 1711.301113][T23004] smpboot_thread_fn+0x565/0xa70 [ 1711.306572][T23004] kthread+0x38b/0x470 [ 1711.311161][T23004] ret_from_fork+0x514/0xb70 [ 1711.316268][T23004] ret_from_fork_asm+0x1a/0x30 [ 1711.321581][T23004] [ 1711.321581][T23004] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 1711.329158][T23004] cpuhp_thread_fun+0x127/0x780 [ 1711.334554][T23004] smpboot_thread_fn+0x565/0xa70 [ 1711.340012][T23004] kthread+0x38b/0x470 [ 1711.344598][T23004] ret_from_fork+0x514/0xb70 [ 1711.349705][T23004] ret_from_fork_asm+0x1a/0x30 [ 1711.354996][T23004] [ 1711.354996][T23004] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 1711.362728][T23004] cpus_read_lock+0x42/0x160 [ 1711.367847][T23004] static_key_slow_inc+0x12/0x30 [ 1711.373311][T23004] nbd_genl_reconnect_sock_cb+0x69c/0xbc0 [ 1711.379550][T23004] nbd_genl_foreach_sock+0x265/0x450 [ 1711.385358][T23004] nbd_genl_reconfigure+0xbbb/0x1050 [ 1711.391164][T23004] genl_family_rcv_msg_doit+0x233/0x340 [ 1711.397309][T23004] genl_rcv_msg+0x614/0x7a0 [ 1711.402321][T23004] netlink_rcv_skb+0x226/0x4a0 [ 1711.407600][T23004] genl_rcv+0x28/0x40 [ 1711.412098][T23004] netlink_unicast+0x7f5/0x990 [ 1711.417374][T23004] netlink_sendmsg+0x813/0xb40 [ 1711.422654][T23004] sock_sendmsg_nosec+0x13a/0x180 [ 1711.428196][T23004] ____sys_sendmsg+0x565/0x870 [ 1711.433490][T23004] ___sys_sendmsg+0x2a5/0x360 [ 1711.438684][T23004] __x64_sys_sendmsg+0x1b7/0x290 [ 1711.444136][T23004] do_syscall_64+0x166/0x520 [ 1711.449245][T23004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1711.455647][T23004] [ 1711.455647][T23004] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1711.463281][T23004] mutex_lock_nested+0x5a/0x1d0 [ 1711.468648][T23004] nbd_queue_rq+0x373/0x1000 [ 1711.473753][T23004] blk_mq_dispatch_rq_list+0x4af/0x1a00 [ 1711.479812][T23004] __blk_mq_sched_dispatch_requests+0xd45/0x1590 [ 1711.486651][T23004] blk_mq_sched_dispatch_requests+0xda/0x1a0 [ 1711.493146][T23004] blk_mq_run_work_fn+0x16f/0x300 [ 1711.498688][T23004] process_scheduled_works+0xc3d/0x1630 [ 1711.504750][T23004] worker_thread+0xa47/0xfb0 [ 1711.509854][T23004] kthread+0x38b/0x470 [ 1711.514438][T23004] ret_from_fork+0x514/0xb70 [ 1711.519536][T23004] ret_from_fork_asm+0x1a/0x30 [ 1711.524807][T23004] [ 1711.524807][T23004] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1711.532005][T23004] mutex_lock_nested+0x5a/0x1d0 [ 1711.537375][T23004] nbd_queue_rq+0xc1/0x1000 [ 1711.542417][T23004] blk_mq_dispatch_rq_list+0x4af/0x1a00 [ 1711.548472][T23004] __blk_mq_sched_dispatch_requests+0xd45/0x1590 [ 1711.555307][T23004] blk_mq_sched_dispatch_requests+0xda/0x1a0 [ 1711.561802][T23004] blk_mq_run_work_fn+0x16f/0x300 [ 1711.567339][T23004] process_scheduled_works+0xc3d/0x1630 [ 1711.573404][T23004] worker_thread+0xa47/0xfb0 [ 1711.578512][T23004] kthread+0x38b/0x470 [ 1711.583091][T23004] ret_from_fork+0x514/0xb70 [ 1711.588194][T23004] ret_from_fork_asm+0x1a/0x30 [ 1711.593469][T23004] [ 1711.593469][T23004] -> #4 (set->srcu){.+.+}-{0:0}: [ 1711.600584][T23004] __synchronize_srcu+0xc9/0x2f0 [ 1711.606038][T23004] elevator_switch+0x1e8/0x7b0 [ 1711.611309][T23004] elevator_change+0x2fa/0x480 [ 1711.616578][T23004] elevator_set_default+0x375/0x440 [ 1711.622286][T23004] blk_register_queue+0x3f3/0x4e0 [ 1711.627824][T23004] __add_disk+0x6b8/0xdb0 [ 1711.632703][T23004] add_disk_fwnode+0x100/0x3a0 [ 1711.637978][T23004] nbd_dev_add+0x733/0xb60 [ 1711.642912][T23004] nbd_init+0x168/0x1f0 [ 1711.647653][T23004] do_one_initcall+0x250/0x870 [ 1711.652932][T23004] do_initcall_level+0x10a/0x1a0 [ 1711.658376][T23004] do_initcalls+0x59/0xa0 [ 1711.663223][T23004] kernel_init_freeable+0x29d/0x3e0 [ 1711.668938][T23004] kernel_init+0x22/0x1d0 [ 1711.673782][T23004] ret_from_fork+0x514/0xb70 [ 1711.678879][T23004] ret_from_fork_asm+0x1a/0x30 [ 1711.684149][T23004] [ 1711.684149][T23004] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1711.691962][T23004] mutex_lock_nested+0x5a/0x1d0 [ 1711.697326][T23004] elevator_change+0x1af/0x480 [ 1711.702598][T23004] elevator_set_none+0xb5/0x140 [ 1711.707957][T23004] blk_mq_update_nr_hw_queues+0x60f/0x1a20 [ 1711.714305][T23004] nbd_start_device+0x189/0xb30 [ 1711.719673][T23004] nbd_genl_connect+0x1689/0x1cd0 [ 1711.725214][T23004] genl_family_rcv_msg_doit+0x233/0x340 [ 1711.731268][T23004] genl_rcv_msg+0x614/0x7a0 [ 1711.736281][T23004] netlink_rcv_skb+0x226/0x4a0 [ 1711.741557][T23004] genl_rcv+0x28/0x40 [ 1711.746055][T23004] netlink_unicast+0x7f5/0x990 [ 1711.751327][T23004] netlink_sendmsg+0x813/0xb40 [ 1711.756605][T23004] sock_sendmsg_nosec+0x13a/0x180 [ 1711.762141][T23004] ____sys_sendmsg+0x565/0x870 [ 1711.767413][T23004] ___sys_sendmsg+0x2a5/0x360 [ 1711.772603][T23004] __x64_sys_sendmsg+0x1b7/0x290 [ 1711.778057][T23004] do_syscall_64+0x166/0x520 [ 1711.783156][T23004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1711.789562][T23004] [ 1711.789562][T23004] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1711.798166][T23004] blk_alloc_queue+0x54c/0x690 [ 1711.803491][T23004] __blk_mq_alloc_disk+0x194/0x390 [ 1711.809129][T23004] nbd_dev_add+0x494/0xb60 [ 1711.814074][T23004] nbd_init+0x168/0x1f0 [ 1711.818747][T23004] do_one_initcall+0x250/0x870 [ 1711.824031][T23004] do_initcall_level+0x10a/0x1a0 [ 1711.829478][T23004] do_initcalls+0x59/0xa0 [ 1711.834331][T23004] kernel_init_freeable+0x29d/0x3e0 [ 1711.840055][T23004] kernel_init+0x22/0x1d0 [ 1711.844897][T23004] ret_from_fork+0x514/0xb70 [ 1711.849999][T23004] ret_from_fork_asm+0x1a/0x30 [ 1711.855290][T23004] [ 1711.855290][T23004] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1711.862519][T23004] fs_reclaim_acquire+0x71/0x100 [ 1711.867990][T23004] kmem_cache_alloc_lru_noprof+0x60/0x680 [ 1711.874232][T23004] alloc_inode+0xb8/0x1b0 [ 1711.879077][T23004] iget_locked+0x131/0x6a0 [ 1711.884006][T23004] kernfs_get_inode+0x4f/0x770 [ 1711.889283][T23004] kernfs_get_tree+0x5cd/0x980 [ 1711.894568][T23004] vfs_get_tree+0x92/0x2a0 [ 1711.899516][T23004] do_new_mount+0x319/0xdc0 [ 1711.904536][T23004] __se_sys_mount+0x31d/0x420 [ 1711.909728][T23004] do_syscall_64+0x166/0x520 [ 1711.914835][T23004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1711.921241][T23004] [ 1711.921241][T23004] -> #0 (&root->kernfs_rwsem){++++}-{4:4}: [ 1711.929318][T23004] __lock_acquire+0x164c/0x2de0 [ 1711.934683][T23004] lock_acquire+0x115/0x350 [ 1711.939706][T23004] down_write+0x3a/0x50 [ 1711.944369][T23004] kernfs_remove_by_name_ns+0x4e/0x140 [ 1711.950347][T23004] __netdev_adjacent_dev_remove+0x29b/0x680 [ 1711.956776][T23004] __netdev_upper_dev_unlink+0x1bb/0x780 [ 1711.962921][T23004] netdev_upper_dev_unlink+0x99/0xe0 [ 1711.968717][T23004] ipvlan_link_delete+0x96/0xe0 [ 1711.974176][T23004] rtnl_newlink_create+0x65c/0x7b0 [ 1711.979799][T23004] rtnl_newlink+0x166d/0x1c30 [ 1711.984982][T23004] rtnetlink_rcv_msg+0x802/0xc00 [ 1711.990455][T23004] netlink_rcv_skb+0x226/0x4a0 [ 1711.995730][T23004] netlink_unicast+0x7f5/0x990 [ 1712.001004][T23004] netlink_sendmsg+0x813/0xb40 [ 1712.006284][T23004] sock_sendmsg_nosec+0x13a/0x180 [ 1712.011823][T23004] ____sys_sendmsg+0x565/0x870 [ 1712.017096][T23004] ___sys_sendmsg+0x2a5/0x360 [ 1712.022286][T23004] __x64_sys_sendmsg+0x1b7/0x290 [ 1712.027736][T23004] do_syscall_64+0x166/0x520 [ 1712.032856][T23004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1712.039258][T23004] [ 1712.039258][T23004] other info that might help us debug this: [ 1712.039258][T23004] [ 1712.049475][T23004] Chain exists of: [ 1712.049475][T23004] &root->kernfs_rwsem --> pmus_lock --> &root->kernfs_supers_rwsem [ 1712.049475][T23004] [ 1712.063285][T23004] Possible unsafe locking scenario: [ 1712.063285][T23004] [ 1712.070721][T23004] CPU0 CPU1 [ 1712.076068][T23004] ---- ---- [ 1712.081418][T23004] rlock(&root->kernfs_supers_rwsem); [ 1712.086866][T23004] lock(pmus_lock); [ 1712.093272][T23004] lock(&root->kernfs_supers_rwsem); [ 1712.101149][T23004] lock(&root->kernfs_rwsem); [ 1712.105899][T23004] [ 1712.105899][T23004] *** DEADLOCK *** [ 1712.105899][T23004] [ 1712.114025][T23004] locks held by syz.4.3166/23004: 4, last CPU#0: [ 1712.120337][T23004] #0: ffffffff8ed0af68 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1712.129826][T23004] #1: ffffffff8f5d5a38 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 1712.138865][T23004] #2: ffff88802ba2e8f8 (&port->pnodes_lock){+.+.}-{4:4}, at: ipvlan_link_delete+0x54/0xe0 [ 1712.148860][T23004] #3: ffff88813ff77348 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 1712.160171][T23004] [ 1712.160171][T23004] stack backtrace: [ 1712.166048][T23004] CPU: 0 UID: 0 PID: 23004 Comm: syz.4.3166 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1712.175924][T23004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1712.185965][T23004] Call Trace: [ 1712.189237][T23004] [ 1712.192163][T23004] dump_stack_lvl+0xe8/0x150 [ 1712.196762][T23004] print_circular_bug+0x2e2/0x300 [ 1712.201776][T23004] check_noncircular+0x12f/0x150 [ 1712.206715][T23004] __lock_acquire+0x164c/0x2de0 [ 1712.211562][T23004] ? lock_acquire+0x115/0x350 [ 1712.216236][T23004] lock_acquire+0x115/0x350 [ 1712.220733][T23004] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 1712.226366][T23004] down_write+0x3a/0x50 [ 1712.230513][T23004] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 1712.236139][T23004] kernfs_remove_by_name_ns+0x4e/0x140 [ 1712.241593][T23004] __netdev_adjacent_dev_remove+0x29b/0x680 [ 1712.247485][T23004] ? __pfx___netdev_adjacent_dev_remove+0x10/0x10 [ 1712.253892][T23004] ? notifier_call_chain+0x3aa/0x3d0 [ 1712.259167][T23004] __netdev_upper_dev_unlink+0x1bb/0x780 [ 1712.264790][T23004] ? __pfx___netdev_upper_dev_unlink+0x10/0x10 [ 1712.270930][T23004] ? ida_free+0x2ac/0x310 [ 1712.275352][T23004] ? unregister_netdevice_queue+0x17d/0x340 [ 1712.281245][T23004] ? netdev_upper_dev_unlink+0x8b/0xe0 [ 1712.286693][T23004] netdev_upper_dev_unlink+0x99/0xe0 [ 1712.291966][T23004] ? __pfx_netdev_upper_dev_unlink+0x10/0x10 [ 1712.297943][T23004] ? __ipvlan_link_delete+0x327/0x390 [ 1712.303374][T23004] ? __ipvlan_link_delete+0x64/0x390 [ 1712.308665][T23004] ? ipvlan_link_delete+0x54/0xe0 [ 1712.313679][T23004] ipvlan_link_delete+0x96/0xe0 [ 1712.318523][T23004] rtnl_newlink_create+0x65c/0x7b0 [ 1712.323630][T23004] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1712.329255][T23004] ? rtnl_newlink+0xc10/0x1c30 [ 1712.334006][T23004] ? rtnl_newlink+0xc10/0x1c30 [ 1712.338757][T23004] rtnl_newlink+0x166d/0x1c30 [ 1712.343425][T23004] ? __pfx_rtnl_newlink+0x10/0x10 [ 1712.348435][T23004] ? do_syscall_64+0x166/0x520 [ 1712.353187][T23004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1712.359255][T23004] ? __lock_acquire+0x747/0x2de0 [ 1712.364187][T23004] ? kasan_quarantine_put+0xbb/0x1f0 [ 1712.369493][T23004] ? lockdep_hardirqs_on+0x7b/0x110 [ 1712.374685][T23004] ? nlmon_xmit+0xb0/0x100 [ 1712.379110][T23004] ? kmem_cache_free+0x187/0x6d0 [ 1712.384047][T23004] ? nlmon_xmit+0xb0/0x100 [ 1712.388469][T23004] ? __lock_acquire+0x747/0x2de0 [ 1712.393420][T23004] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 1712.398795][T23004] ? lockdep_hardirqs_on+0x7b/0x110 [ 1712.403985][T23004] ? __dev_queue_xmit+0x294/0x3880 [ 1712.409091][T23004] ? __dev_queue_xmit+0x1ee9/0x3880 [ 1712.414286][T23004] ? lock_acquire+0x115/0x350 [ 1712.418959][T23004] ? __pfx_rtnl_newlink+0x10/0x10 [ 1712.423971][T23004] rtnetlink_rcv_msg+0x802/0xc00 [ 1712.428900][T23004] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1712.434001][T23004] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1712.439460][T23004] ? ref_tracker_free+0x668/0x820 [ 1712.444490][T23004] ? __pfx_ref_tracker_free+0x10/0x10 [ 1712.449862][T23004] netlink_rcv_skb+0x226/0x4a0 [ 1712.454623][T23004] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1712.460077][T23004] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1712.465365][T23004] ? netlink_deliver_tap+0x2e/0x1b0 [ 1712.470560][T23004] ? netlink_deliver_tap+0x2e/0x1b0 [ 1712.475752][T23004] netlink_unicast+0x7f5/0x990 [ 1712.480510][T23004] netlink_sendmsg+0x813/0xb40 [ 1712.485267][T23004] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1712.490898][T23004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1712.496182][T23004] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1712.502604][T23004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1712.507882][T23004] sock_sendmsg_nosec+0x13a/0x180 [ 1712.512906][T23004] ____sys_sendmsg+0x565/0x870 [ 1712.517663][T23004] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1712.522941][T23004] ? import_iovec+0x73/0xa0 [ 1712.527440][T23004] ___sys_sendmsg+0x2a5/0x360 [ 1712.532110][T23004] ? __lock_acquire+0x747/0x2de0 [ 1712.537041][T23004] ? __pfx____sys_sendmsg+0x10/0x10 [ 1712.542231][T23004] ? futex_wait+0x2a2/0x390 [ 1712.546735][T23004] ? __fget_files+0x2a/0x420 [ 1712.551314][T23004] ? __fget_files+0x3a8/0x420 [ 1712.555984][T23004] __x64_sys_sendmsg+0x1b7/0x290 [ 1712.560915][T23004] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1712.566371][T23004] do_syscall_64+0x166/0x520 [ 1712.570957][T23004] ? trace_irq_disable+0x3b/0x140 [ 1712.575977][T23004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1712.582031][T23004] ? clear_bhb_loop+0x70/0xc0 [ 1712.586697][T23004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1712.592577][T23004] RIP: 0033:0x7fabae55e159 [ 1712.596984][T23004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1712.616580][T23004] RSP: 002b:00007fabac7b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1712.624985][T23004] RAX: ffffffffffffffda RBX: 00007fabae7e5fa0 RCX: 00007fabae55e159 [ 1712.632951][T23004] RDX: 0000000000000810 RSI: 0000200000000280 RDI: 0000000000000003 [ 1712.640909][T23004] RBP: 00007fabae5f506b R08: 0000000000000000 R09: 0000000000000000 [ 1712.648867][T23004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1712.656828][T23004] R13: 00007fabae7e6038 R14: 00007fabae7e5fa0 R15: 00007fff72f82618 [ 1712.664795][T23004] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1712.713446][T23007] netlink: 208 bytes leftover after parsing attributes in process `syz.9.3165'. [ 1712.713651][T23007] unsupported nlmsg_type 40 [ 1712.899334][T23015] syzkaller0: entered promiscuous mode [ 1712.899362][T23015] syzkaller0: entered allmulticast mode [ 1715.225846][ T3069] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1715.529337][ T3069] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1715.833239][ T3069] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1716.125352][ T3069] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1716.590210][ T3069] bridge_slave_1: left allmulticast mode [ 1716.590235][ T3069] bridge_slave_1: left promiscuous mode [ 1716.590402][ T3069] bridge0: port 2(bridge_slave_1) entered disabled state [ 1716.688198][ T3069] bridge_slave_0: left allmulticast mode [ 1716.688224][ T3069] bridge_slave_0: left promiscuous mode [ 1716.688397][ T3069] bridge0: port 1(bridge_slave_0) entered disabled state [ 1717.630811][ T3069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1717.717546][ T3069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1717.739663][ T3069] bond0 (unregistering): Released all slaves [ 1718.768763][ T3069] team0: Port device wlan0 removed [ 1718.975676][ T1169] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1719.299386][ T3069] hsr_slave_0: left promiscuous mode [ 1719.321033][ T3069] hsr_slave_1: left promiscuous mode [ 1719.321526][ T3069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1719.321540][ T3069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1719.375811][ T3069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1719.375835][ T3069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1719.429592][ T3069] veth1_macvtap: left promiscuous mode [ 1719.429633][ T3069] veth0_macvtap: left promiscuous mode [ 1719.429702][ T3069] veth1_vlan: left promiscuous mode [ 1719.429752][ T3069] veth0_vlan: left promiscuous mode [ 1719.917391][ T3069] team0 (unregistering): Port device team_slave_1 removed [ 1719.961064][ T3069] team0 (unregistering): Port device team_slave_0 removed