last executing test programs: 12m26.979580621s ago: executing program 3 (id=1297): sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, 0x0, 0x0, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000050) r0 = socket$inet(0x2, 0xa, 0x400) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r2 = socket$unix(0x1, 0x5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_int(r4, 0x1, 0xe, 0x0, &(0x7f00000000c0)) 12m26.71191132s ago: executing program 3 (id=1299): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000002140)=ANY=[@ANYBLOB="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"/294], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='io_uring_file_get\x00', r2}, 0x18) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r4, r3, 0x0, 0x1, &(0x7f00000001c0)='\x00'}, 0x11) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)={0x38, r1, 0x1, 0x70bd28, 0x25dfdc00, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BSS_BASIC_RATES={0x8, 0x24, [{0x60, 0x1}, {0x2}, {0x48, 0x1}, {0x1b, 0x1}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x38}}, 0x4000) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r5) 12m24.747303388s ago: executing program 3 (id=1305): syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_connect$uac1(0x0, 0xc5, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb3, 0x3, 0x1, 0x0, 0x0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x5}, [@processing_unit={0x7, 0x24, 0x7, 0x2, 0x2, 0x7}, @extension_unit={0x9, 0x24, 0x8, 0x2, 0x8, 0xf, "f752"}, @mixer_unit={0x9, 0x24, 0x4, 0x5, 0x6, "35966f7a"}, @extension_unit={0xb, 0x24, 0x8, 0x6, 0x7, 0x4, "6b236184"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x3, 0xcc, 0x2, {0x7, 0x25, 0x1, 0x2, 0x8, 0x7ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x2, 0x7, 0x9}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x80, 0x2, 0x1, 0x3, "6213", "f073"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xa, 0x2, 0x1, 0x4, "da09fb"}, @as_header={0x7, 0x24, 0x1, 0x0, 0xdb, 0x1001}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x4, 0x81, 0x6, 0x2, "b1"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x6, 0x3, 0xfd, {0x7, 0x25, 0x1, 0x1, 0x5, 0x5}}}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x1, 0x0, 0x4, 0xc7, 0x9}, 0x0, 0x0, 0x9, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x812}}, {0x57, &(0x7f0000000740)=ANY=[@ANYBLOB]}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x2428}}, {0x6, &(0x7f00000007c0)=@string={0x6, 0x3, "463f171f"}}, {0x8d, &(0x7f0000000800)=ANY=[@ANYBLOB="8d036c326506a6cba6c5762101bfa1105545cda710d63089a3d98c9861513c01e95ce2e3f3597ede8fc69565b7f2c9b30a0fa39e5dea5c9bc452ea541f967ef4fd1705dc7089ac9af8cf8f1db1af570fedc3b2fc1878b028edd49c0d18b85bc48ad49ced73bac965fa10393105e3b62e135216776c000000000000005653338212a0e2fd19594e2dec"]}, {0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="360321338455755fa5887a77584fff36eb6af81f85856a96ce4fefec0cfc9b54dbd970ec887aedc66266090062ddcc92d46e58dc8c21"]}, {0x5f, &(0x7f0000000900)=@string={0x5f, 0x3, "e7cbcbd9e3d5812bf68e5d828510525b9fd5e79ab29c353b300963de78a02f96e31c1f904d035ab054292baa5c7fc8bb78dc3d891c9f0cc918d73a13e52e4cbe8b9fcf0a576efb5aa8ea11438e14b1ecae8ea2ee11e16df2c251079b32"}}, {0x0, 0x0}]}) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}, {0x92}}}, 0x4) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x109040, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x840000000002, 0x3, 0xfa) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x2c, 0x11, 0x1, 0x2000000, 0xffffffff, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}, [{0x8, 0xb, 0x200}]}, 0x2c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) bind$inet(r7, 0x0, 0x0) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f00000002c0)=0x7) 12m21.716759395s ago: executing program 3 (id=1312): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x7ffd) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) preadv(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0) pipe(0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x2, 0x5, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000004c0), 0x83f, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r3, 0x0, &(0x7f0000000200)=""/35}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000010000305000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="115a0100000000002000128008000100687372001400028008000200", @ANYRES32, @ANYBLOB, @ANYRES32=r6], 0x40}}, 0x44) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x11, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x15}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000bc0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1c, 0x1a, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff8}}]}, &(0x7f0000000380)='GPL\x00', 0xfffffffa, 0xec, &(0x7f0000000440)=""/236, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, r1, 0x8, &(0x7f00000003c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x6, 0x1, 0x3}, 0x10, 0x0, r9, 0x9, 0x0, &(0x7f0000000580)=[{0x4, 0x1, 0x3, 0x2}, {0x0, 0x1, 0xe, 0x5}, {0x5, 0x5, 0x7, 0xb}, {0x2, 0x2, 0xd, 0xa}, {0x1, 0x1, 0xe, 0x7}, {0x2, 0x5, 0x8, 0xa}, {0x0, 0x4, 0x3}, {0x2, 0x4, 0x9, 0x6}, {0x2, 0x3, 0x9, 0xc}], 0x10, 0x10000, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0xd8, 0x7, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800000}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ff}}]}, &(0x7f0000000080)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 12m19.307991106s ago: executing program 3 (id=1317): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x2b, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x20, 0x401, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x100000, 0x6000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0xffffe, 0x0, 0x1, 0x5, 0x3, 0xffffffff, 0x401, 0x0, 0x0, 0xc, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0xfffffffd, 0x0, 0x0, 0xffffffff], [0xffffffff, 0x0, 0x5, 0x0, 0x10000000, 0x0, 0x0, 0x44a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d93, 0x5, 0x0, 0x0, 0x4, 0x4, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180d, 0xfffffffd, 0x1, 0x0, 0x0, 0x80, 0x40, 0x0, 0x58000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffd, 0xd9be, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x553, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0xb0d, 0x0, 0x0, 0xfffefffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x7f, 0x7, 0x0, 0x0, 0x100100, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xef86, 0x1, 0x401, 0x98c7]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r0, 0x0, 0x0) 12m17.423818619s ago: executing program 3 (id=1322): syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00') creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) fstatfs(r0, &(0x7f0000000880)=""/150) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000002100)="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", 0x2000, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0xf5b, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r2, &(0x7f0000002100)="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", 0x2000, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0xf5b, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x8000000, 0x7}}, 0x50) (async) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x8000000, 0x7}}, 0x50) sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0x317, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r4, &(0x7f0000003680)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x24c01, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x24c01, 0x0) r6 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\x9e\xce\x84\xae\xb3\x92\xab\a\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef', 0x6) fcntl$addseals(r6, 0x409, 0x7) (async) fcntl$addseals(r6, 0x409, 0x7) ftruncate(r6, 0x600000) r7 = dup3(r5, r2, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b70800000000000003010902"], 0x0) pread64(r1, &(0x7f0000000140)=""/116, 0x74, 0x4) (async) pread64(r1, &(0x7f0000000140)=""/116, 0x74, 0x4) 12m2.183083884s ago: executing program 32 (id=1322): syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00') creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) fstatfs(r0, &(0x7f0000000880)=""/150) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000002100)="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", 0x2000, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0xf5b, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r2, &(0x7f0000002100)="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", 0x2000, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0xf5b, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x8000000, 0x7}}, 0x50) (async) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x8000000, 0x7}}, 0x50) sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0x317, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r4, &(0x7f0000003680)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x24c01, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x24c01, 0x0) r6 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\x9e\xce\x84\xae\xb3\x92\xab\a\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef', 0x6) fcntl$addseals(r6, 0x409, 0x7) (async) fcntl$addseals(r6, 0x409, 0x7) ftruncate(r6, 0x600000) r7 = dup3(r5, r2, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b70800000000000003010902"], 0x0) pread64(r1, &(0x7f0000000140)=""/116, 0x74, 0x4) (async) pread64(r1, &(0x7f0000000140)=""/116, 0x74, 0x4) 8m7.832990158s ago: executing program 5 (id=1871): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f006bbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount$9p_rdma(0x0, &(0x7f0000000400)='.\x00', 0x0, 0x0, &(0x7f00000005c0)={'trans=rdma,', {'port', 0x3d, 0x4e21}}) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000100)={0x3}, 0x4) sendto$inet6(r4, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'ipvlan0\x00', @remote}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0xa00, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x5410, 0x0) 8m6.719578824s ago: executing program 5 (id=1873): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @empty}, &(0x7f0000000100)=0x10) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000180)=@add_del={0x2, &(0x7f0000000140)='syz_tun\x00'}) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000000c0)=ANY=[], 0xb0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) chdir(&(0x7f0000000240)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) (async) accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @empty}, &(0x7f0000000100)=0x10) (async) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000180)=@add_del={0x2, &(0x7f0000000140)='syz_tun\x00'}) (async) dup(r1) (async) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f00000000c0)=ANY=[], 0xb0) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (async) chdir(&(0x7f0000000240)='./file0\x00') (async) 8m6.0506957s ago: executing program 5 (id=1875): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) r1 = fsopen(&(0x7f0000000440)='nilfs2\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000a000000000000000000009500000000000000003568983fedcc7300"/40], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000300)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x0, 0xb0b0b0b0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000200)={{0x87, @multicast1, 0x4e23, 0x4, 'sh\x00', 0x37, 0x7, 0x31}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x10000, 0x7, 0x6, 0xa}}, 0x44) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) pread64(r1, &(0x7f0000000000)=""/4, 0x4, 0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000004c00)=""/102392, 0x18ff8) r5 = socket(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x4044004) socket$nl_route(0x10, 0x3, 0x0) openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x1d) r7 = landlock_create_ruleset(&(0x7f0000000100)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r8, 0x5450, 0x3) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r6) 8m4.511263078s ago: executing program 5 (id=1876): r0 = gettid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) ptrace$getregs(0xe, r1, 0x8, &(0x7f0000000180)=""/215) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r2}, 0x18) socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000e000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000040000000000000000000000000000100000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, 0x0, 0x40000) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0xbb8) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=0xffffffffffffffff, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f0000000640)={{r9, 0x8, 0xc00000, 0x2, 0xb2, 0x2, 0x7, 0xfffff800, 0x7, 0x3ff, 0x7, 0x0, 0x1, 0x0, 0xe}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000400)={{r9, 0x4, 0xa47, 0x3, 0xd, 0x7, 0x5, 0x39, 0x400, 0xe, 0xfffffffa, 0x8000, 0xc2, 0x5, 0xe81}, 0x10, [0x0, 0x0]}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$kcm(0x21, 0x2, 0x2) r10 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r11 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002ca}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r12, r13, &(0x7f00000009c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd=r10, 0xc9f1, &(0x7f00000008c0)=[{&(0x7f0000000300)=""/94, 0x5e}], 0x1, 0x12, 0x1}) io_uring_enter(r11, 0x7a98, 0x0, 0x0, 0x0, 0x0) 8m1.697700563s ago: executing program 5 (id=1885): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x200000, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_setup(0x1, &(0x7f0000000380)=0x0) io_submit(r3, 0x1, &(0x7f00000002c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0, 0x0, 0xc4a, 0x0, 0x2}]) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa43, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x109001) close_range(r5, r6, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x2c, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) write$smackfs_netlabel(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="30303030303030303030303030303030323334322e303030303230303030303030303030302e30303030303030303030303030303032373232332e30303030303030303030303030303030303038312e2000df619ac30cd5cbfcb800cfbce5ac60ad47a8ce75f50b538e34ec96d29e86457d82aadc8db3eac839c1e61ef3cad96e4b89b88bed794f15c2a251ceb9ec263e1c5e5df342c21e8a6737afe8dc719c7c0a26e34a1ce0e629010e819d837a2379ae4094cb5ef5c10ece0d1f7867b55857c4e8930ade6a11de9cc4ba27f279dc2b033e85d2bb299ba024c6bac09e3b85f38bf6f5525da8cfc1bda8ba0059da4b8e6eec55ed548cd1db293a4e832d161ba2eeb4dead24bea4b19694"], 0x56) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 7m53.183623094s ago: executing program 5 (id=1897): socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4084) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) open(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r2, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 7m38.059737283s ago: executing program 33 (id=1897): socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4084) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) open(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r2, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 1m7.237048482s ago: executing program 1 (id=3041): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') sendmmsg$inet(r2, 0x0, 0x0, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4084) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) open(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r6, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={r7}, 0x4) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r8, 0x4) syz_emit_ethernet(0x4e, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x11, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001540)=@raw={'raw\x00', 0x3c1, 0x3, 0x1388, 0x1290, 0x5802, 0x294, 0x1290, 0x294, 0x1408, 0x325, 0x378, 0x1408, 0x378, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [0x0, 0x0, 0x0, 0xff000000], [], 'pimreg0\x00', 'macsec0\x00', {0xff}, {}, 0x0, 0x0, 0x3}, 0x0, 0x10d8, 0x1140, 0x52020000, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0xfc, 0xfd, 0x0, './cgroup.net/syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x108, 0x178, 0x0, {}, [@common=@ah={{0x30}}, @common=@frag={{0x30}, {[0x0, 0x101]}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xcfd, 0x8000, 0x8, 0x1, 0x0, "40384e1aa968ae1a869c8ce9a46b9ff41931137193fc6c2a5d28667be0e6c0e8dd7ab2a2560d636022502c16f2d80f7e97c47fa0a3d21b373dc257058a128931"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x13e8) r9 = socket$inet6(0xa, 0x3, 0x8000000003c) socket$key(0xf, 0x3, 0x2) connect$inet6(r9, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x44004) 1m3.448441977s ago: executing program 1 (id=3048): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x30, r1, 0x2140dcfffd4d4d7f, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "a635eb6f2d8ab086368aa4cec5d828e0"}]}, 0x30}}, 0x400c0) 1m2.6711119s ago: executing program 1 (id=3052): bpf$MAP_CREATE(0x0, 0x0, 0x48) ioperm(0x284, 0x7f, 0xe3) socket$inet6(0xa, 0x2, 0x0) setrlimit(0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000002f40)=""/4098, 0x1002) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000002600)={0x0, 0x3f, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) 56.946929664s ago: executing program 1 (id=3068): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000000)={0x210a}, 0x0) symlinkat(&(0x7f0000001040)='./file2\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file1/file4/file6\x00') sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="a6ecb61dee18705b5cac8b8692bec0e87becff35b6f98bd57274da4f26bf38143335f4f24ed32b26eaddb928e640ddd499", 0x31, 0x4020004, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0x503, 0x70bd2c, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 13.596766499s ago: executing program 4 (id=3161): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRESOCT], &(0x7f0000000300)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r1, 0x84, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x7, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf4cd1000) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x40, 0x0, 0x0, 0xfffffffe}, {0x28, 0x0, 0x0, 0x5}, {0x1}]}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd885a4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f82487c1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2787798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1d16ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb7f6a3481caa720acb4a4d38f386bb79f5589829b6b0679b5d65a983f1664cd8f2ad650efd9a523cbfc49b9df085f9d7f2a868aaaf73347d3c36dee6c9f"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000, 0x0, 0x50}, 0x1e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000680)=[{{&(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000440)="77c38931a3c4e57f98d95580e0ce556831a3d53ccd6a669f10c5452a95e6af9ba1378638132ac2db3bdf6fc57a761dcc0c3e27daa7221149b8d2d9fd0a2cb7000b650302e168cb5d36497dc48af59d03541ccfa14608fd345fc9dc9d7e75f0880f369731378ba36a950c", 0x6a}, {&(0x7f00000004c0)="4f3d52596b13f70339d8a15482ed2709220bc7dca93de72eda3095840e1a8ee4e5d7c3815df87a62282dd660cc0913180f66441c99e627d881657353cc3f78001cd39fe73d1fd6c3d0b697d15753f39f411aeda9407453d76aa5bad9742a34064a6e4c7c", 0x64}, {&(0x7f00000002c0)="b25635a0f28fe47f14050c9830cbb399fe", 0x11}, {&(0x7f0000000540)="04dcca8a692fed7685f3b84e091ece2c123d6a6e37a1feb8c207222837a25f5485c476d5100446020f67d061a6674d28c63f6b4691ed9fc3abdb7ebc8f80f22276034565ba31ae91475c6a74b13712b774d948a83d92749aa7c49c0bd8c7bfcfae77c08f3da8f42101a2442548d9ad3cf2ea100db8c510c78a4a20e64048b655d85a7e439d5cdc610a5e9f0d424a36d521710ea07638761b90179d340d6989f426badd78bbcf3b675f299dce433c6ee2e8b1c480b1604a5fed9a286357a8b2695443e5d6269f98490cecb75753ed100f15a5c5f75e", 0xd5}], 0x4}}], 0x1, 0x8010) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(0xffffffffffffffff, 0x0, 0x1) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fba85b08e90f71db3e530102030109021b0001040020000904c86f100cccf54830473cb5325ee5629c000137650000090501042000058003"], 0x0) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x8800) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = dup(r6) ioctl$KVM_SET_MSRS(r7, 0xc008aec1, &(0x7f0000000f80)=ANY=[@ANYRES16]) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x903400, 0x0) 12.092495204s ago: executing program 0 (id=3165): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) syz_open_dev$I2C(0x0, 0x80, 0x14000) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback, 0x1}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000700)="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", 0xffffff08}], 0x1}}], 0x1, 0x40081) 11.090507282s ago: executing program 0 (id=3168): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="6800000010000305000000000000000200004000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001000050700000000aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000180)={0x1, 0x4, 0x4, &(0x7f0000000140)={0x0, "94b1e85210cda7edaba7d538add2e3530db1869ed4e134dcafa1d877cb2a6f3af0"}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6}, 0x0) 10.725592757s ago: executing program 0 (id=3169): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xe}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000) sendto$inet6(r1, &(0x7f00000004c0)='W', 0x1, 0xc0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, 0x0, &(0x7f0000001080)) 9.986700471s ago: executing program 0 (id=3171): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) clock_adjtime(0x0, &(0x7f0000000140)={0x9, 0xe, 0xfffffffffffffffb, 0x9, 0x9, 0x6, 0x5, 0xe, 0x1, 0x2, 0x4, 0x6, 0x6, 0xffffffff, 0x0, 0x1000, 0x2da, 0x7, 0x7, 0x9, 0x4, 0x4, 0xba2, 0x2, 0x23b0000000000000, 0x7}) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000fc0), r1) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="363eb95121bef2b95a1678062eaae1880700262864f15fd177000000", @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf2503000000"], 0x14}}, 0x20000060) 9.95128425s ago: executing program 2 (id=3172): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r0, 0x8943, &(0x7f0000000000)) r1 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000100)=0x21) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x20202, 0x0) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x2, {0x200, {0xa0, 0x1, 0x1}, 0x140, 0x0, 0x0, 0x5, 0xa, 0x9, 0x2, 0x8, 0x82c, 0x0, 0x5, 0x2, 0xffffffffffff885b, 0x7, 0x5, 0x2, 0x5, 0x98}}, 0xa0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000140)) r3 = dup(r1) openat$cgroup_devices(r3, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) 9.707047555s ago: executing program 4 (id=3173): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = fcntl$getown(0xffffffffffffffff, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x4000000000000001, r0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000080)={0x53, 0xfffffffffffffffb, 0x3, 0x40, @buffer={0x0, 0x78, &(0x7f0000000280)=""/120}, &(0x7f00000003c0)="0000c3", 0xfffffffffffffffd, 0x80000800, 0x16, 0x0, 0x0}) ioctl$SG_BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000240)={'\x00', 0x3, 0xe6, 0x6310237d, 0xb00000000000000, 0x598f, r0}) r4 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='i2c_result\x00', r5}, 0x10) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000080)={&(0x7f0000000040)=[{0x9, 0x29, 0x0, 0x0}, {0x3, 0x2001, 0x0, 0x0}], 0x2}) bind$can_j1939(r2, 0x0, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) utime(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB]) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(0x0, 0x0, 0x0, 0x201008, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, &(0x7f0000000100)={&(0x7f00000011c0)=[0x3ff, 0x2, 0x1, 0x60, 0x0, 0xdf, 0xbbfe, 0xffffff80, 0xb, 0x5e, 0x0, 0x1, 0x81, 0xc7f0, 0xff, 0x10000, 0x0, 0x26, 0x2d7b, 0x10001, 0x10, 0x8001, 0xfffffffd, 0xf2, 0x7, 0x1, 0x365, 0x1, 0x6, 0x1ff, 0xff, 0x1, 0x5, 0x0, 0x83, 0x2, 0x8d, 0xfae, 0x80, 0x5, 0x6, 0x3ff, 0xf99, 0x99, 0x10, 0x8000, 0x1aad, 0x10, 0x7, 0x2, 0x4, 0x3a06cf89, 0x3, 0xee9, 0x3, 0x9, 0x8, 0x6cf6, 0x10c, 0x7d, 0x9, 0x80, 0x8, 0x5, 0x100, 0x400, 0x8, 0xf30, 0x5, 0x3, 0x80000000, 0x6, 0x5, 0x7, 0x2, 0x0, 0x4, 0x7fffffff, 0x72, 0x4, 0x1, 0xc2, 0x6, 0x6, 0x10001, 0x1, 0x1ff, 0x3, 0xfffffffb, 0xfffffffe, 0x0, 0x7, 0x6b, 0x80000000, 0x3, 0x535, 0x9, 0x2, 0x7fffffff, 0x408, 0xb8, 0x592, 0x0, 0x2, 0x1, 0x2, 0x1, 0x4, 0x1, 0xfc08, 0x9, 0x2, 0x8, 0x200, 0x1, 0x6, 0x9, 0x0, 0x8, 0x8000, 0xe, 0x6, 0xb4d, 0x28, 0x98, 0x0, 0x8, 0x2, 0x4, 0xb, 0x400, 0x2, 0x100, 0x200, 0x1, 0x8, 0xe1d, 0x9, 0x9, 0x3, 0x9, 0x9, 0x2, 0x7, 0x2, 0x2, 0x2, 0x8c71, 0x400, 0x8001, 0xf88, 0x3, 0x1, 0x7, 0x80000000, 0xa, 0x20000, 0xff, 0xffffffff, 0xcfd5, 0x40, 0xfffffff0, 0xa, 0xa406, 0x5, 0x10000, 0x6, 0xfac, 0x6, 0x0, 0xffffffff, 0x3, 0x8, 0x9, 0x9, 0xfa, 0x2, 0x0, 0x2, 0x1ff, 0x3, 0xd, 0xa, 0x5, 0x443, 0x0, 0x2, 0x7, 0x3, 0x0, 0xa0, 0x4, 0x6, 0xb1, 0xfffffff8, 0x3d, 0xfffffffc, 0x6, 0x2, 0x9, 0x8, 0xeca, 0x7f, 0x200, 0x5d, 0x6, 0x1, 0xa19e, 0x0, 0xfffffff9, 0x1, 0x101, 0x2, 0x3e3, 0x2, 0x7, 0x0, 0x5, 0xfffffc00, 0x71, 0xffff, 0x8, 0x3, 0x3, 0x200, 0x6, 0x0, 0x4, 0x34, 0x9, 0x0, 0x1, 0x0, 0x9, 0xfffffffc, 0x6, 0x9, 0x42ed, 0x800, 0x7fff, 0x2, 0x5, 0x6, 0x3, 0x5, 0x9, 0x1f, 0xc3, 0xc, 0x8000, 0x7fff, 0x5, 0x1, 0x9, 0x4, 0x0, 0x2, 0x7fff, 0x2, 0x7, 0x3, 0x4, 0x0, 0x8001, 0x6, 0x800, 0xfff, 0x9, 0x0, 0x5, 0x2, 0x3, 0x5, 0x2, 0x5bd0, 0xfffffffe, 0x1000, 0x142, 0x7, 0x1000, 0xff, 0x5, 0x3, 0x800, 0x9, 0xbb41, 0x83, 0x401, 0x0, 0x400, 0x0, 0x7f, 0x4, 0x8, 0x6, 0x800, 0x1ff, 0x5, 0x66f, 0x7, 0x7, 0x4, 0x100, 0x80000000, 0x0, 0x80000001, 0xff, 0xbcf4, 0xa, 0x6, 0x3, 0x4, 0x1ff, 0x3, 0x6, 0x6, 0x80, 0x1, 0x7fffffff, 0xfffffffe, 0x2, 0x7, 0x4, 0x7, 0x9, 0x80000000, 0x2, 0xfffffff8, 0x6, 0x800, 0x7, 0x100, 0x6, 0x3292, 0xffffff00, 0x7, 0x2bff, 0xfffffe01, 0x9, 0x2, 0xffff, 0x0, 0x37d8, 0x8001, 0xa6c8, 0xffffff24, 0x5dc00000, 0x9, 0x3, 0x3, 0x0, 0x7, 0x8, 0x6, 0x0, 0x6, 0x200, 0x8, 0x5, 0x3, 0x9, 0x5, 0x3, 0x5, 0x6, 0xf, 0x1, 0x9, 0xfffffffa, 0xff, 0x1ff, 0x7c29, 0xffffff01, 0x800, 0x2, 0x1, 0x9, 0x2, 0x2, 0x24f6, 0x4, 0x0, 0x7, 0x6, 0x1, 0x1, 0xfffffffa, 0x1971, 0x0, 0xe, 0x7, 0xb20, 0x9, 0x5, 0x1, 0xbf, 0x3, 0xffff1277, 0x1, 0x40, 0x10, 0x134ceefd, 0x1, 0x5, 0x400, 0x7f, 0x1, 0x4, 0x2, 0x9, 0x5, 0x4000, 0x4, 0x1b, 0x7fffffff, 0x401, 0xffffffff, 0x2b77, 0x7, 0xe, 0x2, 0x7, 0x10000, 0x5, 0x7f, 0x101, 0x3, 0xe, 0x5, 0x0, 0x4, 0x1, 0x3, 0x3, 0x7f, 0x2, 0x3ff, 0x7, 0x2, 0xd5, 0x38, 0x2545, 0xba, 0x800, 0x5, 0x7, 0x9, 0x4, 0x8, 0x3, 0x80000000, 0xb206, 0x8, 0x6, 0x1000, 0x5, 0xed, 0x7, 0x8000, 0x5, 0x8, 0x2, 0xfffffffe, 0x1, 0x6, 0x26a0, 0x1, 0x0, 0x3, 0x5, 0xfffffffb, 0x1, 0x6, 0xfff, 0x800, 0x8, 0x180, 0x9, 0x7ed, 0x6, 0x4, 0x7fff, 0x0, 0x3ff, 0x101, 0x5, 0x6, 0x6, 0x9, 0xffffffde, 0x2, 0x800, 0x3, 0x7, 0x3, 0x4, 0x8, 0x3ff, 0x9, 0xffffff7f, 0x10000, 0x9b21, 0x9, 0x8, 0x800, 0x9, 0x9, 0x2, 0x1, 0x6, 0xf, 0x5, 0x5, 0x7, 0x3, 0x8, 0x5, 0x4, 0x2, 0x40000000, 0x6, 0x9, 0x5, 0x9ef, 0x9, 0x0, 0x2, 0xc0000, 0xf54d, 0x5, 0x8, 0x800, 0x7, 0x7, 0x62, 0x1, 0x2, 0xe, 0x3, 0x80000000, 0x3, 0x5f12, 0x6, 0x7, 0x80000001, 0x1, 0xfff, 0xe, 0xfffffffe, 0x3, 0x4, 0x0, 0x3, 0x0, 0x5, 0x1, 0x401, 0x4, 0x7, 0x31a33b26, 0x1, 0x1ff, 0x4800, 0x40b, 0x9, 0x3ff, 0x7ff, 0xa6, 0x9, 0x6, 0x26, 0x1, 0xffff, 0x4, 0xbe0, 0xc26d, 0x2, 0xd9d1, 0x7fffffff, 0x9, 0x6717, 0x2, 0x80000001, 0x3ab0, 0x3, 0x8d6, 0x0, 0x5, 0x6, 0x2, 0x7, 0xe, 0x2, 0x1000, 0x80000001, 0x2, 0x7fffffff, 0xfffffff2, 0x8, 0x9, 0x8, 0x8, 0x8001, 0x6, 0x5, 0xd76, 0xfff, 0x8001, 0x7f, 0x8, 0x1, 0x9, 0xe, 0x7fffffff, 0x9180, 0x2, 0x8, 0x80000001, 0x800, 0x22, 0x5, 0x5, 0x1, 0xd15, 0x7, 0x2, 0x7, 0x8, 0x4, 0x0, 0x40, 0x3, 0xfffffff3, 0x8, 0x0, 0x7, 0x1, 0x8000, 0x0, 0x7, 0x4, 0x0, 0x1, 0x7, 0x6, 0x8001, 0x6, 0x0, 0x5, 0xbe, 0x1d, 0x5, 0x5, 0x7, 0x1, 0x9, 0x8, 0x10001, 0x200, 0x5, 0x0, 0x401, 0x8001, 0xf, 0x2, 0x10, 0x1, 0xf, 0x3, 0x1, 0x40, 0x8001, 0x5, 0x4, 0x800, 0xffff, 0x8, 0xfffffff4, 0x80, 0x9, 0x80000001, 0x1, 0x0, 0x0, 0x10001, 0xc6db, 0x7, 0x3, 0xf2, 0x0, 0x5, 0xac, 0x5, 0x7, 0x0, 0x8000, 0xe, 0x9, 0x6, 0x2, 0x6, 0x0, 0x7025, 0x101, 0x7ff, 0x9c1, 0x3, 0x5, 0x7, 0x9, 0xfffffffd, 0x5, 0x1, 0x1ff, 0x1, 0x7f, 0x4, 0x0, 0xd, 0x3, 0xa, 0x3, 0x6, 0x74, 0x3, 0x5, 0x5, 0x100, 0x7fff, 0x5, 0x3, 0x7f, 0x8, 0x7, 0x0, 0x9, 0x2, 0xec, 0xc428, 0x2, 0x1, 0x4, 0x7, 0x0, 0xfff, 0x3, 0x1, 0xd, 0x1, 0x0, 0x5, 0x1, 0x5c000000, 0x0, 0x1, 0x7fffffff, 0x4, 0x9, 0xffffffff, 0x2, 0x7fffffff, 0x5, 0x0, 0x6, 0xaf, 0x1c, 0x7c54, 0xb6e0ce3, 0x1, 0x6c, 0x4, 0xffff, 0x1, 0x1000, 0x101, 0xfff, 0x5, 0x0, 0xb7, 0x6, 0x800, 0x25, 0x9, 0x7, 0xb622, 0x40, 0x6e, 0x1, 0x4, 0x6, 0x5, 0x6, 0x4, 0xb3b, 0x4, 0x200, 0x2, 0x5, 0x6, 0x40, 0x5, 0x7fff, 0x8, 0xffffffff, 0x4, 0x9, 0x2, 0xba1, 0x200, 0x9, 0x87, 0x6, 0x0, 0x6, 0x7, 0x2, 0x8, 0x101, 0x7, 0x9, 0x10001, 0x1, 0x4, 0x1, 0x2, 0x9, 0x800, 0x7, 0x7fff, 0x2, 0x101, 0x0, 0xfffffbe9, 0xb, 0x7, 0xeea8, 0x440, 0x4, 0x0, 0x6, 0x741a, 0x2, 0xc56f, 0xf9, 0x3, 0xf9bd, 0xa, 0x401, 0x2, 0x3, 0x9, 0x1b6b, 0x101, 0x1, 0x8, 0x6, 0x1000, 0x7, 0xa0, 0x6, 0x1ff, 0x10, 0xfd, 0xe3, 0x7, 0x3, 0x10000, 0x4, 0x101, 0x81, 0x2, 0x5, 0x0, 0x8001, 0x1, 0x7, 0x3ff, 0x4, 0x2, 0x7fffffff, 0x3, 0xf3c, 0x6, 0x5, 0x6, 0x1, 0x4, 0xf76, 0x2ae0, 0x2, 0x4, 0x217, 0x7, 0xa0, 0x80000001, 0x1, 0x5, 0x92d, 0xff, 0x0, 0xffffa53f, 0x0, 0x208f, 0xd3, 0x9, 0x3fa455e7, 0x7, 0x7, 0x6, 0x7, 0x4, 0x4, 0xfff, 0x80, 0x4, 0xfffffffc, 0x7, 0xfd, 0xffff80e1, 0x9, 0x3, 0xffff, 0x8, 0x1, 0x1e, 0x200, 0x6f9ef05e, 0x8000, 0x5, 0xfffffe01, 0xfffffffa, 0xfffffffa, 0xfffffff9, 0x25, 0x4, 0xb14, 0x7, 0x66e, 0x5, 0x4, 0xc3a, 0x7, 0xffffffff, 0xffffffff, 0x3ff, 0x0, 0x101, 0x6dfe7d3, 0x1, 0x287, 0x4, 0x5, 0xfffffffb, 0xfff, 0x7, 0x1, 0x8001, 0x6, 0x3, 0xfffff74e, 0x6, 0x26, 0x3, 0x1ff, 0x8, 0x6, 0x84, 0x1a9, 0x14000000, 0x9, 0xd422, 0x7ff, 0x0, 0x100, 0x9, 0x10, 0x2, 0x1f, 0x8fc, 0xca6d, 0x3, 0xfffeffff, 0x36, 0x8f, 0x28000, 0x2, 0x0, 0x10, 0x80, 0x0, 0x6, 0x400, 0x401, 0xd, 0x2, 0x47, 0x7, 0x6, 0x7, 0xf, 0xf, 0x8, 0xff, 0x5, 0x8, 0xfffffffc, 0x8001, 0x938, 0xff, 0x3e, 0x8, 0x6, 0x158e, 0x8, 0x3, 0x1, 0x1, 0x3, 0x2, 0x80000001, 0xf8b, 0x1, 0x100, 0x90a], 0x1, 0x400, 0xd}) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) 9.704109575s ago: executing program 0 (id=3174): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xc, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xfffff5ee, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0xfffffff9, 0xa, 0xffffffff, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x4c, 0xfffffffd, 0x80, 0x8, 0x9, 0x9, 0x7, 0x8000101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0xe4, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdaa, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x5, 0x4, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0xffffffff, 0x8, 0x3, 0x2, 0x3a6, 0x27f8, 0xc0d, 0xfffffffd, 0x9, 0x9, 0xfffffffb], [0x8a3, 0x6, 0x3, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x7ffe, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x7fff, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x0, 0x0, 0x7, 0x4e6, 0x8, 0x6, 0x5ef, 0x8000, 0xc, 0x4, 0x401, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9efffffd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[], 0x50}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x40, 0x0, 0x0, 0x401}, {0x6, 0xfc, 0x0, 0x6}]}, 0x10) write$binfmt_aout(r5, &(0x7f0000000000)=ANY=[], 0xfdef) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) read$FUSE(r7, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, r8, {0x7, 0x29, 0x800, 0x44040000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x115, 0xfb}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xb3a406bdd74362ab, 0x4) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x200, 0x20003, 0x10020f5b, 0x0, [{0x1, 0x9}, {}, {}, {0x0, 0x35, 0xff}, {0x20, 0xa, 0xfc}, {0x0, 0x0, 0x6, '\x00', 0x7}, {0x20}, {0x2, 0x2, 0x7}, {0x0, 0x0, 0x8}, {0x0, 0x1, 0x2}, {0x0, 0x0, 0xfe, '\x00', 0x1}, {0x1, 0x0, 0x0, '\x00', 0x3}, {}, {0x0, 0xfc}, {0x7, 0x0, 0x0, '\x00', 0x39}, {0x0, 0x0, 0x0, '\x00', 0x8}, {0x0, 0x8, 0x0, '\x00', 0xff}, {0x0, 0x75, 0xfa}, {0x0, 0x0, 0x0, '\x00', 0x20}, {}, {0x6, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0xfc}, {0x0, 0x5, 0x0, '\x00', 0x1}, {0x0, 0xfc}]}}) 9.703621861s ago: executing program 2 (id=3175): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="000128bd7000fcdbdf2509000000080001000100000008000300", @ANYRES32=r2, @ANYBLOB="05000700080000000c0006000000000000000000050008000e000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4008004) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001200000008000300", @ANYRES32=r5, @ANYBLOB="0a000600ffffffffffff0000140081000500010002000000b0644b3140000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x14, r3, 0xfb59b128081ca7fb}, 0x14}}, 0x0) (async) r7 = getpid() sched_setaffinity(r7, 0x0, 0x0) (async, rerun: 64) sched_setscheduler(r7, 0x2, &(0x7f0000000040)=0x7) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (rerun: 32) 7.820252481s ago: executing program 2 (id=3177): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x10242, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000040)={{0x5, 0x5, 0x7, 0x5, 'syz1\x00', 0x7ff}, 0x0, [0x3d, 0x8, 0x3, 0x1000, 0x9, 0x100000000, 0x0, 0x3, 0xfffffffffffffff3, 0x7, 0xf0, 0x3, 0x4, 0x5, 0x4, 0x7ff, 0x9, 0x3, 0x3, 0x7, 0xffffffffffffff7f, 0x7, 0x9, 0x689, 0x5, 0x7242, 0xffffffffffffffff, 0x1, 0x5, 0xffffffff, 0x6, 0x5, 0x8, 0x4, 0x5, 0x2, 0x400, 0x800, 0x341000000, 0x5, 0xfe59, 0xc2c, 0x400, 0x6, 0x2, 0x6, 0x5, 0x2, 0xc87, 0x3, 0x6, 0x6, 0xa391, 0x4, 0x9, 0x4, 0xa2, 0x5, 0x8, 0x4, 0x0, 0x8, 0x5, 0x80000000, 0x1, 0x0, 0xc5b8, 0x8, 0x9, 0xc, 0xfffffffffffffffd, 0xfffffffffffffff9, 0x8000000000000000, 0x1ff, 0x1, 0x6, 0x4, 0x80, 0x1, 0xfff, 0x3, 0x0, 0x4, 0x1, 0x101, 0x3, 0x324a, 0x1, 0xffffffffffffffff, 0x6, 0x5, 0x7ff, 0x4, 0x6, 0xfffffffffffffff1, 0x1, 0xed1c, 0x4, 0xc02, 0x0, 0x3, 0x1, 0xffffffffffffff01, 0x1, 0x10, 0x9, 0x81, 0x1, 0xd2c, 0x5, 0x4, 0x7fff, 0xffff, 0x2, 0xad4, 0x2, 0x1, 0xfffffffffffffff7, 0x1, 0x2, 0x1, 0x3ff, 0x400, 0x2, 0x4, 0x2, 0x3, 0x7]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000540)=0x2, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x4, 0x7, 0x6, 0x6, 0x82, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x1, 0x1, 0x6}}) sendmsg$xdp(r0, &(0x7f00000009c0)={&(0x7f0000000680)={0x2c, 0x1, r4, 0x27}, 0x10, &(0x7f0000000940)=[{&(0x7f00000006c0)="8a3861edef2917748102ab97d063c7fbc3f13226108451f69384532f307817acd12e444a239864daa2d580f976cc7922e78d63", 0x33}, {&(0x7f0000000700)="31ae40cb7b9c405cd873f81cd5a353e629d2a76c6842a0742019e2aa4f52b389e050842b4317364a469525280e27795f657c757b4944cca4584f761b6fa476e60472c63af7ce2f1f882de68de3622357ae2b4fddd3a1ff546a21d64d2a84ae1ab843778bc4d212d8b4a8a0e9e44bb9f014da000fc3b77d457eb5d6551aa4d0bb738d8b58c498e54c8c0693478575f33363ff691ded94ede1e60ffc3e774b7da3eeda7a905f12c4f7d08e9acbaa73a9590272", 0xb2}, {&(0x7f00000007c0)="9a4dfa3ed2f1de9ac71adb0e2da2e1ef8f45efa940fa693b198648a36409bc216d4060dd585475cc692af8e97081bf92fd88ca83dcb6f87e28f01997edf97a8eaedcbb2d45badb65c0c6a66efac8dedbde3b0d597d5347d08e5b2048080f276bc054ac50a393f3042c5719", 0x6b}, {&(0x7f0000000840)="40fa283319710ef642033adf88caebaf1c626248d54725dd9acee088850a225233141f699841cf2d11da38b55a19d022fde250767b99be03c9aef420294b0adb6735048ff0d1c808f298f3ab4216340a736ef3fc25d6a1a58510e047de0665306175025a69cdd2f8f574033593e1ba241eabaffc0ede72725d7be33b45f639989dc960ee49ff0330951acf", 0x8b}, {&(0x7f0000000900)="7a02ff90e309233f78acb363773b8d00d7e70bd87710e3b982eb6c2559a758603861377b0bd2a4d1f2127f44a80823d020544895404acc39643f2decbdabbba0", 0x40}], 0x5, 0x0, 0x0, 0x8040}, 0x24000000) preadv(r3, &(0x7f0000000c80)=[{&(0x7f0000000a00)=""/147, 0x93}, {&(0x7f0000000ac0)=""/29, 0x1d}, {&(0x7f0000000b00)=""/91, 0x5b}, {&(0x7f0000000b80)=""/183, 0xb7}, {&(0x7f0000000c40)}], 0x5, 0xe0000000, 0x40) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000d00)={r1}) fgetxattr(r0, &(0x7f0000000d40)=@random={'user.', '\x00'}, &(0x7f0000000d80)=""/34, 0x22) syz_open_dev$admmidi(&(0x7f0000000dc0), 0x80, 0x20000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r1) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x38, r6, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x24000010) ioctl$SIOCNRDECOBS(0xffffffffffffffff, 0x89e2) set_mempolicy(0x4000, &(0x7f0000000f40), 0x139) r7 = fcntl$getown(r5, 0x9) ptrace$peeksig(0x4209, r7, &(0x7f0000000f80)={0x9, 0x1, 0x6}, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}]) r8 = syz_io_uring_setup(0x2747, &(0x7f00000012c0)={0x0, 0xda1e, 0x400, 0x3, 0x57, 0x0, r0}, &(0x7f0000001340), &(0x7f0000001380)) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000013c0), 0x2000, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000001400)={'vlan1\x00', 0x8000}) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001480), r5) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r5, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x4c, r10, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x16}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000894) sendmsg$kcm(r0, &(0x7f0000001740)={&(0x7f00000015c0)=@sco={0x1f, @none}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001640)="8a7fdcaca5c21737d9a0051f9bcacfe54df64d69bde7e053f1e5977e41c1f8f862d9308c3fc640dec9613d6609c78ceb90374ddaedf658ee6266452bdb8a01e6e87269612843910ad1684c4b816ab5d7558489f26906032ef92e890c52bcf712189f3a", 0x63}], 0x1, &(0x7f0000001700)=[{0x20, 0x1, 0x5, "44bd0c3cf8d70320bd295f89515752a6"}], 0x20}, 0x40) r11 = dup(r2) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000001780)=0x6000) recvmmsg(r3, &(0x7f0000002e80)=[{{&(0x7f00000017c0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000001940)=[{&(0x7f0000001840)=""/167, 0xa7}, {&(0x7f0000001900)=""/25, 0x19}], 0x2, &(0x7f0000001980)=""/142, 0x8e}, 0x717}, {{&(0x7f0000001a40)=@isdn, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001ac0)=""/120, 0x78}, {&(0x7f0000001b40)=""/248, 0xf8}, {&(0x7f0000001c40)=""/242, 0xf2}, {&(0x7f0000001d40)=""/157, 0x9d}], 0x4, &(0x7f0000001e40)=""/22, 0x16}, 0x80000001}, {{&(0x7f0000001e80)=@isdn, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001f00)=""/38, 0x26}, {&(0x7f0000001f40)=""/86, 0x56}, {&(0x7f0000001fc0)=""/247, 0xf7}], 0x3, &(0x7f0000002100)=""/133, 0x85}, 0x3}, {{&(0x7f00000021c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000002540)=[{&(0x7f0000002240)=""/96, 0x60}, {&(0x7f00000022c0)=""/21, 0x15}, {&(0x7f0000002300)=""/8, 0x8}, {&(0x7f0000002340)=""/66, 0x42}, {&(0x7f00000023c0)=""/51, 0x33}, {&(0x7f0000002400)=""/15, 0xf}, {&(0x7f0000002440)=""/251, 0xfb}], 0x7}, 0xffff4957}, {{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f00000025c0)=""/207, 0xcf}, {&(0x7f00000026c0)=""/228, 0xe4}, {&(0x7f00000027c0)=""/163, 0xa3}], 0x3, &(0x7f00000028c0)=""/112, 0x70}, 0x200}, {{&(0x7f0000002940)=@nfc_llcp, 0x80, &(0x7f0000002dc0)=[{&(0x7f00000029c0)=""/26, 0x1a}, {&(0x7f0000002a00)=""/152, 0x98}, {&(0x7f0000002ac0)=""/49, 0x31}, {&(0x7f0000002b00)=""/117, 0x75}, {&(0x7f0000002b80)=""/7, 0x7}, {&(0x7f0000002bc0)}, {&(0x7f0000002c00)=""/233, 0xe9}, {&(0x7f0000002d00)=""/190, 0xbe}], 0x8, &(0x7f0000002e40)}, 0x200}], 0x6, 0x200a0, &(0x7f0000003000)={0x77359400}) setsockopt$bt_BT_POWER(r12, 0x112, 0x9, &(0x7f0000003040)=0x14, 0x1) fcntl$dupfd(r8, 0x0, r8) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r11, &(0x7f0000003180)={&(0x7f0000003080), 0xc, &(0x7f0000003140)={&(0x7f0000003100)={0x20, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x29}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4008800}, 0x44800) 7.232366197s ago: executing program 4 (id=3179): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f006bbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount$9p_rdma(0x0, &(0x7f0000000400)='.\x00', 0x0, 0x0, &(0x7f00000005c0)={'trans=rdma,', {'port', 0x3d, 0x4e21}}) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000), 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000100)={0x3}, 0x4) sendto$inet6(r4, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'ipvlan0\x00', @remote}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x5410, 0x0) 5.863546476s ago: executing program 4 (id=3180): bpf$MAP_CREATE(0x0, 0x0, 0x48) ioperm(0x284, 0x7f, 0xe3) socket$inet6(0xa, 0x2, 0x0) setrlimit(0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000002f40)=""/4098, 0x1002) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000002600)={0x0, 0x3f, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80045510, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) socket$inet_tcp(0x2, 0x1, 0x0) 5.826467144s ago: executing program 2 (id=3181): r0 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0xa0000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x3e1b40, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4000, 0x0, 0x865d, 0xfd, "ffff00"}) syz_open_pts(r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRES64=r5, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000500000000000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5}, &(0x7f00000002c0), &(0x7f0000000300)=r6}, 0x20) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x60) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file1'}, 0xb) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x5a, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x14, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r7, 0x0, 0x30, 0xe1515f8735398fb, @void}, 0x8b) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000380)={@dev={0xac, 0x14, 0x14, 0x28}, @loopback}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94) 4.349766403s ago: executing program 2 (id=3182): openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) modify_ldt$read_default(0x2, 0xffffffffffffffff, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r4 = syz_open_dev$sg(0x0, 0x0, 0x40042) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=r4], &(0x7f0000000140)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r5}, 0x10) r6 = socket(0x10, 0x2, 0x0) mount$bind(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180)='./cgroup\x00', &(0x7f0000000100), 0x400000, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @loopback}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x6}}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000580)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x8, 0x3, 0x1f8, 0x0, 0x8, 0xfa04, 0xd0, 0x6c02, 0x160, 0x194, 0x194, 0x160, 0x194, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xd0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x0, 0x22}}]}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x258) socket$kcm(0x21, 0xd, 0xa) 4.320403223s ago: executing program 4 (id=3183): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}, 0x8000006}, 0x4e) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)=ANY=[], 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)={0x20, 0x39, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 4.260873176s ago: executing program 6 (id=3184): openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0xa0000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4000, 0x0, 0x865d, 0xfd, "ffff00"}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000500000000000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f00000002c0), &(0x7f0000000300)=r5}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_setup(0x7, 0x0) r6 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {0x104000}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r6, r6, 0x21) wait4(r6, 0x0, 0x40000000, 0x0) 3.987287903s ago: executing program 2 (id=3185): syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_connect$uac1(0x0, 0xc5, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb3, 0x3, 0x1, 0x0, 0x0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x5}, [@processing_unit={0x7, 0x24, 0x7, 0x2, 0x2, 0x7}, @extension_unit={0x9, 0x24, 0x8, 0x2, 0x8, 0xf, "f752"}, @mixer_unit={0x9, 0x24, 0x4, 0x5, 0x6, "35966f7a"}, @extension_unit={0xb, 0x24, 0x8, 0x6, 0x7, 0x4, "6b236184"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x3, 0xcc, 0x2, {0x7, 0x25, 0x1, 0x2, 0x8, 0x7ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x2, 0x7, 0x9}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x80, 0x2, 0x1, 0x3, "6213", "f073"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xa, 0x2, 0x1, 0x4, "da09fb"}, @as_header={0x7, 0x24, 0x1, 0x0, 0xdb, 0x1001}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x4, 0x81, 0x6, 0x2, "b1"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x6, 0x3, 0xfd, {0x7, 0x25, 0x1, 0x1, 0x5, 0x5}}}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x1, 0x0, 0x4, 0xc7, 0x9}, 0x0, 0x0, 0x9, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x83e}}, {0x0, 0x0}, {0x57, &(0x7f0000000740)=ANY=[@ANYBLOB]}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x2428}}, {0x0, 0x0}, {0x8d, &(0x7f0000000800)=ANY=[@ANYBLOB="8d036c326506a6cba6c5762101bfa1105545cda710d63089a3d98c9861513c01e95ce2e3f3597ede8fc69565b7f2c9b30a0fa39e5dea5c9bc452ea541f967ef4fd1705dc7089ac9af8cf8f1db1af570fedc3b2fc1878b028edd49c0d18b85bc48ad49ced73bac965fa10393105e3b62e135216776c000000000000005653338212a0e2fd19594e2dec"]}, {0x36, &(0x7f00000008c0)=ANY=[]}, {0x58, &(0x7f0000000900)=@string={0x58, 0x3, "e7cbcbd9e3d5812bf68e5d828510525b9fd5e79ab29c353b300963de78a02f96e31c1f904d035ab054292baa5c7fc8bb78dc3d891c9f0cc918d73a13e52e4cbe8b9fcf0a576efb5aa8ea11438e14b1ecae8ea2ee11e1"}}, {0x0, 0x0}]}) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}, {0x92}}}, 0x4) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x109040, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x840000000002, 0x3, 0xfa) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x2c, 0x11, 0x1, 0x2000000, 0xffffffff, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}, [{0x8, 0xb, 0x200}]}, 0x2c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) bind$inet(r7, 0x0, 0x0) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f00000002c0)=0x7) 3.986538274s ago: executing program 4 (id=3186): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xc, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xfffff5ee, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0xfffffff9, 0xa, 0xffffffff, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x4c, 0xfffffffd, 0x80, 0x8, 0x9, 0x9, 0x7, 0x8000101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0xe4, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdaa, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x5, 0x4, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0xffffffff, 0x8, 0x3, 0x2, 0x3a6, 0x27f8, 0xc0d, 0xfffffffd, 0x9, 0x9, 0xfffffffb], [0x8a3, 0x6, 0x3, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x7ffe, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x7fff, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x0, 0x0, 0x7, 0x4e6, 0x8, 0x6, 0x5ef, 0x8000, 0xc, 0x4, 0x401, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9efffffd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[], 0x50}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x40, 0x0, 0x0, 0x401}, {0x6, 0xfc, 0x0, 0x6}]}, 0x10) write$binfmt_aout(r7, &(0x7f0000000000)=ANY=[], 0xfdef) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) read$FUSE(r9, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x29, 0x800, 0x44040000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x115, 0xfb}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xb3a406bdd74362ab, 0x4) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x200, 0x20003, 0x10020f5b, 0x0, [{0x1, 0x9}, {}, {}, {0x0, 0x35, 0xff}, {0x20, 0xa, 0xfc}, {0x0, 0x0, 0x6, '\x00', 0x7}, {0x20}, {0x2, 0x2, 0x7}, {0x0, 0x0, 0x8}, {0x0, 0x1, 0x2}, {0x0, 0x0, 0xfe, '\x00', 0x1}, {0x1, 0x0, 0x0, '\x00', 0x3}, {}, {0x0, 0xfc}, {0x7, 0x0, 0x0, '\x00', 0x39}, {0x0, 0x0, 0x0, '\x00', 0x8}, {0x0, 0x8, 0x0, '\x00', 0xff}, {0x0, 0x75, 0xfa}, {0x0, 0x0, 0x0, '\x00', 0x20}, {}, {0x6, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0xfc}, {0x0, 0x5, 0x0, '\x00', 0x1}, {0x0, 0xfc}]}}) 3.194391634s ago: executing program 0 (id=3187): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = creat(&(0x7f0000000480)='./file1\x00', 0x149) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x1, &(0x7f0000000200)={[{@userxattr}, {@nfs_export_off}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\\'}}, {@appraise}, {@dont_hash}, {@appraise_type}, {@appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/net/tun\x00'}}]}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socket$kcm(0x2, 0xa, 0x2) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000000)={0x24, &(0x7f0000000640)={0x0, 0x0, 0x1, '5'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000100)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 3.146888629s ago: executing program 6 (id=3188): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0x80000300, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) fstat(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)={0x128, r3, 0x20, 0x70bd26, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x1}}]}, 0x128}, 0x1, 0x0, 0x0, 0x24040010}, 0x4040) fchown(r0, r2, 0xee00) 2.867569484s ago: executing program 6 (id=3189): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4) (async) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x20, 0x3fa, 0x200, 0x70bd2b, 0x25dfdbfc, {0x1, 0x0, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) (async) close(r1) 2.54675038s ago: executing program 1 (id=3071): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f006bbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount$9p_rdma(0x0, &(0x7f0000000400)='.\x00', 0x0, 0x0, &(0x7f00000005c0)={'trans=rdma,', {'port', 0x3d, 0x4e21}}) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000100)={0x3}, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'ipvlan0\x00', @remote}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x5410, 0x0) 2.393662121s ago: executing program 6 (id=3190): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x20, 0x1e, 0xa, 0x205, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x70}}, 0x0) 1.975986098s ago: executing program 6 (id=3191): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETS2(r3, 0x402c542b, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lsm_set_self_attr(0x66, 0x0, 0x20, 0x0) ioctl$TIOCL_PASTESEL(r3, 0x541c, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000001c0)=@generic={0x0, 0x610, 0x200}) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = creat(&(0x7f0000000300)='./file0\x00', 0xe5) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1900000003000000080000001b0600000100", @ANYRES32=r5, @ANYBLOB="0300"/20, @ANYRES32=r7, @ANYRESHEX=r4, @ANYBLOB="02000000050001000500000000000000000000000000000000000000a14de7b1e51cb85dafb25f438c9f258b28568cd2f70f999de4aa199fe1438777ef6de45454bfe310b7d9c9ff598e623f86bb9e2e29f55c03f723360633e67c29cf10825f7888a0719b6f86790d672ecd02dc13466c41bd9ad4b4fbd04674c020199a151c62c8d73f64c8f0e7ec94d5099d34a441b73783d88e7c53e981e51e6f6378bb26f85ad0b29113da6debe7d05763473e073d27e8a3e35de39f4b50d28707bd04cc2ddf9296d343223848ef6d2ce712a1accbde93587db09141c1c61db8e5d277651c58c559bb6b9d9063114182d0a9c9eeb3e253af54"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000091f5ca07"], 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574", @ANYRES8=r0, @ANYRES32, @ANYRESOCT=r2], 0x5c}}, 0x0) 583.651689ms ago: executing program 1 (id=3193): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) (fail_nth: 4) 0s ago: executing program 6 (id=3194): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_INDEX={0x8, 0x2, 0x190}}}}]}, 0x38}}, 0x0) sendmsg$nl_generic(r4, 0x0, 0xc000) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10) syz_open_dev$I2C(0x0, 0x80, 0x14000) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback, 0x1}, 0x1c) landlock_restrict_self(0xffffffffffffffff, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000700)="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", 0xffffff08}], 0x1}}], 0x1, 0x40081) kernel console output (not intermixed with test programs): not be safe on all matching packets. [ 1093.399763][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 1093.418058][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 1093.454942][T15710] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.462984][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 1093.494380][T15710] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.508592][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 1093.548283][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 1093.555679][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 1093.567073][T15710] bridge_slave_0: entered allmulticast mode [ 1093.574202][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 1093.595640][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 1093.603495][T15710] bridge_slave_0: entered promiscuous mode [ 1093.613754][T15710] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.642919][T15710] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.650236][T15710] bridge_slave_1: entered allmulticast mode [ 1093.660526][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 1093.878286][T15710] bridge_slave_1: entered promiscuous mode [ 1093.929075][T15781] IPv6: NLM_F_CREATE should be specified when creating new route [ 1094.219016][ T5130] Bluetooth: hci3: command tx timeout [ 1094.467230][ T5907] Process accounting resumed [ 1095.131567][T15797] binder: BINDER_SET_CONTEXT_MGR already set [ 1095.137851][T15797] binder: 15793:15797 ioctl 4018620d 2000000000c0 returned -16 [ 1095.156423][T15797] binder: BINDER_SET_CONTEXT_MGR already set [ 1095.175968][T15797] binder: 15793:15797 ioctl 4018620d 200000000040 returned -16 [ 1095.217533][T15710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1095.287967][T15710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1095.314342][T15800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2603'. [ 1095.350841][T15803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2602'. [ 1095.690019][T14334] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1095.821292][T15710] team0: Port device team_slave_0 added [ 1095.871817][T14334] usb 7-1: Using ep0 maxpacket: 32 [ 1095.878887][T14334] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 1095.890337][T14334] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1095.903445][T14334] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1095.928252][T14334] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1095.956994][T14334] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1095.970114][T14334] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1095.979865][T14334] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1095.983545][T15710] team0: Port device team_slave_1 added [ 1095.994991][T14334] usb 7-1: Product: syz [ 1095.999199][T14334] usb 7-1: Manufacturer: syz [ 1096.032896][T14334] usb 7-1: SerialNumber: syz [ 1096.049829][T14334] usb 7-1: config 0 descriptor?? [ 1096.069517][T15817] netlink: 'syz.2.2605': attribute type 27 has an invalid length. [ 1096.095503][T14334] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1096.115897][T15816] netlink: 'syz.2.2605': attribute type 27 has an invalid length. [ 1096.138733][T14334] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1096.148472][ T5130] Bluetooth: hci3: command tx timeout [ 1096.182819][T15819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1096.260145][T15819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1096.301445][T15805] loop9: detected capacity change from 0 to 7 [ 1096.338651][T15710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1096.345954][T15710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1096.386493][T15805] Dev loop9: unable to read RDB block 7 [ 1096.392615][T15805] loop9: AHDI p1 [ 1096.424167][T15805] loop9: partition table partially beyond EOD, truncated [ 1096.452603][T15710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1096.473739][ T5879] usb 7-1: USB disconnect, device number 8 [ 1097.016422][ T5879] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 1098.476494][ T5907] Process accounting resumed [ 1098.912483][ T30] audit: type=1326 audit(2000004174.559:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15848 comm="syz.4.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82478e969 code=0x7ffc0000 [ 1099.004207][ T30] audit: type=1326 audit(2000004174.559:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15848 comm="syz.4.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82478e969 code=0x7ffc0000 [ 1099.045798][ T5907] usb 3-1: new low-speed USB device number 62 using dummy_hcd [ 1099.094027][ T30] audit: type=1326 audit(2000004174.569:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15848 comm="syz.4.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb82478e969 code=0x7ffc0000 [ 1099.176746][ T30] audit: type=1326 audit(2000004174.569:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15848 comm="syz.4.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82478e969 code=0x7ffc0000 [ 1099.246523][ T5907] usb 3-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 1099.258876][ T5907] usb 3-1: config 246 descriptor has 1 excess byte, ignoring [ 1099.280020][ T30] audit: type=1326 audit(2000004174.569:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15848 comm="syz.4.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82478e969 code=0x7ffc0000 [ 1099.316399][ T5907] usb 3-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 1099.346538][ T5907] usb 3-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 1099.389426][ T30] audit: type=1326 audit(2000004174.569:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15848 comm="syz.4.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb82478e969 code=0x7ffc0000 [ 1099.419595][ T5907] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 1099.466008][ T5907] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1099.499026][ T30] audit: type=1326 audit(2000004174.569:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15848 comm="syz.4.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82478e969 code=0x7ffc0000 [ 1099.532694][ T5907] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1099.573009][ T5907] usb 3-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 1099.594578][ T5907] usb 3-1: config 246 descriptor has 1 excess byte, ignoring [ 1099.612457][ T30] audit: type=1326 audit(2000004174.569:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15848 comm="syz.4.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82478e969 code=0x7ffc0000 [ 1099.653043][ T5907] usb 3-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 1099.702437][ T5907] usb 3-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 1099.724481][ T30] audit: type=1326 audit(2000004174.569:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15848 comm="syz.4.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb82478e969 code=0x7ffc0000 [ 1099.747899][ T5907] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 1099.777306][ T5907] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1099.801259][ T30] audit: type=1326 audit(2000004174.569:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15848 comm="syz.4.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82478e969 code=0x7ffc0000 [ 1099.843485][ T5907] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1099.877917][ T5907] usb 3-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 1099.899089][ T5907] usb 3-1: config 246 descriptor has 1 excess byte, ignoring [ 1099.932683][ T5907] usb 3-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 1099.952765][ T5907] usb 3-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 1099.985212][ T5907] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 1100.006884][ T5907] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1100.055357][ T5907] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1100.081566][ T5832] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1100.110775][ T5907] usb 3-1: string descriptor 0 read error: -22 [ 1100.117681][ T5907] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1100.136716][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.197838][ T5907] adutux 3-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 1100.236827][ T5832] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 1100.246423][ T5832] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1100.296034][ T5832] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1100.325214][ T5832] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1100.333638][ T5832] usb 7-1: Manufacturer: syz [ 1100.361534][ T5832] usb 7-1: config 0 descriptor?? [ 1100.404560][T15847] net_ratelimit: 24 callbacks suppressed [ 1100.404723][T15847] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1100.490624][ T5907] usb 3-1: USB disconnect, device number 62 [ 1100.510931][ T5945] bond0 (unregistering): Released all slaves [ 1100.596341][ T5832] rc_core: IR keymap rc-hauppauge not found [ 1100.602917][T15710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1100.611226][ T5832] Registered IR keymap rc-empty [ 1100.617891][T15710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1100.626779][ T5832] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1100.705729][T15710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1100.745858][ T5832] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input103 [ 1100.782634][ T5945] tipc: Disabling bearer [ 1100.793386][ T5945] tipc: Left network mode [ 1100.877262][ T5832] usb 7-1: USB disconnect, device number 9 [ 1101.115629][T15710] hsr_slave_0: entered promiscuous mode [ 1101.164330][T15710] hsr_slave_1: entered promiscuous mode [ 1101.194882][T15710] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1101.223819][T15710] Cannot create hsr debugfs directory [ 1102.072265][ T5945] hsr_slave_0: left promiscuous mode [ 1102.124363][ T5945] hsr_slave_1: left promiscuous mode [ 1102.186429][ T5945] veth1_macvtap: left promiscuous mode [ 1102.211279][ T5945] veth0_macvtap: left promiscuous mode [ 1102.234599][ T5945] veth1_vlan: left promiscuous mode [ 1102.250662][ T5945] veth0_vlan: left promiscuous mode [ 1102.342458][T15876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1102.377517][T10634] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1102.739408][T10634] usb 3-1: Using ep0 maxpacket: 32 [ 1102.749754][T10634] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1102.758015][T10634] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1103.126743][T10634] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1103.163993][T10634] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1103.187515][ T5907] Process accounting resumed [ 1103.202860][T10634] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1103.232722][T10634] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1103.262973][T10634] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1103.291254][T10634] usb 3-1: Product: syz [ 1103.301780][T10634] usb 3-1: Manufacturer: syz [ 1103.339597][T10634] usb 3-1: SerialNumber: syz [ 1103.368828][T10634] usb 3-1: config 0 descriptor?? [ 1103.408509][T10634] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1103.462010][T10634] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1103.541425][T15887] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2626'. [ 1104.118171][ T5832] usb 3-1: USB disconnect, device number 63 [ 1104.129423][ T5832] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1106.206775][ T5832] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 1106.400386][ T5832] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 1106.418328][ T5832] usb 3-1: config 0 has no interface number 0 [ 1106.461023][ T5832] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1106.501072][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.529940][ T5832] usb 3-1: Product: syz [ 1106.555027][ T5832] usb 3-1: Manufacturer: syz [ 1106.567523][ T5832] usb 3-1: SerialNumber: syz [ 1106.590475][ T5832] usb 3-1: config 0 descriptor?? [ 1107.028397][ T5832] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 1107.241545][ T5832] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 1107.330917][ T5832] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 1107.351274][ T5832] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 1107.432056][ T5832] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1107.518641][ T5832] usb 3-1: USB disconnect, device number 64 [ 1107.530743][ T5832] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1107.559428][ T5832] keyspan 3-1:0.133: device disconnected [ 1111.129530][T14334] Process accounting resumed [ 1111.339468][T15929] 9pnet_fd: Insufficient options for proto=fd [ 1111.502513][T15929] netlink: 'syz.4.2638': attribute type 10 has an invalid length. [ 1111.510461][T15929] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2638'. [ 1111.591815][ T5945] IPVS: stop unused estimator thread 0... [ 1112.068882][T15939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2642'. [ 1114.852433][T15710] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1114.909628][T15710] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1114.987158][T15710] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1115.049993][T15710] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1115.570549][T15710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1115.652502][T15710] 8021q: adding VLAN 0 to HW filter on device team0 [ 1115.705190][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.712486][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1115.723066][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.730402][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1117.329257][T10634] Process accounting resumed [ 1118.801304][T14334] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1119.004920][T15710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1119.012321][T14334] usb 3-1: Using ep0 maxpacket: 16 [ 1119.086963][T14334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1119.098574][T14334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1119.118634][T14334] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1119.146686][T14334] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.191899][T14334] usb 3-1: config 0 descriptor?? [ 1119.275954][T10634] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1119.504421][T10634] usb 2-1: Using ep0 maxpacket: 16 [ 1119.546644][T10634] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1119.599306][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 1119.599367][ T30] audit: type=1400 audit(2000004196.268:103): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=15992 comm="syz.4.2656" saddr=100.1.1.1 daddr=172.20.20.170 dest=20002 [ 1119.701765][T10634] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1120.161688][T10634] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1120.201649][T10634] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1120.239206][T15710] veth0_vlan: entered promiscuous mode [ 1120.262422][T10634] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1120.321599][T10634] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1120.334857][T15710] veth1_vlan: entered promiscuous mode [ 1120.341796][T10634] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1120.396272][T10634] usb 2-1: Manufacturer: syz [ 1120.448470][T10634] usb 2-1: config 0 descriptor?? [ 1120.505421][T14334] usbhid 3-1:0.0: can't add hid device: -71 [ 1120.536793][T14334] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1120.589856][T14334] usb 3-1: USB disconnect, device number 65 [ 1120.794791][T15710] veth0_macvtap: entered promiscuous mode [ 1121.476646][ T5907] Process accounting resumed [ 1121.504702][T15710] veth1_macvtap: entered promiscuous mode [ 1121.664822][T15710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1121.712582][T15710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1121.721121][T10634] rc_core: IR keymap rc-hauppauge not found [ 1121.733708][T10634] Registered IR keymap rc-empty [ 1121.738801][T10634] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1121.794422][T15710] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.855641][T15710] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.865357][T10634] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1121.884641][T15710] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.905141][T10634] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1121.955801][T15710] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.979483][T10634] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input104 [ 1122.046140][T10634] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1122.090574][T10634] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1122.152365][T10634] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1122.210721][T10634] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1122.267838][T10634] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1122.423459][T10634] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1122.544244][T10634] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1122.643344][T10634] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1122.777296][T10634] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1122.880953][T10634] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1122.935523][T10634] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1122.964433][T10634] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1122.999040][T10634] usb 2-1: USB disconnect, device number 42 [ 1123.028942][ T3025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1123.046124][ T3025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1123.171537][ T161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1123.179426][ T161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1123.378274][T16038] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2665'. [ 1123.668666][T16035] 9pnet_fd: Insufficient options for proto=fd [ 1124.926148][T10634] Process accounting resumed [ 1125.586320][T16061] netlink: 'syz.1.2672': attribute type 33 has an invalid length. [ 1125.647798][T16061] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2672'. [ 1127.250228][T10634] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 1127.273306][T16078] syzkaller0: entered promiscuous mode [ 1127.322606][T16078] syzkaller0: entered allmulticast mode [ 1127.821264][ T5832] Process accounting resumed [ 1127.995098][T10634] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1128.010616][T10634] usb 3-1: not running at top speed; connect to a high speed hub [ 1128.030669][T10634] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 1128.048769][T10634] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1128.115515][T10634] usb 3-1: config 4 has no interface number 0 [ 1128.165800][T10634] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1128.201078][T10634] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.244260][T10634] usb 3-1: Product: syz [ 1128.397792][T15711] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1128.408602][T15711] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1128.418043][T15711] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1128.426599][T15711] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1128.434507][T15711] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1128.449800][T10634] usb 3-1: Manufacturer: syz [ 1128.456500][T10634] usb 3-1: SerialNumber: syz [ 1129.832298][T16103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2686'. [ 1130.458976][T15711] Bluetooth: hci1: command tx timeout [ 1132.423341][T15711] Bluetooth: hci1: command tx timeout [ 1133.359322][T10634] usb 3-1: Found UVC 0.02 device syz (04f2:b746) [ 1133.378162][T10634] usb 3-1: No valid video chain found. [ 1134.411582][T15711] Bluetooth: hci1: command tx timeout [ 1136.062401][T16105] FAULT_INJECTION: forcing a failure. [ 1136.062401][T16105] name failslab, interval 1, probability 0, space 0, times 0 [ 1136.142599][T16105] CPU: 0 UID: 0 PID: 16105 Comm: syz.6.2687 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 1136.142636][T16105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1136.142648][T16105] Call Trace: [ 1136.142656][T16105] [ 1136.142665][T16105] dump_stack_lvl+0x189/0x250 [ 1136.142702][T16105] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1136.142729][T16105] ? __pfx__printk+0x10/0x10 [ 1136.142759][T16105] ? __lock_acquire+0xaac/0xd20 [ 1136.142796][T16105] should_fail_ex+0x414/0x560 [ 1136.142824][T16105] should_failslab+0xa8/0x100 [ 1136.142845][T16105] __kmalloc_cache_noprof+0x70/0x3d0 [ 1136.142874][T16105] ? nfc_genl_rcv_nl_event+0xa8/0x2b0 [ 1136.142894][T16105] ? blocking_notifier_call_chain+0x54/0x90 [ 1136.142919][T16105] nfc_genl_rcv_nl_event+0xa8/0x2b0 [ 1136.142945][T16105] notifier_call_chain+0x1b3/0x3e0 [ 1136.142972][T16105] blocking_notifier_call_chain+0x6a/0x90 [ 1136.142995][T16105] netlink_release+0x1259/0x1b10 [ 1136.143026][T16105] ? netlink_release+0x108/0x1b10 [ 1136.143051][T16105] ? __pfx_netlink_release+0x10/0x10 [ 1136.143075][T16105] ? down_write+0x162/0x1f0 [ 1136.143102][T16105] ? __pfx_down_write+0x10/0x10 [ 1136.143125][T16105] ? do_raw_spin_lock+0x121/0x290 [ 1136.143150][T16105] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1136.143177][T16105] sock_close+0xc3/0x240 [ 1136.143197][T16105] ? __pfx_sock_close+0x10/0x10 [ 1136.143215][T16105] __fput+0x449/0xa70 [ 1136.143249][T16105] task_work_run+0x1d4/0x260 [ 1136.143277][T16105] ? __pfx_task_work_run+0x10/0x10 [ 1136.143307][T16105] ? kick_process+0xeb/0x160 [ 1136.143331][T16105] get_signal+0x11c5/0x1310 [ 1136.143362][T16105] ? __pfx_task_work_add+0x10/0x10 [ 1136.143384][T16105] ? __file_ref_put+0xd5/0x130 [ 1136.143415][T16105] ? __fget_files+0x3a0/0x420 [ 1136.143446][T16105] arch_do_signal_or_restart+0x95/0x780 [ 1136.143481][T16105] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1136.143527][T16105] ? local_irq_enable_exit_to_user+0x5/0x10 [ 1136.143560][T16105] syscall_exit_to_user_mode+0x8b/0x120 [ 1136.143586][T16105] do_syscall_64+0x103/0x210 [ 1136.143619][T16105] ? clear_bhb_loop+0x60/0xb0 [ 1136.143645][T16105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1136.143664][T16105] RIP: 0033:0x7f06b5b8e969 [ 1136.143682][T16105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1136.143699][T16105] RSP: 002b:00007f06b6a98038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1136.143721][T16105] RAX: 0000000000000028 RBX: 00007f06b5db5fa0 RCX: 00007f06b5b8e969 [ 1136.143734][T16105] RDX: 0000000004000810 RSI: 0000200000000400 RDI: 0000000000000004 [ 1136.143747][T16105] RBP: 00007f06b6a98090 R08: 0000000000000000 R09: 0000000000000000 [ 1136.143759][T16105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1136.143771][T16105] R13: 0000000000000000 R14: 00007f06b5db5fa0 R15: 00007fffe374d518 [ 1136.143802][T16105] [ 1136.156530][T10634] usb 3-1: USB disconnect, device number 66 [ 1136.189167][T16095] lo speed is unknown, defaulting to 1000 [ 1136.418943][T15711] Bluetooth: hci1: command tx timeout [ 1136.547286][T16109] x_tables: duplicate underflow at hook 2 [ 1137.716204][ T3025] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.033985][ T24] Process accounting resumed [ 1138.642454][T16128] tipc: Enabling of bearer rejected, already enabled [ 1138.847558][T16141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2698'. [ 1138.905667][ T3025] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.136620][ T5924] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1139.299754][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1139.321857][ T3025] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.336705][ T5924] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1139.372582][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1139.405542][ T5924] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1139.436958][ T5924] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1139.466160][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.524551][ T5924] usb 1-1: config 0 descriptor?? [ 1139.541714][ T3025] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.733447][ T5924] hdpvr 1-1:0.0: firmware version 0x12 dated [ 1140.460057][T16165] sctp: [Deprecated]: syz.0.2696 (pid 16165) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1140.460057][T16165] Use struct sctp_sack_info instead [ 1140.486972][T16165] sctp: [Deprecated]: syz.0.2696 (pid 16165) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1140.486972][T16165] Use struct sctp_sack_info instead [ 1143.340125][T10634] Process accounting resumed [ 1143.522540][ T5924] hdpvr 1-1:0.0: device init failed [ 1143.529795][ T5924] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 1143.574651][ T5924] usb 1-1: USB disconnect, device number 37 [ 1145.701463][ T3025] team0: Port device geneve0 removed [ 1146.099856][ T5877] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1146.300052][ T5877] usb 7-1: Using ep0 maxpacket: 32 [ 1146.313976][ T5877] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1146.370188][ T5877] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1146.416418][ T5924] Process accounting resumed [ 1146.438359][ T5877] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1146.547351][ T5877] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.807360][ T5877] usb 7-1: config 0 descriptor?? [ 1146.818844][ T3025] bond0 (unregistering): Released all slaves [ 1146.826110][ T5877] hub 7-1:0.0: USB hub found [ 1146.932961][T16095] chnl_net:caif_netlink_parms(): no params data found [ 1147.090075][T16210] can0: slcan on ttyS3. [ 1147.204424][T14334] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1147.234040][T16210] can0 (unregistered): slcan off ttyS3. [ 1147.404824][T14334] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1147.441273][ T5877] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 1147.450147][T14334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.498528][ T5877] usbhid 7-1:0.0: can't add hid device: -71 [ 1147.511976][T14334] usb 2-1: config 0 descriptor?? [ 1147.518337][ T5877] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1147.572955][T16095] bridge0: port 1(bridge_slave_0) entered blocking state [ 1147.585726][ T5877] usb 7-1: USB disconnect, device number 10 [ 1147.610480][T16095] bridge0: port 1(bridge_slave_0) entered disabled state [ 1147.647488][T16095] bridge_slave_0: entered allmulticast mode [ 1147.680917][T16095] bridge_slave_0: entered promiscuous mode [ 1147.711589][T16095] bridge0: port 2(bridge_slave_1) entered blocking state [ 1147.728859][T16095] bridge0: port 2(bridge_slave_1) entered disabled state [ 1147.736223][T16095] bridge_slave_1: entered allmulticast mode [ 1147.774717][T16095] bridge_slave_1: entered promiscuous mode [ 1147.797120][T16236] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2722'. [ 1147.896859][T14334] usb 2-1: string descriptor 0 read error: -71 [ 1147.916900][T14334] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1147.932813][T14334] gspca_sunplus: reg_w_riv err -71 [ 1147.942258][T14334] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 1147.997743][T14334] usb 2-1: USB disconnect, device number 43 [ 1148.099886][T16095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1148.155925][T16095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1148.470527][T16095] team0: Port device team_slave_0 added [ 1149.057125][T16095] team0: Port device team_slave_1 added [ 1149.107083][ T3025] tipc: Disabling bearer [ 1149.122627][ T3025] tipc: Left network mode [ 1149.761659][T16243] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1150.062590][T16243] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1150.097772][T16243] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1150.110933][T15711] Bluetooth: hci5: command 0x0406 tx timeout [ 1150.137539][T16243] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1150.181925][T16095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1150.207237][T16243] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1150.218186][T16095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1150.276402][T16243] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1150.281593][T16095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1150.302159][T16243] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1150.324531][T16095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1150.350368][T16095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1150.358202][T16243] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1150.405756][T16095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1151.380488][ T3025] hsr_slave_0: left promiscuous mode [ 1151.409582][ T3025] hsr_slave_1: left promiscuous mode [ 1151.520927][T16269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1152.006444][T15711] Bluetooth: hci3: command 0x0c1a tx timeout [ 1152.082386][T15711] Bluetooth: hci5: command 0x0406 tx timeout [ 1152.234678][T15711] Bluetooth: hci1: command 0x0c1a tx timeout [ 1153.410146][ T3025] veth1_macvtap: left promiscuous mode [ 1153.434306][ T3025] veth0_macvtap: left promiscuous mode [ 1153.485471][ T3025] veth1_vlan: left promiscuous mode [ 1153.496986][ T3025] veth0_vlan: left promiscuous mode [ 1153.585204][ T30] audit: type=1326 audit(2000004231.951:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16280 comm="syz.1.2734" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa8d958e969 code=0x0 [ 1153.987609][T15711] Bluetooth: hci3: command 0x0c1a tx timeout [ 1154.215666][T15711] Bluetooth: hci1: command 0x0c1a tx timeout [ 1154.930441][T16292] netlink: 'syz.1.2735': attribute type 4 has an invalid length. [ 1154.938261][T16292] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2735'. [ 1154.949718][T16292] hub 8-0:1.0: USB hub found [ 1154.956491][T16292] hub 8-0:1.0: 1 port detected [ 1155.021901][T16295] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2733'. [ 1155.969957][T15711] Bluetooth: hci3: command 0x0c1a tx timeout [ 1156.196521][T15711] Bluetooth: hci1: command 0x0c1a tx timeout [ 1159.536043][T16323] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1160.913143][ T3025] dummy0 (unregistering): left allmulticast mode [ 1161.552774][T16095] hsr_slave_0: entered promiscuous mode [ 1161.591973][T16095] hsr_slave_1: entered promiscuous mode [ 1161.609200][T16095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1161.635787][T16095] Cannot create hsr debugfs directory [ 1161.761654][T16282] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2733'. [ 1164.036305][T10634] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 1164.189138][T10634] usb 2-1: device descriptor read/64, error -71 [ 1164.450422][T10634] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 1164.674664][T10634] usb 2-1: device descriptor read/64, error -71 [ 1164.835053][T10634] usb usb2-port1: attempt power cycle [ 1165.608144][T10634] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 1165.818968][T10634] usb 2-1: device descriptor read/8, error -71 [ 1166.047366][T10634] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 1166.563112][T10634] usb 2-1: device descriptor read/8, error -71 [ 1166.682089][T10634] usb usb2-port1: unable to enumerate USB device [ 1166.821544][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 1166.838222][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 1166.845843][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 1166.863779][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 1166.883805][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 1166.911907][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 1166.961456][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 1167.026321][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 1167.034024][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 1167.046927][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 1167.071239][T16095] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1167.155411][T16095] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1167.245754][T16095] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1167.274367][T10634] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1167.308233][T16095] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1167.437303][T10634] usb 2-1: Using ep0 maxpacket: 8 [ 1167.456469][T10634] usb 2-1: config 0 has an invalid descriptor of length 23, skipping remainder of the config [ 1167.481433][T10634] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1167.533457][T10634] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1167.564596][T10634] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 1167.611862][T10634] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 170, changing to 11 [ 1167.663095][T10634] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33913, setting to 1024 [ 1167.776586][T10634] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1167.983710][T10634] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1168.030719][T10634] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.111629][T10634] usb 2-1: Product: syz [ 1168.161569][T10634] usb 2-1: Manufacturer: syz [ 1168.166626][T10634] usb 2-1: SerialNumber: syz [ 1168.271158][T10634] usb 2-1: config 0 descriptor?? [ 1168.285477][T16385] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1168.303106][T16385] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1168.313246][T16095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1168.653334][T16095] 8021q: adding VLAN 0 to HW filter on device team0 [ 1168.830629][ T5924] Process accounting resumed [ 1169.248028][ T161] bridge0: port 1(bridge_slave_0) entered blocking state [ 1169.255276][ T161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1169.450600][ T6784] bridge0: port 2(bridge_slave_1) entered blocking state [ 1169.457901][ T6784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1169.513915][ T5883] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 1169.562330][T10634] rc_core: IR keymap rc-snapstream-firefly not found [ 1169.575637][T16417] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1169.599028][T10634] Registered IR keymap rc-empty [ 1169.611654][T10634] rc rc0: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1169.624290][T16095] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1169.648746][T10634] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input105 [ 1169.681508][T16419] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1169.717158][ T5883] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1169.740759][T10634] input: syz syz mouse as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input106 [ 1169.766304][ T5883] usb 7-1: can't read configurations, error -61 [ 1169.840104][T10634] usb 2-1: USB disconnect, device number 48 [ 1169.840176][ C1] ati_remote 2-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 1169.925180][T16423] Invalid logical block size (1026) [ 1169.944508][ T5883] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 1170.277348][ T5883] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1170.285004][ T5883] usb 7-1: can't read configurations, error -61 [ 1170.292737][ T5883] usb usb7-port1: attempt power cycle [ 1170.905253][T10634] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1171.086005][T10634] usb 2-1: Using ep0 maxpacket: 8 [ 1171.101303][T10634] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1171.120836][T10634] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1171.145904][T10634] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1171.271339][ T5883] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 1171.284163][T16095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1171.945430][T10634] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1172.050748][T10634] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1172.115078][ T5883] usb 7-1: device descriptor read/8, error -71 [ 1172.179881][T10634] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1172.312509][T10634] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.606994][T10634] usb 2-1: can't set config #16, error -71 [ 1172.651750][T10634] usb 2-1: USB disconnect, device number 49 [ 1172.768667][T16449] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1173.859056][T14334] Process accounting resumed [ 1174.395865][T16461] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1174.442550][T16463] binder: 16462:16463 ioctl c0306201 2000000001c0 returned -22 [ 1174.711328][T16475] netlink: 'syz.0.2779': attribute type 21 has an invalid length. [ 1175.011830][T16095] veth0_vlan: entered promiscuous mode [ 1175.029033][ T5983] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1175.074803][T16095] veth1_vlan: entered promiscuous mode [ 1175.210323][ T5983] usb 3-1: Using ep0 maxpacket: 32 [ 1175.435619][ T5983] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1175.466253][ T5983] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1175.478148][T16095] veth0_macvtap: entered promiscuous mode [ 1175.496207][ T5983] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1175.528084][T16095] veth1_macvtap: entered promiscuous mode [ 1175.566519][ T5983] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1175.811185][T16486] tipc: Enabling of bearer rejected, already enabled [ 1176.196323][ T5983] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1176.443771][T16095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1176.464662][ T5983] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1176.636225][T16095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1176.805309][T16095] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1176.945153][ T5983] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1176.967858][ T5983] usb 3-1: Product: syz [ 1176.974086][ T5983] usb 3-1: Manufacturer: syz [ 1176.978856][ T5983] usb 3-1: SerialNumber: syz [ 1177.088393][T16095] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.111981][ T5983] usb 3-1: config 0 descriptor?? [ 1177.234864][T16095] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.235809][ T5983] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1177.309848][T16095] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.508726][ T5983] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1177.517204][T16472] loop9: detected capacity change from 0 to 7 [ 1177.520701][T16472] Dev loop9: unable to read RDB block 7 [ 1177.590095][T16472] loop9: AHDI p1 [ 1177.630529][T16472] loop9: partition table partially beyond EOD, truncated [ 1177.715418][ T5983] usb 3-1: USB disconnect, device number 67 [ 1177.751139][ T5983] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1178.561416][T14572] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1178.583260][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1178.614118][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1178.830273][T14572] usb 2-1: Using ep0 maxpacket: 8 [ 1178.850258][T14572] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1178.862685][T14572] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1178.908023][T14572] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1178.941097][T14572] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1179.007435][T14572] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1179.052463][ C1] net_ratelimit: 22 callbacks suppressed [ 1179.052486][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 1179.075982][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 1179.084949][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 1179.118166][ T6784] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1179.126475][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 1179.127414][T14572] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1179.148480][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 1179.153167][ T6784] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1179.784473][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 1179.791945][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 1179.799146][ T5877] Process accounting resumed [ 1179.805730][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 1179.821291][T14572] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.831122][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 1179.838657][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 1180.212047][T16495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1180.283639][T16522] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 1180.296673][T16495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1183.112630][T14572] usb 2-1: usb_control_msg returned -71 [ 1183.129327][T14572] usbtmc 2-1:16.0: can't read capabilities [ 1183.176901][T14572] usb 2-1: USB disconnect, device number 50 [ 1183.214005][T16528] netlink: 'syz.0.2796': attribute type 3 has an invalid length. [ 1183.222017][T16528] netlink: 'syz.0.2796': attribute type 1 has an invalid length. [ 1183.249262][T16528] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2796'. [ 1183.347803][T16530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2797'. [ 1187.654060][ T5877] Process accounting resumed [ 1188.117287][T16560] syz.0.2805: attempt to access beyond end of device [ 1188.117287][T16560] loop1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 1188.148509][T16560] EXT4-fs (loop1): unable to read superblock [ 1188.345974][T16565] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1188.867190][ T5877] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1189.020724][T16573] overlayfs: conflicting lowerdir path [ 1189.069698][ T5877] usb 7-1: Using ep0 maxpacket: 8 [ 1189.199808][ T5877] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1189.437021][ T5877] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1189.640951][ T5877] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1189.661496][ T5877] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1189.681397][ T5877] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1189.737810][ T5877] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1189.817571][ T5877] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.152770][T16567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1191.194140][T16567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1191.323085][T16591] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2808'. [ 1191.535786][T16591] bridge_slave_1: left allmulticast mode [ 1191.541626][T16591] bridge_slave_1: left promiscuous mode [ 1191.549137][T16591] bridge0: port 2(bridge_slave_1) entered disabled state [ 1191.563470][T16591] bridge_slave_0: left allmulticast mode [ 1191.569281][T16591] bridge_slave_0: left promiscuous mode [ 1191.575449][T16591] bridge0: port 1(bridge_slave_0) entered disabled state [ 1192.241360][ T5877] usb 7-1: usb_control_msg returned -71 [ 1192.247021][ T5877] usbtmc 7-1:16.0: can't read capabilities [ 1192.285034][ T5877] usb 7-1: USB disconnect, device number 15 [ 1192.823425][T16608] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1193.203551][T16613] netlink: 'syz.2.2821': attribute type 10 has an invalid length. [ 1193.214515][T16613] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2821'. [ 1194.671034][ T5983] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1194.704448][T16606] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1195.322665][ T5983] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1195.348716][ T5983] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1195.396031][ T5983] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1195.414354][T16627] netlink: 'syz.6.2818': attribute type 21 has an invalid length. [ 1195.422610][ T5983] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c04, bcdDevice= 0.00 [ 1195.509726][ T5983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.540060][ T5983] usb 5-1: config 0 descriptor?? [ 1195.626263][ C1] net_ratelimit: 9 callbacks suppressed [ 1195.626284][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 1195.652599][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 1195.660097][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 1195.669843][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 1195.689205][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 1195.700905][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 1195.710120][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 1195.719288][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 1195.776484][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 1196.288083][ T5983] hid (null): report_id 0 is invalid [ 1196.320901][ T5983] corsair-psu 0003:1B1C:1C04.000A: report_id 0 is invalid [ 1196.337709][ T5983] corsair-psu 0003:1B1C:1C04.000A: item 0 0 1 8 parsing failed [ 1196.476791][ T5983] corsair-psu 0003:1B1C:1C04.000A: probe with driver corsair-psu failed with error -22 [ 1197.169523][ T5983] usb 5-1: USB disconnect, device number 15 [ 1197.390864][T16651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2831'. [ 1197.611321][ T10] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1197.728164][ T5983] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 1197.785910][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1197.794913][ T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1197.803185][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1197.852734][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1197.871814][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1197.900053][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1197.903153][ T5983] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1197.933459][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1197.961148][ T5983] usb 5-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00 [ 1197.963864][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.001216][ T5983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.049832][ T5983] usb 5-1: config 0 descriptor?? [ 1198.329202][T16645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1198.455064][T16645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1198.893512][T16663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2829'. [ 1198.948422][T16663] bridge_slave_1: left allmulticast mode [ 1198.954511][T16663] bridge_slave_1: left promiscuous mode [ 1198.961702][T16663] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.045874][T16663] bridge_slave_0: left allmulticast mode [ 1199.051976][T16663] bridge_slave_0: left promiscuous mode [ 1199.061078][T16663] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.726948][ T5983] usbhid 5-1:0.0: can't add hid device: -71 [ 1199.733316][ T5983] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1199.747756][ T5983] usb 5-1: USB disconnect, device number 16 [ 1199.889075][ T10] usb 2-1: usb_control_msg returned -71 [ 1199.918997][ T10] usbtmc 2-1:16.0: can't read capabilities [ 1199.956162][ T10] usb 2-1: USB disconnect, device number 51 [ 1201.392858][T16680] netlink: 'syz.1.2839': attribute type 10 has an invalid length. [ 1201.404461][T16680] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2839'. [ 1203.048729][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 1203.085220][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 1203.112589][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 1203.122748][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 1203.130566][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 1203.139084][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 1203.187554][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 1203.196708][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 1203.257685][T16694] netlink: 'syz.6.2841': attribute type 10 has an invalid length. [ 1203.265767][T16694] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2841'. [ 1203.583105][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 1203.590709][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 1207.827880][ T10] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 1208.625659][T16597] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 1208.661538][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1208.705537][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1208.762099][ T10] usb 1-1: New USB device found, idVendor=0404, idProduct=0755, bcdDevice= 0.00 [ 1208.778163][T16597] usb 3-1: device descriptor read/64, error -71 [ 1208.787835][ T5883] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1208.824870][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.852923][ T10] usb 1-1: config 0 descriptor?? [ 1208.880299][ T30] audit: type=1400 audit(2000004289.995:105): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=16743 comm="syz.6.2856" saddr=100.1.1.1 daddr=172.20.20.170 dest=20002 [ 1208.949679][ T5883] usb 5-1: Using ep0 maxpacket: 32 [ 1208.959235][ T5883] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1208.967581][ T5883] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1209.010663][ T5883] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1209.035014][T16597] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 1209.067384][ T5883] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1209.147888][ T5883] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1209.183388][ T5883] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1209.195782][T16597] usb 3-1: device descriptor read/64, error -71 [ 1209.216622][ C1] net_ratelimit: 23 callbacks suppressed [ 1209.216641][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 1209.230854][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 1209.239751][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 1209.248637][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 1209.257463][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 1209.277131][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 1209.294389][ T5883] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1209.322898][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 1209.357949][T16597] usb usb3-port1: attempt power cycle [ 1209.759319][ T5883] usb 5-1: Product: syz [ 1209.760712][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 1209.763529][ T5883] usb 5-1: Manufacturer: syz [ 1209.787665][ T5883] usb 5-1: SerialNumber: syz [ 1209.806139][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 1209.813580][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 1209.826878][ T5883] usb 5-1: config 0 descriptor?? [ 1209.840221][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 1209.845244][ T5883] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1209.869815][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1209.873737][ T5883] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1209.967976][ T10] usb 1-1: USB disconnect, device number 38 [ 1210.056257][ T5883] usb 5-1: USB disconnect, device number 17 [ 1210.075567][ T5883] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1210.103839][T16597] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 1210.142015][T16597] usb 3-1: device descriptor read/8, error -71 [ 1210.233131][T16760] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2861'. [ 1210.287454][T16760] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2861'. [ 1211.174847][T16597] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 1211.748108][T16597] usb 3-1: device not accepting address 71, error -71 [ 1211.756212][T16597] usb usb3-port1: unable to enumerate USB device [ 1212.207643][T16780] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2866'. [ 1212.309274][ T5983] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1212.561376][ T5983] usb 1-1: Using ep0 maxpacket: 16 [ 1212.626556][ T5983] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1212.635321][ T5983] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1212.673979][ T5983] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1212.724362][ T5983] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1212.750811][ T5983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.781819][ T5983] usb 1-1: Product: syz [ 1212.786065][ T5983] usb 1-1: Manufacturer: syz [ 1212.826403][ T5983] usb 1-1: SerialNumber: syz [ 1213.057747][T16769] netlink: 'syz.0.2864': attribute type 1 has an invalid length. [ 1213.078306][T16769] netlink: 'syz.0.2864': attribute type 2 has an invalid length. [ 1213.117121][T16769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2864'. [ 1213.128016][ T10] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1213.179084][T16769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2864'. [ 1213.293069][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1213.315210][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1213.347481][ T10] usb 7-1: config 7 has an invalid interface number: 128 but max is 0 [ 1213.393883][ T10] usb 7-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1213.429614][ T5983] usb 1-1: 0:2 : does not exist [ 1213.439457][ T10] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1213.479750][ T10] usb 7-1: config 7 has no interface number 0 [ 1213.509651][ T10] usb 7-1: config 7 interface 128 altsetting 2 has an endpoint descriptor with address 0x17, changing to 0x7 [ 1213.555574][ T10] usb 7-1: config 7 interface 128 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32 [ 1213.596692][ T10] usb 7-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 1213.645431][ T10] usb 7-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1213.688926][ T10] usb 7-1: config 7 interface 128 has no altsetting 0 [ 1213.715602][ T10] usb 7-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 1213.729857][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.758485][ T10] usb 7-1: Product: syz [ 1213.768421][ T10] usb 7-1: Manufacturer: syz [ 1213.778359][ T10] usb 7-1: SerialNumber: syz [ 1213.825866][T16795] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1214.101218][ T5983] usb 1-1: 1:0: cannot get min/max values for control 2 (id 1) [ 1215.010517][ T5983] usb 1-1: USB disconnect, device number 39 [ 1215.580276][ T10] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1215.599556][T16813] netlink: 'syz.1.2876': attribute type 10 has an invalid length. [ 1215.607408][T16813] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2876'. [ 1215.627261][ T10] usb 7-1: MIDIStreaming interface descriptor not found [ 1216.617728][ T10] usb 7-1: USB disconnect, device number 16 [ 1217.815766][T16834] ubi: mtd0 is already attached to ubi31 [ 1217.960239][T16838] netlink: 'syz.6.2884': attribute type 4 has an invalid length. [ 1218.053702][T16843] netlink: 'syz.6.2884': attribute type 4 has an invalid length. [ 1222.817696][T16886] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2899'. [ 1222.912762][T16888] netlink: 'syz.6.2897': attribute type 8 has an invalid length. [ 1225.062841][T16912] netlink: 'syz.4.2902': attribute type 21 has an invalid length. [ 1225.165623][ T30] audit: type=1804 audit(2000004307.107:106): pid=16906 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.2904" name="/newroot/549/file1" dev="fuse" ino=1 res=1 errno=0 [ 1225.214003][T16913] netlink: 'syz.2.2904': attribute type 9 has an invalid length. [ 1225.314919][ T30] audit: type=1800 audit(2000004307.201:107): pid=16906 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.2904" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1225.663031][ T30] audit: type=1400 audit(2000004307.621:108): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=16916 comm="syz.2.2906" saddr=100.1.1.1 daddr=172.20.20.170 dest=20002 [ 1227.220634][ T10] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1227.430831][ T10] usb 7-1: config 0 has an invalid descriptor of length 25, skipping remainder of the config [ 1227.459777][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1227.525425][ T10] usb 7-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1227.599556][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.654887][ T10] usb 7-1: config 0 descriptor?? [ 1227.655442][T16938] net_ratelimit: 16 callbacks suppressed [ 1227.655461][T16938] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1228.259335][T16926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1228.347433][T16926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1228.449063][ T10] usb 7-1: string descriptor 0 read error: -71 [ 1228.457211][ T10] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1228.554986][ T10] usb 7-1: USB disconnect, device number 17 [ 1229.573825][T16949] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1229.674772][T16949] kvm: pic: level sensitive irq not supported [ 1229.674892][T16949] kvm: pic: non byte read [ 1230.279642][T16960] netlink: 'syz.6.2915': attribute type 21 has an invalid length. [ 1232.514579][T16983] FAULT_INJECTION: forcing a failure. [ 1232.514579][T16983] name failslab, interval 1, probability 0, space 0, times 0 [ 1232.530448][T16983] CPU: 0 UID: 0 PID: 16983 Comm: syz.1.2926 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 1232.530477][T16983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1232.530490][T16983] Call Trace: [ 1232.530499][T16983] [ 1232.530509][T16983] dump_stack_lvl+0x189/0x250 [ 1232.530545][T16983] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1232.530572][T16983] ? __pfx__printk+0x10/0x10 [ 1232.530609][T16983] ? __pfx___might_resched+0x10/0x10 [ 1232.530644][T16983] should_fail_ex+0x414/0x560 [ 1232.530671][T16983] should_failslab+0xa8/0x100 [ 1232.530691][T16983] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1232.530723][T16983] ? __alloc_skb+0x112/0x2d0 [ 1232.530752][T16983] __alloc_skb+0x112/0x2d0 [ 1232.530781][T16983] pfkey_sendmsg+0x1dd/0x1090 [ 1232.530802][T16983] ? rcu_is_watching+0x15/0xb0 [ 1232.530834][T16983] ? rcu_is_watching+0x15/0xb0 [ 1232.530863][T16983] ? smack_socket_sendmsg+0x1a7/0x520 [ 1232.530890][T16983] ? __pv_queued_spin_lock_slowpath+0xa05/0xb60 [ 1232.530916][T16983] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1232.530943][T16983] ? __lock_acquire+0xaac/0xd20 [ 1232.530969][T16983] ? from_kuid+0x1b0/0x640 [ 1232.530996][T16983] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 1232.531035][T16983] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1232.531057][T16983] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1232.531076][T16983] __sock_sendmsg+0x219/0x270 [ 1232.531101][T16983] ____sys_sendmsg+0x52d/0x830 [ 1232.531140][T16983] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1232.531178][T16983] ? import_iovec+0x74/0xa0 [ 1232.531209][T16983] ___sys_sendmsg+0x21f/0x2a0 [ 1232.531239][T16983] ? __pfx____sys_sendmsg+0x10/0x10 [ 1232.531304][T16983] ? __fget_files+0x2a/0x420 [ 1232.531322][T16983] ? __fget_files+0x3a0/0x420 [ 1232.531356][T16983] __sys_sendmmsg+0x227/0x430 [ 1232.531390][T16983] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1232.531449][T16983] ? irqentry_exit+0x74/0x90 [ 1232.531485][T16983] __x64_sys_sendmmsg+0xa0/0xc0 [ 1232.531514][T16983] do_syscall_64+0xf6/0x210 [ 1232.531541][T16983] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1232.531561][T16983] ? clear_bhb_loop+0x60/0xb0 [ 1232.531586][T16983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1232.531605][T16983] RIP: 0033:0x7fa8d958e969 [ 1232.531624][T16983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1232.531641][T16983] RSP: 002b:00007fa8da46b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1232.531662][T16983] RAX: ffffffffffffffda RBX: 00007fa8d97b6080 RCX: 00007fa8d958e969 [ 1232.531676][T16983] RDX: 00000000000003ef RSI: 0000200000000180 RDI: 0000000000000004 [ 1232.531689][T16983] RBP: 00007fa8da46b090 R08: 0000000000000000 R09: 0000000000000000 [ 1232.531701][T16983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1232.531713][T16983] R13: 0000000000000000 R14: 00007fa8d97b6080 R15: 00007ffd20fedbf8 [ 1232.531744][T16983] [ 1235.337133][ T5877] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1235.536074][ T5877] usb 5-1: Using ep0 maxpacket: 8 [ 1235.637158][ T5877] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1235.669431][ T5877] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1235.735313][ T5877] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1235.792626][ T5877] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1235.826130][ T5877] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1235.891963][ T5877] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1235.921601][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.037772][T16997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1237.102058][T16997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1237.229290][T17014] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2929'. [ 1237.238526][T17014] bridge_slave_1: left allmulticast mode [ 1237.244297][T17014] bridge_slave_1: left promiscuous mode [ 1237.250418][T17014] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.291047][T17013] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1237.308059][T17014] bridge_slave_0: left allmulticast mode [ 1237.313779][T17014] bridge_slave_0: left promiscuous mode [ 1237.319861][T17014] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.576008][ T5877] usb 5-1: usb_control_msg returned -71 [ 1237.581648][ T5877] usbtmc 5-1:16.0: can't read capabilities [ 1237.683681][ T5877] usb 5-1: USB disconnect, device number 18 [ 1239.187946][T17031] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1241.794647][T17060] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1242.334552][T17064] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1242.958825][T17074] netlink: 'syz.2.2947': attribute type 21 has an invalid length. [ 1243.194377][ T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1243.441494][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 1243.523430][ T24] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1243.702067][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1243.975267][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1244.003879][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1244.013042][ T30] audit: type=1326 audit(2000004326.885:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17081 comm="syz.1.2953" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa8d958e969 code=0x0 [ 1244.022593][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1244.080053][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1244.127870][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.393385][T17069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1244.421921][T17069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1244.559334][T17089] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2951'. [ 1244.838939][T17097] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2957'. [ 1244.906057][ T24] usb 5-1: usb_control_msg returned -71 [ 1244.929869][ T24] usbtmc 5-1:16.0: can't read capabilities [ 1244.985101][ T24] usb 5-1: USB disconnect, device number 19 [ 1245.935125][T17109] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1246.387018][T17119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1246.756511][T14572] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1247.535736][T14572] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1247.557162][T14572] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1247.585789][T14572] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1247.610051][T14572] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1247.658717][T14572] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1247.695458][T14572] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.737322][T14572] usb 3-1: config 0 descriptor?? [ 1250.119744][T14572] usbhid 3-1:0.0: can't add hid device: -71 [ 1250.125846][T14572] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1250.205998][T14572] usb 3-1: USB disconnect, device number 73 [ 1252.864258][T17161] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1253.243666][ T5877] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1253.443394][ T5877] usb 2-1: Using ep0 maxpacket: 8 [ 1253.451909][ T5877] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1253.460755][ T5877] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1253.496584][ T5877] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1253.532181][ T5877] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1253.614351][ T5877] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1254.024613][ T5877] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1254.112398][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.322130][T17159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1255.407637][T17159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1255.576414][T17185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2973'. [ 1255.618226][T17186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2980'. [ 1255.664470][T17188] sctp: [Deprecated]: syz.0.2981 (pid 17188) Use of int in maxseg socket option. [ 1255.664470][T17188] Use struct sctp_assoc_value instead [ 1255.822649][T17189] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2980'. [ 1256.655742][ T5877] usb 2-1: usb_control_msg returned -71 [ 1256.661420][ T5877] usbtmc 2-1:16.0: can't read capabilities [ 1256.741654][ T5877] usb 2-1: USB disconnect, device number 52 [ 1256.791892][T17206] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1257.221583][T17208] netlink: 'syz.1.2986': attribute type 10 has an invalid length. [ 1257.235468][T16597] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1257.445316][T16597] usb 1-1: Using ep0 maxpacket: 32 [ 1257.480431][T16597] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 1257.512067][T16597] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1257.577226][T16597] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1257.638434][T16597] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1257.812196][T16597] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1257.914585][T16597] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1257.925711][T16597] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1258.185604][T16597] usb 1-1: Product: syz [ 1258.250974][T16597] usb 1-1: Manufacturer: syz [ 1258.381879][T16597] usb 1-1: SerialNumber: syz [ 1258.409386][T16597] usb 1-1: config 0 descriptor?? [ 1258.418643][T16597] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1258.465771][T16597] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1258.593910][T17217] netlink: 'syz.1.2989': attribute type 10 has an invalid length. [ 1258.601865][T17217] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2989'. [ 1258.681690][ T10] usb 1-1: USB disconnect, device number 41 [ 1258.694137][ T10] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 1258.915205][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 1258.950460][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 1258.960014][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 1258.967837][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 1258.984574][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 1259.002832][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 1259.026508][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 1259.033937][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 1259.060768][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 1261.513822][T16597] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1261.837382][T16597] usb 7-1: Using ep0 maxpacket: 8 [ 1262.029738][T16597] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1262.069709][T16597] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1262.243600][T16597] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1262.296908][T16597] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1262.342852][T16597] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1262.360513][T17257] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1262.381822][T16597] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1262.412757][T17258] netlink: 'syz.1.2999': attribute type 21 has an invalid length. [ 1262.421667][T16597] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.689942][T17247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1262.763445][T17247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1262.888150][T17267] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2997'. [ 1264.491290][T16597] usb 7-1: usb_control_msg returned -71 [ 1264.510977][T16597] usbtmc 7-1:16.0: can't read capabilities [ 1264.584727][T16597] usb 7-1: USB disconnect, device number 18 [ 1264.883737][T16597] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1264.936411][T17286] overlayfs: missing 'lowerdir' [ 1265.026500][T16597] usb 7-1: Using ep0 maxpacket: 32 [ 1265.033679][T16597] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1265.467461][T17293] net_ratelimit: 5 callbacks suppressed [ 1265.467485][T17293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1265.488032][T17292] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1265.552950][T16597] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1265.588923][T16597] usb 7-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 1265.615462][T16597] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.650342][T16597] usb 7-1: config 0 descriptor?? [ 1265.671671][T16597] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1266.844788][T17301] netlink: 'syz.2.3011': attribute type 10 has an invalid length. [ 1266.852999][T17301] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3011'. [ 1266.881839][T17307] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3007'. [ 1267.522872][T17320] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1268.589025][ T47] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1268.813859][ T5883] usb 7-1: USB disconnect, device number 19 [ 1268.884278][ T47] usb 2-1: Using ep0 maxpacket: 32 [ 1268.933225][ T5877] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1269.149613][ T5877] usb 3-1: Using ep0 maxpacket: 8 [ 1269.241185][ T5877] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1269.294125][ T5877] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1269.332978][ T47] usb 2-1: config 243 has an invalid interface number: 186 but max is 0 [ 1269.341635][ T47] usb 2-1: config 243 has no interface number 0 [ 1269.348044][ T47] usb 2-1: config 243 interface 186 altsetting 7 bulk endpoint 0x9 has invalid maxpacket 1024 [ 1269.353847][ T5877] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1269.370000][ T47] usb 2-1: config 243 interface 186 altsetting 7 endpoint 0x8 has invalid maxpacket 5743, setting to 64 [ 1269.398679][ T47] usb 2-1: config 243 interface 186 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 1269.417646][ T47] usb 2-1: config 243 interface 186 has no altsetting 0 [ 1269.429484][ T5877] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1269.447510][ T47] usb 2-1: New USB device found, idVendor=eb1a, idProduct=8179, bcdDevice=ea.02 [ 1269.456998][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.465176][ T47] usb 2-1: Product: ࣺ琊퓯铵梌ݏ鸧덢濢䭆㏓ᦝ [ 1269.482645][ T47] usb 2-1: Manufacturer: 㐊 [ 1269.484760][ T5877] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1269.552533][ T5877] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1269.691872][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.773650][ T47] usb 2-1: SerialNumber: ࠝ [ 1269.791152][T17329] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1270.008603][T17334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1270.039089][T17334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1270.203083][T17344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3018'. [ 1270.226520][T17344] bridge_slave_1: left allmulticast mode [ 1270.232370][T17344] bridge_slave_1: left promiscuous mode [ 1270.238334][T17344] bridge0: port 2(bridge_slave_1) entered disabled state [ 1270.386330][T17344] bridge_slave_0: left allmulticast mode [ 1270.392629][T17344] bridge_slave_0: left promiscuous mode [ 1270.398518][T17344] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.665407][ T5877] usb 3-1: usb_control_msg returned -71 [ 1270.671355][ T5877] usbtmc 3-1:16.0: can't read capabilities [ 1270.710365][ T5877] usb 3-1: USB disconnect, device number 74 [ 1270.811486][T17350] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1271.297439][ T47] usb 2-1: USB disconnect, device number 53 [ 1273.165458][T17356] netlink: 'syz.2.3025': attribute type 10 has an invalid length. [ 1273.173382][T17356] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3025'. [ 1273.631360][T17374] Invalid source name [ 1273.640758][T17374] UBIFS error (pid: 17374): cannot open "ubifs", error -22 [ 1273.653089][T17376] netlink: 'syz.4.3027': attribute type 21 has an invalid length. [ 1273.876795][ T47] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1274.285302][ T47] usb 1-1: Using ep0 maxpacket: 32 [ 1274.754142][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1274.781032][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1274.800044][ T47] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1274.809146][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.840982][ T47] usb 1-1: config 0 descriptor?? [ 1274.847991][T17374] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1274.857520][ T47] hub 1-1:0.0: USB hub found [ 1274.949962][T17389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3032'. [ 1275.066401][ T47] hub 1-1:0.0: 1 port detected [ 1276.510456][ T10] usb 1-1: USB disconnect, device number 42 [ 1276.719607][T17395] syz.6.3034: vmalloc error: size 33554432, failed to allocated page array size 65536, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1276.839265][T17395] CPU: 0 UID: 0 PID: 17395 Comm: syz.6.3034 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 1276.839300][T17395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1276.839315][T17395] Call Trace: [ 1276.839324][T17395] [ 1276.839334][T17395] dump_stack_lvl+0x189/0x250 [ 1276.839373][T17395] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1276.839403][T17395] ? __pfx__printk+0x10/0x10 [ 1276.839436][T17395] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1276.839470][T17395] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1276.839506][T17395] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1276.839543][T17395] warn_alloc+0x214/0x310 [ 1276.839573][T17395] ? __pfx_warn_alloc+0x10/0x10 [ 1276.839605][T17395] ? __get_vm_area_node+0x28f/0x300 [ 1276.839633][T17395] __vmalloc_node_range_noprof+0x5f2/0x12c0 [ 1276.839688][T17395] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1276.839709][T17395] ? __kasan_kmalloc_large+0x1a/0xa0 [ 1276.839744][T17395] ? rcu_is_watching+0x15/0xb0 [ 1276.839776][T17395] ? translate_table+0x198/0x2000 [ 1276.839797][T17395] ? translate_table+0x198/0x2000 [ 1276.839816][T17395] __kvmalloc_node_noprof+0x3a0/0x5e0 [ 1276.839836][T17395] ? translate_table+0x198/0x2000 [ 1276.839856][T17395] ? xt_alloc_table_info+0x3b/0xa0 [ 1276.839892][T17395] translate_table+0x198/0x2000 [ 1276.839937][T17395] ? __pfx_translate_table+0x10/0x10 [ 1276.839962][T17395] ? __might_fault+0xb0/0x130 [ 1276.840022][T17395] ? _copy_from_user+0x94/0xb0 [ 1276.840058][T17395] do_ipt_set_ctl+0x967/0xcd0 [ 1276.840089][T17395] ? rcu_is_watching+0x15/0xb0 [ 1276.840119][T17395] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 1276.840163][T17395] ? __pfx___mutex_lock+0x10/0x10 [ 1276.840190][T17395] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1276.840237][T17395] nf_setsockopt+0x26c/0x290 [ 1276.840266][T17395] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1276.840292][T17395] do_sock_setsockopt+0x257/0x3e0 [ 1276.840323][T17395] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1276.840349][T17395] ? __fget_files+0x2a/0x420 [ 1276.840373][T17395] ? __fget_files+0x3a0/0x420 [ 1276.840391][T17395] ? __fget_files+0x2a/0x420 [ 1276.840419][T17395] __x64_sys_setsockopt+0x18b/0x220 [ 1276.840454][T17395] do_syscall_64+0xf6/0x210 [ 1276.840482][T17395] ? clear_bhb_loop+0x60/0xb0 [ 1276.840508][T17395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1276.840528][T17395] RIP: 0033:0x7f06b5b8e969 [ 1276.840547][T17395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1276.840566][T17395] RSP: 002b:00007f06b6a98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1276.840589][T17395] RAX: ffffffffffffffda RBX: 00007f06b5db5fa0 RCX: 00007f06b5b8e969 [ 1276.840605][T17395] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000004 [ 1276.840620][T17395] RBP: 00007f06b5c10ab1 R08: 0000000000000268 R09: 0000000000000000 [ 1276.840633][T17395] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1276.840647][T17395] R13: 0000000000000000 R14: 00007f06b5db5fa0 R15: 00007fffe374d518 [ 1276.840679][T17395] [ 1276.840701][T17395] Mem-Info: [ 1277.152790][T17395] active_anon:3300 inactive_anon:10707 isolated_anon:0 [ 1277.152790][T17395] active_file:20975 inactive_file:38340 isolated_file:0 [ 1277.152790][T17395] unevictable:768 dirty:76 writeback:0 [ 1277.152790][T17395] slab_reclaimable:5839 slab_unreclaimable:103632 [ 1277.152790][T17395] mapped:40977 shmem:10697 pagetables:1184 [ 1277.152790][T17395] sec_pagetables:0 bounce:0 [ 1277.152790][T17395] kernel_misc_reclaimable:0 [ 1277.152790][T17395] free:1297780 free_pcp:2582 free_cma:0 [ 1277.266811][ T5877] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1277.340877][T17395] Node 0 active_anon:5908kB inactive_anon:42820kB active_file:83556kB inactive_file:153360kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:163716kB dirty:304kB writeback:0kB shmem:34032kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11228kB pagetables:4488kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1277.395890][T17395] Node 1 active_anon:0kB inactive_anon:0kB active_file:344kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1277.433934][ T5877] usb 3-1: Using ep0 maxpacket: 8 [ 1277.441330][ T5877] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1277.457643][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.498918][T17395] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1277.591043][T17395] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 1277.596904][T17395] Node 0 DMA32 free:1263828kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:5604kB inactive_anon:50116kB active_file:83472kB inactive_file:153348kB unevictable:1536kB writepending:304kB present:3129332kB managed:2564564kB mlocked:0kB bounce:0kB free_pcp:10088kB local_pcp:716kB free_cma:0kB [ 1277.685915][ T5877] usb 3-1: config 0 descriptor?? [ 1277.706322][T17395] lowmem_reserve[]: 0 0 0 0 0 [ 1277.711138][T17395] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:4kB inactive_anon:4kB active_file:84kB inactive_file:12kB unevictable:0kB writepending:0kB present:1048580kB managed:112kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1278.297499][T17395] lowmem_reserve[]: 0 0 0 0 0 [ 1278.302313][T17395] Node 1 Normal free:3908684kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:344kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:4100kB local_pcp:4100kB free_cma:0kB [ 1278.516221][T17395] lowmem_reserve[]: 0 0 0 0 0 [ 1278.533731][T17395] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1278.553437][T17395] Node 0 DMA32: 847*4kB (UME) 1086*8kB (UME) 362*16kB (UME) 287*32kB (UME) 311*64kB (UME) 244*128kB (UME) 195*256kB (UME) 99*512kB (UME) 60*1024kB (UME) 5*2048kB (UME) 252*4096kB (M) = 1282668kB [ 1278.625787][T17416] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1278.731541][T17395] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1279.070418][T17395] Node 1 Normal: 13*4kB (UE) 9*8kB (UME) 39*16kB (UE) 183*32kB (UME) 78*64kB (UE) 42*128kB (UME) 18*256kB (UME) 6*512kB (UME) 5*1024kB (UME) 4*2048kB (UME) 945*4096kB (UM) = 3908684kB [ 1279.089787][ T5877] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1279.132735][T17419] netlink: 'syz.0.3040': attribute type 10 has an invalid length. [ 1279.141244][T17419] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3040'. [ 1279.362591][T17395] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1279.374817][ T5877] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1279.385187][T17395] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1279.385280][T17395] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1279.385299][T17395] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1279.385316][T17395] 65260 total pagecache pages [ 1279.385339][T17395] 0 pages in swap cache [ 1279.385347][T17395] Free swap = 124996kB [ 1279.385356][T17395] Total swap = 124996kB [ 1279.385367][T17395] 2097051 pages RAM [ 1279.385375][T17395] 0 pages HighMem/MovableOnly [ 1279.385384][T17395] 424251 pages reserved [ 1279.385393][T17395] 0 pages cma reserved [ 1279.980594][T17419] team0: Port device geneve0 added [ 1280.551535][T17424] syz.2.3042: attempt to access beyond end of device [ 1280.551535][T17424] loop5: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 1280.565208][ T5877] asix 3-1:0.0: probe with driver asix failed with error -71 [ 1280.572683][T17424] EXT4-fs (loop5): unable to read superblock [ 1280.642336][ T5877] usb 3-1: USB disconnect, device number 75 [ 1280.752827][T17430] fuse: Unknown parameter 'nd' [ 1283.390802][T17452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1285.413889][T17473] loop8: detected capacity change from 0 to 8 [ 1285.863957][T17473] Dev loop8: unable to read RDB block 8 [ 1285.876623][T17474] netlink: 'syz.6.3055': attribute type 10 has an invalid length. [ 1285.886060][T17474] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3055'. [ 1285.917399][T17473] loop8: unable to read partition table [ 1285.923443][T17473] loop8: partition table beyond EOD, truncated [ 1286.076483][T17478] netlink: 'syz.0.3056': attribute type 21 has an invalid length. [ 1286.185790][T17473] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1287.489753][T17488] syz.6.3059: attempt to access beyond end of device [ 1287.489753][T17488] loop13: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 1287.596043][T17488] EXT4-fs (loop13): unable to read superblock [ 1289.566084][ T5879] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1289.688895][T17516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3066'. [ 1289.745651][ T5879] usb 7-1: Using ep0 maxpacket: 32 [ 1289.753256][ T5879] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 1289.776264][ T5879] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1290.040614][ T5879] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1290.052125][T17518] netlink: 'syz.4.3067': attribute type 21 has an invalid length. [ 1290.418281][ T5879] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1290.618159][ T5879] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1290.681497][ T5879] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1290.729306][ T5879] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1290.829180][ T5879] usb 7-1: Product: syz [ 1290.937441][ T5879] usb 7-1: Manufacturer: syz [ 1291.033605][ T5879] usb 7-1: SerialNumber: syz [ 1291.243796][T17528] netlink: 'syz.4.3070': attribute type 10 has an invalid length. [ 1291.252547][T17528] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3070'. [ 1291.322877][ T5879] usb 7-1: config 0 descriptor?? [ 1291.360788][ T5879] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1291.584009][ T5879] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1291.645666][ T5879] usb 7-1: USB disconnect, device number 20 [ 1291.689910][ T5879] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 1291.777011][T17528] team0: Port device geneve0 added [ 1292.727866][T17542] syz.0.3075: attempt to access beyond end of device [ 1292.727866][T17542] loop1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 1292.751027][T17542] EXT4-fs (loop1): unable to read superblock [ 1292.860357][T16597] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1293.024599][T16597] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1293.034779][T16597] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1293.075931][T16597] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.115186][T16597] usb 7-1: config 0 descriptor?? [ 1293.256059][ T5130] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1293.278771][ T5130] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1293.470632][ T5130] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1293.532881][ T5130] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1293.540906][ T5130] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1293.933049][ T10] IPVS: starting estimator thread 0... [ 1293.975111][ T6784] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.003761][T16597] usb 7-1: Cannot set autoneg [ 1294.008748][T16597] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1294.040561][T17560] IPVS: using max 29 ests per chain, 69600 per kthread [ 1294.059363][T16597] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1294.074767][T17562] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1294.107310][T16597] usb 7-1: USB disconnect, device number 21 [ 1294.128805][T17548] lo speed is unknown, defaulting to 1000 [ 1294.239355][T17567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1294.733742][ T6784] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.623745][T15711] Bluetooth: hci2: command tx timeout [ 1295.880888][T17576] netlink: 'syz.4.3082': attribute type 10 has an invalid length. [ 1295.888818][T17576] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3082'. [ 1295.965497][ T6784] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.290605][T17580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3084'. [ 1296.848570][ T6784] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.876467][T17590] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3086'. [ 1296.999570][T17587] syz.6.3088: attempt to access beyond end of device [ 1296.999570][T17587] loop13: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 1297.195709][T17587] EXT4-fs (loop13): unable to read superblock [ 1297.219521][T16597] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1297.409785][T16597] usb 3-1: Using ep0 maxpacket: 8 [ 1297.418638][T16597] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1297.429250][T16597] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1297.451972][T16597] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1297.470993][T16597] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1297.490025][T16597] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1297.518698][T16597] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1297.528008][T16597] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.556836][T15711] Bluetooth: hci2: command tx timeout [ 1297.928491][T17586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1297.937242][T17586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1298.105996][T17603] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1298.126357][T17604] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3087'. [ 1298.381635][T16597] usb 3-1: usb_control_msg returned -71 [ 1298.404656][T16597] usbtmc 3-1:16.0: can't read capabilities [ 1298.447479][T16597] usb 3-1: USB disconnect, device number 76 [ 1298.627713][T17615] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1299.576457][T15711] Bluetooth: hci2: command tx timeout [ 1301.271413][ T5879] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1301.444989][ T5879] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 1301.458605][ T5879] usb 3-1: config 0 has no interface number 0 [ 1301.482300][ T5879] usb 3-1: New USB device found, idVendor=05c6, idProduct=9035, bcdDevice=26.4c [ 1301.500144][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.520450][ T5879] usb 3-1: Product: syz [ 1301.520898][T15711] Bluetooth: hci2: command tx timeout [ 1301.530838][ T5879] usb 3-1: Manufacturer: syz [ 1301.541159][ T5879] usb 3-1: SerialNumber: syz [ 1301.546806][ T6784] team0: Port device geneve0 removed [ 1301.556009][ T5879] usb 3-1: config 0 descriptor?? [ 1301.969807][ T6784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1301.996158][ T6784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1302.019300][ T6784] bond0 (unregistering): Released all slaves [ 1302.448155][ T6784] bond1 (unregistering): (slave bond2): Releasing backup interface [ 1302.466720][ T6784] bond2 (unregistering): left promiscuous mode [ 1302.482104][ T6784] bond1 (unregistering): Released all slaves [ 1302.892819][ T6784] bond2 (unregistering): Released all slaves [ 1303.316211][ T5879] usb 3-1: USB disconnect, device number 77 [ 1303.328578][T17548] chnl_net:caif_netlink_parms(): no params data found [ 1303.671561][T17650] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1304.568716][ T24] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1305.024683][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 1305.163412][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1305.206294][ T24] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1305.236708][ T24] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1305.279628][T17669] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1305.704303][ T24] usb 3-1: Product: syz [ 1305.716332][ T24] usb 3-1: Manufacturer: syz [ 1305.746421][ T24] usb 3-1: SerialNumber: syz [ 1305.765211][T17548] bridge0: port 1(bridge_slave_0) entered blocking state [ 1305.782687][ T24] usb 3-1: config 0 descriptor?? [ 1305.788329][T17671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3108'. [ 1305.805795][T17548] bridge0: port 1(bridge_slave_0) entered disabled state [ 1305.846904][T17548] bridge_slave_0: entered allmulticast mode [ 1305.870622][T17548] bridge_slave_0: entered promiscuous mode [ 1305.891910][ T6784] tipc: Disabling bearer [ 1305.927029][ T6784] tipc: Disabling bearer [ 1305.933234][ T6784] tipc: Left network mode [ 1305.935249][T17548] bridge0: port 2(bridge_slave_1) entered blocking state [ 1305.960265][T14572] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1305.987486][T17548] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.994809][T17548] bridge_slave_1: entered allmulticast mode [ 1306.023325][T17548] bridge_slave_1: entered promiscuous mode [ 1306.139414][T14572] usb 5-1: Using ep0 maxpacket: 8 [ 1306.396786][T14572] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1306.405056][T14572] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1307.377709][T14572] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1307.415808][T14572] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1307.711640][ T5879] usb 3-1: USB disconnect, device number 78 [ 1307.735397][ T5907] Process accounting resumed [ 1307.911104][T14572] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1307.939741][T14572] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1307.948839][T14572] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.213495][T14572] usb 5-1: usb_control_msg returned -71 [ 1308.266981][T14572] usbtmc 5-1:16.0: can't read capabilities [ 1308.268504][T17548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1308.368136][ T5983] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1308.536316][ T5983] usb 3-1: Using ep0 maxpacket: 8 [ 1308.562901][T14572] usb 5-1: USB disconnect, device number 20 [ 1308.583021][ T5983] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1308.625095][ T5983] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1308.674931][ T5983] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1308.758317][ T5983] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1308.892840][ T5983] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1308.955548][ T5983] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1309.101964][ T5983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.182839][T17548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1309.281120][T17693] netlink: 'syz.4.3114': attribute type 21 has an invalid length. [ 1309.401466][T17698] syz.0.3116: attempt to access beyond end of device [ 1309.401466][T17698] loop1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 1309.419648][T17683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1309.436110][T17683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1309.489739][T17698] EXT4-fs (loop1): unable to read superblock [ 1309.602731][T17705] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3111'. [ 1309.716131][T17708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3118'. [ 1310.046745][T17704] bond0: entered promiscuous mode [ 1310.054151][T17704] bond_slave_0: entered promiscuous mode [ 1310.068634][T17704] bond_slave_1: entered promiscuous mode [ 1310.170491][ T5983] usb 3-1: usb_control_msg returned -71 [ 1310.176285][T17704] bond0: left promiscuous mode [ 1310.176903][ T5983] usbtmc 3-1:16.0: can't read capabilities [ 1310.208023][ T5983] usb 3-1: USB disconnect, device number 79 [ 1310.226148][T17704] bond_slave_0: left promiscuous mode [ 1310.232653][T17704] bond_slave_1: left promiscuous mode [ 1310.853873][T17548] team0: Port device team_slave_0 added [ 1310.917617][T17548] team0: Port device team_slave_1 added [ 1311.256360][ T6784] hsr_slave_0: left promiscuous mode [ 1311.466877][ T5879] Process accounting resumed [ 1311.959832][ T5883] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1311.968990][ T6784] hsr_slave_1: left promiscuous mode [ 1311.975348][ T6784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1312.206803][ T6784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1312.229481][ T6784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1312.245207][ T6784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1312.340408][ T5883] usb 7-1: Using ep0 maxpacket: 8 [ 1312.359429][ T5883] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1312.503697][ T5883] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1312.793239][T17739] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1313.007382][ T5883] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1313.045419][ T5883] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1313.154510][ T6784] veth1_macvtap: left promiscuous mode [ 1313.238486][ T6784] veth0_macvtap: left promiscuous mode [ 1313.328908][ T6784] veth1_vlan: left promiscuous mode [ 1313.388157][ T6784] veth0_vlan: left promiscuous mode [ 1313.481948][ T5883] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1313.521699][ T5883] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1313.530808][ T5883] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.491853][ T5883] usb 7-1: usb_control_msg returned -71 [ 1314.504027][ T5883] usbtmc 7-1:16.0: can't read capabilities [ 1314.545093][ T5883] usb 7-1: USB disconnect, device number 22 [ 1314.714670][T17757] syz.0.3131: attempt to access beyond end of device [ 1314.714670][T17757] loop1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 1314.728799][T17757] EXT4-fs (loop1): unable to read superblock [ 1314.965268][T17761] overlay: Unknown parameter '\6' [ 1316.046799][T17771] binder: BINDER_SET_CONTEXT_MGR already set [ 1316.182705][ T5907] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1316.221285][T17771] binder: 17769:17771 ioctl 4018620d 200000000240 returned -16 [ 1316.334344][T17773] binder: BINDER_SET_CONTEXT_MGR already set [ 1316.353957][T17773] binder: 17769:17773 ioctl 4018620d 2000000002c0 returned -16 [ 1316.455455][ T5907] usb 1-1: Using ep0 maxpacket: 32 [ 1316.503486][ T5907] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1316.511635][ T5907] usb 1-1: config 0 has no interface number 0 [ 1316.580274][ T5907] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1316.600490][ T6784] pimreg (unregistering): left allmulticast mode [ 1316.609241][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.751692][T17780] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1316.822658][ T5907] usb 1-1: Product: syz [ 1316.826918][ T5907] usb 1-1: Manufacturer: syz [ 1316.846205][ T5907] usb 1-1: SerialNumber: syz [ 1316.855902][ T5907] usb 1-1: config 0 descriptor?? [ 1316.867464][ T5907] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1317.053051][ T10] Process accounting resumed [ 1317.495177][ T5907] usb 1-1: qt2_attach - failed to power on unit: -71 [ 1317.502424][ T5907] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 1317.617735][ T5907] usb 1-1: USB disconnect, device number 43 [ 1319.036833][ T5883] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1319.361011][ T5883] usb 7-1: Using ep0 maxpacket: 8 [ 1319.375984][ T5883] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1319.386065][ T5883] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1319.416275][ T5883] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1319.933250][ T5883] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1319.961110][ T5883] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1319.995362][ T5883] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1320.014948][ T5883] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.252950][T17803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1320.304922][T17803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1320.461132][T17813] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3139'. [ 1321.290528][ T6784] team0 (unregistering): Port device team_slave_1 removed [ 1321.307103][T17818] syz.0.3142: attempt to access beyond end of device [ 1321.307103][T17818] loop1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 1321.335660][T17818] EXT4-fs (loop1): unable to read superblock [ 1321.851413][ T6784] team0 (unregistering): Port device team_slave_0 removed [ 1324.078786][T17548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1324.124289][T17548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1324.233000][T17548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1324.272970][T17548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1324.327048][T17548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1324.399456][T17548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1324.511370][T17830] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1325.143895][ T5883] usb 7-1: usb_control_msg returned -110 [ 1325.149641][ T5883] usbtmc 7-1:16.0: can't read capabilities [ 1325.252572][ T5883] usb 7-1: USB disconnect, device number 23 [ 1325.312349][ T5879] lo speed is unknown, defaulting to 1000 [ 1325.379886][ T5879] infiniband syz2: ib_query_port failed (-19) [ 1326.400594][ T10] Process accounting resumed [ 1326.439391][T17832] netlink: 'syz.2.3146': attribute type 10 has an invalid length. [ 1326.447684][T17832] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3146'. [ 1326.605095][T17846] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1326.646978][T17548] hsr_slave_0: entered promiscuous mode [ 1326.683176][T17548] hsr_slave_1: entered promiscuous mode [ 1326.751205][T17548] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1326.773836][T17548] Cannot create hsr debugfs directory [ 1327.539641][ T6784] IPVS: stop unused estimator thread 0... [ 1327.562542][ T5879] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1327.764222][ T5879] usb 5-1: Using ep0 maxpacket: 8 [ 1327.804923][ T5879] usb 5-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=a8.17 [ 1327.842973][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.913045][ T5879] usb 5-1: Product: syz [ 1327.943600][ T5879] usb 5-1: Manufacturer: syz [ 1327.948273][ T5879] usb 5-1: SerialNumber: syz [ 1328.008472][ T5879] usb 5-1: config 0 descriptor?? [ 1328.053146][ T5879] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 1328.353410][ T5883] usb 5-1: USB disconnect, device number 21 [ 1328.644481][T17873] overlayfs: failed to resolve './file1/file0/file0': -2 [ 1330.732454][T17884] block device autoloading is deprecated and will be removed. [ 1330.973368][T17886] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3157'. [ 1331.144169][T17888] autofs: Bad value for 'fd' [ 1331.283490][T17890] syz.6.3157: attempt to access beyond end of device [ 1331.283490][T17890] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1331.296951][T17890] efs: cannot read volume header [ 1331.417197][T17548] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1331.721023][T17548] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1331.759987][T17548] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1332.015089][T17548] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1332.920603][ T5874] Process accounting resumed [ 1333.516439][T17548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1333.595076][T17548] 8021q: adding VLAN 0 to HW filter on device team0 [ 1333.660147][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1333.667371][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1333.744616][ T5883] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 1333.778020][ T3009] bridge0: port 2(bridge_slave_1) entered blocking state [ 1333.785257][ T3009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1333.909329][ T5883] usb 5-1: config 4 has an invalid interface number: 200 but max is 0 [ 1333.948586][ T5883] usb 5-1: config 4 has an invalid descriptor of length 48, skipping remainder of the config [ 1333.984429][T17911] netlink: 512 bytes leftover after parsing attributes in process `syz.2.3164'. [ 1334.014670][ T5874] IPVS: starting estimator thread 0... [ 1334.424384][ T5883] usb 5-1: config 4 has no interface number 0 [ 1334.457316][ T5883] usb 5-1: config 4 interface 200 altsetting 111 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 1334.465194][T17912] IPVS: using max 32 ests per chain, 76800 per kthread [ 1334.525803][ T5883] usb 5-1: config 4 interface 200 has no altsetting 0 [ 1334.556761][ T5883] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e [ 1334.590480][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.609624][ T5883] usb 5-1: Product: syz [ 1334.619553][ T5883] usb 5-1: Manufacturer: syz [ 1334.642046][ T5883] usb 5-1: SerialNumber: syz [ 1335.798830][T17928] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1336.343009][ T5883] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state. [ 1336.435179][ T5883] usb 5-1: setting power ON [ 1336.443802][T17548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1336.468913][ T5883] dvb-usb: bulk message failed: -22 (2/0) [ 1336.655062][ T5883] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1336.727171][ T5883] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware error while loading driver (-19) [ 1336.770146][ T5883] dvb_usb_cxusb 5-1:4.200: probe with driver dvb_usb_cxusb failed with error -22 [ 1336.816748][ T5883] usb 5-1: USB disconnect, device number 22 [ 1336.884779][T17548] veth0_vlan: entered promiscuous mode [ 1336.923214][T17548] veth1_vlan: entered promiscuous mode [ 1337.043538][T17945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3175'. [ 1337.066675][T17945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3175'. [ 1337.332083][T17548] veth0_macvtap: entered promiscuous mode [ 1337.889478][T17548] veth1_macvtap: entered promiscuous mode [ 1338.098766][T17952] FAULT_INJECTION: forcing a failure. [ 1338.098766][T17952] name failslab, interval 1, probability 0, space 0, times 0 [ 1338.261354][T17952] CPU: 1 UID: 0 PID: 17952 Comm: syz.6.3176 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 1338.261386][T17952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1338.261399][T17952] Call Trace: [ 1338.261407][T17952] [ 1338.261418][T17952] dump_stack_lvl+0x189/0x250 [ 1338.261455][T17952] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1338.261482][T17952] ? __pfx__printk+0x10/0x10 [ 1338.261516][T17952] ? __pfx___might_resched+0x10/0x10 [ 1338.261549][T17952] ? fs_reclaim_acquire+0x7d/0x100 [ 1338.261577][T17952] should_fail_ex+0x414/0x560 [ 1338.261605][T17952] should_failslab+0xa8/0x100 [ 1338.261626][T17952] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1338.261657][T17952] ? security_file_alloc+0x34/0x330 [ 1338.261685][T17952] security_file_alloc+0x34/0x330 [ 1338.261712][T17952] init_file+0x93/0x2f0 [ 1338.261738][T17952] alloc_empty_file+0x6e/0x1d0 [ 1338.261762][T17952] path_openat+0x107/0x3830 [ 1338.261789][T17952] ? rcu_is_watching+0x15/0xb0 [ 1338.261820][T17952] ? trace_sched_exit_tp+0x38/0x120 [ 1338.261846][T17952] ? __schedule+0x16ad/0x4c70 [ 1338.261872][T17952] ? stack_trace_save+0x9c/0xe0 [ 1338.261907][T17952] ? kasan_save_track+0x4f/0x80 [ 1338.261939][T17952] ? __pfx_path_openat+0x10/0x10 [ 1338.261961][T17952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1338.262004][T17952] do_filp_open+0x1fa/0x410 [ 1338.262033][T17952] ? __pfx_do_filp_open+0x10/0x10 [ 1338.262089][T17952] ? _raw_spin_unlock+0x28/0x50 [ 1338.262111][T17952] ? alloc_fd+0x64c/0x6c0 [ 1338.262154][T17952] do_sys_openat2+0x121/0x1c0 [ 1338.262182][T17952] ? __pfx_do_sys_openat2+0x10/0x10 [ 1338.262207][T17952] ? ksys_write+0x1f0/0x250 [ 1338.262233][T17952] ? rcu_is_watching+0x15/0xb0 [ 1338.262270][T17952] __x64_sys_open+0x11e/0x150 [ 1338.262299][T17952] do_syscall_64+0xf6/0x210 [ 1338.262327][T17952] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1338.262347][T17952] ? clear_bhb_loop+0x60/0xb0 [ 1338.262372][T17952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1338.262393][T17952] RIP: 0033:0x7f06b5b8e969 [ 1338.262412][T17952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1338.262430][T17952] RSP: 002b:00007f06b6a77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1338.262452][T17952] RAX: ffffffffffffffda RBX: 00007f06b5db6080 RCX: 00007f06b5b8e969 [ 1338.262467][T17952] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 1338.262480][T17952] RBP: 00007f06b6a77090 R08: 0000000000000000 R09: 0000000000000000 [ 1338.262493][T17952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1338.262505][T17952] R13: 0000000000000000 R14: 00007f06b5db6080 R15: 00007fffe374d518 [ 1338.262536][T17952] [ 1340.933769][T17548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1340.999701][T17548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1342.331158][T17548] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.410931][T17548] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.436136][T17548] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.460306][T17548] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.608372][ T3515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1343.613202][ T5879] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1343.637715][ T3515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1343.777410][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1343.803345][ T5879] usb 3-1: Using ep0 maxpacket: 8 [ 1343.808934][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1343.837441][ T5879] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1343.867300][ T5879] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1343.904686][ T5879] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1343.945960][ T5879] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1343.975113][ T5877] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1343.983578][ T5879] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1344.017717][ T5879] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1344.061752][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.151189][ T5877] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1344.170319][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.203417][ T5877] usb 1-1: Product: syz [ 1344.207727][ T5877] usb 1-1: Manufacturer: syz [ 1344.251008][ T5877] usb 1-1: SerialNumber: syz [ 1344.271262][ T5877] usb 1-1: config 0 descriptor?? [ 1344.310658][T17984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1344.339886][ T5877] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1344.375354][T17984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1344.518164][T18002] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3185'. [ 1345.041868][ T5877] gspca_sunplus: reg_r err -110 [ 1345.046970][ T5877] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 1345.864199][ T5879] usb 3-1: usb_control_msg returned -71 [ 1345.869872][ T5879] usbtmc 3-1:16.0: can't read capabilities [ 1345.915617][ T5879] usb 3-1: USB disconnect, device number 80 [ 1346.205267][T18013] FAULT_INJECTION: forcing a failure. [ 1346.205267][T18013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1346.257694][T18013] CPU: 0 UID: 0 PID: 18013 Comm: syz.1.3193 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 1346.257726][T18013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1346.257738][T18013] Call Trace: [ 1346.257746][T18013] [ 1346.257754][T18013] dump_stack_lvl+0x189/0x250 [ 1346.257785][T18013] ? __lock_acquire+0xaac/0xd20 [ 1346.257815][T18013] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1346.257846][T18013] ? __pfx__printk+0x10/0x10 [ 1346.257875][T18013] ? __might_fault+0xb0/0x130 [ 1346.257936][T18013] should_fail_ex+0x414/0x560 [ 1346.257962][T18013] _copy_from_iter+0x1db/0x15a0 [ 1346.257995][T18013] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 1346.258023][T18013] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1346.258055][T18013] ? __pfx__copy_from_iter+0x10/0x10 [ 1346.258081][T18013] ? __build_skb_around+0x257/0x3e0 [ 1346.258112][T18013] ? netlink_sendmsg+0x642/0xb30 [ 1346.258135][T18013] ? skb_put+0x11b/0x210 [ 1346.258165][T18013] netlink_sendmsg+0x6b2/0xb30 [ 1346.258188][T18013] ? is_bpf_text_address+0x26/0x2b0 [ 1346.258226][T18013] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1346.258258][T18013] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1346.258285][T18013] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1346.258309][T18013] __sock_sendmsg+0x219/0x270 [ 1346.258334][T18013] ____sys_sendmsg+0x505/0x830 [ 1346.258368][T18013] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1346.258406][T18013] ? import_iovec+0x74/0xa0 [ 1346.258437][T18013] ___sys_sendmsg+0x21f/0x2a0 [ 1346.258475][T18013] ? __pfx____sys_sendmsg+0x10/0x10 [ 1346.258540][T18013] ? __fget_files+0x2a/0x420 [ 1346.258559][T18013] ? __fget_files+0x3a0/0x420 [ 1346.258589][T18013] __x64_sys_sendmsg+0x19b/0x260 [ 1346.258620][T18013] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1346.258667][T18013] ? do_syscall_64+0xba/0x210 [ 1346.258698][T18013] do_syscall_64+0xf6/0x210 [ 1346.258724][T18013] ? clear_bhb_loop+0x60/0xb0 [ 1346.258750][T18013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.258769][T18013] RIP: 0033:0x7f4813d8e969 [ 1346.258787][T18013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1346.258804][T18013] RSP: 002b:00007f4814bda038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1346.258826][T18013] RAX: ffffffffffffffda RBX: 00007f4813fb5fa0 RCX: 00007f4813d8e969 [ 1346.258841][T18013] RDX: 0000000000008010 RSI: 0000200000000000 RDI: 0000000000000003 [ 1346.258854][T18013] RBP: 00007f4814bda090 R08: 0000000000000000 R09: 0000000000000000 [ 1346.258866][T18013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1346.258878][T18013] R13: 0000000000000000 R14: 00007f4813fb5fa0 R15: 00007ffedd875088 [ 1346.258909][T18013] [ 1346.649091][ T3025] ================================================================== [ 1346.657318][ T3025] BUG: KASAN: slab-out-of-bounds in nsim_dev_trap_report_work+0xd2/0xb80 [ 1346.665771][ T3025] Read of size 8 at addr ffff8880581185e0 by task kworker/u8:8/3025 [ 1346.673773][ T3025] [ 1346.676136][ T3025] CPU: 1 UID: 0 PID: 3025 Comm: kworker/u8:8 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 1346.676162][ T3025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1346.676177][ T3025] Workqueue: events_unbound nsim_dev_trap_report_work [ 1346.676203][ T3025] Call Trace: [ 1346.676211][ T3025] [ 1346.676220][ T3025] dump_stack_lvl+0x189/0x250 [ 1346.676249][ T3025] ? __kasan_check_byte+0x12/0x40 [ 1346.676281][ T3025] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1346.676306][ T3025] ? lock_release+0x4b/0x3e0 [ 1346.676331][ T3025] ? lock_release+0x4b/0x3e0 [ 1346.676360][ T3025] ? __virt_addr_valid+0x469/0x540 [ 1346.676387][ T3025] print_report+0xb4/0x290 [ 1346.676409][ T3025] ? nsim_dev_trap_report_work+0xd2/0xb80 [ 1346.676430][ T3025] kasan_report+0x118/0x150 [ 1346.676462][ T3025] ? nsim_dev_trap_report_work+0xd2/0xb80 [ 1346.676488][ T3025] nsim_dev_trap_report_work+0xd2/0xb80 [ 1346.676520][ T3025] ? process_scheduled_works+0x9ec/0x17a0 [ 1346.676550][ T3025] process_scheduled_works+0xade/0x17a0 [ 1346.676595][ T3025] ? __pfx_process_scheduled_works+0x10/0x10 [ 1346.676633][ T3025] worker_thread+0x8a0/0xda0 [ 1346.676652][ T3025] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1346.676679][ T3025] ? __kthread_parkme+0x7b/0x200 [ 1346.676709][ T3025] kthread+0x711/0x8a0 [ 1346.676733][ T3025] ? __pfx_worker_thread+0x10/0x10 [ 1346.676750][ T3025] ? __pfx_kthread+0x10/0x10 [ 1346.676773][ T3025] ? __pfx_kthread+0x10/0x10 [ 1346.676793][ T3025] ? _raw_spin_unlock_irq+0x23/0x50 [ 1346.676814][ T3025] ? lockdep_hardirqs_on+0x9c/0x150 [ 1346.676837][ T3025] ? __pfx_kthread+0x10/0x10 [ 1346.676858][ T3025] ret_from_fork+0x4b/0x80 [ 1346.676876][ T3025] ? __pfx_kthread+0x10/0x10 [ 1346.676897][ T3025] ret_from_fork_asm+0x1a/0x30 [ 1346.676936][ T3025] [ 1346.676944][ T3025] [ 1346.853276][ T3025] Allocated by task 63: [ 1346.857462][ T3025] kasan_save_track+0x3e/0x80 [ 1346.862176][ T3025] __kasan_kmalloc+0x93/0xb0 [ 1346.866797][ T3025] __kmalloc_noprof+0x27a/0x4f0 [ 1346.871681][ T3025] fib6_info_alloc+0x30/0xf0 [ 1346.876294][ T3025] ip6_route_info_create+0x4b3/0x1360 [ 1346.881688][ T3025] ip6_route_add+0x28/0x160 [ 1346.886208][ T3025] addrconf_add_dev+0x24f/0x340 [ 1346.891080][ T3025] addrconf_init_auto_addrs+0x5cf/0xb50 [ 1346.896658][ T3025] addrconf_notify+0xacc/0x1010 [ 1346.901534][ T3025] notifier_call_chain+0x1b3/0x3e0 [ 1346.906666][ T3025] netif_state_change+0x284/0x3a0 [ 1346.911729][ T3025] linkwatch_do_dev+0x117/0x170 [ 1346.916596][ T3025] __linkwatch_run_queue+0x56d/0x7e0 [ 1346.921892][ T3025] linkwatch_event+0x4c/0x60 [ 1346.926588][ T3025] process_scheduled_works+0xade/0x17a0 [ 1346.932151][ T3025] worker_thread+0x8a0/0xda0 [ 1346.936748][ T3025] kthread+0x711/0x8a0 [ 1346.940831][ T3025] ret_from_fork+0x4b/0x80 [ 1346.945256][ T3025] ret_from_fork_asm+0x1a/0x30 [ 1346.950048][ T3025] [ 1346.952382][ T3025] The buggy address belongs to the object at ffff888058118400 [ 1346.952382][ T3025] which belongs to the cache kmalloc-512 of size 512 [ 1346.966452][ T3025] The buggy address is located 192 bytes to the right of [ 1346.966452][ T3025] allocated 288-byte region [ffff888058118400, ffff888058118520) [ 1346.981142][ T3025] [ 1346.983498][ T3025] The buggy address belongs to the physical page: [ 1346.989913][ T3025] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805811bc00 pfn:0x58118 [ 1346.999982][ T3025] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1347.008493][ T3025] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 1347.017007][ T3025] page_type: f5(slab) [ 1347.020999][ T3025] raw: 00fff00000000240 ffff88801a041c80 ffffea0000cd7610 ffffea0000a5d710 [ 1347.029589][ T3025] raw: ffff88805811bc00 0000000000100009 00000000f5000000 0000000000000000 [ 1347.038190][ T3025] head: 00fff00000000240 ffff88801a041c80 ffffea0000cd7610 ffffea0000a5d710 [ 1347.046871][ T3025] head: ffff88805811bc00 0000000000100009 00000000f5000000 0000000000000000 [ 1347.055550][ T3025] head: 00fff00000000002 ffffea0001604601 00000000ffffffff 00000000ffffffff [ 1347.064230][ T3025] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 1347.072903][ T3025] page dumped because: kasan: bad access detected [ 1347.079329][ T3025] page_owner tracks the page as allocated [ 1347.085045][ T3025] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5204, tgid 5204 (udevadm), ts 38406183192, free_ts 38178327026 [ 1347.105982][ T3025] post_alloc_hook+0x1d8/0x230 [ 1347.110760][ T3025] get_page_from_freelist+0x21c7/0x22a0 [ 1347.116314][ T3025] __alloc_frozen_pages_noprof+0x181/0x370 [ 1347.122124][ T3025] alloc_pages_mpol+0x232/0x4a0 [ 1347.126986][ T3025] allocate_slab+0x8a/0x3b0 [ 1347.131502][ T3025] ___slab_alloc+0xbfc/0x1480 [ 1347.136191][ T3025] __kmalloc_cache_noprof+0x296/0x3d0 [ 1347.141578][ T3025] kernfs_fop_open+0x397/0xca0 [ 1347.146354][ T3025] do_dentry_open+0xdf3/0x1970 [ 1347.151126][ T3025] vfs_open+0x3b/0x340 [ 1347.155200][ T3025] path_openat+0x2ee5/0x3830 [ 1347.159800][ T3025] do_filp_open+0x1fa/0x410 [ 1347.164310][ T3025] do_sys_openat2+0x121/0x1c0 [ 1347.168996][ T3025] __x64_sys_openat+0x138/0x170 [ 1347.173854][ T3025] do_syscall_64+0xf6/0x210 [ 1347.178370][ T3025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1347.184272][ T3025] page last free pid 5196 tgid 5196 stack trace: [ 1347.190598][ T3025] __free_frozen_pages+0xb05/0xcd0 [ 1347.195752][ T3025] __put_partials+0x161/0x1c0 [ 1347.200523][ T3025] put_cpu_partial+0x17c/0x250 [ 1347.205294][ T3025] __slab_free+0x2f7/0x400 [ 1347.209723][ T3025] qlist_free_all+0x9a/0x140 [ 1347.214342][ T3025] kasan_quarantine_reduce+0x148/0x160 [ 1347.219813][ T3025] __kasan_slab_alloc+0x22/0x80 [ 1347.224680][ T3025] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1347.230156][ T3025] getname_flags+0xb8/0x540 [ 1347.234672][ T3025] do_sys_openat2+0xbc/0x1c0 [ 1347.239273][ T3025] __x64_sys_openat+0x138/0x170 [ 1347.244222][ T3025] do_syscall_64+0xf6/0x210 [ 1347.248738][ T3025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1347.254643][ T3025] [ 1347.256976][ T3025] Memory state around the buggy address: [ 1347.262616][ T3025] ffff888058118480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1347.270685][ T3025] ffff888058118500: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 1347.278843][ T3025] >ffff888058118580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1347.286906][ T3025] ^ [ 1347.294101][ T3025] ffff888058118600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1347.302173][ T3025] ffff888058118680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1347.310257][ T3025] ================================================================== [ 1347.322864][ C1] Oops: general protection fault, probably for non-canonical address 0xe78ffc7d18292551: 0000 [#1] SMP KASAN PTI [ 1347.334800][ C1] KASAN: maybe wild-memory-access in range [0x3c8003e8c1492a88-0x3c8003e8c1492a8f] [ 1347.344082][ C1] CPU: 1 UID: 0 PID: 17990 Comm: syz.0.3187 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 1347.356141][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1347.366194][ C1] RIP: 0010:__rt6_find_exception_rcu+0x19b/0x4c0 [ 1347.372533][ C1] Code: 80 3c 06 00 74 08 4c 89 e7 e8 b1 61 17 f8 c1 e3 04 49 03 1c 24 49 89 1c 24 48 89 d8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df <42> 80 3c 20 00 74 08 48 89 df e8 86 61 17 f8 4c 8b 33 4d 85 f6 0f [ 1347.392151][ C1] RSP: 0018:ffffc90000a08320 EFLAGS: 00010202 [ 1347.398224][ C1] RAX: 0790007d18292551 RBX: 3c8003e8c1492a88 RCX: ffff888029b38000 [ 1347.406197][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1347.414171][ C1] RBP: ffffc90000a08430 R08: 00000000000080fe R09: 3e00000000000000 [ 1347.422140][ C1] R10: 00000000000080fe R11: 3e00000000000000 R12: dffffc0000000000 [ 1347.430112][ C1] R13: ffffc90000a08390 R14: 1ffff9200014108b R15: ffffc90000a08788 [ 1347.438086][ C1] FS: 0000000000000000(0000) GS:ffff8881261f6000(0000) knlGS:0000000000000000 [ 1347.447016][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1347.453598][ C1] CR2: 00007f22475e7c8c CR3: 0000000057d92000 CR4: 00000000003526f0 [ 1347.461576][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1347.469548][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1347.477523][ C1] Call Trace: [ 1347.480805][ C1] [ 1347.483653][ C1] ? ip6_input_finish+0xde/0x190 [ 1347.488604][ C1] ? __pfx___rt6_find_exception_rcu+0x10/0x10 [ 1347.494683][ C1] rt6_find_cached_rt+0x11e/0x270 [ 1347.499712][ C1] ? ip6_pol_route+0x162/0x1180 [ 1347.504561][ C1] ip6_pol_route+0x28d/0x1180 [ 1347.509242][ C1] ? __pfx_ip6_pol_route+0x10/0x10 [ 1347.514352][ C1] ? nsim_dev_hwstats_traffic_work+0x20/0x190 [ 1347.520438][ C1] fib6_rule_lookup+0x52f/0x6f0 [ 1347.525296][ C1] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 1347.530932][ C1] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 1347.536308][ C1] ? ip6t_do_table+0x1db/0x1530 [ 1347.541162][ C1] ip6_route_input+0x6ce/0xa50 [ 1347.545940][ C1] ? __pfx_ip6_route_input+0x10/0x10 [ 1347.551229][ C1] ? nf_nat_ipv6_in+0x1fc/0x2b0 [ 1347.556092][ C1] ? ip6_rcv_finish_core+0x222/0x420 [ 1347.561384][ C1] ip6_rcv_finish+0x141/0x2d0 [ 1347.566068][ C1] NF_HOOK+0x30c/0x3a0 [ 1347.570146][ C1] ? skb_orphan+0x4c/0xd0 [ 1347.574481][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1347.579678][ C1] ? NF_HOOK+0x9a/0x3a0 [ 1347.583837][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1347.588436][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1347.593642][ C1] __netif_receive_skb+0xd3/0x380 [ 1347.598673][ C1] ? process_backlog+0x2d5/0x14f0 [ 1347.603697][ C1] process_backlog+0x60e/0x14f0 [ 1347.608553][ C1] ? __pfx_process_backlog+0x10/0x10 [ 1347.613841][ C1] ? xdp_do_check_flushed+0x21b/0x240 [ 1347.619219][ C1] __napi_poll+0xc4/0x480 [ 1347.623546][ C1] ? net_rx_action+0x447/0xdf0 [ 1347.628314][ C1] net_rx_action+0x6ea/0xdf0 [ 1347.632912][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1347.638029][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 1347.643234][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1347.648524][ C1] ? __local_bh_disable_ip+0xf1/0x190 [ 1347.653909][ C1] handle_softirqs+0x283/0x870 [ 1347.658681][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 1347.663455][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1347.668748][ C1] __irq_exit_rcu+0xca/0x1f0 [ 1347.673345][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1347.678573][ C1] irq_exit_rcu+0x9/0x30 [ 1347.682931][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1347.688573][ C1] [ 1347.691503][ C1] [ 1347.694433][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1347.700412][ C1] RIP: 0010:lock_acquire+0xd5/0x360 [ 1347.705620][ C1] Code: 8b 04 25 08 a0 72 92 83 b8 ec 0a 00 00 00 0f 85 d5 00 00 00 48 c7 44 24 30 00 00 00 00 9c 8f 44 24 30 4c 89 74 24 10 4d 89 fe <4c> 8b 7c 24 30 fa 48 c7 c7 36 df 74 8d e8 c9 63 b1 09 65 ff 05 12 [ 1347.725222][ C1] RSP: 0018:ffffc90004d5f3b8 EFLAGS: 00000246 [ 1347.731291][ C1] RAX: ffff888029b38000 RBX: 0000000000000000 RCX: b2c5cba785cce100 [ 1347.739265][ C1] RDX: 0000000000000000 RSI: ffffffff8171ca22 RDI: 1ffffffff1be7bdc [ 1347.747233][ C1] RBP: ffffffff8171ca05 R08: 0000000000000000 R09: 0000000000000000 [ 1347.755202][ C1] R10: ffffc90004d5f578 R11: ffffffff81acdcf0 R12: 0000000000000002 [ 1347.763176][ C1] R13: ffffffff8df3dee0 R14: 0000000000000000 R15: 0000000000000000 [ 1347.771166][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1347.776283][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1347.782463][ C1] ? unwind_next_frame+0xc2/0x2390 [ 1347.787671][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1347.792795][ C1] ? kasan_record_aux_stack+0xbc/0xd0 [ 1347.798172][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1347.803283][ C1] unwind_next_frame+0xc2/0x2390 [ 1347.808308][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1347.813420][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1347.818532][ C1] ? kasan_save_stack+0x3e/0x60 [ 1347.823391][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1347.829548][ C1] arch_stack_walk+0x11c/0x150 [ 1347.834317][ C1] ? kasan_record_aux_stack+0xbc/0xd0 [ 1347.839694][ C1] stack_trace_save+0x9c/0xe0 [ 1347.844371][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1347.849742][ C1] ? stack_depot_save_flags+0x40/0x910 [ 1347.855294][ C1] kasan_save_stack+0x3e/0x60 [ 1347.859976][ C1] ? kasan_save_stack+0x3e/0x60 [ 1347.864830][ C1] ? kasan_record_aux_stack+0xbc/0xd0 [ 1347.870259][ C1] ? __phys_addr+0xba/0x170 [ 1347.874864][ C1] kasan_record_aux_stack+0xbc/0xd0 [ 1347.880065][ C1] task_work_add+0xb1/0x420 [ 1347.884572][ C1] ? __pfx_task_work_add+0x10/0x10 [ 1347.889777][ C1] __fput_deferred+0xef/0x1f0 [ 1347.894455][ C1] fput_close+0x119/0x200 [ 1347.898785][ C1] ? __pfx___might_resched+0x10/0x10 [ 1347.904078][ C1] ? __pfx_fput_close+0x10/0x10 [ 1347.908928][ C1] ? do_raw_spin_lock+0x121/0x290 [ 1347.913955][ C1] filp_close+0x27/0x40 [ 1347.918113][ C1] put_files_struct+0x1ba/0x350 [ 1347.922974][ C1] do_exit+0x888/0x2550 [ 1347.927135][ C1] ? do_raw_spin_lock+0x121/0x290 [ 1347.932162][ C1] ? __pfx_do_exit+0x10/0x10 [ 1347.936758][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1347.942132][ C1] ? core_sys_select+0x661/0x990 [ 1347.947201][ C1] do_group_exit+0x21c/0x2d0 [ 1347.951795][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1347.956993][ C1] get_signal+0x125e/0x1310 [ 1347.961507][ C1] arch_do_signal_or_restart+0x95/0x780 [ 1347.967061][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1347.973229][ C1] ? __se_sys_pselect6+0x291/0x300 [ 1347.978354][ C1] ? local_irq_enable_exit_to_user+0x5/0x10 [ 1347.984254][ C1] syscall_exit_to_user_mode+0x8b/0x120 [ 1347.989805][ C1] do_syscall_64+0x103/0x210 [ 1347.994400][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1348.000555][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1348.005231][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.011126][ C1] RIP: 0033:0x7f8bc1d8e969 [ 1348.015547][ C1] Code: Unable to access opcode bytes at 0x7f8bc1d8e93f. [ 1348.022562][ C1] RSP: 002b:00007f8bc2cc9038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1348.030982][ C1] RAX: fffffffffffffdfe RBX: 00007f8bc1fb5fa0 RCX: 00007f8bc1d8e969 [ 1348.038956][ C1] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 1348.046926][ C1] RBP: 00007f8bc1e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1348.054920][ C1] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 1348.062911][ C1] R13: 0000000000000000 R14: 00007f8bc1fb5fa0 R15: 00007fffc81db808 [ 1348.070926][ C1] [ 1348.073954][ C1] Modules linked in: [ 1348.077947][ C1] ---[ end trace 0000000000000000 ]--- [ 1348.077950][ C0] Oops: general protection fault, probably for non-canonical address 0xe78ffc7d182923b7: 0000 [#2] SMP KASAN PTI [ 1348.083436][ C1] RIP: 0010:__rt6_find_exception_rcu+0x19b/0x4c0 [ 1348.095297][ C0] KASAN: maybe wild-memory-access in range [0x3c8003e8c1491db8-0x3c8003e8c1491dbf] [ 1348.095326][ C0] CPU: 0 UID: 0 PID: 5877 Comm: kworker/0:3 Tainted: G D 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 1348.101659][ C1] Code: 80 3c 06 00 74 08 4c 89 e7 e8 b1 61 17 f8 c1 e3 04 49 03 1c 24 49 89 1c 24 48 89 d8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df <42> 80 3c 20 00 74 08 48 89 df e8 86 61 17 f8 4c 8b 33 4d 85 f6 0f [ 1348.110914][ C0] Tainted: [D]=DIE [ 1348.110925][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1348.124566][ C1] RSP: 0018:ffffc90000a08320 EFLAGS: 00010202 [ 1348.144145][ C0] Workqueue: wg-crypt-wg2 wg_packet_decrypt_worker [ 1348.147902][ C1] [ 1348.157934][ C0] [ 1348.157945][ C0] RIP: 0010:__rt6_find_exception_rcu+0x19b/0x4c0 [ 1348.164014][ C1] RAX: 0790007d18292551 RBX: 3c8003e8c1492a88 RCX: ffff888029b38000 [ 1348.170503][ C0] Code: 80 3c 06 00 74 08 4c 89 e7 e8 b1 61 17 f8 c1 e3 04 49 03 1c 24 49 89 1c 24 48 89 d8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df <42> 80 3c 20 00 74 08 48 89 df e8 86 61 17 f8 4c 8b 33 4d 85 f6 0f [ 1348.170526][ C0] RSP: 0018:ffffc90000006e60 EFLAGS: 00010206 [ 1348.172848][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1348.175165][ C0] [ 1348.181502][ C1] RBP: ffffc90000a08430 R08: 00000000000080fe R09: 3e00000000000000 [ 1348.189440][ C0] RAX: 0790007d182923b7 RBX: 3c8003e8c1491db8 RCX: ffff88802f7e3c00 [ 1348.189461][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1348.209181][ C1] R10: 00000000000080fe R11: 3e00000000000000 R12: dffffc0000000000 [ 1348.215230][ C0] RBP: ffffc90000006f70 R08: 00000000000080fe R09: 4300000000000000 [ 1348.215250][ C0] R10: 00000000000080fe R11: 4300000000000000 R12: dffffc0000000000 [ 1348.223218][ C1] R13: ffffc90000a08390 R14: 1ffff9200014108b R15: ffffc90000a08788 [ 1348.225552][ C0] R13: ffffc90000006ed0 R14: 1ffff92000000df3 R15: ffffc900000072c8 [ 1348.225575][ C0] FS: 0000000000000000(0000) GS:ffff8881260f6000(0000) knlGS:0000000000000000 [ 1348.233574][ C1] FS: 0000000000000000(0000) GS:ffff8881261f6000(0000) knlGS:0000000000000000 [ 1348.241516][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1348.249498][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1348.257613][ C0] CR2: 00007f4813d74420 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 1348.257635][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1348.265622][ C1] CR2: 00007f22475e7c8c CR3: 0000000057d92000 CR4: 00000000003526f0 [ 1348.273568][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1348.273585][ C0] Call Trace: [ 1348.273597][ C0] [ 1348.281585][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1348.289561][ C0] ? ieee80211_rx_list+0x22fc/0x2d80 [ 1348.298503][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1348.307403][ C0] ? __pfx___rt6_find_exception_rcu+0x10/0x10 [ 1348.314028][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 1348.393991][ C1] Kernel Offset: disabled [ 1348.398376][ C1] Rebooting in 86400 seconds..